JP5067065B2 - Authentication system and authentication method - Google Patents

Description

  The present invention relates to an authentication system and an authentication method, and more particularly to an authentication system including a plurality of devices each having an authentication method, and an authentication method executed in the authentication system.

  In recent years, an MFP (Multi Function Peripheral) known as a multifunction peripheral is used by being connected to a network. When a plurality of MFPs are connected to the network, it is possible to realize a pull print function for printing on any of the plurality of MFPs (for example, Non-Patent Document 1). In the pull print function, a user operates a personal computer to transmit a print job to a server, temporarily store the print job in the server, and then print the print job from the server to an MFP to be printed later among a plurality of MFPs. Download and print. The user can cause a necessary MFP to execute a print job when necessary. In the pull print function, in order to prevent a print job temporarily stored in the server from being output by another person, the user ID of the user who is authenticated by the authentication function of the MFP that normally executes the print job, and Downloading from the server to the MFP is possible when the user ID of the user who has instructed transmission of the temporarily stored print job matches.

  However, depending on the MFP, the authentication method may be different. For example, an authentication apparatus provided in a certain MFP may authenticate with a password, and an authentication apparatus provided in another MFP may authenticate with biometric information such as a fingerprint. Passwords are more likely to be decrypted or stolen by others than fingerprints. For this reason, the method of authenticating with biometric information has a higher security level than the method of authenticating with a password. For this reason, in order to prevent a print job from being executed by another person's operation, it is necessary to download the print job from the server only when it is authenticated by an authentication method with the strongest security level.

However, an MFP that authenticates using an authentication method with a low security level has a problem that a print job cannot be downloaded.
Canon “Anyplace Print for MEAP” [searched on July 12, 2007], Internet <URL: http://cweb.canon.jp/meap/application/anyplace/index.html>

  The present invention has been made to solve the above-described problems, and one of the objects of the present invention is to provide security strength of an authentication method with low security strength when security strengths of a plurality of authentication methods are different. It is to provide an authentication system capable of enhancing the above.

  Another object of the present invention is to provide an authentication method capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different.

To achieve the above object, according to an aspect of the present invention, an authentication system is an authentication system including a first image forming apparatus, a second image forming apparatus, and a server, wherein the first image The forming apparatus includes first authentication means for authenticating a user , and the server receives job identification means for accepting user identification information and a job for identifying the user, accepted user identification information, and accepted job. Are stored in association with each other, a job designation accepting means for accepting designation of a job, and a job received by the job designation accepting means on the condition that the job is accepted by the first authenticating means. a job output means for outputting the apparatus, in response to being authenticated by the first authentication unit, the authentication information issuing means for issuing an authentication information, the first authentication means And an authentication information storage means for storing in association with authentication information issued more user identification information of the authenticated user, the second image forming apparatus, low security strength than the first authentication unit, user And a second authentication unit that authenticates the authentication information, and an authentication information reception unit that receives authentication information input by a user authenticated by the second authentication unit . In the case of authentication by the two authentication means, the second condition is that the authentication information received by the authentication information receiving means matches the authentication information associated with the user identification information of the user authenticated by the second authentication means. and third authentication means for authenticating the authenticated user by the authentication means, further comprising a job output means, a user operating the second image forming apparatus second authentication hand When authenticated by, on condition that it is authenticated by the third authentication means, you output a job accepted by the job designation receiving unit in the second image forming apparatus.

According to this aspect, in response to the user being authenticated by the first authentication means, the authentication information is issued, and the user identification information and the authentication information are stored in association with each other. When the authentication information is input by the user authenticated by the second authentication means, the input authentication information matches the authentication information associated with the user identification information of the user authenticated by the second authentication means. On the condition, the user authenticated by the second authenticating means is authenticated. Therefore, authentication information issued to be authenticated by the first authentication means, is input by the authenticated step by the second authentication unit, since it is authenticated by the third authentication unit, a second certification the security level of the authentication by the witness means can be the same as the security level of the authentication by the first authentication means. As a result, when a plurality of authentication methods have different security strengths, it is possible to provide an authentication system capable of increasing the security strength of an authentication method having a low security strength.

According to another aspect of the present invention, the authentication method is an authentication method that is executed by a server that can communicate with the first image forming apparatus and the second image forming apparatus, and the first image forming apparatus includes: The first image forming apparatus includes a first authenticating unit for authenticating the user. The second image forming apparatus includes a second authenticating unit that has a lower security strength than the first authenticating unit and authenticates the user, and identifies the user on the server. A job accepting step for accepting user identification information and a job, a job storing step for storing the accepted user identification information and the accepted job in association with each other, a job designation accepting step for accepting job designation, The job accepted by the job designation accepting step is the first image on condition that the user who operates the first image forming apparatus is authenticated by the authentication means. A job output step for outputting to the image forming apparatus, an authentication information issuing step for issuing authentication information in response to authentication by which the user operating the first image forming apparatus is authenticated by the first authentication means, An authentication information storage step for storing the user identification information of the user authenticated by the authentication means and the issued authentication information in association with each other, and authentication input by the user authenticated by the second authentication means in the second image forming apparatus When the authentication information receiving step for receiving information and the user operating the second image forming apparatus are authenticated by the second authentication means, the authentication information received by the authentication information receiving step is authenticated by the second authentication means. Authenticates the user authenticated by the second authentication means on condition that it matches the authentication information associated with the user identification information of the user The job output step includes a job designation reception step on the condition that when the user operating the second image forming apparatus is authenticated by the second authentication unit, the job output step is authenticated in the authentication step. Outputting the job accepted by the second image forming apparatus.
According to this aspect, it is possible to provide an authentication method capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different.

According to another aspect of the present invention, the authentication program is an authentication program that is executed by a computer that controls a server that can communicate with the first image forming apparatus and the second image forming apparatus. The forming apparatus includes a first authentication unit for authenticating the user, and the second image forming apparatus includes a second authentication unit that has a lower security strength than the first authentication unit and authenticates the user. A job reception step for receiving user identification information and a job for identifying a user, a job storage step for storing the received user identification information and the received job in association with each other, and a job specification reception step for receiving job specification And a job designation acceptance step on condition that the user who operates the first image forming apparatus is authenticated by the first authentication means. The job output step for outputting the job accepted by the first image forming apparatus to the first image forming apparatus, and the authentication information in response to the first authentication unit authenticating the user who operates the first image forming apparatus. An authentication information issuing step for issuing, an authentication information storing step for storing the user identification information of the user authenticated by the first authentication means in association with the issued authentication information, and a second authentication means in the second image forming apparatus Authentication information receiving step for receiving authentication information input by a user who has been authenticated by the authentication method, and when the user operating the second image forming apparatus is authenticated by the second authentication means, the authentication information received by the authentication information receiving step On the condition that it matches the authentication information associated with the user identification information of the user authenticated by the second authentication means, And an authentication step for authenticating a user who has been authenticated by the authentication means. The job output step is authenticated in the authentication step when the user who operates the second image forming apparatus is authenticated by the second authentication means. On the condition that the job accepted by the job designation accepting step is output to the second image forming apparatus.
  According to this aspect, it is possible to provide an authentication program capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different.

According to still another aspect of the present invention, the authentication system is an authentication system including a first image forming apparatus, a second image forming apparatus, and a server, and the first image forming apparatus authenticates a user. And the second image forming apparatus is provided with a second authentication unit that has a lower security strength than the first authentication unit and authenticates the user, and the server is a user for identifying the user. Job reception means for receiving identification information and job, job storage means for storing the received user identification information and job in association with each other, and a job by a user authenticated by the first authentication means in the first image forming apparatus a first job designation accepting means for accepting designation of stored in the storage means jobs, in response to designation of the job is found accepted, corresponding to the job authentication information By the user authenticated by the second authentication means in the authentication information issuing means and, ,, second image forming apparatus and the authentication information storing unit that associates and stores the issued and specified job authentication information to issue, Second job designation accepting means for accepting designation of a job stored in the job storage means, and authentication information accepting means for accepting input of authentication information inputted by a user authenticated by the second authenticating means in the second image forming apparatus. And the authentication information received by the authentication information receiving unit in the second image forming apparatus and the authentication information associated with the job received by the second job designation receiving unit match. Job execution means.

According to this aspect, issued to be authenticated by the first authentication unit, the same authentication information and the authentication information associated with the job, it is inputted, the job is output by the authenticated user by the second authentication means . For this reason, since it is a condition for outputting a job that the authentication information issued by the second authenticating unit and the authentication information issued when the first authenticating unit is authenticated is a condition for outputting the job, The strength of security can be made substantially the same as the strength of security when authenticated by the first authentication means. As a result, when a plurality of authentication methods have different security strengths, it is possible to provide an authentication system capable of increasing the security strength of an authentication method having a low security strength.

According to still another aspect of the present invention, the authentication method is an authentication method executed by a server communicable with the first image forming apparatus and the second image forming apparatus, wherein the first image forming apparatus includes: The first image forming apparatus includes a first authentication unit for authenticating the user , and the second image forming apparatus includes a second authentication unit that is lower in security strength than the first authentication unit and authenticates the user, and identifies the user on the server. A job receiving step for receiving user identification information and a job to be performed, a job storage step for storing the received user identification information and the job in association with each other, and authentication by the first authentication unit in the first image forming apparatus A first job designation receiving step for accepting designation of a job stored in the job storing step by the user, and in response to accepting designation of the job An authentication information issuing step for issuing authentication information corresponding to the job; an authentication information storing step for storing the designated job in association with the issued authentication information; and a second authentication unit in the second image forming apparatus. A second job designation accepting step for accepting the designation of the job stored in the job storing step by the user authenticated by the authentication, and an authentication input by the user operating the second image forming apparatus authenticated by the second authentication means On the condition that the authentication information receiving step for receiving information input, the authentication information received in the authentication information receiving step, and the authentication information associated with the job received in the second job designation receiving step match. And a job execution step for outputting.

According to this aspect, it is possible to provide an authentication method capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different .

According to still another aspect of the present invention, the authentication program is an authentication program executed by a computer that controls a server communicable with the first image forming apparatus and the second image forming apparatus. The image forming apparatus includes first authentication means for authenticating a user, and a job receiving step for receiving user identification information and a job for identifying the user in the computer, and the received user identification information and the job. A job storage step for storing in association; a first job specification receiving step for receiving a job specification stored in the job storage step by a user authenticated by the first authentication means in the first image forming apparatus; and a job specification Authentication information issuing step for issuing authentication information corresponding to the job in response to being accepted An authentication information storing step for storing the specified job and the issued authentication information in association with each other, and the second image forming apparatus has a lower security strength than the first authentication unit and authenticates the user. A second authentication unit; and an authentication information reception unit that receives an input of authentication information. The computer further stores the information in a job storage step by a user authenticated by the second authentication unit in the second image forming apparatus. A second job designation accepting step for accepting a designated job, authentication information accepted by the authentication information accepting means in the second image forming apparatus, and authentication information associated with the job accepted in the second job designation accepting step And a job execution step for outputting a job on the condition that and match.

