JP7010086B2 - Information processing equipment, authority management system, authority management method, and program - Google Patents

Description

The present invention relates to an information processing device, an authority management system, an authority management method, and a program.

Conventionally, a technique for limiting users who can view or edit document data by encrypting document data including documents, tables, figures, etc. has been disclosed.

In such document data, the part to be viewed may differ for each user. Patent Document 1 discloses a technique for individually encrypting each object of document data or each hierarchical data.

However, the technique described in Patent Document 1 requires a key for each encrypted portion when decrypting document data. Therefore, the technique described in Patent Document 1 has to manage the same number of keys as the encrypted part, and the key management is complicated.

The present invention has been made in view of the above, and it is possible to give different authority to each of the components for each user without using the key for each encrypted component of the document data. The purpose is to provide various information processing devices, authority management systems, authority management methods, and programs.

In order to solve the above-mentioned problems and achieve the object, the present invention provides document data, a receiving means for receiving a process to be executed on the document data, and user information for identifying a user who executes the process. The acquisition means to be acquired, and the determination means for determining whether or not the user of the user information acquired by the acquisition means has the execution authority to execute the process for each component constituting the document data. The execution means for executing the process accepted by the reception means for the component determined by the determination means to have the execution authority, and the execution for each process with respect to the component. It is an information processing device including a setting means for setting a user to be authorized . Then, the setting means sets group identification information that can identify the group to which the user belongs for each of the processes.

According to the present invention, there is an effect that it is possible to give different authority to each of the components for each user without using the key for each of the encrypted components of the document data.

FIG. 1 is an explanatory diagram showing an example of an authority management system according to the present embodiment. FIG. 2 is a block diagram showing an example of the hardware configuration of the user terminal. FIG. 3 is an explanatory diagram showing an example of the data structure of the user information table. FIG. 4 is a block diagram showing an example of the hardware configuration of the printing apparatus. FIG. 5 is a block diagram showing an example of a functional block showing a characteristic functional configuration of the user terminal of the embodiment. FIG. 6 is an explanatory diagram illustrating an example of authority setting for each component of document data. FIG. 7 is an explanatory diagram showing an example of the authority setting screen. FIG. 8 is a block diagram showing an example of a functional block showing a characteristic functional configuration of the printing apparatus of the embodiment. FIG. 9 is an activity diagram showing the flow of the editing process. FIG. 10 is an activity diagram showing the flow of the printing process. FIG. 11 is an activity diagram showing the flow of remote printing processing.

Hereinafter, embodiments of the information processing apparatus, the authority management system, the authority management method, and the program according to the present invention will be described in detail with reference to the accompanying drawings. The embodiments described below are an embodiment of an information processing apparatus, an authority management system, an authority management method, and a program, and do not limit the configuration, specifications, and the like.

FIG. 1 is an explanatory diagram showing an example of the authority management system 1 according to the present embodiment. The authority management system 1 is a system that sets a user and an execution authority given to the user for each component constituting document data including a document, a table, a figure, and the like. Then, the authority management system 1 executes the processing permitted by the user for each of the constituent parts of the document data.

The authority management system 1 includes a user terminal 10 and a printing device 20. The user terminal 10 and the printing device 20 are communicably connected to each other via a network 30 such as a LAN (Local Area Network) or a VPN (Virtual Private Network). The authority management system 1 shown in FIG. 1 includes a user terminal 10, a printing device 20, and a plurality of each. However, the number of user terminals 10 and the printing device 20 is not limited.

The user terminal 10 is, for example, an information processing device such as a personal computer that displays and edits various types of information. For example, when the user who is logged in to the user terminal 10 is given the administrator authority, the user terminal 10 sets the execution authority to each of the constituent parts of the document data. Further, the user terminal 10 executes a document data viewing process and an editing process according to the user's execution authority. In addition, it accepts an operation of printing document data on the printing device 20. Then, the user terminal 10 requests the printing device 20 to print the document data based on the user's authority. The user terminal 10 is not limited to a personal computer, but may be a tablet terminal, a smartphone, or the like.

