JP2008021222A - Image formation system, image forming apparatus and user authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technology for enabling a user to simply register biological information to be used for authentication. <P>SOLUTION: Biological information for verification registered from any of a plurality of image forming apparatuses 1A, 1B and 1C connected through a LAN 5 is stored in an authentication limit information table T1 belonging to a server device 2. In performing user authentication of a user who tries to use the respective digital composite machines 1A, 1B and 1C, an input of the biological information from the digital composite machines 1 is received, and the received biological information is transmitted to a server device 2 to be inquired to determine the acceptance/rejection of authenticating the biological information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an image forming apparatus having a function of performing user authentication. More specifically, the present invention relates to a technique that simplifies a registration operation of information used for verification of user authentication.

  An image forming apparatus (for example, a facsimile machine, a copying machine, a multifunction machine, etc.) is often installed in an environment where an unspecified number of people can use it. It is desired to prohibit the use of other than the above, or to limit the functions available for each user.

  In view of this, image forming apparatuses are often equipped with a user authentication function in order to prevent unauthorized use by an unspecified number of people who do not have usage rights. The “user authentication function” is a request for inputting authentication information such as a password to a person who intends to use the apparatus, and based on the input authentication information, whether or not the user has a use authority. This is a function to check. Whether or not authentication is possible is determined based on whether or not authentication information input by a person who intends to use the apparatus matches authentication information registered in advance.

  In addition, by adding information on function usage restrictions in association with user identification information, it is also possible to give function usage restrictions to users who have been identified by user authentication.

  For example, a password is used as the authentication information. However, when performing user authentication using a password, the user has to enter the password every time the device is used, which is troublesome. Also, since passwords can be known to others, it cannot be said that they can authenticate themselves. Therefore, in recent years, a method of using information (for example, fingerprint information and voiceprint information) relating to a user's physical characteristics as authentication information (hereinafter, particularly referred to as “biometric authentication”) has been adopted. For example, when performing user authentication using fingerprint information, the user can be authenticated simply by touching the fingerprint sensor provided on the device, and the user's operational burden is greatly reduced compared to when user authentication is performed by entering a password. Is done.

  By the way, with the spread of networks in offices and the like in recent years, a plurality of image forming apparatuses are often connected and used via a network. In such a system configuration, since a plurality of devices are shared by a plurality of users, a device is required for managing registration information for performing user authentication.

  For example, if registration information is managed independently by each device, duplicate registration information is managed at a plurality of locations, which is inefficient. Therefore, Patent Document 1 proposes a technique for centrally managing registration information using a server device. This makes it possible to efficiently manage registration information.

JP 2003-330686 A

  In order to realize the configuration disclosed in Patent Document 1, it is necessary to store registration information of all persons who have authority to use a plurality of image forming apparatuses in the system in the server apparatus.

  However, when performing user authentication using biometric information, there is a situation in which registration of information used for authentication (that is, biometric information of each user) must be performed by the user himself / herself. Therefore, in order to store the biometric information of all persons who have authority to use in the server device, for example, all users go to the installation location of a predetermined device having a biometric information reading function and register their biometric information. It is necessary and it becomes a user's trouble.

  Rather, it is less time-consuming for the user to register his / her biometric information only in an apparatus that he / she frequently uses as a configuration in which each image forming apparatus in the system manages registration information independently.

  However, in such a configuration, for example, if a device that has registered its own biometric information breaks down and you want to use another device immediately, you must register your biometric information with the device again. Otherwise, there was an inconvenience that the device could not be used.

  The present invention has been made in view of such circumstances, and when performing user authentication using biometric information in an image forming system in which a plurality of image forming apparatuses are connected via a network, the user is authenticated. It is an object of the present invention to provide a technique capable of easily registering biometric information (that is, biometric information for collation) used in the system.

  The invention of claim 1 is an image forming system in which one or more image forming apparatuses and a server apparatus are connected on a network, and each of the one or more image forming apparatuses inputs biometric information for verification. The biometric information receiving means for verification that receives and transmits the biometric information to the server apparatus, and requests the user who wants to use the image forming apparatus to input biometric information, and transmits the input biometric information to the server apparatus. Authentication determination requesting means for inquiring whether or not the biometric information can be authenticated, and the server device associates the biometric information for verification received from any of the one or more image forming apparatuses with user identification information. In addition, when there is an inquiry about whether or not authentication is possible from any one of the biometric information registering means for verification registered in the authentication table and the one or more image forming apparatuses, And an authentication determination unit for performing permission determination of the user authentication by using the authentication table.

  The invention according to claim 2 is an image forming system in which a plurality of image forming apparatuses are connected on a network, and each of the plurality of image forming apparatuses receives an input of biometric information for verification, and receives the verification information. Biometric information registration means for matching biometric information for matching with user identification information and registering it in the authentication table, and requesting the user who wants to use the image forming apparatus to input biometric information and the authentication table Authentication determination means for determining whether or not user authentication is possible, and update information of an authentication table possessed by another image forming apparatus connected to the network is acquired from the other image forming apparatus and stored in the authentication table. Update information acquisition means for reflecting.

  A third aspect of the present invention is the image forming system according to the first or second aspect, wherein the authentication table defines a usage mode of the image forming apparatus of the user in association with the user identification information. Usage mode defining information is stored, and when the image forming apparatus authenticates biometric information input from a user who intends to use the image forming apparatus, the image forming apparatus is associated with the identification information of the user. Usage mode managing means for determining a usage mode of the image forming apparatus according to usage mode defining information;

  According to a fourth aspect of the present invention, in the image forming system according to the third aspect, the usage mode defining information includes usage restriction information, and the usage mode managing means is used by a user who intends to use the image forming apparatus. When the input biometric information is authenticated, the predetermined function defined in the use restriction information associated with the identification information of the user is set in a use prohibited state.

  According to a fifth aspect of the present invention, in the image forming system according to the third aspect, the usage mode defining information includes usage permission information, and the usage mode management means is used by a user who intends to use the image forming apparatus. When the input biometric information is authenticated, the predetermined function defined in the use permission information associated with the identification information of the user is made available.

  The invention of claim 6 is an image forming apparatus connected to one or more image forming apparatuses via a network, accepting input of biometric information for collation, and identifying the received biometric information for collation as a user identification Biometric information registration means for matching that is registered in the authentication table in association with information, and requests the user who wants to use the image forming apparatus to input biometric information, and determines whether user authentication is possible using the authentication table. Authentication determination means for performing, and update information acquisition means for acquiring update information of the authentication table from another image forming apparatus connected via a network and reflecting it in the authentication table.

