JP7172467B2 - Print order reception machine and authentication system - Google Patents

Description

The present invention relates to a print order receiving machine and an authentication system.

2. Description of the Related Art There is known an image printing device that reads digital data of an image taken by a digital camera, a smartphone, or the like and prints it out. For example, a user brings a storage medium storing image data captured by a digital camera, and causes the image printing apparatus to read the image data in the storage medium. The image printing device prints image data read from a storage medium, or prints an image after editing the image using a touch panel.

2. Description of the Related Art Image printing apparatuses are installed in various places such as inside a store such as a home appliance mass retailer or inside a station. Conventionally, when a store employee or maintenance staff performs maintenance such as setting the print price of an image printing device, setting service details, and referring to log data, they operate a touch panel to enter a predetermined password, and enter a management screen. was launching.

With conventional image printing devices, anyone who knew the password could start up the management screen. For example, a password could be guessed from the fingerprint left on the touch panel after a maintenance worker operated it, and a third party could launch the management screen and change the settings. In addition, there is a risk that a third party will repeatedly enter the password, and the management screen will be launched.

JP 2008-284804 A

SUMMARY OF THE INVENTION It is an object of the present invention to provide a print order receiving machine and an authentication system that can be maintained only by a maintenance person who has a terminal for an administrator.

A print order receiving machine according to the present invention is a print order receiving machine for receiving a print order for inputted image data, and comprises a password generation unit for generating a password, a display unit for displaying the password, and a wireless communication from an administrator terminal. Using a communication unit capable of receiving data including a password through communication and receiving the image data from a customer terminal through wireless communication, a password generated by the password generation unit, and a password received from the administrator terminal , an authentication section that performs authentication processing to determine whether or not the maintenance worker is legitimate, and a maintenance management section that allows maintenance to be performed when the authentication section determines that the maintenance worker is legitimate. be.

In one aspect of the present invention, the authentication unit compares data obtained by combining the password generated by the password generation unit with a predetermined common key and data received from the administrator terminal.

In one aspect of the present invention, the display section displays an encrypted password.

In one aspect of the present invention, the display section displays a two-dimensional code indicating the password.

In one aspect of the present invention, the apparatus further includes a printer for printing the image data ordered for printing on paper and outputting the same.

An authentication system according to the present invention is an authentication system comprising a print order reception machine for accepting a print order for input image data, and an administrator terminal capable of communicating with the print order reception machine, wherein the print order reception machine generates a password, converts the password into a two-dimensional code and displays it on a display unit, and acquires the password by reading the two-dimensional code displayed on the display unit, and acquires the password. Authentication processing of transmitting a password to the print order reception machine, and determining whether the print order reception machine is an authorized maintenance worker by using the generated password and the password received from the administrator terminal. is performed, and maintenance can be performed when it is determined that the person is a legitimate maintenance person.

In one aspect of the present invention, a common key is set in the print order reception machine and the administrator terminal, and the administrator terminal sends data obtained by combining the obtained password and the common key to the print order reception machine. and the print order receiving machine performs authentication processing using the data obtained by combining the generated password with the common key and the data received from the administrator terminal.

In one aspect of the present invention, an encryption key is set in the print order reception machine, a decryption key corresponding to the encryption key is set in the administrator terminal, and the print order reception machine is configured to: The generated password is encrypted using the encryption key, the encrypted password is converted into a two-dimensional code and displayed on the display unit, and the administrator terminal uses the decryption key to convert the two-dimensional code into the two-dimensional code. The data obtained by reading the code is decrypted, and the decrypted password is transmitted to the print order receiving machine.

According to the present invention, maintenance can be performed only by a maintenance person who has a terminal for an administrator, setting changes by a third party can be prevented, and security can be improved.

1 is a schematic diagram of an authentication system according to an embodiment of the invention; FIG. (a) to (c) are diagrams showing transition examples of display screens of the image printing apparatus. 2 is a block configuration diagram of an image printing apparatus according to the same embodiment; FIG. 1 is a perspective view of an image printing device; FIG. 4 is a functional block diagram realized by executing a management program; FIG. 1 is a diagram showing the configuration and functional blocks of a mobile terminal; FIG. It is a flow explaining the authentication method according to the same embodiment.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described with reference to the drawings.