The printing device 20 is an image forming device such as a printer that prints various information. The printing device 20 prints the document data according to the execution authority of the user. The printing device 20 is not limited to the printer, but may be a copying device, a scanner device, or a fax machine. Alternatively, the printing device 20 may be a multifunction device having at least two functions of a copying machine, a copying function, a scanner function, a fax function, and a printer function.

Next, the hardware configurations of various devices included in the authority management system 1 will be described.

FIG. 2 is a block diagram showing an example of the hardware configuration of the user terminal 10.

The user terminal 10 includes a CPU (Central Processing Unit) 101, a RAM (Random Access Memory) 102, a ROM (Read Only Memory) 103, a storage unit 104, a communication interface 105, a display unit 106, and an operation unit 107. And prepare. Each of these parts is connected to each other via a bus 108.

The CPU 101 comprehensively controls the operation of the user terminal 10. The RAM 102 is a storage medium for temporarily storing various programs and various data. The ROM 103 is a storage medium for storing various programs and data. The CPU 101, the RAM 102, and the ROM 103 are computers that control the overall operation of the user terminal 10 and realize various functions of the user terminal 10.

The storage unit 104 is a non-volatile storage device such as an HDD (Hard Disk Drive) or SSD (Solid State Drive). The storage unit 104 stores the application program 109, the driver program 110, and the user information table 111.

The application program 109 is a program that executes various processes such as document data browsing processing and editing processing.

The driver program 110 is a program that causes the printing device 20 to print document data. For example, the driver program 110 executes various processes on the PDL (Page Description Language) data generated by converting the document data by the application program 109 or the like. Then, the driver program 110 transmits PDL data and requests the printing device 20 to print.

The user information table 111 is an information table that stores various information about the user. Here, FIG. 3 is an explanatory diagram showing an example of the data structure of the user information table 111. The user information table 111 stores a user name, an authority type, a group, a MAC (Media Access Control) address, and a login user name in association with each other. The user name is user identification information that can identify the user. For example, the user name is the name of the user. The authority type is information indicating the type of authority given to the user. For example, the authority type includes an administrator, a standard, a guest, and the like. The administrator has the authority to execute all processes. A standard is a privilege that allows both the standard and the guest to perform the processing. The guest is the authority to perform the processing permitted to the guest. The group is group identification information that can identify the group to which each user belongs. The MAC address is identification information that can identify the user terminal 10 used by the user. The login user name is the name of the user used for login.

The communication interface 105 is an interface that executes communication with a device connected via the network 30. For example, the communication interface 105 executes communication with another user terminal 10 and a printing device 20 connected via the network 30.

The display unit 106 is, for example, a liquid crystal display device.

The operation unit 107 is, for example, an operation device such as a keyboard or a mouse.

FIG. 4 is a block diagram showing an example of the hardware configuration of the printing apparatus 20.

The printing device 20 includes a CPU 201, a RAM 202, a ROM 203, a storage unit 204, a communication interface 205, an operation panel 206, and a printer engine 207. Each of these parts is connected to each other via a bus 208.

The CPU 201 comprehensively controls the operation of the printing apparatus 20. The RAM 202 is a storage medium for temporarily storing various programs and various data. The ROM 203 is a storage medium for storing various programs and data. The CPU 201, the RAM 202, and the ROM 203 are computers that control the overall operation of the printing device 20 and realize various functions of the printing device 20.

The storage unit 204 is a non-volatile storage device such as an HDD or SSD. The storage unit 204 stores the control program 209 and the user information table 210.

The control program 209 is a program for exerting the functions provided in the printing apparatus 20.

The user information table 210 is an information table that stores various information about the user, like the user information table 111 stored in the storage unit 104 of the user terminal 10.