According to this aspect, it is possible to provide an authentication program capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different .

  According to this aspect, when the authentication information is issued at the first time and the same authentication information as the authentication information associated with the job is input at the second time, the job is output. For this reason, since it is a condition for outputting a job that authentication information issued when authenticated at the first time is input at the second time, the strength of security for outputting the job is: The strength of security when authenticated at the first time can be made substantially the same. As a result, it is possible to provide an authentication method capable of increasing the security strength of an authentication method having a low security strength when the security strengths of a plurality of authentication methods are different.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts are denoted by the same reference numerals. Their names and functions are also the same. Therefore, detailed description thereof will not be repeated.

<First Embodiment>
FIG. 1 is a diagram showing an overall outline of an authentication system according to one embodiment of the present invention. Referring to FIG. 1, authentication system 1 includes multifunction devices (hereinafter referred to as “MFP”) 3 and 4 connected to network 2, personal computer (hereinafter referred to as “PC”) 200 as a terminal device, and server 300. Including.

  The network 2 is a local area network (LAN), and the connection form may be wired or wireless. The network 2 is not limited to a LAN, and may be a wide area network (WAN), a public switched telephone network (PSTN), or the like.

  The PC 200 and the server 300 as terminal devices are general computers. The MFPs 3 and 4 have a plurality of functions such as a scanner function, a printer function, a copy function, and a facsimile function. Further, the MFP 3 is required to log in by fingerprint authentication using a fingerprint in order to operate it. The MFP 4 is required to log in by password authentication using a user ID (Identification) for identifying the user and a password in order to operate it.

  The authentication system in this embodiment has a preprint function. The pull print function transmits a print job from the PC 200 as a terminal device to the server, and stores the print job in the server. When the user logs in to either the MFP 3 or 4, the MFP 3 or 4 acquires the logged-in user print job from the server and executes the print job. According to the pull print function, the user can cause the MFP 3 or 4 to execute a print job only by performing an operation of transmitting a print job from the PC 200 to the server.

  Furthermore, in the authentication system according to the present embodiment, a print job transmitted from the terminal device PC 200 to the server 300 can be executed on the condition that fingerprint authentication is performed to enhance security. For this reason, in the MFP 4 that does not have the fingerprint authentication function, only the user who has succeeded in the fingerprint authentication in the MFP 3 can perform pull printing. In the following description, a case where the MFP 3 functions as a fingerprint authentication device for executing a print job with the MFP 4 functioning as a job execution device that executes a print job will be described as an example.

  In the present embodiment, the MFP 3 will be described as an example of a fingerprint authentication device. However, any device having a fingerprint authentication function instead of the MFP 3 may include, for example, a fingerprint reader, a personal computer, a scanner, a printer, It may be a facsimile. Although the MFP 4 will be described as an example of a job execution apparatus, a printer, a facsimile machine, a personal computer, or the like may be used as long as the apparatus has a function of executing a job such as printing instead of the MFP 4.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of the MFP 3 that functions as an authentication apparatus. Referring to FIG. 2, MFP 3 includes a main circuit 101. A main circuit 101 includes an ADF 10, an image reading unit 20, an image forming unit 30, a paper feeding unit 40, a facsimile unit 50, and a fingerprint reading unit. 60. The main circuit 101 includes a central processing unit (CPU) 111, a RAM (Random Access Memory) 112 used as a work area of the CPU 111, and an EEPROM (Electronically Erasable Programmable Read Only Memory) for storing programs executed by the CPU 111. ) 113, a display unit 114, an operation unit 115, a hard disk drive (HDD) 116 as a mass storage device, and a data communication control unit 117.

  The CPU 111 is connected to the display unit 114, the operation unit 115, the HDD 116, and the data communication control unit 117, and controls the entire main circuit 101. The CPU 111 is connected to the ADF 10, the image reading unit 20, the image forming unit 30, the paper feeding unit 40, the facsimile unit 50, and the fingerprint reading unit 60, and controls the entire MFP 3.

  The display unit 114 is a display such as a liquid crystal display (LCD) or an organic ELD (Electro Luminescence Display), and displays an instruction menu for the user, information about acquired image data, and the like. The operation unit 115 includes a plurality of keys, and accepts input of various instructions, data such as characters and numbers by user operations corresponding to the keys. The operation unit 115 includes a touch panel provided on the display unit 114. The display unit 114 and the operation unit 115 constitute the operation panel 9.

  The data communication control unit 117 includes a LAN terminal 118 that is an interface for communicating with a communication protocol such as TCP (Transmission Control Protocol) or UDP (User Datagram Protocol), and a serial interface terminal 119 for serial communication. The data communication control unit 117 transmits / receives data to / from an external device connected to the LAN terminal 118 or the serial interface terminal 119 in accordance with an instruction from the CPU 111.

  When a LAN cable for connecting to the network 2 is connected to the LAN terminal 118, the data communication control unit 117 can communicate with other computers via the LAN terminal 118.

  Further, the CPU 111 controls the data communication control unit 117 to read a program to be executed by the CPU 111 from the memory card 119A, and stores the read program in the RAM 112 and executes it. A recording medium for storing a program to be executed by the CPU 111 is not limited to the memory card 119A, but a flexible disk, a cassette tape, an optical disk (CD-ROM (Compact Disc-Read Only Memory) / MO (Magnetic Optical Disc)). It may be a medium such as a semiconductor memory such as / MD (Mini Disc) / DVD (Digital VerSatile Disc)), IC card, optical card, mask ROM, EPROM (EraSable Programmable ROM), or EEPROM (Electronically EPROM). Further, the CPU 111 downloads a program from a computer connected to the Internet and stores it in the HDD 116, or loads the program stored in the HDD 116 into the RAM 112 so that the computer connected to the Internet writes the program in the HDD 116. Then, it may be executed by the CPU 111. The program here includes not only a program directly executable by the CPU 111 but also a source program, a compressed program, an encrypted program, and the like.

  The facsimile unit 50 is connected to the PSTN 7 and transmits facsimile data to the PSTN 7 or receives facsimile data from the PSTN 7. The facsimile unit 50 stores the received facsimile data in the HDD 116, or the image forming unit 30 prints the facsimile data on paper. Further, the facsimile unit 50 converts the data stored in the HDD 116 into facsimile data, and outputs the facsimile data to a facsimile machine connected to the PSTN 7 or another MFP. As a result, the data stored in HDD 116 can be output to a facsimile machine or another MFP.

The fingerprint reading unit 60 includes a photoelectric conversion device such as a CCD (Charge Coupled Device), reads the fingerprint with the CCD, and outputs a fingerprint image as electronic data to the CPU 111. In addition, although the example which uses a fingerprint as biometric information is shown here, a vein pattern,
FIG. 3 is a block diagram illustrating an example of a hardware configuration of the MFP 4. Referring to FIG. 3, MFP 4 is different from the hardware configuration of MFP 3 shown in FIG. 2 only in that it does not have fingerprint reading unit 60, and the other hardware configuration is the same. Therefore, description is not repeated here.

  FIG. 4 is a block diagram illustrating an example of a hardware configuration of the PC 200. Referring to FIG. 4, a PC 200 includes a CPU 201 connected to a bus 220, a ROM 203 for storing programs executed by the CPU 201, a RAM 205 used as a work area of the CPU 201, and a mass storage device. HDD 207, a communication I / F 211 for connecting the PC 200 to the network 2, an operation unit 213 serving as an interface with the user, and a card I / F 209 to which the flash memory 208 is attached.

  The operation unit 213 includes an input unit 215 including a keyboard and a pointing device such as a mouse, and a display unit 217 including a liquid crystal display device that displays data.

  Here, an example in which the CPU 201 executes a program stored in the ROM 203 will be described. However, a program stored in the flash memory 208 may be loaded into the RAM 205 and executed. Further, the recording medium for storing the program is not limited to the flash memory 208, and may be another medium described above.

  Further, the CPU 201 downloads the program from the computer connected to the network 2 and stores it in the HDD 206, or the computer connected to the network 2 writes the program in the HDD 206 so that the program stored in the HDD 206 is stored in the RAM 212. The CPU 201 may load the program and execute it.

  FIG. 5 is a block diagram illustrating an example of a hardware configuration of the server 300. Referring to FIG. 5, the hardware configuration of PC 200 shown in FIG. 4 is the same. Therefore, the description will not be repeated here.

  FIG. 6 is a functional block diagram showing an overview of the functions of the CPU 201 provided in the PC 200. Referring to FIG. 6, CPU 201 has a user ID accepting unit 251 for accepting a user ID for identifying a user, a data designation accepting unit 253 for accepting data specification, and a print for accepting print conditions. A condition receiving unit 255 and a first job transmission unit 259 that transmits a print job to the server 300 are included.

  The user ID receiving unit 251 receives the user ID from the input unit 215 when the user inputs the user ID to the input unit 215. The user ID reception unit 251 outputs the user ID to the job transmission unit 259.

  The data designation receiving unit 253 receives data identification information for identifying data from the input unit 215 when the user inputs an instruction to specify any of the data stored in the HDD 207 to the input unit 215. The data designation receiving unit 253 outputs the received data identification information to the job generating unit 257.

  The print condition receiving unit 255 receives a print condition from the input unit 215 when the user inputs the print condition to the input unit 215. The print conditions include, for example, settings such as the number of copies, paper size, and image quality indicating color and monochrome. The data designation receiving unit 253 outputs the received print conditions to the job generation unit 257.

  The job generation unit 257 generates a print job from the data specified by the data identification information and the print conditions, and outputs the print job to the job transmission unit 259.

  The first job transmission unit 259 transmits the user ID and the print job to the server 300. Position information on the network 2 of the server 300 is stored in advance, and is transmitted to the position information via the communication I / F 211. The location information is, for example, IP (Internet Protocol).

  FIG. 7 is a functional block diagram illustrating an overview of the functions of the CPU 301 included in the server 300 according to the first embodiment. Referring to FIG. 7, CPU 301 provided in server 300 includes a job receiving unit 331 for receiving a print job, a job storage unit 333 for storing a print job, and a job list for receiving a job list request. Request receiving unit 335, device determining unit 337 for determining the device that has transmitted the job list request, authentication information issuing unit 341 for issuing authentication information, and authentication for storing the issued authentication information An information storage unit 343, an authentication information transmission unit 345 for transmitting authentication information to the apparatus that has transmitted the job list request, an authentication information acquisition unit 339 for acquiring authentication information, a third authentication unit 347, A job list generation unit 349 for generating a job list and a job list to be transmitted to a device that has transmitted the job list request. It includes a job list transmission section 351, a pull print instruction receiving unit 353 for receiving a pull print instruction, and the second job transmitting unit 359 for transmitting the print job to the device that transmitted the pull print instruction, the.