As shown in FIG. 1, the authentication system according to the embodiment of the present invention includes an image printing device 1 and a mobile terminal 2. The image printing device 1 is used by a maintenance worker P who has a mobile terminal (administrator terminal) 2. Authentication is performed so that maintenance of the image printing apparatus 1 can be performed. The mobile terminal 2 is a smart phone, a tablet terminal, or the like.

The image printing device 1 prints image data input by a customer on paper of a specified size and outputs the printed image data. Image data can be input to the image printing device 1 by, for example, inserting a memory card into the image printing device 1 or transferring the image data from a customer terminal such as a smart phone by wireless communication.

Maintenance of the image printing apparatus 1 is important work such as setting prices according to the type of printed matter, setting service contents, hardware maintenance, and referring to various log data. I need to make sure it can't be done.

When performing maintenance, the maintenance person P first activates the administrator mode in the image printing apparatus 1 . For example, the administrator mode is activated by pressing and holding a predetermined location such as the upper right corner of the touch panel 10A for a certain period of time. When the administrator mode is activated, the image printing device 1 generates a password (one-time password), converts the generated password into a two-dimensional code, and displays it on the touch panel 10A.

When the two-dimensional code C representing the password is displayed on the touch panel 10A as shown in FIG. The two-dimensional code C is photographed using the built-in camera and the password is read.

After reading the password, the connection start button B1 on the touch panel 10A is pressed to connect the image printing device 1 and the portable terminal 2 for wireless communication (for example, Wi-Fi (registered trademark)). When the connection start button B1 is pressed, as shown in FIG. 2(b), the image printing device 1 displays its identification information (SSID: Service Set Identifier) on the wireless network and the passkey for wireless connection on the touch panel. 10A. Also, the image printing device 1 starts transmitting a beacon signal including the SSID.

The maintenance worker P operates the portable terminal 2, selects the SSID displayed on the touch panel 10A of the image printing device 1 from the list of connectable networks, and inputs the passkey displayed on the touch panel 10A. This establishes a wireless communication connection between the image printing apparatus 1 and the mobile terminal 2 .

When the wireless communication connection is established, the mobile terminal 2 transmits the password acquired by reading the two-dimensional code C to the image printing device 1 . The image printing device 1 compares the password received from the portable terminal 2 with the password generated by the device itself and displayed on the touch panel 10A, and performs authentication processing to determine whether the maintenance worker P is valid. When the image printing device 1 determines that the password matches and the maintenance worker P is valid, the image printing device 1 displays an authentication completion screen as shown in FIG. 2(c) on the touch panel 10A. When maintenance personnel P presses button B2, a management screen is displayed on touch panel 10A, and maintenance such as changing various settings can be performed.

As described above, according to the present embodiment, only the maintenance staff P who has the mobile terminal 2 on which the dedicated application is installed can perform maintenance of the image printing device 1 . For example, even if a third party operates the touch panel 10A and accidentally activates the administrator mode, and the two-dimensional code C displayed on the touch panel 10A is read by the third party's smartphone or the like, random alphanumeric characters or the like are displayed on the smartphone. , the management screen of the image printing apparatus 1 cannot be launched.

3 is a block diagram of the image printing apparatus 1, and FIG. 4 is a perspective view of the image printing apparatus 1. As shown in FIG. As shown in FIG. 3, the image printing apparatus includes a first touch panel 10A, a second touch panel 10B, a data input section 11, a charging section 12, a printer 13, a CPU (central processing section) 14, a storage section 15 and a communication section 16. have.

As shown in FIG. 4, the first touch panel 10A is provided on the top plate 1A on the front side of the housing, and the second touch panel 10B is provided on the top of the housing. The screens of the top plate 1A and the first touch panel 10A are slightly inclined so that the front side is lower and the back side is higher so that input operations to the first touch panel 10A can be easily performed. The display screen of the second touch panel 10B stands substantially vertically.

The first touch panel 10A and the second touch panel 10B display information including images and accept input of various instructions. In the image print mode, the first touch panel 10A displays a screen for selecting a method for inputting image data to the image printing device (for example, use of a storage medium, infrared communication from a mobile terminal, or wireless communication from a smartphone), and notes. Basic operation screens such as a screen, an order screen for accepting selection of image data to be printed out, designation of the number of prints, etc., and a confirmation screen for order details and billing amount are displayed. The second touch panel 10B can display editing items for instructing editing of image data.