The communication interface 205 is an interface that executes communication with a device connected via the network 30. For example, the communication interface 205 executes communication with a user terminal 10 connected via a network 30 and another printing device 20.

The operation panel 206 accepts inputs of various operations according to the user's operation and displays various information. For example, the operation panel 206 is a liquid crystal display device equipped with a touch panel function. Further, the operation panel 206 may be provided with a hardware key or the like, a lamp or the like.

The printer engine 207 controls a printer head and a transport unit that transports a print medium such as paper to execute printing that forms print data on the print medium.

Next, the characteristic functions of the various devices of the authority management system 1 will be described.

FIG. 5 is a block diagram showing an example of a functional block showing a characteristic functional configuration of the user terminal 10 of the embodiment. For convenience, FIG. 5 mainly illustrates the functions according to the embodiment, but the functions of the user terminal 10 are not limited to these.

The CPU 101 of the user terminal 10 realizes various functions by executing programs such as the application program 109 and the driver program 110 stored in the storage unit 104. Specifically, the CPU 101 includes a data processing unit 1001, a display control unit 1002, an operation control unit 1003, a communication control unit 1004, a user information management unit 1005, a terminal information acquisition unit 1006, and a login processing unit 1007. The authority setting unit 1008, the decryption processing unit 1009, the viewing processing unit 1010, the editing processing unit 1011 and the print processing unit 1012 are realized.

The data processing unit 1001 controls data processing between each functional unit.

The display control unit 1002 is an example of the display control means. The display control unit 1002 controls the display unit 106 to display various screens. For example, the display control unit 1002 designates a component portion of the document data and displays an authority setting screen G1 (see FIG. 7) for setting a user who grants the component portion the execution authority of various processes. Further, the display control unit 1002 displays a login screen for inputting a user name and a password. Further, the display control unit 1002 displays an edit prohibition screen for notifying that the user who does not have the execution authority to execute the editing process executes the editing process for the component portion of the document data.

The operation control unit 1003 is an example of a receiving means and an input means. The operation control unit 1003 controls the operation unit 107 to receive various operations. For example, the operation control unit 1003 accepts an operation for designating a component of document data and a process to be executed for the component. Further, the operation control unit 1003 accepts the input of the password for decrypting the document data.

The communication control unit 1004 is an example of transmission means. The communication control unit 1004 controls the communication interface 105 to execute communication with another user terminal 10 or the printing device 20. For example, the communication control unit 1004 transmits print data to be printed by the printing device 20.

The user information management unit 1005 manages the user information table 111. For example, the user information management unit 1005 acquires user information from the user information table 111. Further, the user information management unit 1005 stores user information in the user information table 111.

The terminal information acquisition unit 1006 acquires information such as a MAC address that can identify the user terminal 10 and the like.

The login processing unit 1007 controls login to the user terminal 10. For example, the login processing unit 1007 causes the display control unit 1002 to display the login screen when the user is not logged in. The login screen is a screen that requests the user to log in. Further, the login screen includes a user name input field for inputting a user name and a password input field for inputting a login password used for login. The login processing unit 1007 executes login with the user name entered on the login screen and the login password.

The authority setting unit 1008 is an example of setting means. The authority setting unit 1008 sets a user who grants execution authority for each processing content to each component constituting the document data. Here, FIG. 6 is an explanatory diagram illustrating an example of authority setting for each component of document data. FIG. 6 includes document data and document data permission settings. The document data shown in FIG. 6 includes a character string "ABC", a triangular figure, and a quadrangle figure.

Further, in the authority setting, a user who grants the execution authority of the process is set for each process. The authority setting shown in FIG. 6 includes a character string "% PrintUser", a character string "% BrowseUser", and a character string "% EditUser". A user who can print the corresponding component is set in "% PrintUser". A user who can browse the corresponding component is set in "% Browse User". A user who can edit the corresponding component is set in "% EditUser".