  The invention of claim 7 is a user authentication method in a plurality of image forming apparatuses connected via a network, the biometric information receiving step for collation receiving the input of biometric information for collation from the image forming apparatus, The biometric information input request process for requesting biometric information to be input to a user who intends to use the image forming apparatus, and the determination of whether or not to authenticate the biometric information received in the biometric information input request process. And an authentication determination step that is performed using an authentication table that stores and stores the biometric information for verification input from each of the forming apparatuses.

  According to the first to fifth aspects of the present invention, the image forming apparatus is to be used by using an authentication table that stores and stores biometric information for collation input from any of the image forming apparatuses. Since the user authentication determination is made, if the user registers his / her biometric information for collation from any one of the image forming apparatuses, another image forming apparatus connected to the image forming apparatus via the network can be used. A positive authentication decision can also be obtained in the apparatus.

  In particular, according to the first aspect of the present invention, since the authentication table is centrally managed in the server device, the authentication table can be efficiently managed.

  In particular, according to the second aspect of the present invention, the update information of the authentication table is directly transmitted and received between the image forming apparatuses. Therefore, each image forming apparatus has a plurality of image forming apparatuses without providing a server apparatus or the like. It is possible to make a user authentication determination using an authentication table in which all the biometric information for verification input from each of them is stored.

  In particular, according to the fourth aspect of the present invention, since the authentication table stores the use restriction information in association with the user identification information, the functions that can be used for each user can be restricted.

  According to the sixth aspect of the present invention, since the update information of the authentication table is acquired from another image forming apparatus connected via the network, it is registered by the other image forming apparatus connected via the network. Biometric information for verification can be stored in the authentication table. That is, it is possible to give a positive authentication judgment to a user who has registered biometric information for his / her collation from another image forming apparatus connected via the network.

[1. First Embodiment]
<1. Constitution>
<1-1. Configuration of image forming system>
FIG. 1 is a diagram showing an overall configuration of an image forming system 100 corresponding to the first embodiment of the present invention.

  The image forming system 100 includes a plurality of digital multifunction peripherals 1A, 1B, and 1C (hereinafter referred to simply as “digital multifunction peripheral 1” unless otherwise distinguished from each other). The apparatus 2 includes an administrator terminal apparatus 3 and a plurality of clients 4, and each apparatus is connected via a LAN (local area network) 5 network. Note that more clients, mail server devices, and the like may be connected to the LAN 5 than shown in FIG. Further, the number of digital multifunction peripherals 1 connected to the LAN 5 is not limited to three.

  The digital multi-function peripheral 1 is configured as a multi-function peripheral (MFP apparatus) having a plurality of functions such as a FAX function, a copy function, a scan function, and a print function. The digital multi-function peripheral 1 has a function for performing user authentication based on biometric information (more specifically, fingerprint information) and a function for restricting the use of the above-mentioned various functions of the digital multi-function peripheral 1 for each user (below, "Restricted function").

  The server device 2 is a device that provides various types of information to the digital multifunction peripheral 1 and the client 4. The server device 2 stores an authentication restriction information table T1. A specific configuration of the authentication restriction information table T1 will be described later.

  The administrator terminal device 3 has the authority to manage the terminal devices 1 and 4 connected to the image forming system 100 (for example, the authority to give the user the authority to use the digital multi-function peripheral 1 and the authority to add usage restrictions to each user Is a device that can be used by an administrator.

<1-2. Configuration of each device>
<Digital MFP>
FIG. 2 is a block diagram illustrating a configuration of the digital multifunction peripheral 1. The digital multifunction peripheral 1 includes a control unit 101, a ROM 102, a data memory 103, an image memory 104, an operation panel 105, an image processing unit 106, an image reading unit 107, an image recording unit 108, a large capacity. The storage unit 109 and communication processing units 110 to 113 are electrically connected via a bus line 114.

  The control unit 101 is composed of a CPU. The control unit 101 controls each of the above hardware units based on a program stored in the ROM 102 and realizes the function of the digital multi-function peripheral 1.

  The ROM 102 is a read-only storage device that stores programs and data necessary for controlling the digital multi-function peripheral 1 in advance.

  The data memory 103 is a storage device that can be read and written, and temporarily stores various data such as image data, FAX numbers, and mail addresses, and data generated during arithmetic processing by the control unit 101. Is temporarily stored. The data memory 103 is configured by SRAM, flash memory, or the like.

  The image memory 104 temporarily stores image data received from an external device through the LAN I / F 112 or the NCU 113, image data acquired by the image reading unit 107, image data processed by the image processing unit 106, and the like. It is a storage device. The image memory 104 includes a memory such as a DRAM that can be read and written.

  The operation panel 105 is a processing unit that functions as a user interface. The operation panel 105 includes a display unit 151, an operation key group 152, and a fingerprint sensor 153.

  The display unit 151 is a display device that displays the operation state of the digital multifunction peripheral 1, image data, and the like, and includes a display device such as a liquid crystal display. The display unit 151 has a touch panel function, and can receive user operations as well as display information.

  The operation key group 152 includes various keys such as a character key, a numeric keypad, and a function key, and accepts user operations such as input of commands and text data. User operation of the operation key group 152 is input to the control unit 101 as a signal. The control unit 101 controls the operation of each unit based on a user operation.

  The fingerprint sensor 153 is a sensor for inputting user fingerprint information. The fingerprint sensor 153 scans the user's finger placed on the sensor surface, reads the fingerprint pattern, and acquires it as fingerprint information. Fingerprint information acquisition methods include optical methods that acquire fingerprint shadows as fingerprint information through a lens, etc., and electrostatic capacitance methods (semiconductor method) that acquire fingerprint information based on the amount of charge that varies depending on the unevenness of the fingerprint. However, either method may be adopted. The fingerprint information read by the fingerprint sensor 153 is used for user authentication.

  The image processing unit 106 is a processing unit that performs various processes such as A / D conversion, color system conversion, color adjustment, and image synthesis on received image data or image data acquired from the image reading unit 107. is there.

  The image reading unit 107 is a scanner that reads an image on a document with a reading element such as a CCD line sensor. The image reading unit 107 may be a scanner of a type in which a reading element scans the surface of a document placed on a glass table and reads an image, and the document placed on a document placement table (not shown). May be a scanner of a type that scans an image by scanning the surface of the conveyed document with a stationary reading element using an ADF (Auto Document Feeder).

  The image recording unit 108 is a printer that records image data and the like stored in the image memory 104 on a recording sheet. As the image recording unit 108, for example, an electrophotographic printer can be employed.

  The large capacity storage unit 109 is configured by a hard disk or the like. The large capacity storage unit 109 can store the image data processed by the image reading unit 107.

  Further, the digital multi-function peripheral 1 includes a codec (CODEC) 110 that encodes / decodes image data and the like corresponding to a plurality of protocols, and a modem 111 that modulates and demodulates transmission / reception data as communication processing units. The LAN I / F 112 corresponding to the interface with the LAN 5 and the NCU 113 that controls the opening and closing of the telephone line are electrically connected via the bus line 114.