  The job receiving unit 331 receives a print job transmitted from the PC 200. A print job is received from the PC 200 via the communication I / F 311. Also, the user ID received from the PC 200 is received together with the print job. The job receiving unit 331 outputs the received print job and user ID to the job storage unit 333.

  The job storage unit 333 stores the print job in a predetermined area of the HDD 307 in association with the user ID. Specifically, job data in which the user ID is associated with the print job is generated, and the job data and the print job are stored in the HDD 307. As a result, the job data 371 is stored in the HDD 307.

  FIG. 8 is a first diagram illustrating an example of a format of job data. Referring to FIG. 8, job data 371 associates a job ID for identifying a print job with a user ID.

  Returning to FIG. 7, the job list request receiving unit 335 receives a job list request from either the MFP 3 functioning as a fingerprint authentication device or the MFP 4 as a job execution device. Although details of the job list request will be described later, when the user logs in one of the MFPs 3 and 4, the request is transmitted from the MFP 3 and 4 to the server 300. The job list request includes the user ID of the user who has logged into one of the MFPs 3 and 4.

  The job list request receiving unit 335 receives a job list request via the communication I / F 311. Further, the job list request receiving unit 335 receives device identification information for identifying the device that has transmitted the job list request via the communication I / F 311. Here, the device identification information uses an IP (Internet Protocol) address. The job list request reception unit 335 outputs the user ID included in the job list request and the device identification information of the device that has transmitted the job list request to the device determination unit 337.

  The device determination unit 337 determines the authentication method of the device that has transmitted the job list request based on the device identification information. If the apparatus determination unit 337 determines that the authentication method is biometric authentication, the device determination unit 337 outputs an issuance instruction to the authentication information issuance unit 341 and outputs a generation instruction to the job list generation unit 349. If the authentication method is not determined to be biometric authentication, device determination unit 337 outputs an acquisition instruction to authentication information acquisition unit 339 and outputs a standby instruction to job list generation unit 349. Each of the issue instruction, the generation instruction, the acquisition instruction, and the standby instruction includes a user ID and device identification information included in the job list request.

  Specifically, the device determination unit 337 stores device information in which device identification information and an authentication method possessed by the device are associated, and a device specified by the device identification information with reference to the device information. Get the authentication method. Here, with respect to the device identification information of the MFP 3 functioning as a biometric authentication device, the device identification information of the MFP 4 as the job execution device and the device information in which the biometric authentication authentication method using the biometric information is associated Device information associated with an authentication method for password authentication using a password is stored. In this example, upon receiving device identification information of the MFP 3 from the job list request receiving unit 335, the device determining unit 337 determines that the authentication method is biometric authentication, outputs an issuance instruction to the authentication information issuing unit 341, and outputs a job. A generation instruction is output to the list generation unit 349. Upon receiving the device identification information of the MFP 4 from the job list request receiving unit 335, the device determining unit 337 does not determine that the authentication method is biometric authentication, outputs an acquisition instruction to the authentication information acquisition unit 339, and also outputs a job list generation unit 349. The standby instruction is output.

  The authentication information issuing unit 341 issues authentication information when an issuing instruction is input from the device determination unit 337. The authentication information issuing unit 341 outputs the issued authentication information and the user ID included in the issuance instruction to the authentication information storage unit 343, and the authentication information transmitting unit 345 outputs the issued authentication information and the device identification information included in the issuance instruction. Output to. For example, the authentication information is generated by arbitrarily combining a plurality of alphanumeric characters. When the authentication information is input from the authentication information issuing unit 341, the authentication information storage unit 343 generates authentication data in which the authentication information is associated with the user ID included in the issue instruction, and stores the authentication data in the HDD 307. As a result, the authentication data 373 is stored in the HDD 307. FIG. 9 is a diagram illustrating an example of a format of authentication data. Referring to FIG. 9, authentication data 373 associates a user ID with authentication information.

  When the authentication information is input from the authentication information issuing unit 341, the authentication information transmitting unit 345 transmits the authentication information to the device specified by the device identification information included in the issue instruction. The authentication information is issued when the user logs in to the MFP 3 functioning as a biometric authentication device. Therefore, if the MFP 3 receives the authentication information and displays it on the display unit 114, the user who has logged in to the MFP 3 can know the authentication information.

  When the acquisition instruction is input from the device determination unit 337, the authentication information acquisition unit 339 transmits an authentication information request signal for requesting transmission of the authentication information to the device specified by the device identification information included in the acquisition instruction. The authentication information is acquired by receiving the authentication information transmitted from the apparatus. In this example, the acquisition instruction is input when the user logs in to the MFP 4 as the job execution apparatus. Therefore, a signal requesting the MFP 4 to transmit authentication information is transmitted. Although the operation of the MFP 4 will be described later, when the MFP 4 receives a signal requesting transmission of authentication information, if the authentication information is input to the operation unit 115 by the logged-in user, the MFP 4 transmits the authentication information to the server 300. It should be noted that the user who knows the authentication information is a user who has logged in to the MFP 3 that is the biometric authentication device in the past. When the authentication information acquisition unit 339 acquires the authentication information, the authentication information acquisition unit 339 outputs the authentication information and the user ID included in the acquisition instruction to the third authentication unit 347.

  When the authentication information and the user ID are input from the authentication information acquisition unit 339, the third authentication unit 347 determines whether the input authentication information is authentic. Specifically, the authentication data 373 stored in the HDD 307 is extracted including the user ID, and the authentication information included in the extracted authentication data 373 is acquired. Then, it is determined whether or not the acquired authentication information matches the authentication information input from the authentication information acquisition unit 339. If the two pieces of authentication information match, it is determined that the authentication information input from the authentication information acquisition unit 339 is authentic. In other words, it is determined whether or not the same authentication information that was issued when the user logged in to the MFP 3 was subsequently input by the user who logged in to the MFP 4.

  If the third authentication unit 347 determines that the authentication information input from the authentication information acquisition unit 339 is authentic, the third authentication unit 347 outputs an authentication signal to the job list generation unit 349. If the third authentication unit 347 determines that the authentication information is not authentic, the third authentication unit 347 outputs an error signal. The data is output to the list generation unit 349.

  When the generation instruction is input from the device determination unit 337, the job list generation unit 349 generates a job list, and outputs the generated job list and the device identification information included in the generation instruction to the job list transmission unit 351. . In addition, when a standby instruction is input from the device determination unit 337, the job list generation unit 349 waits until an authentication signal is input from the third authentication unit 347. When a standby instruction is input from the device determination unit 337, the job list generation unit 349 generates a job list on condition that an authentication signal is input from the third authentication unit 347, the generated job list, The device identification information included in the instruction is output to the job list transmission unit 351. When a standby instruction is input from the device determination unit 337, the job list generation unit 349 does not generate a job list when an error signal is input from the third authentication unit 347. In this case, the error signal and the device identification information included in the generation instruction are output to the job list transmission unit 351.

  When the job list is input from the job list generation unit 349, the job list transmission unit 351 transmits the job list to the device specified by the device identification information input together with the job list via the communication I / F 311. The device specified by the device identification information is a device that has transmitted a job list request. When an error signal is input from the job list generation unit 349, the error signal is transmitted to the device specified by the device identification information input together with the error signal via the communication I / F 311.

  The pull print instruction receiving unit 353 receives a pull print instruction transmitted from the MFP 3 or the MFP 4. A pull print instruction is received from the MFP 3 or MFP 4 via the communication I / F 311. Although the operation of transmitting a pull print instruction by the MFP 3 or 4 will be described later, the print instruction is transmitted after receiving the job list and includes a job ID for specifying a print job. Further, the pull print instruction receiving unit 353 receives device identification information for identifying the device that has transmitted the pull print instruction via the communication I / F 311. The pull print instruction reception unit 353 outputs the job ID and the device identification information to the second job transmission unit 359.

  When the job ID and the device identification information are input from the pull print instruction receiving unit 353, the second job transmission unit 359 communicates the print job specified by the job ID to the device specified by the device identification information. Transmit via / F311. Specifically, job data including a job ID input from the pull print instruction receiving unit 353 is extracted from the job data 371 stored in the HDD 307 and specified by job identification information included in the extracted job data. The print job to be read is read from the HDD 307 and transmitted.

  FIG. 10 is a functional block diagram showing an overview of the functions of the CPU 111 provided in the MFP 3 that functions as the biometric authentication apparatus according to the first embodiment. Referring to FIG. 10, CPU 111 provided in MFP 3 includes a fingerprint receiving unit 120 that receives a user's fingerprint image from fingerprint reading unit 60, a first authentication unit 121 for authenticating a user using the fingerprint image, and a job list. A first job list acquisition / display unit 123 for acquiring and displaying a print job, a first pull print instruction unit 139 for receiving a pull print instruction, a first job receiving unit 141 for receiving a print job, and a print job And a first job execution unit 143 that executes.

  The fingerprint receiving unit 120 receives a fingerprint image output from the fingerprint reading unit 60 when the fingerprint reading unit 60 reads the fingerprint. Then, the received fingerprint image is output to the first authentication unit 121.

  The first authentication unit 121 authenticates the user using the fingerprint image input from the fingerprint reception unit 120. The EEPROM 113 stores first user data 145.

  FIG. 11 is a diagram illustrating an example of the format of the first user data. Referring to FIG. 11, the first user data includes a user ID and a fingerprint image. The first user data is stored in the EEPROM 113 in advance by the administrator of the MFP 3. After the administrator logs in, the user who registers the first user data in the MFP 3 is read by the fingerprint reading unit 60 and stored together with the user ID of the user.

  Returning to FIG. 10, the first authentication unit 121 includes, from the first user data 145 stored in the EEPROM 113, the first user including a fingerprint image that is the same as or similar to the fingerprint image input from the fingerprint receiving unit 120. Data 145 is extracted. A fingerprint image similar to the fingerprint image input from the fingerprint receiving unit 120 is an image within a range that can be determined as a fingerprint image obtained by reading the fingerprint of the same person. The first authentication unit 121 permits login if the first user data is extracted. When the login is permitted, the user ID included in the extracted first user data 145 is output to the first job list acquisition / display unit 123. Otherwise, an error message is displayed on the display unit 114. The error message includes, for example, a message indicating that login is not permitted.