In the character string "ABC" shown in FIG. 6, a user name which is user identification information that can identify a user is set. That is, for the character string "ABC", "A" is set in "% PrintUser", "A" is set in "% BrowseUser", and "A" is set in "% EditUser". Therefore, the character string "ABC" shown in FIG. 6 indicates that the user A can execute the browsing process, the printing process, and the editing process. That is, the character string "ABC" is not printed even if a user other than the user A executes the printing process. Further, even if a user other than the user A executes the browsing process, the character string "ABC" is not displayed. Further, even if a user other than the user A executes the editing process, the character string "ABC" cannot be changed, and an editing prohibition screen indicating that editing is prohibited is displayed.

The type of authority given to the user is set in the triangular figure shown in FIG. That is, for a triangular figure, "Addmin" is set in "% PrintUser", "Addmin", "Standard", and "Guest" are set in "% FlowseUser", and "Addmin" is set in "% EditUser". Has been done. Therefore, in the triangular figure shown in FIG. 6, the user of the authority type "administrator" can execute the printing process, and the user of the authority type "administrator", "standard", and "guest" can execute the viewing process. , Indicates that the user with the authority type "administrator" can execute the editing process.

In the square figure shown in FIG. 6, a group name, which is group identification information that can identify the group to which the user belongs, is set. That is, for the quadrilateral figure, "GroupX", "GroupY", and "GroupZ" are set in "% PrintUser", "GroupX" is set in "% BrewseUser", and "GroupX" is set in "% EditUser". Has been done. Therefore, the square figure shown in FIG. 6 can be printed by a user belonging to any of the groups "X", "Y", and "Z", and can be viewed by a user belonging to the group "X". Yes, indicating that a user belonging to the group "X" can execute the editing process.

The authority setting unit 1008 displays the authority setting screen G1 for changing the authority setting on the display control unit 1002 on condition that the operation control unit 1003 accepts the operation of designating the component part of the document data and changing the authority setting. Display. The authority setting unit 1008 may limit the authority setting according to the user's authority type. For example, the authority setting unit 1008 may display the authority setting screen G1 on the display control unit 1002 on condition that the authority type of the user is an administrator.

Here, FIG. 7 is an explanatory diagram showing an example of the authority setting screen G1. The authority setting screen G1 includes a print tab G11, a browsing tab G12, and an editing tab G13. The print tab G11 is a button for switching to a screen for changing the print processing authority setting. The browsing tab G12 is a button for switching to a screen for changing the permission setting for browsing processing. The edit tab G13 is a button for switching to a screen for changing the authority setting of the edit process.

The authority setting screen G1 includes a user list G14, an additional user selection field G15, an add button G16, and a delete button G17 for each of the print process, the view process, and the edit process. The user list G14 is a list of authorized users. The user "A" is displayed in the user list G14 of the authority setting screen G1 shown in FIG. 7. The user list G14 is not limited to a user name or the like indicating an individual user, but may be an authority type, a group, or the like.

The additional user selection field G15 is a field for selecting a user to be added to the user list G14. The user "D" is displayed in the additional user selection field G15 of the authority setting screen G1 shown in FIG. 7. The additional user selection field G15 is not limited to a user name or the like indicating an individual user, but may be an authority type, a group, or the like. The add button G16 is a button for adding the user selected in the additional user selection field G15 to the user list G14. The delete button G17 is a button for deleting a user selected from the user list G14.

Further, the authority setting screen G1 includes an OK button G18 and a cancel button G19. The OK button G18 is a button for confirming the change contents of the authority setting on the authority setting screen G1. The cancel button G19 is a button for canceling the change contents of the authority setting on the authority setting screen G1.

The decoding processing unit 1009 decodes the document data. The decryption processing unit 1009 determines whether or not a password for decrypting the document data is set when opening the document data or the like. The decryption processing unit 1009 causes the display control unit 1002 to display the password input screen when the password is set in the document data. The password input screen includes a password input field for inputting a password for opening document data. The decryption processing unit 1009 decodes the document data when the password entered on the password input screen and the password set for decrypting the document data match. Then, the decoding processing unit 1009 opens the decoded document data.

