WO2013140778A1

WO2013140778A1 - Information processing device, method for authenticating user, and program for authenticating user

Info

Publication number: WO2013140778A1
Application number: PCT/JP2013/001814
Authority: WO
Inventors: 一慶山内
Original assignee: Ｎｅｃアクセステクニカ株式会社
Priority date: 2012-03-23
Filing date: 2013-03-18
Publication date: 2013-09-26
Also published as: JP2013200611A

Abstract

[Problem] To provide an information processing device that performs authentication processing rapidly. [Solution] An information processing device for authenticating a user characterized in being provided with: a reading means for reading a data file held in a storage medium; an authentication information holding means for holding user authentication information; and an authentication means for authenticating a user on the basis of authentication information and data file attribute information included in the data file.

Description

Information processing apparatus, user authentication method, and user authentication program

The present invention relates to an information processing apparatus for authenticating a user, a user authentication method, and a user authentication program.

Currently, most image data processed by electronic devices is digitized data. The image data can be commonly used in a plurality of usage forms. For example, an image printed or written on paper or the like is acquired as electronic data (scanner function). The image data is printed and output on a medium such as paper (printer function, copy function). The image data is transmitted using a public line (facsimile function). As a result, the versatility of image data has been expanded.

Among communication and input / output devices installed in offices and the like, there are devices that share the input or output unit of the digitized image data processing function. In recent years, the use of multi-function peripherals having a plurality of functions in one apparatus and sharing an input unit or output unit has been increasing.

For example, a multifunction device has two or more functions of a copy function, a scanner function, a printer function, and a facsimile function.

In such a multifunction device, usage may be managed for each user connected to the multifunction device via a network, such as use of each function or management of the amount of consumables used. For example, available functions are limited for each user.

For the purpose of management for each user, for example, a multifunction device is equipped with a device dedicated to authentication (hereinafter referred to as an authentication device). User authentication is performed prior to the process of restricting the use function for each user. User authentication includes, for example, authentication by character input, fingerprint authentication, and card authentication such as a non-contact IC card.

In a digital still camera that is generally widely used, captured image data includes thumbnail image data and information about image data called Exif (Exchangeable Image File Format) information, and together with compressed image data, A file called JPEG (Joint Photographic Experts Group) format is generated. Although this Exif information is included in the file as attribute information of the image data, the Exif information is not displayed when the image file is displayed on the display means as the image data.

In Patent Document 1, image data obtained by reading a document is written in an internal storage, authentication information associated with the image data is written in a USB (Universal Serial Bus) memory, and the USB memory is used for the use of the image data. Describes an image processing system for authenticating a user.

Patent Document 2 describes an image processing apparatus that specifies type information such as a black pixel ratio and an image type for image data read and generated, and adds the image information to the image data for storage. An image file in the Exif format is generated based on the image data, and information regarding the attribute of the image data is added to the image file and used for managing the image file.

Japanese Patent Application Laid-Open No. 2004-228561 is an image measuring apparatus that adds an electronic signature to image data, calculates the electronic signature from the measured image feature amount and image supplementary information, and stores the electronic signature in accordance with the format of the image data. An image measurement device is described.

Japanese Patent No. 4470957 JP 2007-272622 A Japanese Patent No. 4764536

In a multifunction device in the related technology, when performing user authentication, operation restriction for each user, or individual processing for each user, an authentication device is connected, and authentication is performed by fingerprint authentication or authentication using contactless IC cards dedicated for authentication. An authentication operation is performed.

However, the installation of the authentication device raises the cost of the system. In addition, the installation of the authentication device restricts the area used by the operation unit of the system and becomes an obstacle to downsizing of the device. Furthermore, in the case of authentication processing by card authentication such as a non-contact IC card, it is necessary to set a standard necessary for authentication on the card side.