  Here, the communication environment of the digital multi-function peripheral 1 will be described. As described above, a plurality of digital multifunction peripherals 1, a server device 2, an administrator terminal device 3, and a client 4 are connected to the LAN 5, and a mail server device 51 is also connected thereto. The LAN 5 is connected to the Internet 53 via a router 52 and the like. With such a configuration, the digital multi-function peripheral 1 can perform e-mail communication with the terminal devices 1, 2, 3, 4 connected via the LAN 5 and the external terminal 54 connected via the Internet 53. it can. Further, the digital multifunction peripheral 1 is connected to a PSTN (Public Switched Telephone Network) 55 that is a data communication network for analog lines. As a result, the digital multifunction peripheral 1 can communicate with the external terminal 56 connected via the PSTN 55. The external terminals 54 and 56 are a personal computer connected with a modem, a device similar to the digital multifunction peripheral 1, a fixed telephone, a mobile phone, a FAX dedicated machine, and the like.

<Configuration for user authentication>
FIG. 3 is a block diagram illustrating a configuration related to a user authentication function based on biometric information and a restriction function that limits the use of the function of the digital multifunction device 1 for each user, among the configurations of the digital multifunction device 1. The digital multi-functional peripheral 1 has a collation biometric information receiving unit 115 and a usage restriction unit 116 as configurations related to these functions. However, these units are components realized by the control unit 101 (see FIG. 2) executing a program on the ROM 102 (see FIG. 2).

  The verification biometric information receiving unit 115 receives registration of biometric information (hereinafter referred to as “verification biometric information”) used for verification of user authentication. More specifically, registration of biometric information for verification from a user (more precisely, a user who has been given the authority to use the digital multi-function peripheral 1 by the administrator) is received from the operation panel 105 (AR11) and received. The biometric information for verification is transmitted to the server device 2 (AR12). The verification biometric information received by the server device 2 is stored in the authentication restriction information table T1 (see FIG. 6).

  The use restriction unit 116 prohibits the use of a person who does not have the use authority, and prohibits the use of the restricted function when the use restriction of the function is added even if the person has the use authority. To do. More specifically, when a user who intends to use the digital multi-function peripheral 1 inputs biometric information via the operation panel 105, the input is accepted (AR13), and whether or not the biometric information that has been input can be authenticated. The server device 2 is inquired about the determination (AR14). Furthermore, the digital multi-function peripheral 1 is shifted to the usable state only when the authentication feasibility determination (AR 15) obtained from the server apparatus 2 in response to the inquiry is affirmative. Even if the determination of whether or not authentication is possible is positive, if the use restriction is added, the restricted function is made unusable.

<Server device>
FIG. 4 is a block diagram illustrating a configuration of the server device 2. The server apparatus 2 includes a general computer system (more specifically, a personal computer) in which a control unit 201, a ROM 202, a RAM 203, an operation unit 204, a display unit 205, and a LAN I / F 206 are electrically connected via a bus line 207. And workstations).

  The control unit 201 is composed of a CPU. The control unit 201 controls each of the above hardware units based on a program stored in the ROM 202 to realize the function of the server device 2.

  The ROM 202 is a read-only storage device that stores programs and data necessary for controlling the server device 2 in advance.

  The RAM 203 is a storage device that can be read and written. The RAM 203 temporarily stores various pieces of data such as authentication information received from the digital multi-function peripheral 1 and data generated during arithmetic processing by the control unit 201. Memorize temporarily. The RAM 1203 is configured by SRAM, flash memory, or the like. The RAM 203 stores an authentication restriction information table T1. A specific configuration example of the authentication restriction information table T1 is shown in FIG.

  The authentication restriction information table T1 is a table used when user authentication is performed. As shown in FIG. 6, the authentication restriction information table T1 is composed of a plurality of records, and each record includes a user ID item s1, a biometric information item s2, and a restriction information item s3. Yes. The user ID item s1 stores information for identifying the user (user ID). The biometric information item s2 stores the biometric information of the user associated with the user ID. Further, the restriction information item s3 stores restriction information on the user associated with the user ID. As will be described in detail later, among the information stored in the authentication restriction information table T1, the user ID and the restriction information are acquired from the administrator terminal device 3 (AR1 in FIG. 1). The biological information is acquired from any one of the plurality of digital multifunction peripherals 1A, 1B, 1C (AR2 in FIG. 1).

  The operation unit 204 and the display unit 205 are processing units that function as a user interface.

<Configuration related to the authentication restriction information table management function>
The server device 2 has a function of managing the authentication restriction information table T1. FIG. 5 is a block diagram illustrating a configuration related to functions managed by the authentication restriction information table T1 in the server device 2 in particular. The server apparatus 2 includes an authentication restriction information table management unit 208 and an authentication determination unit 209 as a configuration related to this function. However, these units are components realized by the control unit 201 (see FIG. 4) executing a program on the ROM 202 (see FIG. 4).

  The authentication restriction information table management unit 208 performs processing for managing the authentication restriction information table T1. The authentication restriction information table management unit 208 includes a user ID management unit 221, a biometric information management unit 222, and a restriction information management unit 223.

  The user ID management unit 221 manages the user ID item s1 (see FIG. 6) in the authentication restriction information table T1. More specifically, when a new user ID is received from the administrator terminal device 3 (AR21), a new storage area is created in the authentication restriction information table T1, and the received information is stored in the item s1 of the user ID. Store (AR22).

  The biometric information management unit 222 manages the biometric information item s2 (see FIG. 6) in the authentication restriction information table T1. More specifically, when collation biometric information is received from the digital multifunction peripheral 1 (AR23), the received information is associated with a predetermined user ID and stored in the biometric information item s2 (AR24).

  The restriction information management unit 223 manages the restriction information item s3 (see FIG. 6) in the authentication restriction information table T1. More specifically, when the restriction information is received from the administrator terminal device 3 (AR25), the received information is associated with a predetermined user ID and stored in the restriction information item s3 (AR26).

  The authentication determination unit 209 determines whether authentication is possible for the biometric information and the user ID sent from the digital multi-function peripheral 1. More specifically, the information (AR27) received from the digital multi-function peripheral 1 is checked with the information registered in advance in the authentication restriction information table T1 to determine whether authentication is possible (AR28). For example, if the received biometric information matches any of the biometric information for verification registered in the authentication restriction information table T1, the result of the authentication determination is affirmative. As a fingerprint information collation algorithm, there are a pattern matching method, a minutia method, a frequency analysis method, and the like, any of which may be adopted. Further, when the result of the authentication determination is affirmative, a user ID associated with the matched biometric information is acquired, thereby identifying a regular user (personal identification). Based on this, restriction information associated with the user ID is acquired. When determining whether or not to authenticate the user ID, if the received user ID matches any of the user IDs registered in the authentication restriction information table T1, the result of the authentication determination is affirmative.