The data input unit 11 receives input of image data by reading image data from a storage medium storing image data captured by a digital camera or the like. The data input unit 11 has a data reader compatible with various storage media. Further, the data input unit 11 can receive input of image data from a mobile terminal through infrared communication or wireless communication. As shown in FIG. 4, the data input unit 11 is provided in the upper part of the housing, specifically between the top plate 1A of the housing and the second touch panel 10B.

When the data input method is wireless communication, the communication unit 16 communicates with the customer terminal to receive the image data.

As shown in FIG. 4, the charging unit 12 has a coin slot 12A, a banknote slot 12B, and a change return slot 12C provided on the front side of the housing. The received money is identified and counted, and the change is discharged from the change return opening 12C. Also, the billing unit 12 may have a settlement function using electronic money. The billing unit 12 may also have a receipt printer that prints and outputs the number of prints, unit price, billing amount, input amount, change amount, etc. on a receipt.

The printer 13 is a high-resolution color printer such as a dye-sublimation type or an inkjet type, and prints and outputs image data based on the contents of the order. A printer 13 is housed in a housing. A plurality of printers 13 may be installed. As shown in FIG. 4, a transparent opening/closing door D is provided on the front side of the housing so as to be freely opened and closed. A stacking unit (not shown) is provided on the back side of the opening/closing door D for stacking printed materials printed out by the printer 13. When the opening/closing door D is opened, the printed materials stacked in the stacking unit can be taken out. It's like

The storage unit 15 stores programs necessary for the CPU 14 to execute various processes, price setting information for printed matter, setting information for service contents, log data, and the like, and a hard disk, semiconductor memory, or the like is used. . By executing the control program stored in the storage unit 15, the CPU 14 functions as a control unit 140 that controls the first touch panel 10A, the second touch panel 10B, the billing unit 12, the printer 13, the communication unit 16, and the like.

By executing the management program stored in the storage unit 15 by the CPU 14, as shown in FIG. Functions of the unit 105, the authentication unit 106, and the maintenance management unit 107 are realized.

The administrator mode activation unit 101 activates the administrator mode when a predetermined operation is received via the touch panel 10A. For example, when a predetermined position such as the upper right corner of the touch panel 10A is pressed for a certain period of time, the administrator mode activation unit 101 activates the administrator mode.

The password generation unit 102 generates a password when the administrator mode is activated. Password generation unit 102 generates a one-time password using a hash function or the like.

Password display processing unit 103 converts the password generated by password generation unit 102 into a two-dimensional code, and displays the two-dimensional code on touch panel 10A.

When the connection start button B1 (see FIG. 2(a)) is pressed, the connection processing unit 104 starts connection establishment processing and uses the communication unit 16 to start transmitting a beacon signal including the SSID. Also, the connection processing unit 104 displays the SSID and communication passkey on the touch panel 10A. When connection processing unit 104 receives a connection request together with a communication passkey from portable terminal 2 that has transmitted a signal including its own SSID, connection processing unit 104 transmits a connection permission response to portable terminal 2 . This establishes a wireless communication connection between the image printing apparatus 1 and the mobile terminal 2 .

The password receiving unit 105 receives a password from the mobile terminal 2 via the communication unit 16 after the connection between the image printing apparatus 1 and the mobile terminal 2 is established.

Authentication unit 106 compares the password generated by password generation unit 102 with the password received from portable terminal 2 by password reception unit 105 to determine whether the person operating image printing apparatus 1 is an authorized maintenance person. Authentication processing for determining whether or not is performed. If the passwords match, the authentication unit 106 determines that the maintenance worker is valid.

When it is determined that the maintenance worker is valid, the maintenance management unit 107 displays a management screen on the touch panel 10A. Maintenance personnel P can operate the management screen and perform maintenance.

Next, the configuration of the mobile terminal 2 will be described. As shown in FIG. 6 , the mobile terminal 2 is a smart phone, a tablet terminal, or the like that includes an arithmetic control unit 20 , a touch panel 22 , a communication unit 23 , and an imaging unit 24 . The arithmetic control unit 20 has a storage unit 21 that stores a maintenance management program that is a dedicated application. The storage unit 21 stores programs, data, and the like necessary for the CPU of the arithmetic control unit 20 to execute various processes, and a semiconductor memory or the like is used.

The functions of the password reading unit 201, the connection processing unit 202, and the password transmitting unit 203 are realized by the CPU of the arithmetic control unit 20 executing the maintenance management program stored in the storage unit 21. FIG.