The browsing processing unit 1010, the editing processing unit 1011 and the print processing unit 1012 are examples of acquisition means, determination means, and execution means. The browsing processing unit 1010 executes the browsing process of the document data. For example, the browsing processing unit 1010 causes the user information management unit 1005 to acquire the user information of the logged-in user when the decoding processing unit 1009 opens the document data. The browsing processing unit 1010 compares the permission setting indicating the execution permission of the browsing process with the acquired user information for each of the constituent parts of the document data, and determines whether or not the user has the browsing permission. Is determined. Then, the viewing processing unit 1010 generates display data having a component having viewing authority, excluding the component having no viewing authority from one or a plurality of components of the document data. The browsing processing unit 1010 causes the display control unit 1002 to display the generated display data. In this way, the browsing processing unit 1010 executes the browsing process.

The editing processing unit 1011 executes a document data browsing process. For example, the editing processing unit 1011 causes the user information management unit 1005 to acquire the user information of the logged-in user when the operation control unit 1003 accepts the operation of editing the component portion of the document data. The edit processing unit 1011 compares the authority setting indicating the execution authority of the edit process with the acquired user information for the component to be edited, and determines whether or not the user has the edit authority. .. The editing processing unit 1011 displays an editing screen for editing the corresponding component when the user has editing authority. Then, the editing processing unit 1011 updates the component portion of the document data based on the editing content input on the editing screen. In this way, the editing processing unit 1011 executes the editing process. On the other hand, the editing processing unit 1011 causes the display control unit 1002 to display an edit prohibition screen notifying that the user does not have the execution authority to edit when the user does not have the editing authority.

The print processing unit 1012 is an example of the generation means. The print processing unit 1012 executes the printing process of the document data. For example, the print processing unit 1012 causes the user information management unit 1005 to acquire the user information of the logged-in user when the operation control unit 1003 accepts the operation of printing the document data. The print processing unit 1012 compares the authority setting indicating the execution authority of the print process with the acquired user information for each of the constituent parts of the document data, and determines whether or not the user has the print authority. Is determined. The print processing unit 1012 excludes the components for which the user does not have the print authority, and generates print data having the components for which the user has the print authority. Then, the print processing unit 1012 encrypts the generated print data. The print processing unit 1012 causes the communication control unit 1004 to transmit the encrypted print data to the printing device 20. In this way, the print processing unit 1012 executes the print process.

FIG. 8 is a block diagram showing an example of a functional block showing a characteristic functional configuration of the printing apparatus 20 of the embodiment. For convenience, FIG. 8 mainly illustrates the functions according to the embodiment, but the functions of the printing apparatus 20 are not limited to these.

The CPU 201 of the printing apparatus 20 realizes various functions by executing a program such as a control program 209 stored in the storage unit 204. Specifically, the CPU 201 includes a data processing unit 2001, a display control unit 2002, an operation control unit 2003, a communication control unit 2004, a user information management unit 2005, a login processing unit 2006, and a decoding processing unit 2007. , Print control unit 2008 is realized.

The data processing unit 2001 controls data processing between each functional unit.

The display control unit 2002 controls the operation panel 206 to display various screens.

The operation control unit 2003 controls the operation panel 206 to receive various operations.

The communication control unit 2004 controls the communication interface 205 to execute communication with the user terminal 10 and another printing device 20.

The user information management unit 2005 manages the user information table 210. For example, the user information management unit 2005 acquires user information from the user information table 210. Further, the user information management unit 2005 stores user information in the user information table 210.

The login processing unit 2006 controls login to the user terminal 10. For example, the login processing unit 2006 causes the display control unit 2002 to display the login screen when the user is not logged in. The login screen is a screen that requests the user to log in. Further, the login screen includes a user name input field for inputting a user name and a password input field for inputting a login password used for login. The login processing unit 2006 executes login with the user name entered on the login screen and the login password.

