JP2003076594A - System data management method, device and program and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system data management method, a device and a program reinforcing cooperation of the device and a directory service, constructing a flexible network system and reducing a management cost which tends to increase, and a storage medium. SOLUTION: The device 121 connected to the network system for which a directory server 111 providing a directory service is arranged on a network accesses the directory server 111, acquires prescribed information, fetches information registered in the directory server as system data inside the device and executes functions of the device by using the fetched information.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a directory service for centrally managing resources on a network and data cooperation between devices arranged on the network.

[0002]

2. Description of the Related Art With the spread of networks, the number of devices connected to the networks and operated is also increasing.
In addition, tools for centrally managing those devices on the network are being enhanced.

Further, a directory service that centrally manages resources on the network and provides convenience not only for network administrators but also for network users is about to be introduced into users' network systems.

By utilizing this directory service, it is possible to
It has become possible to easily search where a resource having what kind of function is arranged, and to effectively utilize the resource and to reduce the network management cost.

[0005]

However, in the conventional approach utilizing the directory service, the device is managed only and the system is not constructed by the active cooperation between the device and the directory service. .

The present invention has been made to solve the above problems, and strengthens the cooperation between the device and the directory service to realize a more flexible network system construction and reduce the management cost which is increasing. An object of the present invention is to provide a system data management method and device, a program, and a storage medium.

[0007]

In order to achieve the above object, the present invention provides a system data management method in a device connected to a network system in which a server providing a directory service is arranged on a network. An information acquisition step of accessing the server to acquire predetermined information, and an execution step of fetching the information registered in the server as system data in the device and executing the function of the device by using the information. Is characterized by.

In order to achieve the above object, the present invention is a device connected to a network system in which a server for providing a directory service is arranged on a network, the device accessing the server to provide predetermined information. And an execution unit that takes in the information registered in the server as system data in the device and executes the function of the device by using the information.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings.

FIG. 1 is a diagram showing the configuration of a network system in this embodiment. In the figure, 101
Is the client used by the network administrator (below,
As an administrator tool), a management tool for managing various resources (servers, devices) on the network is provided. Reference numeral 111 denotes a directory server for providing a normal directory service, which allows users to centrally manage various resources on the network, and also defines necessary objects in this system and is configured to utilize them. Has been done. Reference numeral 112 is a normal groupware server, which is assumed to be operated at the user's end. 113 is a normal document management server,
Operation at the user site is assumed. Reference numeral 114 denotes a normal mail server, which is assumed to be operated at the user's destination.

Reference numeral 115 denotes a distribution server developed for this system, which provides users with various distribution functions. 116
Is a log server developed for this system, which collectively manages the result information of each device on the network and various jobs processed by the server. A resource server 117 developed for this system collectively manages various resources required for job processing using various devices.

Reference numerals 121 and 122 denote devices in this embodiment, which are connected to a network to provide various functions. 131 to 134 are users connected to the network.

2 to 4 are diagrams for explaining the device operation method in this system. Shown in Figure 2 (A)
Then, the administrator tool 101 is the device 1 on the network.
21 is detected, in the same (B), the device 121
Function is registered in the directory server 111, and various settings are made for the device 121. Further, in (A) shown in FIG. 3, the log server 116 and the resource server 117 are set, and in (B), the access information, function information and the like are registered in the directory service 111. Furthermore,
In FIG. 4A, the device 121 is the administrator tool 1
The access information is obtained from 01, and in the same (B), the access information is handled to the directory server 111, the log server 116, and the resource server 117 as needed. Further, in FIG. 5A, the resource required for the user 131 to use the device 121 is acquired from the resource server 117, and the device 1 is acquired as shown in FIG.
It is also possible to use 21.

Next, a description will be given of the internal structure of the device which takes in predetermined information registered in the directory server 111 as system data and uses the information to execute the function of the device.