The password reading unit 201 activates the imaging unit 24 and reads the password from the two-dimensional code C displayed on the touch panel 10A. The photographing unit 24 is, for example, a digital camera.

The connection processing unit 202 transmits a connection request to the image printing apparatus 1 together with the communication passkey input by the maintenance staff. When the connection processing unit 202 receives the connection permission response from the image printing device 1, the wireless communication connection between the image printing device 1 and the mobile terminal 2 is established.

The password transmission unit 203 transmits the password read by the password reading unit 201 to the image printing apparatus 1 via the communication unit 23 .

Next, the authentication method according to this embodiment will be described along the flow shown in FIG.

A maintenance person P operates the touch panel 10A of the image printing device 1 to activate the administrator mode (step S1). When the administrator mode is activated, the password generating section 102 of the image printing device 1 generates a password (step S2). The password display processing unit 103 converts the passcode generated in step S2 into a two-dimensional code and displays it on the touch panel 10A (step S3).

The maintenance worker P launches a dedicated application on the mobile terminal 2 and instructs to read the password. The password reading unit 201 activates the photographing unit 24 of the mobile terminal 2 . The maintenance worker P takes an image of the two-dimensional code displayed on the touch panel 10A with the imaging unit 24 . The password reading unit 201 reads the password from the two-dimensional code (step S4).

When the maintenance worker P presses the connection start button B1 on the touch panel 10A, the connection processing unit 104 of the image printing apparatus 1 displays the SSID and communication passkey on the touch panel 10A and transmits a beacon signal including the SSID. In the mobile terminal 2 that has received the beacon signal, the SSID included in the beacon signal is displayed in the connectable network list. The maintenance person P selects the same SSID as displayed on the touch panel 10A from the network list, and inputs the communication passkey.

The mobile terminal 2 transmits a connection request including the communication passkey (step S5). The image printing device 1 receives the connection request from the mobile terminal 2, and if the communication passkey matches, transmits a connection permission response to the mobile terminal 2 (step S6).

The mobile terminal 2 transmits the password read in step S4 to the image printing device 1 (step S7).

The authentication unit 106 of the mobile terminal 2 compares the password generated in step S2 with the password received in step S7, and performs authentication processing (step S8). When the passwords match, the image printing device 1 displays a management screen on the touch panel 10A so that the maintenance worker P can perform maintenance work (step S9).

As described above, according to the present embodiment, it is possible to prevent the management screen from being launched by a third party, and to allow maintenance of the image printing apparatus 1 only by the maintenance person P who has the mobile terminal 2 on which the dedicated application is installed. become.

In the above embodiment, a common key may be set in advance for the image printing device 1 and the dedicated application of the mobile terminal 2 . When the mobile terminal 2 reads the two-dimensional code displayed on the touch panel 10A and acquires the password, the acquired password is combined with the common key. The portable terminal 2 then transmits combination data (password-related information) in which the password and the common key are combined to the image printing apparatus 1 .

The image printing device 1 compares the combination data obtained by combining the generated password and common key with the combination data received from the portable terminal 2, and performs authentication processing. Authentication accuracy can be improved by using a preset common key.

An encryption key may be preset in the image printing device 1 and a decryption key may be preset in a dedicated application of the portable terminal 2 . When the password is generated, the image printing device 1 encrypts the generated password using the encryption key. A two-dimensional code converted from an encrypted password is displayed on the touch panel 10A.

The mobile terminal 2 acquires the encrypted password from the two-dimensional code. The mobile terminal 2 decrypts the password using the decryption key and transmits it to the image printing device 1 . The image printing device 1 compares the generated password (before encryption) with the password received from the portable terminal 2, and performs authentication processing. Authentication accuracy can be further improved by using preset encryption and decryption keys.

Even if a third party accidentally activates the administrator mode by operating touch panel 10A and the two-dimensional code displayed on touch panel 10A is read by the third party's smartphone or the like, encrypted information will not be displayed on the smartphone. However, the management screen of the image printing apparatus 1 cannot be launched.

In the above-described embodiment, as an example of a method of activating the administrator mode in the image printing apparatus 1, pressing and holding a predetermined portion of the touch panel 10A for a certain period of time is given. Security may be enhanced, including entering passwords that are encrypted. For example, if a third party obtains the portable terminal 2 that was lost by maintenance personnel P, this third party can be prevented from activating the administrator mode.