<Administrator terminal device>
The administrator terminal device 3 (see FIG. 1) is configured by a computer system having a control unit, a RAM, a ROM, an operation unit, a display unit (all not shown), etc., and is input from the administrator via the operation unit. The server has a function of transmitting the user ID and restriction information that has been sent to the server device 2.

<2. Processing action>
<2-1. Biometric information registration process for verification>
The registration biometric information registration processing operation in the image forming system 100 according to this embodiment will be described.

  However, in this embodiment, it is assumed that the user ID of the user needs to be stored in the authentication restriction information table T1 as a premise that biometric information for verification is registered. Therefore, before describing the registration processing operation of the biometric information for verification, the registration processing operation of the user ID and the restriction information will be described with reference to FIGS.

  When granting the use authority of the digital multi-function peripheral 1 to a new user, the administrator determines a new user ID (user name and password) for identifying the new user, and the administrator terminal device 3 The new user ID is input via an operation unit (not shown). When receiving the input of a new user ID, the administrator terminal device 3 notifies the server device 2 of the user ID (AR21).

  When a new user ID is received from the administrator terminal device 3, the user ID management unit 221 of the server device 2 creates a new storage area in the authentication restriction information table T1, and the received user ID information is stored in the authentication restriction information table. Stored in the item s1 of the user ID of T1 (AR22).

  Furthermore, when it is desired to add a usage restriction to a user who has been newly granted a usage right, the administrator uses the operation unit (not shown) of the administrator terminal device 3 to limit information (more specifically, use Enter the information that identifies the functions to be prohibited. When the administrator terminal device 3 receives the input of the restriction information, the administrator terminal device 3 notifies the server device 2 of the restriction information input together with the user ID of the user to whom the restriction information is to be added (AR25).

  When the restriction information is received from the administrator terminal device 3, the restriction information management unit 223 of the server device 2 associates the received information with the notified user ID and stores it in the restriction information item s3 of the authentication restriction information table T1. (AR26).

  The user ID and the restriction information are registered in the authentication restriction information table T1 by the above processing operation.

  Subsequently, the registration processing operation of biometric information for verification will be described. FIG. 7 is a flowchart showing processing operations performed in the digital multi-function peripheral 1 when registering biometric information for verification. However, unless otherwise specified, the following operations are performed under the control of the control unit 101. Note that the user can register his / her biometric information from any of the plurality of digital multifunction peripherals 1A, 1B, and 1C connected to the LAN 5.

  When a user who wants to register biometric information for collation inputs an execution start instruction for registration processing of biometric information for collation via the operation panel 105, the biometric information receiving unit 115 for collation first has a user ID (more specifically, Accepts input of a user name and password (steps S1 and S2). This process is performed as follows. First, the biometric information receiving unit 115 for collation displays a message for prompting the user to input a user ID on the display unit 151 (for example, a message “Please enter your name and password”), and biometric information for collation Requesting the user who wants to register the user ID. When the user inputs information via the operation panel 105 in response to this input request, the biometric information receiving unit 115 for verification receives the input information as a user ID.

  Subsequently, the biometric information receiving unit 115 for verification transmits the user ID acquired in Steps S1 and S2 to the server device 2 and inquires whether or not authentication for the user ID is possible (Step S3).

  The server apparatus 2 that has received the user ID performs the following processing. First, the authentication determination unit 209 of the server device 2 determines whether or not the received user ID matches any of the user IDs registered in advance in the restriction information table S. If the received user ID matches any user ID in the authentication restriction information table T1, the result of the authentication determination is affirmative. If the received user ID does not match any user ID in the authentication restriction information table T1, the result of the authentication determination is negative. When the authentication judgment is completed, the result is notified to the digital multi-function peripheral 1 that has transmitted the user ID.

  Returning to the description of the processing operation performed in the digital multi-function peripheral 1 again. If a positive authentication determination is obtained in step S3, the biometric information receiving unit 115 for verification receives registration of biometric information for verification (step S4). This process is performed as follows. First, biometric information receiving unit 115 for collation displays a message for prompting registration of biometric information for collation on display unit 151 (for example, a message “Please touch the sensor because fingerprint information is registered.”). indicate. In response to this, when the user touches the sensor, the fingerprint sensor 153 reads the fingerprint pattern of the user placed on the sensor surface and acquires it as biometric information for verification.

  Subsequently, the biometric information receiving unit 115 for verification transmits the biometric information for verification acquired in step S4 to the server device 2 (step S5).

  In the server device 2 that has received the biometric information for verification, the following processing is performed. When biometric information for verification is received from the digital multi-function peripheral 1, the biometric information management unit 222 of the server device 2 authenticates the received information in association with a predetermined user ID (more specifically, a user ID that has been authenticated earlier). Store in the restriction information table T1. For example, when the user ID having the user name “CCC” and the password “5555” has been authenticated first, and the biometric information for verification “D043” is received from the digital multifunction peripheral 1, the server device 2 The biometric information “D043” is registered in association with the user name “CCC”. That is, the authentication restriction information table T1 in FIG. 6A is updated to the state in FIG.

  Returning to the description of the processing operation performed in the digital multi-function peripheral 1 again. If a negative authentication determination is obtained in step S3, the biometric information receiving unit 115 for verification does not receive registration of biometric information for verification, and performs a predetermined process for notifying the user that registration is not accepted. (Step S6). For example, a message that prompts the user to re-enter the user ID (for example, a message “Please re-enter your name and password”) is displayed on the display 151.

<2-2. User authentication process>
Next, a user authentication processing operation in the image forming system 100 according to this embodiment will be described.

  FIG. 8 is a flowchart illustrating processing operations performed in the digital multi-function peripheral 1 when performing user authentication. However, unless otherwise specified, the following operations are performed under the control of the control unit 101.

  First, the usage restriction unit 116 acquires biometric information of a person who intends to use the digital multifunction device 1 (step S11). This process is performed as follows. First, a message for prompting input of biometric information (for example, a message “Please touch the fingerprint sensor”) is displayed on the display unit 151, and input of biometric information is requested. When the user touches the sensor surface of the fingerprint sensor 153 in response to this input request, the fingerprint sensor 153 scans the finger to acquire fingerprint information.

  Subsequently, the use restriction unit 116 transmits the biometric information acquired in step S1 to the server device 2 and inquires whether or not authentication is possible for the owner of the biometric information (step S12).