  When a user ID is input from the first authentication unit 121, the first job list acquisition / display unit 123 acquires a job list corresponding to the user from the server 300 and displays the job list on the display unit 114.

  The first job list acquisition / display unit 123 includes a first job list request unit 125 that transmits a job list request to the server 300, an authentication information reception unit 127 that receives authentication information from the server 300, and the received authentication information. An authentication information display unit 133 to be displayed, a first job list reception unit 129 for receiving a job list from the server 300, and a first job list display unit 131 for displaying the received job list are included.

  When a user ID is input from first authentication unit 121, first job list request unit 125 transmits a job list request to server 300, and receives an instruction to receive authentication information reception unit 127 and first job list reception unit 129. Is output. The job list request includes a user ID.

  When the reception instruction is input from the first job list request unit 125, the authentication information reception unit 127 stands by until the authentication information is received from the server 300. When the authentication information is received, the authentication information display unit 133 displays the authentication information. Output to. When the authentication information is input, the authentication information display unit 133 displays the authentication information on the display unit 114. When the user of the MFP 3 functioning as the biometric authentication apparatus logs in to the MFP 3, the authentication information is displayed on the display unit 114, so that the authentication information can be known. This authentication information is used later when logging in to the MFP 4 that functions as a job execution apparatus. This will be described later.

  When the first job list receiving unit 129 receives a reception instruction from the first job list requesting unit 125, the first job list receiving unit 129 waits until it receives a job list from the server 300. The data is output to the list display unit 131. When the job list is input, the first job list display unit 131 displays the job list on the display unit 114.

  The first pull print instruction unit 139 receives a pull print instruction. Specifically, the first job list display unit 131 accepts an instruction for designating at least one of the job lists displayed on the display unit 114. The first pull print instruction unit 139 transmits a pull print instruction including the job ID of the print job specified by the received instruction to the server 300 and outputs a reception instruction to the first job reception unit 141.

  The first job receiving unit 141 receives a print job from the server 300. When a reception instruction is input, the process waits until a print job is received from the server 300. When the print job is received, the print job is output to the first job execution unit 143. The first job execution unit 143 executes the input print job. Specifically, the data included in the print job is processed according to the print conditions included in the print job. The printing conditions and data are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of the data on a sheet according to the printing conditions.

  A user who has logged in to the MFP 3 functioning as the biometric authentication device does not have to execute all the print jobs stored in the server 300 on the MFP 3. For example, if the MFP 3 can only form an image in monochrome, but the MFP 4 can form an image in color, it is desired that the MFP 4 execute a print job.

  FIG. 12 is a functional block diagram showing an outline of the functions of the CPU 111 provided in the MFP 4 that functions as the job execution device according to the first embodiment. Referring to FIG. 12, CPU 111 provided in MFP 4 includes a user ID receiving unit 151 that receives a user ID, a password receiving unit 153 that receives a password, and a second authentication unit that authenticates the user using the user ID and password. 155, a second job list acquisition / display unit 157 for acquiring and displaying a job list, a second pull print instruction unit 171 for receiving a pull print instruction, and a second job receiving unit for receiving a print job 173 and a second job execution unit 175 that executes a print job.

  The user ID reception unit 151 receives a user ID input by the user to the operation unit 115. Then, the received user ID is output to the second authentication unit 155. The password receiving unit 153 receives a password that the user inputs to the operation unit 115. Then, the received password is output to the second authentication unit 155.

  The second authentication unit 155 authenticates the user using the user ID input from the user ID reception unit 151 and the password input from the password reception unit 153. The EEPROM 113 stores second user data 177.

  FIG. 13 is a diagram illustrating an example of a format of second user data. Referring to FIG. 13, the second user data includes a user ID and a password. The second user data 177 is stored in the EEPROM 113 in advance by the administrator of the MFP 4.

  Returning to FIG. 12, the second authentication unit 155 includes the user ID input from the user ID reception unit 151 and the password input from the password reception unit 153 out of the first user data 145 stored in the EEPROM 113. The second user data 177 including both is extracted. If the second authentication unit 155 extracts the second user data 177, the second authentication unit 155 permits login. When the login is permitted, the user ID included in the extracted second user data 177 is output to the second job list acquisition / display unit 157. Otherwise, an error message is displayed on the display unit 114. The error message includes, for example, a message indicating that login is not permitted.

  When the user ID is input from the second authentication unit 155, the second job list acquisition / display unit 157 acquires a job list corresponding to the user from the server 300 and displays it on the display unit 114.

  The second job list acquisition / display unit 157 accepts authentication information, a second job list request unit 159 that transmits a job list request to the server 300, an authentication information request reception unit 161 that receives an authentication information request from the server 300, and the like. An authentication information receiving unit 163 for transmitting the received authentication information to the server 300, a second job list receiving unit 167 for receiving the job list from the server 300, and the received job list. A second job list display unit 169 for display.

  When the user ID is input from the second authentication unit 155, the second job list request unit 159 transmits a job list request to the server 300, and also receives the request to the authentication information request reception unit 161 and the second job list reception unit 167. Output instructions. The job list request includes a user ID.

  When the reception instruction is input from the second job list request unit 159, the authentication information request reception unit 161 stands by until an authentication information request signal is received from the server 300. When the authentication information request signal is received, the authentication information request unit In 163, an acceptance instruction is output. When the reception instruction is input, the authentication information reception unit 163 displays an authentication information input screen on the display unit 114 and prompts the user to request authentication information. The user who has logged in to the MFP 4 can know the authentication information if he / she has previously logged in to the MFP 3, and therefore inputs the authentication information known at the time of logging in to the MFP 3 to the MFP 4. When the user inputs authentication information to the operation unit 115, the authentication information receiving unit 163 receives the authentication information and outputs the authentication information to the authentication information transmitting unit 165.

  The authentication information transmission unit 165 transmits the authentication information input from the authentication information reception unit 163 to the server 300.

  When a reception instruction is input from second job list request unit 125, second job list reception unit 167 waits until a job list is received from server 300. When the job list is received, second job list reception unit 167 receives the job list as a second job. The data is output to the list display unit 169. When the job list is input, the second job list display unit 169 displays the job list on the display unit 114.

  The second pull print instruction unit 171 receives a pull print instruction. Specifically, the second job list display unit 169 receives an instruction to specify at least one of the job lists displayed on the display unit 114. The second pull print instruction unit 171 transmits a pull print instruction including the job ID of the print job specified by the received instruction to the server 300 and outputs a reception instruction to the second job reception unit 173.

  The second job receiving unit 173 receives a print job from the server 300. When a reception instruction is input, the server 300 waits until a print job is received from the server 300. When the print job is received, the print job is output to the second job execution unit 175. The second job execution unit 175 executes the input print job. Specifically, the data included in the print job is processed according to the print conditions included in the print job. The printing conditions and data are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of the data on a sheet according to the printing conditions.

  FIG. 14 is a flowchart illustrating an exemplary flow of a print job transmission process. The print job transmission process is a process executed by the CPU 201 when the CPU 201 of the PC 200 as a terminal device executes a print job transmission program. The print job transmission program is a part of the authentication program. Referring to FIG. 14, CPU 201 displays an input screen on display unit 217 (step S01). The input screen is a screen for inputting information necessary for the user to instruct transmission of a print job.

  In the next step S02, it is determined whether a user ID has been accepted. The process waits until a user ID is accepted (NO in step S02). If a user ID is accepted, the process proceeds to step S03. A user ID input to the input unit 215 by the user is received. Then, it is determined whether or not data designation is accepted (step S03). If data specification is accepted, the process proceeds to step S04; otherwise, the process proceeds to step S02. Data identification information input to the input unit 215 by the user is received. Further, the file name of the data stored in the HDD 307 may be displayed on the display unit 217, and an instruction for the displayed file name may be received.

  In step S04, it is determined whether print conditions have been accepted. If the print condition is accepted, the process proceeds to step S05; otherwise, the process returns to step S02. A print condition input by the user to the input unit 215 is received.

  Note that any of the acceptance of the user ID, the designation of data, and the acceptance of print conditions may be accepted first. In short, the process may be advanced to step S05 on condition that a user ID is accepted, a data designation is accepted, and a print condition is accepted.

  In step S05, a print job is generated. The job includes data specified by the designation accepted in step S03 and the print conditions accepted in step S04. In step S06, the generated print job and the user ID accepted in step S01 are transmitted to the server 300.

  FIG. 15 is a flowchart illustrating an example of the flow of job management processing. The job management process is a process executed by the CPU 301 when the CPU 301 included in the server 300 executes a job management program. The job management process is a part of the authentication program. Referring to FIG. 15, CPU 301 determines whether a print job has been received (step S11). The communication I / F 311 determines whether a print job has been received from the PC 200. If a print job is received, the process proceeds to step S12. If not, the process proceeds to step S13. In step S13, it is determined whether a job list request has been received. It is determined whether communication I / F 311 has received a job list request from either MFP 3 functioning as a fingerprint authentication device or MFP 4 as a job execution device. If a job list request is received, the process proceeds to step S14; otherwise, the process ends. That is, the job management process is a process executed on condition that a print job or job list request is received.

  In step S12, the print job is stored. Specifically, job data in which the print job received in step S11 is associated with the user ID received therewith is generated, and the job data is stored in the HDD 307.

  If a job list request is received in step S13, the process proceeds to step S14. In step S14, a user ID is acquired. The user ID included in the job list request is acquired. Then, in the next step S15, the process branches depending on the authentication method of the apparatus that has transmitted the job list request. By referring to the device information in which the device identification information is associated with the authentication method possessed by the device, the authentication method associated with the device identification information of the device that has transmitted the job list request received in step S13 is acquired. When a job list request is received from the MFP 3, biometric authentication is acquired as an authentication method. When a job list request is received from the MFP 4, password authentication is acquired as an authentication method. If the authentication method is biometric authentication, the process proceeds to step S16; otherwise, the process proceeds to step S20. Therefore, if a job list request is received from MFP 3, the process proceeds to step S16. If a job list request is received from MFP 4, the process proceeds to step S20.

  In step S16, authentication information is issued. Then, the authentication information is transmitted to the apparatus that has transmitted the job list request (step S17). Here, the authentication information is transmitted to the MFP 3 functioning as a biometric authentication device. Then, in the next step S18, authentication data is generated. Authentication data including the user ID included in the job list request received in step S13 and the authentication information issued in step S16 is generated. Then, the authentication information is stored in the HDD 307 (step S19), and the process proceeds to step S25.

  On the other hand, in step S20, authentication data is extracted. Authentication data including the user ID included in the job list request received in step S13 is extracted from the authentication data stored in the HDD 307. The authentication data stored in the HDD 307 is the authentication data stored in step S19.