The image processing system described in Patent Document 1 reads a target document with a reading unit to generate image data, and determines whether the document is a confidential document. If it is determined that the document is a confidential document, an authentication file corresponding to the image data is stored in the USB memory storing the identification data. For this reason, a USB memory insertion operation is required to display image data. The image processing system has a USB memory interface. In addition, in order to display image data that is not confidential information in the target document without requiring authentication, it is necessary to include a pattern indicating that the document is confidential in the display information of the document. Therefore, processing necessary for authentication is also required in advance for the target document.

The image processing apparatus described in Patent Document 2 analyzes the acquired image data, generates a value serving as an index characterizing the display of the image, and adds it to an image file in the Exif format. This additional information serves as a rough indication of how the image data is displayed. However, image data analysis processing is required, and processing time is required.

The image measurement device described in Patent Document 3 calculates an electronic signature from the feature quantity of the acquired image supplementary information using the private key of the image measurement device, and stores the electronic signature in association with the acquired image data. . For the authentication of the image data, an electronic signature calculated using the private key of the image measurement device is used. Therefore, processing for calculating the electronic signature is necessary.

As described above, the image processing apparatus according to the related art requires processing for calculating and adding information necessary for authentication in order to authenticate the image data. Since the authentication device is provided, the cost of the device increases. In addition, the processing required for calculating and registering authentication data reduces the operational efficiency of the entire system.

The present invention has been made in view of the above points, and an object thereof is to provide an information processing apparatus, a user authentication method, and a user authentication program that have a high processing speed.

In order to achieve the above object, an information processing apparatus according to the present invention is an information processing apparatus for authenticating a user, a reading unit for reading a data file held in a storage medium, and authentication information for holding user authentication information It is characterized by comprising holding means and authentication means for authenticating a user based on attribute information and authentication information of the data file included in the data file.

The user authentication method of the present invention is a user authentication method for authenticating a user who uses an information processing apparatus, reads a data file held in a storage medium, and holds the attribute information of the data file and the information processing apparatus. And authenticating the user based on the authentication information.

Furthermore, the user authentication program of the present invention is a user authentication program for authenticating a user who uses an information processing apparatus, a process for reading a data file held in a storage medium, attribute information of the data file, and an information processing apparatus And a process for authenticating the user based on the authentication information held in the computer.

According to the present invention, since the user is authenticated based on the data file attribute information held in the storage medium and the user authentication information, the user authentication processing speed is high.

1 illustrates an example of a configuration of a multifunction peripheral according to a first embodiment of the present invention. 2 shows an example of a configuration of a multifunction peripheral according to a second embodiment of the present invention. It is a flowchart which shows an example of the process which registers an image file in the authentication system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows an example of the process which performs user registration in the authentication system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows an example of the process which authenticates a user in the authentication system which concerns on the 2nd Embodiment of this invention. 6 shows an example of display on a display unit when an external memory or a mobile phone is connected in a multifunction machine according to a second embodiment of the present invention. An example of display on a display unit when a JPEG file used for authentication is selected in a multi-function peripheral according to a second embodiment of the present invention will be described. 6 shows an example of data registered in a multifunction machine according to a second embodiment of the present invention. 4 shows an example of the configuration of a multifunction machine according to a third embodiment of the present invention.

The best mode for carrying out the invention will be described in detail with reference to the drawings. However, the present invention is not limited to the embodiments described below.
[First Embodiment]
FIG. 1 shows an example of the configuration of an information processing apparatus according to the first embodiment of the present invention.

The information processing apparatus 1001 is an information processing apparatus that authenticates a user, and includes a reading unit 1101 that reads a data file held in a storage medium, an authentication information holding unit 1105 that holds user authentication information, and a data file. Authentication means 1104 for authenticating the user based on the attribute information and authentication information of the data file to be stored.

According to the information processing apparatus according to the present embodiment, the processing speed of user authentication is fast.
[Second Embodiment]
[Configuration of MFP]
FIG. 2 shows an example of the configuration of a multifunction machine according to the second embodiment of the present invention.

The user authentication system according to the second embodiment of the present invention includes a multi-function peripheral 1000 as a data processing apparatus, and an external memory or mobile phone 100 as a storage medium connected to the multi-function peripheral 1000. The multi-function device 1000 performs user authentication using the connected external memory or the mobile phone 100.