  The server apparatus 2 that has received the biological information performs the following processing. First, the authentication judgment unit 209 of the server device 2 collates the received biometric information with biometric information registered in advance in the authentication restriction information table T1 (that is, biometric information for verification). If the received biometric information matches any verification biometric information in the authentication restriction information table T1, the result of the authentication judgment is affirmative. If the received biometric information does not match any verification biometric information in the authentication restriction information table T1, the result of the authentication determination is negative. When the authentication judgment is completed, the result is notified to the digital multi-function peripheral 1 that has transmitted the user ID. However, if the result of the authentication judgment is affirmative, the restriction information stored in association with the user ID associated with the matched biometric information is acquired, and when the authentication judgment is notified, the digital multifunction peripheral 1 is notified. For example, if the authentication restriction information table T1 shown in FIG. 6B is stored in the RAM 203, and the biometric information received from the digital multi-function peripheral 1 matches “D002”, the server device 2 The digital MFP 1 that has transmitted the information is notified of a positive authentication determination and restriction information (that is, information that prohibits use of the FAX function).

  Returning to the description of the processing operation performed in the digital multi-function peripheral 1 again. When the server apparatus 2 is notified of the determination as to whether or not authentication is possible, the use restriction unit 116 determines whether or not the determination result is affirmative (step S13).

  When a positive authentication determination is obtained in step S13, the use restriction unit 116 further receives restriction information from the server device 2 (step S14).

  Subsequently, the use restriction unit 116 shifts the digital multi-function peripheral 1 to a usable state (step S15). More specifically, a standby screen is displayed on the display unit 151 to indicate to the user that the digital multifunction device 1 can be used, and the digital multifunction device 1 is shifted to a state in which activation of various functions can be accepted. . However, if a usage restriction is added to the restriction information acquired in step S14, the restricted function is set to an unusable state. For example, when the restriction information indicating that the use of the FAX function is prohibited is received, a function other than the FAX function can be used.

  When a negative authentication determination is obtained in step S13, the use restriction unit 116 does not shift the digital multifunction peripheral 1 to a usable state and performs predetermined processing for notifying the user that use is not permitted. Is performed (step S16). For example, a message indicating that the use of the digital multi-function peripheral 1 is not permitted (for example, a message “cannot be used”) is displayed on the display unit 151.

<3. effect>
In the image forming system 100 according to this embodiment, even if biometric information for verification is registered through any of the digital multifunction peripherals 1A, 1B, and 1C, it is stored in the authentication restriction information table T1 that the server device 2 has. The Therefore, if the user registers his / her biometric information for verification from the digital multi-function peripheral 1A, for example, the user can obtain a positive authentication judgment in any of the other digital multi-function peripherals 1B and 1C.

  Further, since the authentication restriction information table T1 is centrally managed in the server device 2, table management can be performed efficiently.

  Further, the authentication restriction information table T1 has a restriction information item s3, and the use of the digital multifunction peripheral 1 by each user can be restricted according to the restriction information stored therein.

[2. Second Embodiment]
<1. Constitution>
<1-1. Configuration of image forming system>
FIG. 9 is a diagram showing an overall configuration of an image forming system 200 corresponding to the second embodiment of the present invention.

  The image forming system 200 includes a plurality of digital multifunction peripherals 6A, 6B, and 6C (hereinafter referred to simply as “digital multifunction peripheral 6” unless the digital multifunction peripherals 6A, 6B, and 6C are particularly distinguished). It has a device 7, an administrator terminal device 8, and a plurality of clients 9, and each device is connected via a LAN (local area network) 5 network. Note that more clients and mail server devices may be connected to the LAN 5 than shown in FIG. Further, the number of digital multifunction peripherals 6 connected to the LAN 5 is not limited to three.

  The digital multifunction device 6 is configured as a multifunction device having a plurality of functions, like the digital multifunction device 1 according to the first embodiment. It also has a user authentication function and a restriction function. In this embodiment, an authentication restriction information table T2 is stored in each of the plurality of digital multifunction peripherals 6A, 6B, 6C. A specific configuration of the authentication restriction information table T2 will be described later.

  However, as will be described in detail later, each of the digital multi-function peripherals 6A, 6B, 6C acquires the update information of the authentication restriction information table T2 possessed by the digital multi-function peripheral other than its own apparatus, and uses the acquired update information as its own apparatus. Is updated in the authentication restriction information table T2 (AR3 in FIG. 9). Therefore, although there is a slight time lag, the authentication restriction information table T2 included in each of the digital multifunction peripherals 6A, 6B, and 6C has the same contents.

  The server device 7 is a device that provides various types of information to the digital multi-function peripheral 6 and the client 9 in the same manner as the server device 2 according to the first embodiment. However, the authentication restriction information table T2 is not stored in the server device 7.

  The administrator terminal device 8 is similar to the administrator terminal device 3 according to the first embodiment, and is an apparatus that can be used by an administrator who has management authority for the terminal devices 6 and 9 connected to the image forming system 200. is there.

<1-2. Configuration of each device>
Next, a specific configuration of each device will be described. However, the description of the same configuration as that of the first embodiment is omitted here.

<Digital MFP>
The digital multifunction machine 6 is realized by the same hardware configuration as the digital multifunction machine 1 according to the first embodiment (see FIG. 2). In the following, reference numerals in FIG. 2 are used to indicate the hardware configuration of the digital multi-function peripheral 6.

  In this embodiment, an authentication restriction information table T2 is stored in the data memory 103. A specific configuration example of the authentication restriction information table T2 is shown in FIG.

  Similar to the authentication restriction information table T1, the authentication restriction information table T2 is a table used when performing user authentication. As shown in FIG. 11, the authentication restriction information table T2 includes a plurality of records. For each record, an item s11 for user ID, an item s12 for biometric information, an item s13 for restriction information, and an update time Item s14. The user ID item s11, the biometric information item s12, and the restriction information item s13 are the same as the user ID item s1, the biometric information item s2, and the restriction information item s3 in the authentication restriction information table T1, respectively. The update time of each record is stored in the update time item s14.

<Configuration for user authentication>
FIG. 10 is a block diagram illustrating a configuration related to a user authentication function based on biometric information and a restriction function that restricts use of the function of the digital multifunction device 6 for each user, among the configurations of the digital multifunction device 6. The digital multifunction peripheral 6 includes a biometric information receiving unit 601 for verification, an authentication restriction information table management unit 602, and a use restriction unit 603 as configurations related to these functions. Each of these units is a component realized by the control unit 101 (see FIG. 2) executing a program on the ROM 102 (see FIG. 2).