  In step S21, it is determined whether authentication data has been extracted. If authentication data 373 has been extracted, the process proceeds to step S22; otherwise, the process proceeds to step S29. In step S29, an error signal is transmitted to the apparatus that has transmitted the job list transmission request, in this case, MFP 4, and the process ends. The error signal includes a message indicating that the authentication information necessary for transmitting the job list has not been issued.

  In step S22, an authentication information request signal for requesting transmission of authentication information is transmitted to the apparatus that has transmitted the job list transmission request, in this case, MFP4. Then, the authentication information transmitted by the MFP 4 that has received the authentication information request signal is received (step S23). The authentication information transmitted by the MFP 4 is information input to the MFP 4 by a user who has logged in to the MFP 4, and the authentication information is the authentication information transmitted to the MFP 3 after step S18 is executed.

  In the next step S24, the third authentication is executed. If the authentication is successful, the process proceeds to step S25. If the authentication is not successful, the process proceeds to step S29. In the third authentication, the authentication information received in step S23 is compared with the authentication information included in the authentication data 373 extracted in step S20, and if both match, authentication is performed.

  In step S25, a job list is generated. From the job data stored in the HDD 307, job data including the user ID acquired in step S14 is extracted, and a list of job IDs of the extracted job data is generated as a job list. The job list may include data identification information for identifying data included in the print job, or may include the date and time when the print job was transmitted. The job data stored in the HDD 307 is the job data stored in the HDD 307 in step S12.

  In step S26, the generated job list is transmitted to the apparatus that has transmitted the job list request. When a job list request is received from the MFP 3 functioning as a biometric authentication apparatus, the job list is transmitted after the authentication information is issued and transmitted. Note that the authentication information and the job list may be transmitted substantially simultaneously, or the job list may be transmitted before the authentication information. Further, when a job list request is received from the MFP 4 whose authentication method is password authentication, the job list is transmitted on condition that the authentication information previously transmitted to the MFP 3 is input. For this reason, a user who logs in to the MFP 4 can not have the MFP 4 receive the job list without first logging in to the MFP 4 and issuing authentication information.

  In step S27, it is determined whether a pull print instruction has been received. The process waits until a pull print instruction is received (NO in step S27). When a pull print instruction is received, the process proceeds to step S28. In step S28, the print job specified by the job ID included in the pull print instruction is transmitted to the apparatus that has transmitted the pull print instruction.

  FIG. 16 is a flowchart illustrating an exemplary flow of a fingerprint authentication job execution process according to the first embodiment. The biometric authentication job execution process is a process executed by the CPU 111 when the CPU 111 provided in the MFP 3 functioning as a biometric authentication apparatus executes a biometric authentication job execution program. The biometric job execution program is a part of the authentication program.

  Referring to FIG. 16, CPU 111 displays a login screen on display unit 114 (step S31). The login screen includes, for example, a message “Place your finger on the fingerprint reader and read the fingerprint.” When the user places a finger on the fingerprint reading unit 60, the fingerprint reading unit 60 reads the fingerprint and outputs a fingerprint image. The CPU 111 receives a fingerprint image output from the fingerprint reading unit 60. In step S32, the process waits until a fingerprint image is received (NO in step S32). When a fingerprint image is received from the fingerprint reading unit 60 (YES in step S32), the process proceeds to step S33.

  In step S33, the first authentication is executed. It is determined whether or not there is first user data 151 including a fingerprint image that is the same as or similar to the fingerprint image received in step S02 in the first user data 151 stored in the EEPROM 113. If such first user data 151 exists, the user is authenticated, but if not, it is not authenticated. As a result of the first authentication, if the authentication is successful, the first user data 151 is extracted, and the process proceeds to step S34. If the authentication is not successful, the process proceeds to step S44. In step S44, an error process is executed and the process ends. This is to allow only pre-registered users to log in and allow the pull print job to be executed.

  In step S34, the user ID of the logged-in user is acquired. The user ID included in the first user data extracted in step S33 is acquired. Then, a job list acquisition request is transmitted to the server 300 (step S35). The job list acquisition request includes the user ID acquired in step S24.

  In step S 36, it is determined whether authentication information has been received from server 300. If authentication information has been received, the process proceeds to step S37; otherwise, the process proceeds to step S38. In step S37, the received authentication information is displayed on display unit 114, and the process proceeds to step S38. As a result, the user who has logged into the MFP 3 can know the authentication information issued by the server 300.

  In step S38, it is determined whether a job list has been received. If the job list has been received, the process proceeds to step S39; otherwise, step S39 is skipped and the process proceeds to step S40. In step S39, the received job list is displayed on display unit 114, and the process proceeds to step S40.

  In step S40, it is determined whether a job designation has been accepted. In step S39, it is determined whether at least one of the job IDs included in the job list displayed on display unit 114 is designated. If a job designation is accepted, the process proceeds to step S41; otherwise, the process proceeds to step S36.

  In step S41, a pull print instruction is transmitted to server 300. The pull print instruction includes the job ID of the job specified in step S40. A print job is received (step S42), and the received print job is executed (step S43). The print conditions and data included in the print job are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of data according to the print conditions.

  FIG. 17 is a flowchart illustrating an example of the flow of a password authentication job execution process in the first embodiment. The password authentication job execution process in the first embodiment is a process executed by the CPU 111 when the CPU 111 provided in the MFP 3 functioning as the password authentication apparatus executes the password authentication job execution program. The password authentication job execution program is a part of the authentication program.

  Referring to FIG. 17, CPU 111 displays a login screen on display unit 114 (step S51). The login screen includes an area for inputting a user ID and a password. In step S52, the process waits until a user ID is accepted (NO in step S52). If a user ID is accepted (YES in step S52), the process proceeds to step S53. In step S53, it is determined whether a password has been accepted. If a password is accepted, the process proceeds to step S54; otherwise, the process returns to step S52. Note that either the user ID or the password may be received first. In short, the process proceeds to step S54 on condition that the user ID and password are accepted.

  In step S54, the second authentication is executed. It is determined whether or not the second user data 177 stored in the EEPROM 113 includes the second user data 177 including the set of the user ID accepted in step S52 and the password accepted in step S53. If such second user data 177 exists, the user is authenticated, otherwise it is not authenticated. As a result of the second authentication, if the authentication is successful, the second user data 177 is extracted, and the process proceeds to step S55. If the authentication is not successful, the process proceeds to step S66. In step S66, an error process is executed and the process ends. This is to allow only pre-registered users to log in and allow the execution of print jobs.

  In step S55, the user ID of the logged-in user is acquired. The user ID included in the second user data 177 extracted in step S54 is acquired. Then, a job list acquisition request is transmitted to the server 300 (step S56). The job list acquisition request includes the user ID acquired in step S55.

  In step S57, it is determined whether an authentication information request is received from server 300. If an authentication information request is received, the process proceeds to step S58; otherwise, the process proceeds to step S66. In step S66, error processing is executed. This is to prevent a user who has only password authentication from executing a print job when authentication information has not been issued.

  In step S58, it is determined whether authentication information has been accepted. Authentication information input to the operation unit 115 by a user who has logged into the MFP 4 is received. If the user who has logged in to the MFP 4 has previously logged in to the MFP 3, the authentication information is displayed by the MFP 3 at the time of logging in to the MFP 3, so that the authentication information can be input.

  In step S59, the authentication information accepted in step S58 is transmitted to server 300.

  In step S60, it is determined whether a job list has been received. If the job list is received, the process proceeds to step S61; otherwise, the process proceeds to step S66. In step S66, an error process is executed and the process ends. In the error processing, for example, a message indicating that the job list does not exist is displayed on the display unit 114.

  In step S61, the job list received in step S60 is displayed on display unit 114. Then, it is determined whether or not a job designation has been accepted (step S62). In step S61, it is determined whether at least one of the job IDs included in the job list displayed on display unit 114 is designated. If a job designation is accepted, the process proceeds to step S63; otherwise, the process ends.

  In step S 63, a pull print instruction is transmitted to server 300. The pull print instruction includes the job ID of the job specified in step S62. A print job is received (step S64), and the received print job is executed (step S65). The print conditions and data included in the print job are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of the data according to the print conditions.

  As described above, in the authentication system 1 according to the first embodiment, when the user logs in to the MFP 3 functioning as the biometric authentication device, the server 300 issues authentication information to the user, and the authentication data 373. Is memorized. Thereafter, when the user logs in to MFP 4 functioning as a job execution apparatus and inputs the previously issued authentication information to MFP 3, in server 300, the input authentication information and the authentication information stored in authentication data 373 are displayed. Are compared and the job list is displayed on the MFP 4 on condition that the two match. For this reason, in the MFP 3 that can be authenticated only by the password, the authentication information issued when the authentication is performed by the fingerprint authentication is requested in addition to the authentication using the password, so that the strength of the authentication security of the MFP 3 is improved. be able to.

<Second Embodiment>
In the authentication system 1 in the first embodiment, the authentication information is associated with the user ID, but the authentication system 1 in the second embodiment is different in that the authentication information is associated with the print job. Hereinafter, “the different points from the authentication system in the first embodiment will be mainly described.

  FIG. 18 is a functional block diagram illustrating an overview of the functions of the CPU 301 included in the server 300 according to the second embodiment. Referring to FIG. 18, the difference from the functional block diagram shown in FIG. 7 is that job list transmission unit 351A, pull print instruction reception unit 353A, device determination unit 337A, second job transmission unit 359A, and authentication information issue unit 341A. The authentication information storage unit 343A, the authentication information acquisition unit 339A, and the third authentication unit 347A are changed. Further, the format of the job data 371A is different.

  FIG. 19 is a second diagram illustrating an example of a format of job data. Referring to FIG. 19, job data 371A associates a job ID, a user ID, and authentication information.

  Returning to FIG. 18, when the job list request receiving unit 335 receives a job list request from either the MFP 3 functioning as the fingerprint authentication device or the MFP 4 as the job execution device, the user ID included in the job list request and the job A generation instruction including the device identification information of the device that has transmitted the list request is output to job list generation unit 349A.

  When the generation instruction is input from the job list request reception unit 335, the job list generation unit 349A generates a job list, and the generated job list and the device identification information included in the generation instruction are sent to the job list transmission unit 351. Output.

  Therefore, when server 300 in the second embodiment receives a job list request from either MFP 3 or MFP 4, server 300 transmits the job list to the MFP 3 or MFP 4 that has transmitted the job list request.

  The pull print instruction receiving unit 353A receives a pull print instruction transmitted from the MFP 3 or the MFP 4. The operation of sending a pull print instruction by the MFP 3 or MFP 4 will be described later. The print instruction includes a job ID for specifying a print job, processing contents indicating whether the authentication information is issued and the print job is executed. including. The pull print instruction receiving unit 353A outputs the pull print instruction and the device identification information of the device that has transmitted the pull print instruction to the device determination unit 337A.