The MFP 1000 includes an external memory connection unit 101, a file search unit 102, and an Exif confirmation unit 103. The external memory connection unit 101 connects an external memory or a mobile phone 100 in which a JPEG file including Exif information is stored. The file search unit 102 searches for a JPEG file stored in the connected external memory or the mobile phone 100. The Exif confirmation unit 103 reads the Exif information of the JPEG file stored in the external memory or the mobile phone 100.

The MFP 1000 further includes an authentication information registration unit 105 in which information for user authentication is registered, and an authentication unit 104 that performs user authentication based on the registered information. The authentication information registration unit 105 registers the file name, date, capacity, Exif information, and information used for user authentication among the Exif information used for user authentication.

The MFP 1000 includes a display unit 112, an operation unit 111, a scanner unit 106, a LAN communication unit 107, a facsimile communication unit 108, a printer unit 109, and a control unit 110. The user operates the apparatus via the operation unit 111. The scanner unit 106 reads a document. The LAN communication unit 107 performs LAN (Local Area Network) communication with a network. The facsimile communication unit 108 performs facsimile communication. The printer unit 109 performs printing output from a personal computer (hereinafter referred to as a PC) and recording output during a copying operation. The control unit 110 controls the overall operation of the apparatus. The display unit 112 displays the JPEG file and the read Exif information. The user operates the operation unit 111 to select a JPEG file or Exif information used for authentication. The scanner unit 106 is a functional block that can be used when the user is authenticated.
[Image data registration process]
Next, the process of the authentication system according to the second embodiment of the present invention will be described with reference to FIGS.

The JPEG file registration procedure according to the second embodiment will be described with reference to the flowchart shown in FIG. A JPEG file including Exif information, which is image data, is registered in the external memory or the mobile phone 100 used for authentication in the MFP 1000 shown in FIG. The JPEG file is stored in the user's PC, for example. The image data registration process will be described with reference to FIG.

The user selects either an external memory or a mobile phone as a medium for storing a JPEG file including Exif information (step S301). When the user selects the external memory (S301 YES), the user connects the external memory to the PC (step S302). The PC stores the JPEG file including the Exif information in the external memory (step S303).

The user repeats the above file storage operation until the storage of the required number of file data from the PC to the external memory is completed (step S304). When saving of the file from the PC to the external memory is completed (YES in S304), the user removes the external memory from the PC (step S305).

When the user selects the mobile phone as the storage medium (S301 NO), the user registers the file by connecting the mobile phone to the PC, and registers the image data using the camera provided in the mobile phone. Is selected (step S306). When the user registers the file from the PC (YES in S306), the user performs the same process (steps S303 to S305) as the process of storing the file from the PC to the external memory.

When the user saves the image data using the mobile phone camera (S306 NO), the user displays the image data and takes a picture (step S307). The user stores the captured data in the mobile phone (step S308). The user repeats the photographing operation until data storage of the required number of files is completed (step S309). In recent years, most mobile phones have a camera function, but a JPEG file to which Exif information is added is generated by the camera function of the mobile phone. Usually, as Exif information, shooting date / time, shooting device manufacturer name, shooting device model name, overall image resolution, horizontal / vertical resolution, shooting direction, shutter speed, aperture (F value), ISO sensitivity, photometry mode, flash Presence / absence / exposure correction step value / focal length / color space (color space) / GPS information / thumbnail are added to the JPEG file.

The JPEG file registered in the external memory or the mobile phone 100 is not limited to the file stored in the user's PC, but may be held in a device having a means for storing the file and a connection interface. Further, the registered JPEG file may be acquired from a file held by the multi-function peripheral 1000 via the LAN communication unit 107. Furthermore, the JPEG file to be registered may be a file acquired using the communication function of the mobile phone.
[User registration process]
The user information registration procedure according to the second embodiment will be described with reference to the flowchart shown in FIG. The user registers user information in the MFP 1000. 6 and 7 are diagrams showing an OPE (Operation Equipment, operation terminal) of the multifunction machine. The OPE includes an operation unit 111 and a display unit 112. The user information registration process will be described below with reference to FIGS.