  The biometric information receiving unit 601 for collation is similar to the biometric information receiving unit 115 for collation (see FIG. 3), and accepts registration of biometric information for collation from the user from the operation panel 105 (see FIG. 2) (AR31). However, the biometric information receiving unit 601 for verification does not transmit the received biometric information for verification to the server device, but sends it to the authentication restriction information table management unit 602 (AR32). Is different. The authentication restriction information table management unit 602 (more specifically, the biometric information management unit 622) that has received the biometric information for verification stores the received information in the item s2 of biometric information in the authentication restriction information table T2 ( AR39).

  The authentication restriction information table management unit 602 is a processing unit similar to the authentication restriction information table management unit 208 (see FIG. 5) realized in the server device 2 in the first embodiment. to manage. The authentication restriction information table management unit 602 includes a user ID management unit 621, a biometric information management unit 622, a restriction information management unit 623, an update time management unit 624, and an update management unit 625.

  Each of the user ID management unit 621, the biometric information management unit 622, and the restriction information management unit 623 manages the user ID item s11, the biometric information item s12, and the restriction information item s13 in the authentication restriction information table T2. The specific processing is the same as the user ID management unit 221, the biological information management unit 222, and the restriction information management unit 223 that the server apparatus 2 has in the first embodiment.

  The update time management unit 624 manages the update time item s14 in the authentication restriction information table T2. More specifically, when any record in the authentication restriction information table T2 is updated, a time (not shown) of the digital multi-function peripheral 6 is referred to and the time when the update is performed is recorded in the record. Is stored in the update time item s14 (AR33).

  The update management unit 625 updates the authentication restriction information table T2. More specifically, the update status of the authentication restriction information table T2 included in another digital multi-function peripheral in the image forming system 200 is confirmed every predetermined time. If there is new update information, the update information is updated. The authentication restriction information table T2 is updated by receiving and reflecting it in the authentication restriction information table T2 (AR34).

  The usage restriction unit 603 is similar to the usage restriction unit 116 (see FIG. 3), and prohibits the use of a person who does not have the usage authority. If so, use of restricted functions is prohibited. However, the use restriction unit 603 includes an authentication determination unit 631 that determines whether or not authentication is possible for a user who intends to use the digital multifunction peripheral 6. The authentication judgment unit 631 is the same as the authentication judgment unit 209 provided in the server device 2 in the first embodiment. That is, the use restriction unit 603 is different from the use restriction unit 116 in that the use restriction unit 603 performs the authentication determination unit 631 instead of inquiring the server device 2 to determine whether authentication is possible.

<Server device>
The server device 7 is realized by the same hardware configuration as the server device 2 according to the first embodiment (see FIG. 4).

  However, in the server device 7, unlike the server device 2 according to the first embodiment, the authentication restriction information table management unit 208 and the authentication determination unit 209 do not need to be realized. Further, it is not necessary to store the authentication restriction information table in the RAM 203. This is because in this embodiment, the functional unit that performs management of the authentication restriction information table T2 and authentication determination processing is realized in the digital multi-function peripheral 6 instead of the server device 7.

<Administrator terminal device>
The administrator terminal device 8 has the same configuration as the administrator terminal device 3 according to the first embodiment. However, the administrator terminal device 8 has a function of transmitting the user ID and the restriction information input from the administrator via the operation unit to the digital multifunction peripheral 6 instead of the server device 7. .

<2. Processing action>
<2-1. Biometric information registration process for verification>
The registration biometric information registration processing operation in the image forming system 200 according to this embodiment will be described.

  However, in this embodiment as well, as in the first embodiment, it is necessary to store the user ID of the user in the authentication restriction information table T2 as a premise that the biometric information for verification is registered. To do. Therefore, before describing the registration processing operation of the biometric information for verification, the registration processing operation of the user ID and the restriction information will be described with reference to FIGS.

  When receiving the input of a new user ID from the administrator, the administrator terminal device 8 notifies the user ID to each of the digital multifunction peripherals 6A, 6B, 6C (AR35).

  When a new user ID is received from the administrator terminal device 8, the user ID management unit 621 of each digital multi-function peripheral 6 creates a new storage area in the authentication restriction information table T2, and restricts the received user ID information to authentication. The information is stored in the user ID item s11 of the information table T2 (AR36).

  In addition, when the administrator terminal device 8 receives an input of restriction information from the administrator, the administrator terminal device 8 converts the restriction information input together with the user ID of the user to which the restriction information is added into the user ID to the digital multifunction peripherals 6A, 6B, 6C. (AR37).

  When the restriction information is received from the administrator terminal device 8, the restriction information management unit 623 of each digital multi-function peripheral 6 associates the received information with the notified user ID and the restriction information item s13 in the authentication restriction information table T2. (AR38).

  Through the above processing operation, the user ID and the restriction information are registered in the authentication restriction information table T2.

  Subsequently, the registration processing operation of biometric information for verification will be described. FIG. 12 is a flowchart showing processing operations performed in the digital multi-function peripheral 6 when registering biometric information for verification. However, unless otherwise specified, the following operations are performed under the control of the control unit 101. In this embodiment as well, the user can register his / her biological information from any of the plurality of digital multifunction peripherals 6A, 6B, 6C connected to the LAN 5.

  First, the biometric information receiving unit 601 for verification receives an input of a user ID (steps S21 and S22). This processing is the same as the processing in steps S1 and S2 (FIG. 7) in the verification biometric information registration processing in the first embodiment.

  Subsequently, the authentication determination unit 631 determines whether or not the user ID acquired in steps S21 and S22 can be authenticated (step S23). The authentication determination unit 631 determines whether or not the user ID acquired in steps S21 and S22 matches any of user IDs registered in advance in the authentication restriction information table T2 stored in the data memory 603. It is done by judging.

  If a positive authentication determination is obtained in step S23, the biometric information receiving unit 601 for verification receives registration of biometric information for verification (step S24). This process is the same as the process of step S4 (FIG. 7) in the verification biometric information registration process in the first embodiment.

  Subsequently, the biometric information management unit 622 stores the verification biometric information received in step S23 in the authentication restriction information table T2 in association with a predetermined user ID (more specifically, the previously authenticated user ID). (Step S25).

  Subsequently, the update time management unit 624 stores the time when the biometric information for verification received in step S23 is stored in the authentication restriction information table T2 in the update time item s14 of the authentication restriction information table T2 (step S26). For example, when the collation biometric information “D043” is registered at 15:30, “15:30” is stored in the update time item s14. That is, the authentication restriction information table T2 in FIG. 11A is updated to the state in FIG.

  When a negative authentication determination is obtained in step S23, the biometric information receiving unit 601 for verification does not receive registration of biometric information for verification, and performs a predetermined process for notifying the user that registration is not accepted. (Step S27).