FIG. 6 is a block diagram showing the configuration of the device 121 in this system. As shown in the figure, the internal structure of the device 121 is mainly divided into the following functional blocks. 1) Operation unit 602 This is equivalent to an operation unit included in a normal device, is a part of the device 121, and performs various registrations, settings, job instructions, and the like. 2) Network control unit 601 This controls an interface with various resources on the network, and provides the following functions, for example. -Function for accepting jobs from the user 131-Function for accepting remote management operations from the administrator tool 101-Function for requesting transmission of messages as e-mails via the mail server 114-Handling data such as the distribution server 115 and jobs Function-a function for remotely registering log information in the log server 116-a function for obtaining necessary resources from the resource server 117-a function for obtaining necessary information from the directory server 111 3) Object management unit 610 This is the core of the device 121. The unit 121 defines various data groups of jobs managed and supported by the device 121 as objects, and realizes various functions by the objects being accessed by related function units. Then, inside the object management unit 610,
It includes the following management units. .System management unit 61 for managing system objects
1-Resource management unit 61 that manages resource objects
2-Log management unit 613 that manages log objects-Job management unit 614 that manages job objects-Document management unit 615 that manages document objects-Memory management unit 616 that manages various objects in device memory 4) Job control unit 621 This controls various jobs by interfacing the above-mentioned object management unit 610 with the following various functional units. -Recording unit 631 for controlling print data printing-Reading unit 632 for controlling image reading from a scanner-FAX communication unit 633 for controlling FAX transmission / reception In addition, the following processing units perform data conversion processing as necessary. Image conversion unit 622 that performs image conversion processing such as resolution and paper size conversion PDL processing unit 623 that performs PDL data rendering processing Encoding processing unit 6245 that performs image coding conversion processing 5) Session management unit 603 In particular, the session relating to the access from the network side is managed by the object management unit 610.
It also serves as access control.

Next, the device 121 according to the present embodiment.
The object model operated by the directory server 111 will be described, and further the object model operated by the directory server 111 will be described.

FIG. 7 is a diagram showing an object model operated by the device of this system. In this embodiment, the following objects are mainly defined and used. 1) System object 710 Various types of system information required when operating the device system are defined and used as attributes. The child objects of this object are: System setting object 711: Various user data, service data and the like necessary for device operation are defined and operated as attribute values. Network resource information object 712: Access information and function information of network resources accessible from the device are defined and operated as attribute values. 2) Resource object 720 Various resources required when operating the device system are managed and operated as objects. The child objects of this object are: Printer resource object 721: Font data 722 and template data 723 for overlay processing are used as objects as printer function resources. Transmission processing resource object 724: data 72 such as FAX transmission address and network user address
5 is operated as an object. 3) Log object 730 Various log data resulting from the operation of the device system are managed and operated as objects. The child objects of this object are: Communication log 731: Communication log data relating to FAX transmission / reception is operated as an object. Job log 732: print log (for example, print,
Define the number of prints, print time, executor, etc. as attribute values), scan log (for example, define the number of scans per day etc. as attributes), error log (communication error, printer jam, scan jam, etc.) as attributes Log data such as "Yes" is operated as an object. 4) Job object 740 The job instruction data corresponding to the function supported by the device system is managed and operated as an object. The child objects of this object are: Print job 741: Print instruction data is operated as an object. Scan job 742: Read instruction data (read mode, scan data transfer destination designation data, and the like are defined and used as attributes) are operated as objects. FAX transmission job 743: FAX transmission instruction data is operated as an object. Network transfer job 744: Transfer instruction information of various data via the network is operated as an object.

An entity such as document data is managed as a document object, and if there is document data corresponding to a job, the ID of the object indicating the entity is designated in the attribute information. 5) Document object 750 Document data handled for job execution (print data, FA
Document data 751 such as X transmission data) and document data (scan data, FAX reception data, etc.) generated after job execution are managed and operated as objects.

FIG. 8 is a diagram showing an object model operated by the directory server of this system.

Various network resources that constitute this system and various information that is effective when operating this system are defined and operated as objects. Examples of such objects are: 1) Server service object 810 Information elements that are effective in operating this system, such as access information to distribution server 115, log server 116, resource server 117, etc. arranged on the network, supported function information, etc., are used as attributes. It is defined and can be operated. 2) Core server service object 820 Various groupware server 112, document management server 113, mail server 114 arranged on the network
Information elements that are effective in operating this system, such as access information related to a group of servers that support core business, are defined as attributes so that they can be used. 3) Job service object 830 Various devices 121 and 12 arranged on the network
2. A print function provided by the distribution server 115,
Information regarding the scan function, the FAX function, and the like (for example, information regarding where and what function (service) can be executed) is defined as an information element so that it can be utilized (referenced). 4) User group object 840 User information configured to operate this system,
The device information is managed and operated as an object.