The user activates the multifunction device and connects the external memory or the mobile phone 100 to the external memory connection unit 101 (step S401).

The file search unit 102 searches for a JPEG file used for registration processing from the connected external memory or the mobile phone 100 (step S402). The control unit 110 displays the JPEG file on the display unit 112 (step S403). FIG. 6 shows the OPE information at this point. FIG. 6 shows a state where information on the JPEG file stored in the external memory or the mobile phone 100 is displayed on the display unit 112.

External memory or mobile phone 100 registers 12 JPEG files. From these JPEG files, the user selects a JPEG file to be used for authentication from the OPE (step S404).

When the user selects a JPEG file, the display unit 112 displays the Exif information of the selected file (step S405). FIG. 7 shows OPE information at this point. The display unit 112 displays the Exif information of the selected JPEG file.

The user selects Exif information used for authentication (step S406). When registering multiple pieces of Exif information, the user repeats the above operation (step S407).

When the user completes the selection (YES in S407), the control unit 110 registers the selected Exif information in the authentication information registration unit 105 of the multifunction machine 1000 (step S408).

When the authentication unit 104 uses a plurality of JPEG files for user authentication, the control unit 110 repeats the JPEG file selection process (YES in S409), and the control unit 110 adds the JPEG file to the authentication information registration unit 105. For the JPEG file to be used, the control unit 110 registers the Exif information in the authentication information registration unit 105. When the registration by the control unit 110 is completed (NO in S409), the control unit 110 finishes the process and returns to the initial state.

Note that the authentication unit 104 may use only a JPEG file and Exif information registered in advance for user authentication, but is not limited thereto. The user may instruct to change the authentication level. The user may select the Exif information to be used. The user may specify the order of a plurality of JPEG files and Exif information.

Further, the user emulates the operation unit 111 and the display unit 112 of the multi-function peripheral 1000 using the LAN communication unit 107 provided in the multi-function peripheral 1000, and from a terminal device connected to the multi-function peripheral 1000 via the network. User registration processing may be performed.
[Authentication Registration Information]
The data registered in the authentication information registration unit 105 will be described with reference to FIG. FIG. 8 shows an example of a table in which parameters at the time of authentication data registration are described. In the table shown in FIG. 8, user identification information, authentication file identification information, authentication Exif information, and permission operation information are registered. The user identification information is identification information of a user who uses the multifunction machine 1000. The authentication file identification information and authentication Exif information are authentication JPEG file identification information and authentication Exif information as parameters for authentication used for each user. The permitted operation information is information indicating a function permitted for each of the functions of facsimile, copy, print, and scanner for each user.

FIG. 8 shows an example of the user authentication result. That is, FIG. 8 shows an example in which users B, C, and D are permitted to use the MFP 1000 as a result of authentication. FIG. 8 further shows an example in which the user A cannot use the MFP 1000 because the authentication has failed.

Of the registration information shown in FIG. 8, the user identification information and the permitted operation information are registered in advance by the user or the administrator of the MFP 1000. These pieces of information may be added or changed according to an instruction from a user or an administrator.
[User authentication processing]
The user authentication procedure according to the second embodiment will be described with reference to the flowchart shown in FIG.

The user connects the external memory or the mobile phone 100 used for authentication to the external memory connection unit 101 (step S501). The file search unit 102 searches for a JPEG file stored in the connected external memory or mobile phone 100 (step S502). The display unit 112 displays the searched JPEG file on the OPE unit (step S503). The user selects a file to be used for authentication from the displayed JPEG file (step S504). The display unit 112 displays the Exif information of the selected JPEG file on the OPE unit (step S505). The user selects Exif information to be used for authentication from the displayed Exif information by operating the operation unit 111 (step S506). The user selects the same Exif information and JPEG file as the information selected at the time of user registration. At this time, if a plurality of Exif information and JPEG files are necessary, the user repeats the selection operation (steps S507 and S508). The authentication unit 104 refers to the information registered in the authentication information registration unit 105, and determines whether or not the user can be authenticated (step S509). When the authentication unit 104 determines that the user can be authenticated (S509 YES), the control unit 110 completes the authentication. The permitted functions (facsimile, copy, print, scanner) become operable (step S510). The display unit 112 displays an initial screen. The control unit 110 enters a standby state. Processing is complete. When the authentication unit 104 determines that the user is not an authorized user (S509 NO), the display unit 112 displays an error (step S511). The screen display of the display unit 112 returns to the initial screen display. The control unit 110 enters a standby state.