<2-2. Authentication restriction information table update processing>
Next, an update processing operation of the authentication restriction information table T2 in the image forming system 200 according to this embodiment will be described. For example, when the user registers his / her biometric information for verification from any one of the plurality of digital multifunction peripherals 6A, 6B, 6C, the authentication restriction information possessed by the digital multifunction peripheral 6 by the above-described processing. Table T2 is updated. In this embodiment, when the authentication restriction information table T2 included in any of the digital multifunction peripherals 6 in the system is updated, the updated information is not connected to the other digital multifunction peripherals 6 via the P2P connection without passing through the server device 7. The authentication restriction information table T2 possessed by another digital multi-function peripheral is also updated.

  This update process will be specifically described. FIG. 13 is a flowchart showing the update processing operation of the authentication restriction information table T2 in the digital multi-function peripheral 6. However, unless otherwise specified, the following operations are automatically performed under the control of the control unit 101. In the following, a processing operation when the digital multifunction peripheral 6B updates the authentication restriction information table T2 by acquiring update information from the digital multifunction peripheral 6A will be described.

  First, the digital multifunction device 6 includes whether or not the update management unit 625 of the digital multifunction device 6B has passed a predetermined time from the last update time (for example, “time t”) of the authentication restriction information table T2. A determination is made using a timer (not shown) (step S31). When it is determined that the predetermined time has elapsed, the process proceeds to step S32, and the update process of the authentication restriction information table T2 is started. However, the specific value of the predetermined time can be arbitrarily set by the user.

  In step S32, the update management unit 625 of the digital multifunction peripheral 6B acquires the update information of the authentication restriction information table T2 from another digital multifunction peripheral (here, the digital multifunction peripheral 6A) in the image forming system 200. More specifically, the digital multifunction peripheral 6A is inquired whether there is update information in the authentication restriction information table T2 performed after the update time t, and is notified from the digital multifunction peripheral 6A in response thereto. Information is acquired as update information. Here, the partner with which the digital multifunction peripheral 6B obtains the update information is the digital multifunction peripheral 6A, but may be another digital multifunction peripheral 6C. Further, update information may be acquired from two or more digital multifunction peripherals.

  The following process is performed in the digital multifunction peripheral 6A that has received the inquiry. First, when an update information inquiry is received from the digital multi-function peripheral 6B, the update time management unit 624 refers to the update time item s14 of the authentication restriction information table T2 stored in the data memory 603 and updates it after time t. It is determined whether or not the recorded information exists. If there is information updated after time t, the update time management unit 624 notifies the digital multifunction peripheral 6B of the update information. If there is no information updated after time t, the update time management unit 624 notifies the digital multifunction peripheral 6A to that effect. For example, the authentication restriction information table T2 (for example, the state shown in FIG. 11A) of the digital multi-function peripheral 6A is updated to the state shown in FIG. 11B with the biometric information “D043” registered at the time “15:30”. If the last update time t of the digital multi-function peripheral 6B is before “15:30”, the update time management unit 624 notifies the digital multi-function peripheral 6B of the biometric information “D043”.

  Returning to the description of the processing operation performed in the digital multi-function peripheral 6B again. Subsequently, the update time management unit 624 stores the update information received in step S32 in the authentication restriction information table T2, and updates the authentication restriction information table T2 (step S35). That is, the received update information is reflected in the authentication restriction information table T2. Further, the update time management unit 624 stores the update time for the record related to the update in the update time item s14. For example, when the biometric information “D043” having the user name “CCC” is received from the digital multifunction peripheral 6A as update information, the biometric information “D043” is registered in association with the user name “CCC”. When the update time is 15:35, the update time “15:35” is stored.

  As described above, when the digital multifunction peripheral 6B acquires the update information from the digital multifunction peripheral 6A, the same authentication restriction information table T2 as that performed by the digital multifunction peripheral 6A is also updated in the digital multifunction peripheral 6B. . Further, when the digital multi-function peripheral 6C obtains update information from the digital multi-function peripheral 6B by the same process as described above, the update of the authentication restriction information table T2 similar to that performed in the digital multi-function peripherals 6A and 6B is digitally performed. This is also performed in the multifunction machine 6C. That is, the biometric information for verification registered in any one of the plurality of digital multi-function peripherals 6 is also stored in the authentication restriction information table T2 that the other digital multi-function peripherals 6 have. The same applies to the case where three or more digital multifunction peripherals 6 are connected.

<2-3. User authentication process>
Next, a user authentication processing operation in the image forming system 200 according to this embodiment will be described.

  FIG. 114 is a flowchart illustrating processing operations performed in the digital multi-function peripheral 1 when performing user authentication. However, unless otherwise specified, the following operations are automatically performed under the control of the control unit 101.

  First, the usage restriction unit 603 acquires biometric information of a person who intends to use the digital multi-function peripheral 1 (step S41). This process is the same as the process of step S11 (FIG. 8) in the user authentication process in the first embodiment.

  Subsequently, the authentication determination unit 631 determines whether or not authentication is possible for the owner of the biometric information acquired in step S41 (step S42). The authentication determination unit 631 performs the authentication determination unit 631 by comparing the biometric information acquired in step S42 with the biometric information for verification registered in advance in the authentication restriction information table T2. If the received biometric information matches any of the biometric information for verification stored in the authentication restriction information table T2, the result of the authentication determination is affirmative. If the received biometric information does not match any of the biometric information for verification stored in the authentication restriction information table T2, the result of the authentication determination is negative.

  When a positive authentication determination is obtained in step S42, the use restriction unit 603 subsequently obtains restriction information (step S43). That is, the restriction information stored under the user ID associated with the biological information that matches the biological information acquired in step S42 is read from the authentication restriction information table T2.

  Subsequently, the usage restriction unit 603 shifts the digital multifunction peripheral 6 to a usable state (step S44). This process is the same as the process of step S15 (FIG. 8) in the user authentication process in the first embodiment.

  When a negative authentication determination is obtained in step S42, the use restriction unit 603 performs predetermined processing for notifying the user that use is not permitted without shifting the digital multifunction peripheral 6 to a usable state. Is performed (step S45).

<3. effect>
In the image forming system 200 according to this embodiment, even if biometric information for verification is registered through any of the digital multifunction peripherals 6A, 6B, 6C, the authentication restriction information table T2 possessed by each digital multifunction peripheral 6 is registered. This information is stored. Therefore, if the user registers his / her biometric information for collation from the digital multifunction peripheral 6A, for example, the user can obtain a positive authentication judgment in any of the other digital multifunction peripherals 6B and 6C.

  Further, since update information of the authentication restriction information table T2 is directly transmitted and received between the digital multifunction peripherals 6A, 6B, and 6C, the authentication restriction information table T2 of each apparatus can be updated without going through the server apparatus.