The decoding processing unit 2007 decodes the document data and the print data. The decryption processing unit 2007 determines whether or not a password for decrypting the target data is set when opening the document data or the print data. The decryption processing unit 2007 causes the display control unit 2002 to display the password input screen when the password is set for the target data. The password input screen includes a password input field for inputting a password for decrypting the target data. The decryption processing unit 2007 decodes the target data when the password entered on the password input screen and the password for decrypting the document data or the print data match. Then, the decoding processing unit 2007 opens the target data.

The print control unit 2008 controls the printer engine 207 and the like to print the print data and the like opened by the decoding processing unit 2007.

Next, the editing process executed by the user terminal 10 of the authority management system 1 according to the embodiment will be described. FIG. 9 is an activity diagram showing a flow of editing processing executed by the user terminal 10 of the authority management system 1 according to the embodiment.

The user selects the document data to be edited (step S1). The operation control unit 1003 accepts an operation for specifying the document data selected by the user (step S2).

The user terminal 10 identifies a user who uses the user terminal 10 (step S3). More specifically, when the user terminal 10 does not have a login function, the terminal information acquisition unit 1006 is made to acquire terminal information such as a MAC address. On the other hand, when the user terminal 10 has a login function, the user terminal 10 causes the login processing unit 1007 to execute the login process. That is, the login processing unit 1007 causes the display control unit 1002 to display the login screen. The user enters the user name and login password on the login screen. Then, the login processing unit 1007 permits login when the combination of the user name and the login password is appropriate.

The decoding processing unit 1009 decodes the document data (step S4). More specifically, the decryption processing unit 1009 causes the display control unit 1002 to display a password input screen for inputting a password for decrypting the document data. The user inputs the password on the password input screen. The decryption processing unit 1009 decodes the document data when the entered password is the password for decrypting the document data.

The browsing processing unit 1010 executes a determination process for determining whether or not the user has browsing authority for each of the components of the decrypted document data (step S5). The display control unit 1002 displays display data having a component determined to have viewing authority (step S6).

The user browses the displayed display data (step S7). The user selects a component to be edited from the displayed components (step S8). The operation control unit 1003 accepts an operation of selecting a component to be edited (step S9).

The editing processing unit 1011 determines whether or not the user has the editing authority to edit the target component (step S10). When the user has the editing authority (step S10; Yes), the editing processing unit 1011 causes the display control unit 1002 to display an editing screen for accepting an operation for editing the component portion (step S11). The user inputs the edited content on the edit screen (step S12). The operation control unit 1003 receives the editing content input to the editing screen (step S13).

The editing processing unit 1011 updates the component of the document data based on the input editing content (step S14).

The operation control unit 1003 accepts an operation for ending editing (step S15).

The editing processing unit 1011 encrypts the updated document data (step S17). For example, the editing processing unit 1011 sets a password for decrypting the document data in the document data.

In step S10, when the editor does not have the edit authority (step S10; No), the display control unit 1002 displays an edit prohibition screen notifying that the edit is prohibited because the user does not have the authority (step S16). .. The user terminal 10 proceeds to step S15.

As a result, the user terminal 10 ends the editing process.

Next, the printing process executed by the printing device 20 of the authority management system 1 according to the embodiment will be described. FIG. 10 is an activity diagram showing a flow of printing processing executed by the printing device 20 of the authority management system 1 according to the embodiment.

The user selects the document data to be printed (step S21). The operation control unit 2003 accepts an operation for specifying the document data selected by the user (step S22).

The printing device 20 identifies a user who uses the printing device 20 (step S23). More specifically, the printing apparatus 20 causes the login processing unit 2006 to execute the login process. That is, the login processing unit 2006 causes the display control unit 2002 to display the login screen. The user enters the user name and login password on the login screen. Then, the login processing unit 2006 permits login when the combination of the user name and the login password is appropriate.