  The device determination unit 337A determines the authentication method of the device that has transmitted the job list request based on the device identification information. If the apparatus determination unit 337A determines that the authentication method is password authentication, and the processing content included in the pull print instruction indicates the issuance of authentication information, the apparatus determination unit 337A outputs the issuance instruction to the authentication information issuing unit 341A. Indicates execution of a print job, a transmission instruction is output to the second job transmission unit 359A. If the authentication method is not determined to be biometric authentication, device determination unit 337A outputs an acquisition instruction to authentication information acquisition unit 339 and a standby instruction to second job transmission unit 359A. Each of the issue instruction, the transmission instruction, the acquisition instruction, and the standby instruction includes a job ID and device identification information included in the pull print instruction.

  In this example, upon receiving device identification information of MFP 3 from pull print instruction receiving unit 353A, device determination unit 337 determines that the authentication method is biometric authentication, and if the processing content indicates issuance of authentication information, authentication information If the issuing instruction is output to the issuing unit 341 and the processing content indicates execution of the print job, the transmitting instruction is output to the second job transmitting unit 359A. Upon receiving device identification information of MFP 4 from pull print instruction receiving unit 353A, device determining unit 337 outputs the acquisition instruction to authentication information acquiring unit 339 without determining the authentication method as biometric authentication, and the second job transmitting unit. A standby instruction is output to 359A.

  The authentication information issuing unit 341A issues authentication information when an issuing instruction is input from the device determining unit 337A. The authentication information issuing unit 341A outputs the issued authentication information and the job ID included in the issuance instruction to the authentication information storage unit 343A, and the authentication information transmitting unit 345 outputs the issued authentication information and the device identification information included in the issuance instruction. Output to. When the authentication information is input from the authentication information issuing unit 341, the authentication information storage unit 343A extracts job data 371A including the job ID included in the issuance instruction from the job data 371A stored in the HDD 307. Input authentication information is set in the authentication information item of the job data 371A.

  When the authentication information is input from the authentication information issuing unit 341, the authentication information transmitting unit 345 transmits the authentication information to the device specified by the device identification information included in the issue instruction. The authentication information is issued when the user logs in to the MFP 3 functioning as a biometric authentication device. Therefore, if the MFP 3 receives the authentication information and displays it on the display unit 114, the user who has logged in to the MFP 3 can know the authentication information.

  When the acquisition instruction is input from the device determination unit 337, the authentication information acquisition unit 339A transmits an authentication information request signal for requesting transmission of authentication information to the device specified by the device identification information included in the acquisition instruction. The authentication information is acquired by receiving the authentication information transmitted from the apparatus. In this example, the acquisition instruction is input when the user logs in to the MFP 4 as the job execution apparatus. Therefore, a signal requesting the MFP 4 to transmit authentication information is transmitted. The operation of the MFP 4 will be described later. Upon receiving the authentication information request signal, the MFP 4 transmits the authentication information to the server 300 when the authentication information is input to the operation unit 115 by the logged-in user. It should be noted that the user who knows the authentication information is a user who has previously logged in to the MFP 3 that is the biometric authentication apparatus and has issued an instruction to issue the authentication information. When the authentication information acquisition unit 339A acquires the authentication information, the authentication information acquisition unit 339A outputs the authentication information and the job ID included in the acquisition instruction to the third authentication unit 347A.

  When the authentication information and the job ID are input from the authentication information acquisition unit 339A, the third authentication unit 347A determines whether the input authentication information is authentic. Specifically, data including a job ID is extracted from the job data 371A stored in the HDD 307, and authentication information included in the extracted job data 371A is acquired. Then, it is determined whether or not the acquired authentication information matches the authentication information input from the authentication information acquisition unit 339A. If the two pieces of authentication information match, it is determined that the authentication information input from the authentication information acquisition unit 339A is authentic. In other words, it is determined whether or not the same authentication information that was issued when the user logged in to the MFP 3 and entered an authentication information issuance instruction was subsequently input by the user who logged into the MFP 4.

  If the third authentication unit 347A determines that the authentication information input from the authentication information acquisition unit 339A is authentic, the third authentication unit 347A outputs an authentication signal to the second job transmission unit 359A. If the third authentication unit 347A determines that the authentication information is not authentic, an error signal is output. The data is output to the second job transmission unit 359A.

  When a transmission instruction is input from apparatus determination unit 337A, second job transmission unit 359A is configured to identify a print job identified by a job ID included in the transmission instruction by apparatus identification information included in the transmission instruction. Via the communication I / F 311. Specifically, job data including the job ID included in the transmission instruction is extracted from the job data 371A stored in the HDD 307, and the print job specified by the job ID included in the extracted job data is extracted from the HDD 307. Read from and send.

  When a standby instruction is input from device determination unit 337A, second job transmission unit 359A transmits a print job on condition that an authentication signal is input from third authentication unit 347A. When a standby instruction is input from device determination unit 337A, second job transmission unit 359A transmits an error signal without transmitting a print job when an error signal is input from third authentication unit 347A.

  FIG. 20 is a functional block diagram illustrating an outline of functions of the CPU 111 provided in the MFP 3 that functions as the biometric authentication device according to the second embodiment. Referring to FIG. 20, the difference from the past block diagram shown in FIG. 10 is that first job list acquisition / display unit 123A and first preprint instruction unit 139A are changed.

  When a user ID is input from the first authentication unit 121, the first job list acquisition / display unit 123A acquires a job list corresponding to the user from the server 300 and displays the job list on the display unit 114. More specifically, when a user ID is input from the first authentication unit 121, a job list request is transmitted to the server 300. The job list request includes a user ID. Then, it waits until a job list is received from the server 300. When the job list is received, the job list is displayed on the display unit 114.

  The job list displayed on the display unit 114 includes an area for instructing processing contents adjacent to the job ID. The processing content includes processing for issuing authentication information and processing for executing a print job.

  The first pull print instruction unit 139A includes a first job designation receiving unit 181, a first job transmission request unit 183, an authentication information issue request unit 185, an authentication information receiving unit 187, and an authentication information display unit 189. Including.

  The first job designation receiving unit 181 receives a pull print instruction. Specifically, the first job list acquisition / display unit 123 specifies an instruction to specify at least one of the job lists displayed on the display unit 114 and a process to be executed for the specified print job. And processing content for. When an instruction to issue authentication information is specified as the processing content, the first job specification receiving unit 181 requests an authentication information issue request including a job ID of the print job specified by the received instruction and the processing content. To the unit 185. When an instruction to execute a print job is specified as the processing content, the job ID of the print job specified by the received instruction and the processing content are output to the first job transmission request unit 183.

  The first job transmission request unit 183 transmits a pull print instruction including the job ID and the processing content to the server 300 and outputs the reception instruction to the first job reception unit 141.

  The authentication information issue request unit 185 transmits a pull print instruction including the job ID and the processing content to the server 300 and outputs a reception instruction to the authentication information reception unit 187.

  When the reception instruction is input, the authentication information receiving unit 127 waits until the authentication information is received from the server 300. When the authentication information is received, the authentication information receiving unit 127 outputs the authentication information to the authentication information display unit 189. . When the authentication information is input, the authentication information display unit 189 displays the authentication information on the display unit 114.

  FIG. 21 is a functional block diagram showing an outline of the functions of the CPU 111 provided in the MFP 4 that functions as the job execution apparatus according to the second embodiment. Referring to FIG. 21, the difference from the functional block diagram shown in FIG. 12 is that second job list acquisition / display unit 157A and second pull print instruction unit 171A are changed.

  When the user ID is input from second authentication unit 155, second job list acquisition / display unit 157A acquires a job list corresponding to the user from server 300 and displays it on display unit 114. Specifically, the job list request is transmitted to the server 300, the job list is received from the server 300, and the received job list is displayed. The job list request includes a user ID.

  The second pull print instruction unit 171A includes a second job designation reception unit 191, a second job transmission request unit 193, an authentication information request reception unit 161A, an authentication information reception unit 163, and an authentication information transmission unit 165. Including. The second job designation receiving unit 191 receives a pull print instruction. Specifically, the second job list acquisition / display unit 123 receives an instruction to specify at least one of the job lists displayed on the display unit 114. The second job designation accepting unit 191 outputs the job ID of the print job designated by the accepted instruction to the second job transmission request unit 193.

  The second job transmission request unit 193 transmits a pull print instruction including the job ID to the server 300 and outputs a reception instruction to the authentication information request reception unit 161A and the second job reception unit 173.

  When the reception instruction is input from the second job transmission request unit 193, the authentication information request reception unit 161A waits until an authentication information request signal is received from the server 300. When the authentication information request signal is received, the authentication information reception unit In 163, an acceptance instruction is output. When the reception instruction is input, the authentication information reception unit 163 displays an authentication information input screen on the display unit 114 and prompts the user to request authentication information. The user who has logged in to the MFP 4 can know the authentication information if he / she has previously logged in to the MFP 3, and therefore inputs the authentication information known at the time of logging in to the MFP 3 to the MFP 4. When the user inputs authentication information to the operation unit 115, the authentication information receiving unit 163 receives the authentication information and outputs the authentication information to the authentication information transmitting unit 165. The authentication information transmission unit 165 transmits the authentication information input from the authentication information reception unit 163 to the server 300.

  FIG. 22 is a flowchart illustrating an example of a flow of job management processing according to the second embodiment. The job management process is a process executed by the CPU 301 when the CPU 301 included in the server 300 executes a job management program. Referring to FIG. 22, steps S71 to S76 are the same as steps S11 to S14, step Sstep S25 and step S26 in the first embodiment shown in FIG. Therefore, the description will not be repeated here.

  In step S71, it is determined whether a print job has been received. If a print job is received, the process proceeds to step S72; otherwise, the process proceeds to step S73. In step S73, it is determined whether a job list request has been received. If a job list request is received, the process proceeds to step S74; otherwise, the process proceeds to step S77. In step S77, it is determined whether a pull print instruction has been received. If a pull print instruction is received, the process proceeds to step S78; otherwise, the process ends. In other words, the job management process in the second embodiment is a process executed on condition that one of a print job, a job list request, or a pull print instruction is received.

  In step S78, the process branches depending on the authentication method of the apparatus that has transmitted the pull print instruction. By referring to the device information that associates the device identification information with the authentication method possessed by the device, the authentication method associated with the device identification information of the device that has transmitted the pull print instruction received in step S77 is acquired. When a pull print instruction is received from the MFP 3, biometric authentication is acquired as an authentication method. When a pull print instruction is received from the MFP 4, password authentication is acquired as an authentication method. If the authentication method is biometric authentication, the process proceeds to step S79; otherwise, the process proceeds to step S84. Therefore, if a pull print instruction is received from MFP 3, the process proceeds to step S79. If a pull print instruction is received from MFP 4, the process proceeds to step S84.