[3. (Modification)
In each of the above embodiments, the functions that can be used by the digital multi-function peripheral 1 are restricted for each user by the configuration in which the restriction information is stored in the authentication restriction information tables T1 and T2 in association with the user ID. Further, various types of information may be stored in association with the user ID, so that the usage mode of the digital multi-function peripheral 1 may be defined more variously for each user. For example, in association with a user ID, information defining a document that can be browsed by the user or an address book that can be used is stored, or customization information of a device preset by the user (for example, an image type of a standby screen, , Copy settings, etc.) may be stored.

  Further, in each of the above embodiments, the restriction information is stored in the authentication restriction information tables T1 and T2. However, instead of the restriction information (or in combination with the restriction information), “permission information” is stored. It is good. The “permission information” here is information that identifies a function that is permitted to be used. In this case, the use restriction units 116 and 603 make the usable state only for the functions that are permitted to be used in the permission information in the digital multifunction peripherals 1 and 6, and make the other functions unusable.

  In the above embodiments, the user ID items s1, s11 and the restriction information items s3, s13 of the authentication restriction information tables T1, T2 are stored before the user registers the biometric information for verification. However, it is also possible to have a configuration in which the user first registers biometric information for verification and gives a user ID or the like thereto.

  In each of the above embodiments, fingerprint information is adopted as biometric information. However, various information based on the user's physical characteristics such as iris, voiceprint, retina, palm shape, face, palm vein, etc. It can be adopted as information.

  In the second embodiment, the user ID and the restriction information are notified from the right holder terminal device 8 to each of the digital multifunction peripherals 6A, 6B, and 6C. It is good also as a structure which notifies only with respect to the multi-function device 6. FIG. In this case, the user ID or the like notified to one of the digital multifunction devices 6 is notified to the other digital multifunction device 6 through the P2P connection.

1 is a diagram illustrating an overall configuration of an image forming system 100 according to a first embodiment. 1 is a diagram illustrating a configuration of a digital multi-function peripheral 1. 2 is a diagram illustrating a configuration related to a user authentication function of the digital multi-function peripheral 1. 2 is a diagram illustrating a configuration of a server device 2. FIG. 4 is a diagram illustrating a configuration related to a management function of an authentication restriction information table included in the server apparatus 2. FIG. It is a figure which shows the structural example of the authentication restriction information table T1. 6 is a flowchart illustrating processing operations performed in the digital multi-function peripheral 1 when registering biometric information for verification. 6 is a flowchart illustrating processing operations performed in the digital multi-function peripheral 1 when performing user authentication. 2 is a diagram illustrating an overall configuration of an image forming system 200 according to a second embodiment. FIG. 3 is a diagram illustrating a configuration related to a user authentication function of the digital multi-function peripheral 6. FIG. It is a figure which shows the structural example of the authentication restriction information table T2. 6 is a flowchart showing processing operations performed in the digital multi-function peripheral 6 when registering biometric information for verification. 6 is a flowchart showing an update processing operation of an authentication restriction information table T2 performed in the digital multi-function peripheral 6. 6 is a flowchart illustrating processing operations performed in the digital multi-function peripheral 1 when performing user authentication.

Explanation of symbols

1, 6 Digital MFP 2, 7 Server 3, 8 Administrator terminal device 153 Fingerprint sensor 115, 601 Verification biometric information receiving unit 116, 603 Usage restriction unit 209, 631 Authentication judgment unit 208, 602 Authentication restriction information table management unit 100, 200 Image forming system T1, T2 Authentication restriction information table 21 User identification information receiving unit 22 Communication destination receiving unit 23 Input method regulating unit 24 Communication destination registration management unit 141 One-touch key 142 Group key 143 Short key 144 Start key 145 Numeric keypad

Claims (7)

An image forming system in which one or more image forming apparatuses and a server apparatus are connected on a network,
Each of the one or more image forming apparatuses is
Biometric information receiving means for verification that receives input of biometric information for verification and transmits it to the server device;
Authentication determination requesting means for requesting input of biometric information to a user who intends to use the image forming apparatus and transmitting the input biometric information to the server device to inquire whether or not authentication of the biometric information is possible; ,
With
The server device is
Biometric information registering means for collation that registers the biometric information for collation received from any one of the one or more image forming apparatuses in the authentication table in association with user identification information;
An authentication determination unit that determines whether or not user authentication is possible using the authentication table when there is an inquiry about whether or not authentication is possible from any of the one or more image forming apparatuses;
An image forming system comprising: An image forming system in which a plurality of image forming apparatuses are connected on a network,
Each of the plurality of image forming apparatuses
Biometric information registering means for collation that accepts input of biometric information for collation and registers the received biometric information for collation with user identification information in an authentication table;
Authentication determination means for requesting input of biometric information to a user who intends to use the image forming apparatus and determining whether or not user authentication is possible using the authentication table;
Update information acquisition means for acquiring update information of an authentication table possessed by another image forming apparatus connected to the network from the other image forming apparatus and reflecting the update information in the authentication table;
An image forming system comprising: The image forming system according to claim 1 or 2,
The authentication table stores usage mode specifying information that specifies the usage mode of the image forming apparatus of the user in association with the user identification information,
The image forming apparatus includes:
When the biometric information input from the user who intends to use the image forming apparatus is authenticated, the usage mode of the image forming apparatus is determined according to the usage mode defining information associated with the identification information of the user. Usage mode management means to be determined;
An image forming system comprising: The image forming system according to claim 3,
The usage mode specifying information includes use restriction information,
The usage mode management means is
When biometric information input from a user who intends to use the image forming apparatus is authenticated, the predetermined function defined in the use restriction information associated with the identification information of the user is set in a use prohibited state. An image forming system. The image forming system according to claim 3,
The usage mode specifying information includes use permission information,
The usage mode management means is
When biometric information input from a user who intends to use the image forming apparatus is authenticated, a predetermined function defined in the use permission information associated with the identification information of the user is made available. An image forming system. An image forming apparatus connected to one or more image forming apparatuses via a network,
Biometric information registering means for collation that accepts input of biometric information for collation and registers the received biometric information for collation with user identification information in an authentication table;
Authentication determination means for requesting input of biometric information to a user who intends to use the image forming apparatus and determining whether or not user authentication is possible using the authentication table;
Update information acquisition means for acquiring update information of the authentication table from another image forming apparatus connected via a network, and reflecting it in the authentication table;
An image forming apparatus comprising: A user authentication method in a plurality of image forming apparatuses connected via a network,
Biometric information receiving step for receiving biometric information for verification from the image forming apparatus;
A biometric information input requesting step for requesting input of biometric information to a user who intends to use the image forming apparatus;
The biometric information accepted in the biometric information input requesting step is judged using an authentication table that stores and stores the biometric information for verification input from each of the plurality of image forming apparatuses. Certification judgment process;
A user authentication method.

Images