The decryption processing unit 2007 decodes the document data (step S24). More specifically, the decryption processing unit 2007 causes the display control unit 2002 to display a password input screen for inputting a password for decrypting the document data. The user inputs the password on the password input screen. The decryption processing unit 2007 decodes the document data when the entered password is an appropriate password.

The print control unit 2008 executes a determination process for determining whether or not the user has viewing authority for each of the components of the decoded document data (step S25). The print control unit 2008 prints print data having a component determined to have print authority (step S26).

The user receives the printed matter printed by the printing device 20.

As a result, the printing apparatus 20 ends the printing process.

Next, the remote printing process executed by each device of the authority management system 1 according to the embodiment will be described. FIG. 11 is an activity diagram showing a flow of remote printing processing executed by each device of the authority management system 1 according to the embodiment.

In steps S31 to S34, the user and the user terminal 10 decode the document data to be printed by the same processing as the processing from step S1 to step S4.

The print processing unit 1012 executes a determination process for determining whether or not the user has print authority for each of the components of the decoded document data (step S35). The print processing unit 1012 generates print data having a component determined to have print authority (step S36).

The print processing unit 1012 encrypts the generated print data (step S37). More specifically, the print processing unit 1012 encrypts the print data and sets a password for decrypting the print data.

The communication control unit 2004 receives the encrypted print data (step S38).

The decoding processing unit 2007 decodes the received print data (step S39). More specifically, the decoding processing unit 2007 causes the display control unit 2002 to display a password input screen for inputting a password for decoding print data. The user inputs the password on the password input screen. The decryption processing unit 2007 decodes the print data when the entered password is an appropriate password.

The print control unit 2008 prints the decoded print data (step S40). The user receives the printed matter printed by the printing device 20.

As a result, the printing device 20 ends the remote printing process.

Although the embodiments according to the present invention have been described above, the present invention is not limited to the above-described embodiments as they are, and at the implementation stage, the components can be modified and embodied within a range that does not deviate from the gist thereof. .. In addition, various inventions can be formed by an appropriate combination of the plurality of components disclosed in each of the above-described embodiments. For example, some components may be removed from all the components shown in each embodiment. In addition, components across different embodiments may be combined as appropriate.

Functions of each part of the user terminal 10 described above (data processing unit 1001, display control unit 1002, operation control unit 1003, communication control unit 1004, user information management unit 1005, terminal information acquisition unit 1006, login processing unit 1007, authority setting unit). In 1008, the decoding processing unit 1009, the browsing processing unit 1010, the editing processing unit 1011 and the print processing unit 1012), the CPU 101 stores the application program 109 and the driver program 110 stored in the storage device (for example, ROM 103, storage unit 104, etc.). However, the present invention is not limited to this, and for example, at least a part of the functions of each part of the user terminal 10 may be realized by a dedicated hardware circuit (for example, a semiconductor integrated circuit). ..

Functions of each part of the printing apparatus 20 described above (data processing unit 2001, display control unit 2002, operation control unit 2003, communication control unit 2004, user information management unit 2005, login processing unit 2006, decoding processing unit 2007, and print control unit. 2008) is realized by the CPU 201 executing the control program 209 or the like stored in the storage device (for example, ROM 203, the storage unit 204, etc.), but is not limited to this, and for example, the functions of each part of the printing device 20. At least a part of them may be realized by a dedicated hardware circuit (for example, a semiconductor integrated circuit).

The program executed by each device of the authority management system 1 of the present embodiment is a file in an installable format or an executable format, and is a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versaille Disc). It is recorded and provided on a recording medium that can be read by a computer such as.

Further, the program executed by each device of the authority management system 1 of the present embodiment may be stored on a computer connected to a network such as the Internet and provided by downloading via the network. .. Further, the program executed by each device of the present embodiment may be configured to be provided or distributed via a network such as the Internet.