  When the process proceeds to step S79, the pull print instruction includes a job ID and a processing content. In step S79, the process branches depending on the processing content included in the pull print instruction. If the processing content is authentication information issuance, the process proceeds to step S80. If the processing content is execution of a print job, the process proceeds to step S83. In step S83, the print job specified by the job ID included in the pull print instruction is transmitted to the apparatus that has transmitted the pull print instruction.

  In step S80, authentication information is issued. Then, the authentication information is transmitted to the apparatus that has transmitted the pull print instruction (step S81). Here, the authentication information is transmitted to the MFP 3 functioning as a biometric authentication device. In the next step S82, the authentication information is stored, and the process ends. The job data 371A including the job ID included in the pull print instruction is extracted from the job data 371A stored in the HDD 307, and the authentication information issued in step S80 is set in the authentication information item of the job data 371A. To do.

  On the other hand, in step S84, an authentication information request signal for requesting transmission of authentication information is transmitted to the apparatus that has transmitted the pull print instruction. Here, an authentication information request signal is transmitted to MFP 4 whose authentication method is password authentication. Upon receiving the authentication information transmission request signal, the MFP 4 transmits the authentication information to the server 300 when the authentication information is input to the operation unit 115 by the logged-in user. It should be noted that the user who knows the authentication information is a user who has previously logged in to the MFP 3 that is the biometric authentication apparatus and has instructed issuing the authentication information. In step S85, the authentication information transmitted by MFP 4 is received (step S85).

  In the next step S86, the third authentication is executed. If the third authentication is successful, the process proceeds to step S83. If the authentication is not successful, the process proceeds to step S87. In the third authentication, job data 371A including the job ID included in the pull print instruction received in step S77 is extracted from the job data 371A stored in the HDD 371, and the authentication information item of the extracted job data 371A is extracted. Get the authentication information set in. Then, the acquired authentication information and the authentication information received in step S85 are compared, and if both match, authentication is performed.

  In step S87, an error signal is transmitted to the apparatus that has transmitted the pull print instruction, in this case, MFP4. The MFP 4 that receives the error signal notifies the user that the print job cannot be executed by displaying an error message indicating that the print job cannot be executed on the display unit 114 based on the pull print instruction. be able to.

  FIG. 23 is a flowchart illustrating an example of a flow of fingerprint authentication job execution processing according to the second embodiment. The biometric authentication job execution process in the second embodiment is a process executed by the CPU 111 when the CPU 111 provided in the MFP 3 functioning as a biometric authentication apparatus executes a biometric authentication job execution program. The biometric job execution program is a part of the authentication program.

  Referring to FIG. 23, the processes in steps S91 to S95 are the same as the processes in steps S31 to S35 shown in FIG. Therefore, the description will not be repeated here.

  In step S95, after transmitting the job list acquisition request to the server 300, it is determined whether or not the job list is received (step S96). The process waits until the job list is received (NO in step S96). If the job list is received, the process proceeds to step S97. In step S97, the received job list is displayed on display unit 114, and the process proceeds to step S98. In step S98, it is determined whether designation of a job has been accepted. In step S97, it is determined whether at least one of the job IDs included in the job list displayed on display unit 114 and the processing content for the specified job ID have been specified. If a job designation and a process content designation are accepted, the process proceeds to step S99; otherwise, the process ends.

  In step S99, the processing is branched depending on the processing content accepted in step S98. If the processing content is authentication information issuance, the process proceeds to step S101. If the print job is to be executed, the process proceeds to step S104.

  In step S101, a pull print instruction is transmitted to the server 300. The pull print instruction includes the job ID of the print job designated in step S98 and the processing contents for issuing authentication information. Then, the authentication information is received from the server 300 (step S102), the authentication information is displayed on the display unit 114 (step S103), and the process ends. Thereby, the user who has logged into the MFP 3 can know the authentication information issued by the server 300 for the job ID designated by the user.

  In step S104, a pull print instruction is transmitted to server 300. The pull print instruction includes the job ID of the print job specified in step S98 and the processing contents of the print job execution. Then, the print job is received (step S105), and the received print job is executed (step S106). The print conditions and data included in the print job are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of the data according to the print conditions.

  FIG. 24 is a flowchart illustrating an exemplary flow of a password authentication job execution process according to the second embodiment. The password authentication job execution process in the second embodiment is a process executed by the CPU 111 when the CPU 111 provided in the MFP 3 functioning as the password authentication apparatus executes the password authentication job execution program. The password authentication job execution program is a part of the authentication program.

  Referring to FIG. 24, the processing in steps S111 to S116 is the same as “step S51 to step S56 in FIG. 17, so description thereof will not be repeated here.

  In step S116, when a job list acquisition request is transmitted to the server 300, it is determined whether or not the job list is received (step S117). If the job list is received, the process proceeds to step S118; otherwise, the process proceeds to step S126. In step S126, an error process is executed and the process ends. In the error processing, for example, a message indicating that the job list does not exist is displayed on the display unit 114.

  In step S118, the job list received in step S117 is displayed on display unit 114. Then, it is determined whether or not a print job designation has been received (step S119). In step S118, it is determined whether at least one of job IDs included in the job list displayed on display unit 114 has been designated. If a print job designation is accepted, the process proceeds to step S120; otherwise, the process ends.

  In step S120, a pull print instruction is transmitted to server 300. The pull print instruction includes the job ID of the print job designated in step S119. And it is judged whether the authentication information request | requirement was received from the server 300 (step S121). If an authentication information request is received, the process proceeds to step S122; otherwise, the process proceeds to step S126. In step S126, error processing is executed. This is to prevent a user who has only password authentication from executing a print job when authentication information has not been issued.

  In step S122, it is determined whether authentication information has been accepted. Authentication information input to the operation unit 115 by a user who has logged into the MFP 4 is received. If the user who has logged in to the MFP 4 has previously logged in to the MFP 3 and instructed the issuance of authentication information, the authentication information is displayed by the MFP 3, so that the authentication information can be input. In step S123, the authentication information received in step S122 is transmitted to server 300.

  Then, it is determined whether or not a print job has been received (step S124). If a print job has been received, the process proceeds to step S125; otherwise, the process proceeds to step S126. In step S126, an error process is executed and the process ends. In the error processing, for example, a message indicating that the print job cannot be executed is displayed on the display unit 114.

  In step S125, the print job received in step S124 is executed. The print conditions and data included in the print job are output to the image forming unit 30, and the image forming unit 30 is caused to form an image of the data according to the print conditions.

  As described above, in the authentication system 1 according to the second embodiment, when a user logs in to the MFP 3 functioning as a biometric authentication apparatus, designates a print job, and issues an authentication information issue, the server 300 prints the print job. Authentication information is issued to the job data 371A. After that, when the user logs in to the MFP 4 functioning as the job execution apparatus and inputs the designation of the job ID and the previously issued authentication information to the MFP 3, the server 300 stores the input authentication information and the job data 371. The print information is transmitted to the MFP 4 and executed on the condition that the stored authentication information is compared and the two match. For this reason, in the MFP 3 that can be authenticated only by the password, the authentication information issued when the authentication is performed by the fingerprint authentication is requested in addition to the authentication using the password, so that the strength of the authentication security of the MFP 3 is improved. be able to.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

<Appendix>
(1) The first authentication means authenticates by a first authentication method,
The authentication system according to claim 1, wherein the second authentication unit performs authentication using a second authentication method different from the first authentication method.
(2) The authentication system according to (1), wherein the first authentication method is stronger in security strength than the second authentication method.
(3) The first authentication means authenticates by comparing biometric information,
The authentication system according to claim 1, wherein the second authentication unit performs authentication by comparing passwords.
(4) The authentication system includes a first authentication device, a second authentication device, and a third authentication device,
The first authentication device includes:
The first user authentication means;
User identification information transmitting means for transmitting user identification information of the user authenticated by the first user authentication means to the third authentication device,
The second authentication device includes:
The second authentication means;
The authentication information receiving means;
Authentication information transmitting means for transmitting the authentication information received by the authentication information receiving means and user identification information of the user authenticated by the second authentication means to the third authentication device,
The third authentication device includes:
User identification information receiving means for receiving the user identification information from the first authentication device;
The authentication information issuing means;
The authentication information storage means;
Authentication information receiving means for receiving the authentication information and the user identification information from the second authentication device;
The authentication system according to claim 1, further comprising: the third authentication unit.
(5) The authentication system includes an authentication device, a job execution device, and a job management device.
The authentication device
The authentication means;
The first job designation receiving means;
Specification for transmitting to the job management apparatus user identification information of a user authenticated by the authentication means and job identification information for identifying the job specified by the specification received by the first job specification receiving means Job transmission means,
The job execution device includes:
The second job designation receiving means;
The authentication information receiving means;
Authentication information transmitting means for transmitting job identification information for identifying the job received by the second job designation receiving means and the authentication information received by the authentication information receiving means to the job management apparatus; ,
Job receiving means for receiving a job from the job management device;
The job execution means,
The job management device includes:
The job receiving means;
The job storage means;
First receiving means for receiving the user identification information and the job identification information from the authentication device;
The authentication information issuing means;
The authentication information storage means;
Second receiving means for receiving the job identification information and the authentication information from the job execution device;
In response to the reception of the authentication information, a verification unit for verifying the authentication information and the authentication information associated with the received job;
The authentication system according to claim 2, further comprising: a job transmission unit configured to transmit a job identified by the job identification information to the job execution unit based on a collation result by the collation unit.