In the above embodiment, an example in which the password is converted into a two-dimensional code and displayed on the touch panel 10A has been described, but the password itself may be displayed on the touch panel 10A. In this case, the maintenance staff manually inputs the password displayed on the touch panel 10A into the mobile terminal 2. FIG.

In the above-described embodiment, the image printing apparatus 1 that includes the printer 13 in the housing and outputs prints on the spot has been described. . In this case, the order reception terminal uses the communication unit 16 to transmit the image data ordered for printing to the printer server via a wired or wireless network. The printer server transfers the image data to the printer for printing out. The printed matter may be handed over to the user at a store checkout or the like, or may be delivered to the user's home.

In the above embodiments, the image printing apparatus has a touch panel that displays a screen and receives operations from customers and maintenance personnel. It is good also as a structure which provided the operation part of this.

This authentication system has a communication function not only with print order reception machines such as image printing devices and order reception terminals, but also with mobile terminals owned by maintenance personnel, and various types of equipment that require regular maintenance by maintenance personnel. Applicable to equipment.

It should be noted that the present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying constituent elements without departing from the scope of the present invention at the implementation stage. Further, various inventions can be formed by appropriate combinations of the plurality of constituent elements disclosed in the above embodiments. For example, some components may be omitted from all components shown in the embodiments. Furthermore, components across different embodiments may be combined as appropriate.

1 Image printing device 2 Portable terminal (administrator terminal)
10A first touch panel (display unit)
10B Second touch panel 12 Billing unit 13 Printer 14 CPU
15 storage unit 16 communication unit 101 administrator mode activation unit 102 password generation unit 103 password display processing unit 104 connection processing unit 105 password reception unit 106 authentication unit 107 maintenance management unit C two-dimensional code

Claims (8)

A print order receiving machine for receiving a print order for input image data,
an operation unit for accepting manual input of a password;
a password generation unit that generates a second password when a predetermined first password is input through the operation unit ;
a display unit that displays the second password;
a communication unit capable of receiving data including a password from an administrator terminal by wireless communication and receiving the image data from a customer terminal by wireless communication;
an authentication unit that performs an authentication process for determining whether or not the user is an authorized maintenance worker using the second password generated by the password generation unit and the password received from the administrator terminal;
a maintenance management unit that allows maintenance to be performed when the authentication unit determines that the maintenance worker is legitimate;
a print order machine. 2. The authentication unit according to claim 1, wherein the authentication unit compares data obtained by combining the second password generated by the password generation unit and a predetermined common key with data received from the administrator terminal. Print order machine. 2. The print order receiving machine according to claim 1, wherein said display unit displays said encrypted second password. 4. The print order receiving machine according to claim 1, wherein said display unit displays a two-dimensional code indicating said second password. 5. The print order receiving machine according to any one of claims 1 to 4, further comprising a printer for printing and outputting the image data ordered for printing on paper. An authentication system comprising a print order receiving machine for receiving a print order for inputted image data, and an administrator terminal capable of communicating with the print order receiving machine,
When a predetermined first password is input through the operation unit , the print order reception machine generates a second password, converts the second password into a two-dimensional code, and displays the code on a display unit;
the administrator terminal reading the two-dimensional code displayed on the display unit to acquire the second password, and transmitting the acquired second password to the print order receiving machine;
The print order receiving machine uses the generated second password and the second password received from the administrator terminal to perform an authentication process to determine whether or not the maintenance worker is authorized. An authentication system characterized in that maintenance can be performed when it is determined that A common key is set for the print order reception machine and the administrator terminal,
the administrator terminal transmits data obtained by combining the obtained second password with the common key to the print order receiving machine;
7. The apparatus according to claim 6, wherein the print order receiving machine performs authentication processing using data obtained by combining the generated second password with the common key and data received from the administrator terminal. Authentication system. An encryption key is set in the print order reception machine, and a decryption key corresponding to the encryption key is set in the administrator terminal,
The print order reception machine encrypts the generated second password using the encryption key, converts the encrypted second password into a two-dimensional code, and displays the code on the display unit;
3. The administrator terminal uses the decryption key to decrypt the data obtained by reading the two-dimensional code, and transmits the decrypted second password to the print order receiving machine. 6. The authentication system according to 6.

Images