In addition, in this embodiment, although the structure which the operation part 111 and the display part 112 isolate | separated was shown by FIG. 6 and 7, it is not limited to this. The operation unit 111 and the display unit 112 may be integrated. The display unit 112 may have an operable configuration such as a touch panel.

In the second embodiment of the present invention, a multi-function peripheral having at least two functions among a copy function, a scanner function, a printer function, and a facsimile function performs user authentication before the user uses the above function. User authentication restricts the use of the multifunction device by the user. In addition, permission for use of the above function is set for each user. The multifunction peripheral according to the second embodiment of the present invention does not include a dedicated device for user authentication. The multifunction peripheral according to the second embodiment of the present invention performs user authentication based on the Exif information of the JPEG file stored in the external memory connected to the user or the mobile phone 100.

Exif information is included as attribute data in a still image file according to the standard, but is usually not image data displayed on the display means.

In the MFP according to the second embodiment of the present invention, the existing Exif information is used for user authentication. User authentication of the multifunction peripheral is performed by displaying the Exif information by the display means and by operating the Exif information by the user. It is not necessary to generate data for user authentication. It is not necessary to add a device for user authentication. Further, the generation processing time for the authentication data and the memory area for storing the authentication data are unnecessary.

抑え Leakage of confidential information and leakage of personal information are prevented while keeping costs down. In addition, permission for use of each of the plurality of functions provided in the multifunction peripheral is set for the user.

In the second embodiment of the present invention, the JPEG file used for user authentication is a JPEG file stored in the external memory or the mobile phone 100. However, the present invention is not limited to this. A JPEG file captured and acquired by the camera function of the mobile phone may be used. A JPEG file necessary for authentication can be updated, replaced, or added according to a user instruction. The security of user authentication is maintained or changed by the user.
[Third Embodiment]
A multifunction peripheral according to a third embodiment of the present invention will be described with reference to FIG.

FIG. 9 shows an example of the configuration of a multifunction machine 2000 according to the third embodiment of the present invention. A multifunction machine 2000 according to the third embodiment includes a multifunction machine 1000 according to the second embodiment and an Exif additional image processing unit 113. Since the other configuration is the same as that of the second embodiment, the same reference numeral as that of the second embodiment is assigned to the other configuration, and the description thereof is omitted.

In the third embodiment, a JPEG file used for user authentication is created from image data acquired using the scanner function of the multifunction peripheral. The scanner unit 106 reads an image printed or written on a medium such as paper and generates image data. The Exif additional image processing unit 113 adds Exif information as attribute information of the image data to the image data. A JPEG file is generated by data processing on the image display information. The JPEG file may be held in the multi-function device 2000 or may be transferred to an external memory connected to the external memory connection unit 101 or the mobile phone 100.

The multi-function device 2000 according to the third embodiment of the present invention acquires image data using a scanner unit, and generates a JPEG file having Exif information.

In the third embodiment of the present invention, the user uses the scanner function of the multifunction machine 2000 to create a JPEG file necessary for authentication. The user can update or add a JPEG file used for authentication.

The user authentication system for a multifunction peripheral according to the third embodiment of the present invention performs authentication using an external memory or a mobile phone owned by the user. The user does not need to prepare a medium for authentication. The system size can be kept small. Increase in cost is suppressed.

The user can arbitrarily select the number of JPEG files or the number of Exif information used for authentication. The user can arbitrarily determine the order of selecting the JEPG file or Exif information used for authentication. The user can arbitrarily select those parameters. Confidentiality and simplicity are compatible.