It is a figure which shows the whole outline | summary of the authentication system in one of embodiment of this invention. 2 is a block diagram illustrating an example of a hardware configuration of an MFP that functions as an authentication apparatus. FIG. 2 is a block diagram illustrating an example of a hardware configuration of an MFP 4 that functions as a job execution apparatus. FIG. It is a block diagram which shows an example of the hardware constitutions of PC. 3 is a block diagram illustrating an example of a hardware configuration of a server 300. FIG. It is a functional block diagram which shows the outline | summary of the function which CPU with which PC is provided. It is a functional block diagram which shows the outline | summary of the function which CPU with which the server in 1st Embodiment has is provided. It is a 1st figure which shows an example of a format of job data. It is a figure which shows an example of the format of authentication data. 3 is a functional block diagram illustrating an overview of functions of a CPU included in an MFP functioning as a biometric authentication device according to the first embodiment. FIG. It is a figure which shows an example of a format of 1st user data. FIG. 3 is a functional block diagram illustrating an overview of functions of a CPU included in an MFP functioning as a job execution device according to the first embodiment. It is a figure which shows an example of a format of 2nd user data. 6 is a flowchart illustrating an exemplary flow of a print job transmission process. It is a flowchart which shows an example of the flow of a job management process. 6 is a flowchart illustrating an example of a flow of a fingerprint authentication job execution process according to the first embodiment. 6 is a flowchart illustrating an example of a flow of a password authentication job execution process according to the first embodiment. It is a functional block diagram which shows the outline | summary of the function which CPU with which the server in 2nd Embodiment has is provided. It is a 2nd figure which shows an example of a format of job data. It is a functional block diagram which shows the outline | summary of the function of CPU with which MFP which functions as a biometrics authentication apparatus in 2nd Embodiment is provided. FIG. 10 is a functional block diagram illustrating an outline of functions of a CPU 111 provided in an MFP functioning as a job execution device according to a second embodiment. 12 is a flowchart illustrating an example of a flow of job management processing in the second embodiment. 15 is a flowchart illustrating an exemplary flow of a fingerprint authentication job execution process according to the second embodiment. 10 is a flowchart illustrating an example of a flow of a password authentication job execution process in the second embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Authentication system, 2 networks, 3 and 4 MFP, 10 ADF, 20 Image reading part, 30 Image formation part, 40 Paper feed part, 50 Facsimile part, 60 Fingerprint reading part, 101 Main circuit, 111,201,301 CPU, 112, 205, 305 RAM, 113 EEPROM, 114, 217, 317 Display unit, 115 operation unit, 116, 207, 307 HDD, 117 data communication control unit, 119A memory card, 120 fingerprint acceptance unit, 121 first authentication unit, 123, 123A First job list acquisition / display unit, 125 First job list request unit, 127 First authentication information reception unit, 129 First job list reception unit, 131 First job list display unit, 133 Authentication information display unit, 139, 139A First pull print instruction unit, 141 First dice 143 first job execution unit, 145 first user data, 151 user ID reception unit, 153 password reception unit, 155 second authentication unit, 157, 157A second job list acquisition / display unit, 159 second job List request unit, 161, 161A Authentication information request reception unit, 163 Authentication information reception unit, 165 Authentication information transmission unit, 167 Second job list reception unit, 169 Second job list display unit, 171, 171A Second pull print instruction unit 173, second job reception unit, 175 second job execution unit, 177 second user data, 181 first job designation reception unit, 183 first job transmission request unit, 185 authentication information issue request unit, 187 authentication information reception unit, 189 authentication information display unit, 191 second job designation receiving unit, 193 second job transmission request unit, 00 PC, 251 User ID reception unit, 253 Data specification reception unit, 255 Print condition reception unit, 257 Job generation unit, 259 First job transmission unit, 300 server, 331 Job reception unit, 333 Job storage unit, 335 Job list request Receiver unit, 337, 337A device determination unit, 339, 339A authentication information acquisition unit, 341, 341A authentication information issue unit, 343, 343A authentication information storage unit, 345 authentication information transmission unit, 347, 347A third authentication unit, 349, 349A Job list generation unit, 351, 351A Job list transmission unit, 353, 353A Pull print instruction reception unit, 359, 359A Job transmission unit, 371, 371A job data, 373 authentication data.

Claims (6)

An authentication system including a first image forming apparatus, a second image forming apparatus, and a server,
The first image forming apparatus includes a first authentication means for authenticating the user,
The server includes job receiving means for receiving user identification information for identifying a user and a job;
Job storage means for associating and storing the received user identification information and the received job;
Job designation accepting means for accepting designation of the job;
Job output means for outputting the job received by the job designation receiving means to the first image forming apparatus on condition that the first authentication means authenticates;
Authentication information issuing means for issuing authentication information in response to being authenticated by the first authentication means;
Authentication information storage means for storing the user identification information of the user authenticated by the first authentication means and the issued authentication information in association with each other,
The second image forming apparatus has a lower security strength than the first authentication unit , and a second authentication unit for authenticating a user;
Authentication information receiving means for receiving authentication information input by a user authenticated by the second authentication means ,
In the server, when a user operating the second image forming apparatus is authenticated by the second authentication unit, the authentication information received by the authentication information reception unit is authenticated by the second authentication unit. And third authentication means for authenticating the user authenticated by the second authentication means on condition that the authentication information associated with the user identification information of the user matches .
The job output means is accepted by the job designation acceptance means on condition that the user who operates the second image forming apparatus is authenticated by the third authentication means when authenticated by the second authentication means. An authentication system for outputting the received job to the second image forming apparatus . An authentication method executed by a server capable of communicating with a first image forming apparatus and a second image forming apparatus,
The first image forming apparatus includes first authentication means for authenticating a user,
The second image forming apparatus includes a second authentication unit that is lower in security strength than the first authentication unit and authenticates a user.
To the server,
A job reception step for receiving user identification information and a job for identifying the user;
A job storage step of storing the received user identification information and the received job in association with each other;
A job designation receiving step for receiving the job designation;
Job output for outputting the job received by the job designation receiving step to the first image forming apparatus on condition that the user who operates the first image forming apparatus is authenticated by the first authentication unit. Steps,
An authentication information issuance step for issuing authentication information in response to authentication by which the user operating the first image forming apparatus is authenticated by the first authentication unit;
An authentication information storage step for storing the user identification information of the user authenticated by the first authentication means in association with the issued authentication information;
An authentication information receiving step for receiving authentication information input by a user authenticated by the second authentication means in the second image forming apparatus;
When the user who operates the second image forming apparatus is authenticated by the second authentication unit, the authentication information received by the authentication information receiving step is the user identification of the user authenticated by the second authentication unit. An authentication step of authenticating a user authenticated by the second authentication means on condition that the authentication information associated with the information matches the authentication information;
The job output step is accepted by the job designation acceptance step on condition that the user who operates the second image forming apparatus is authenticated in the authentication step when the user is authenticated by the second authentication unit. An authentication method, comprising: outputting the job to the second image forming apparatus. An authentication program executed by a computer that controls a server capable of communicating with a first image forming apparatus and a second image forming apparatus,
The first image forming apparatus includes first authentication means for authenticating a user,
The second image forming apparatus includes a second authentication unit that is lower in security strength than the first authentication unit and authenticates a user.
In the computer,
A job reception step for receiving user identification information and a job for identifying the user;
A job storage step of storing the received user identification information and the received job in association with each other;
A job designation receiving step for receiving the job designation;
Job output for outputting the job received by the job designation receiving step to the first image forming apparatus on condition that the user who operates the first image forming apparatus is authenticated by the first authentication unit. Steps,
An authentication information issuance step for issuing authentication information in response to authentication by which the user operating the first image forming apparatus is authenticated by the first authentication unit;
An authentication information storage step for storing the user identification information of the user authenticated by the first authentication means in association with the issued authentication information;
An authentication information receiving step for receiving authentication information input by a user authenticated by the second authentication means in the second image forming apparatus;
When the user who operates the second image forming apparatus is authenticated by the second authentication unit, the authentication information received by the authentication information receiving step is the user identification of the user authenticated by the second authentication unit. An authentication step of authenticating a user authenticated by the second authentication means on condition that the authentication information associated with the information matches the authentication information;
The job output step is accepted by the job designation acceptance step on condition that the user who operates the second image forming apparatus is authenticated in the authentication step when the user is authenticated by the second authentication unit. An authentication program, comprising: outputting the job to the second image forming apparatus. An authentication system including a first image forming apparatus, a second image forming apparatus, and a server,
The first image forming apparatus includes first authentication means for authenticating a user ,
The second image forming apparatus includes a second authentication unit that is lower in security strength than the first authentication unit and authenticates a user.
The server
Job accepting means for accepting user identification information and a job for identifying the user;
Job storage means for storing the received user identification information and the job in association with each other;
First job designation accepting means for accepting designation of the job stored in the job storage means by a user authenticated by the first authenticating means in the first image forming apparatus ;
An authentication information issuing means for issuing authentication information corresponding to the job in response to the designation of the job;
Authentication information storage means for storing the specified job and the issued authentication information in association with each other;
Second job designation receiving means for receiving designation of the job stored in the job storage means by a user authenticated by the second authentication means in the second image forming apparatus ;
Authentication information accepting means for accepting input of authentication information inputted by a user who has been authenticated by the second authenticating means in the second image forming apparatus ;
On condition that the authentication information received by the authentication information receiving unit in the second image forming apparatus matches the authentication information associated with the job received by the second job designation receiving unit. includes a job execution means for outputting the job, the authentication system. An authentication method executed by a server capable of communicating with a first image forming apparatus and a second image forming apparatus,
The first image forming apparatus includes first authentication means for authenticating a user ,
The second image forming apparatus includes a second authentication unit that is lower in security strength than the first authentication unit and authenticates a user.
To the server,
A job reception step for receiving user identification information and a job for identifying the user;
A job storage step of storing the received user identification information and the job in association with each other;
A first job designation accepting step for accepting designation of the job stored in the job storing step by a user authenticated by the first authentication means in the first image forming apparatus;
An authentication information issuing step for issuing authentication information corresponding to the job in response to the designation of the job;
An authentication information storing step for storing the specified job and the issued authentication information in association with each other;
A second job designation accepting step for accepting designation of the job stored in the job storing step by a user authenticated by the second authenticating means in the second image forming apparatus;
An authentication information receiving step for receiving an input of authentication information input by a user operating the second image forming apparatus authenticated by the second authentication means;
Job execution that outputs the job on condition that the authentication information received in the authentication information reception step matches the authentication information associated with the job received in the second job designation reception step And an authentication method for executing the step. An authentication program executed by a computer that controls a server capable of communicating with a first image forming apparatus and a second image forming apparatus,
The first image forming apparatus includes first authentication means for authenticating a user ,
In the computer,
A job reception step for receiving user identification information and a job for identifying the user;
A job storage step of storing the received user identification information and the job in association with each other;
A first job designation accepting step for accepting designation of the job stored in the job storing step by a user authenticated by the first authentication means in the first image forming apparatus;
An authentication information issuing step for issuing authentication information corresponding to the job in response to the designation of the job;
An authentication information storage step of storing the specified job and the issued authentication information in association with each other;
The second image forming apparatus has a lower security strength than the first authentication unit, and a second authentication unit for authenticating a user;
Authentication information receiving means for receiving input of authentication information,
In addition to the computer,
A second job designation accepting step for accepting designation of the job stored in the job storing step by a user authenticated by the second authenticating means in the second image forming apparatus;
On condition that the authentication information received by the authentication information receiving means in the second image forming apparatus matches the authentication information associated with the job received in the second job designation receiving step. An authentication program for executing the job execution step of outputting the job.

Images