Further, the program executed by each device of the authority management system 1 of the present embodiment may be configured to be provided by incorporating it into a ROM or the like in advance.

1 Authority management system 10 User terminal 20 Printing device 111, 210 User information table 1001, 2001 Data processing unit 1002, 2002 Display control unit 1003, 2003 Operation control unit 1004, 2004 Communication control unit 1005, 2005 User information management unit 1006 Terminal information Acquisition unit 1007, 2006 Login processing unit 1008 Authority setting unit 1009, 2007 Decoding processing unit 1010 Viewing processing unit 1011 Editing processing unit 1012 Printing processing unit 2008 Print control unit

Japanese Unexamined Patent Publication No. 2002-318535

Claims (8)

A reception means that accepts document data and processing to be executed for the document data,
An acquisition means for acquiring user information that identifies a user who executes the process, and
For each component constituting the document data, a determination means for determining whether or not the user of the user information acquired by the acquisition means has the execution authority to execute the process, and a determination means.
An execution means that executes a process accepted by the reception means with respect to the component that is determined by the determination means to have the execution authority.
A setting means for setting a user who grants the execution authority to the component portion for each process, and
Equipped with
The setting means sets group identification information that can identify the group to which the user belongs for each of the processes.
Information processing equipment. Further equipped with an input means that accepts password input
When the password of the document data and the password accepted by the input means match, the determination means determines whether or not the user has the execution authority for each of the components.
The information processing apparatus according to claim 1 . Further provided with display control means for displaying a screen notifying that the user who does not have the execution authority of the editing process executes the editing process for editing the component portion without the execution authority.
The information processing apparatus according to claim 1 or 2 . The setting means sets user identification information that can identify a user for the component portion for each process.
The information processing apparatus according to claim 1 . The setting means sets group identification information that can identify the group to which the user belongs for each of the processes.
The information processing apparatus according to claim 1 . An authority management system including an image forming apparatus and an information processing apparatus that requests printing from the image forming apparatus based on the user's authority.
The information processing device is
A reception means that accepts document data and processing to be executed for the document data,
An acquisition means for acquiring user information that identifies a user who executes the process, and
For each component constituting the document data, a determination means for determining whether or not the user of the user information acquired by the acquisition means has the execution authority to execute the process, and a determination means.
A generation means for generating print data having the component determined to be determined by the determination means to have the execution authority, and a generation means.
A transmission means for transmitting the print data generated by the generation means to the image forming apparatus, and a transmission means.
A setting means for setting a user who grants the execution authority to the component portion for each process, and
Equipped with
The setting means sets group identification information that can identify the group to which the user belongs for each of the processes.
Authority management system. It is a method of managing the authority of information processing equipment.
A reception step that accepts document data and processing to be executed for the document data,
An acquisition step for acquiring user information that identifies a user who executes the process, and
For each component constituting the document data, a determination step for determining whether or not the user of the user information acquired in the acquisition step has the execution authority to execute the process, and a determination step.
An execution step for executing a process accepted by the reception step for the component determined to have the execution authority in the determination step, and an execution step.
A setting step for setting a user to be granted the execution authority for each process for the component portion, and a setting step.
Including
In the setting step, group identification information that can identify the group to which the user belongs is set for the component for each process.
Authority management method. A reception step that accepts document data and processing to be executed for the document data,
An acquisition step for acquiring user information that identifies a user who executes the process, and
For each component constituting the document data, a determination step for determining whether or not the user of the user information acquired in the acquisition step has the execution authority to execute the process, and a determination step.
An execution step for executing a process accepted by the reception step for the component determined to have the execution authority in the determination step, and an execution step.
A setting step for setting a user to be granted the execution authority for each process for the component portion, and a setting step.
Let the computer run
In the setting step, group identification information that can identify the group to which the user belongs is set for the component for each process.
Program for.

Images