Although the present invention has been described with reference to the embodiments, the present invention is not limited to the above embodiments and embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention. Further, the present invention includes a combination of some or all of the configurations of the above-described embodiments as appropriate.

In the embodiment of the present invention, a process in which a multifunction machine having a plurality of functions for processing image data authenticates a user has been described as an example. However, the present invention is not limited to this. The present invention is preferably applied to a device including a connection unit for connecting an external memory or a mobile phone, an operation unit for receiving a user operation, a display unit, a data holding unit, and an authentication unit.

In the embodiment of the present invention, a JPEG file including Exif information is used as an image file used for user authentication, but the present invention is not limited to this. The present invention is preferably applied to attribute data added to an electronic file when the electronic file is generated based on the digital data.

The present invention has been described above with reference to the embodiments, but the present invention is not limited to the above-described embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. A system or apparatus that combines the features included in each embodiment is also included in the scope of the present invention.

Further, the present invention may be applied to a system composed of a plurality of devices, or may be applied to a single device. Furthermore, the present invention is also applicable to a case where a program for executing the above-described processing operation for realizing the functions of the embodiment is supplied directly or remotely to a system or apparatus. Therefore, in order to realize the functions of the present invention on a computer, a program installed in the computer, a flexible disk storing the program, a CD-ROM (Compact Disk Read-Only Memory), an MO (Magneto-Optical disk), etc. Such a computer-readable recording medium and a WWW (World Wide Web) server to which the program is downloaded are also included in the scope of the present invention.

This application claims priority based on Japanese Patent Application No. 2012-0667282 filed on March 23, 2012, the entire disclosure of which is incorporated herein.

The present invention is not limited to the above embodiment, and can be suitably applied to a user authentication system that is shared and used by a plurality of users.

DESCRIPTION OF SYMBOLS 100 External memory or mobile phone 101 External memory connection part 102 File search part 103 Exif confirmation part 104 Authentication part 105 Authentication information registration part 106 Scanner part 107 LAN communication part 108 Facsimile communication part 109 Printer part 110 Control part 111 Operation part 112 Display unit 113 Exif additional

image processing unit

1000, 2000 MFP 1001 Information processing device 1101 Connection unit 1104 Authentication unit 1105 Authentication information holding unit

Claims

An information processing apparatus for authenticating a user,
A reading means for reading a data file held in a storage medium;
Authentication information holding means for holding the authentication information of the user;
An information processing apparatus comprising: authentication means for authenticating the user based on attribute information of the data file included in the data file and the authentication information.
2. The information processing apparatus according to claim 1, further comprising an operation unit in which the user stores the authentication information in the authentication information holding unit based on the data file and the attribute information.
Scanner means for reading a document and generating image data;
Attribute information adding means for adding attribute information to the image data;
The information processing apparatus according to claim 1, wherein the data file includes the image data to which the attribute information is added.
The storage medium is a mobile phone having imaging means,
4. The information processing apparatus according to claim 1, wherein the data file includes an image file generated by being imaged by the imaging unit. 5.
The information processing apparatus according to any one of claims 1 to 4, wherein the attribute information is Exif information.
A user authentication method for authenticating a user who uses an information processing apparatus,
Read the data file held in the storage medium,
A user authentication method for authenticating the user based on attribute information of the data file and authentication information held in the information processing apparatus.
The user authentication method according to claim 6, wherein the user stores the authentication information in the information processing apparatus based on the data file and the attribute information.
8. The data file according to claim 6, wherein the data file includes at least one of an image file generated by reading an original document by the information processing apparatus and an image file generated by imaging the storage medium. User authentication method.
9. The user authentication method according to claim 6, wherein the attribute information is Exif information.
A user authentication program for authenticating a user who uses an information processing apparatus,
A process of reading a data file held in a storage medium;
A user authentication program for causing a computer to perform processing for authenticating the user based on attribute information of the data file and authentication information held in the information processing apparatus.