Next, the device 12 according to the present embodiment.
An operation method and a processing procedure for various objects operated in 1, 122 will be described.

FIG. 9 is a diagram showing an object operation command applied to the entire system. Basically, the function of the device system according to the present embodiment can be managed and operated by providing a means for operating an object by the following command group. 1) Create Object: Object creation command Creates a new object (job, document, etc.). 2) Open Object: Object operation start command Specify the object and operate (attribute value, data read,
Write etc.) is started. 3) Close Object: object operation end command Ends the operation on the specified object. 4) Delete Object: Deletes the object specified by the object delete command. 5) Read / Write Attribute: Read attribute value
/ Write command Read / Write the attribute value to the opened object.
To do. 6) Read / Write Data: Data Read / Write Command Read / Write data to the opened object.
To do. 7) Search Object: Object search command Searches for the existence of an object. 8) Search Attribute: Attribute search command Searches for an attribute existing in the object.

FIG. 10 is a diagram for explaining the object operation applied in this system. The object management unit 610 centrally manages objects and responds to operations such as Read and Write from each functional unit.

The system setting unit 1001 corresponds to, for example, an interface with the operation unit 602 and the administrator tool 101 shown in FIG. 6, and handles data relating to system setting information with the object management unit 610. The job registration unit 1002 and the document registration unit 1002 correspond to, for example, an interface with the operation unit 602 and the user 131, a job control unit 621 that generates an in-system job, and handle data related to a job instruction with the object management unit 610. The resource registration unit 3204 corresponds to, for example, an interface with the administrator tool 101 and the resource server 117, and handles data related to resources with the object management unit 610.

The log registration unit 3205 corresponds to, for example, the job control unit 621 in the system and the handling of log information on the network, and handles log-related data with the object management unit 610. The system operation unit 3206 corresponds to all functional units that need to control the system operation based on the system setting information, and acquires data related to the system setting information from the object management unit 610. The job processing unit 3207 corresponds to the job control unit 621 in the system, and includes job data, document data,
It handles resource data and the like with the object management unit 610. The log operation unit 3208 corresponds to a functional unit that refers to the log data, and acquires the log data from the object management unit 610.

FIG. 11 is a flowchart showing object processing in the device. First, step S1
In 110, if there is a login request from the network side, the flow advances to step S1111 to perform login processing such as accessor confirmation and session opening.

If there is a system data processing request in step S1120, the request content is a registration / update request (step S1121) or a reference request (step S112).
1123), system data registration / update processing (S1122) or reference processing for notifying requested data (S1124) is performed.

If there is a log data processing request in step S1130, depending on whether the request content is a registration / deletion request (S1131), a reference request (S1133), or a remote registration request (S1135), the log data is processed. Registration / deletion process (S1132) or reference process (S1134)
Or, the remote registration process to the specified log server (S1
135) or do

If there is a job data processing request in step S1140, whether the request content is a registration / deletion request (S1141) or a read request (S1143) is job data registration / deletion processing (S1142). ,
Read processing (S1144) is performed.

If there is a document data processing request in step S1150, it is determined whether the request content is a registration / deletion request (S1151) or a read request (S1153).
Document data registration / deletion processing (S1152) or read processing (S1154) is performed.

If there is a resource data processing request in step S1160, the resource data is registered depending on whether the request content is a registration / deletion request (S1161), a read request (S1163), or a resource request (S1165). -Delete process (S1162) or read process (S116)
4) or a resource request process (S1165) of obtaining a resource from an external resource server.

If there is a logout request from the network side in step S1170, step S1171.
Performs logout processing such as session closing.

Next, a method of cooperation between the device 121 (122) and the directory server 111 will be described.

FIG. 12 is a flow chart showing the environment setting process in this embodiment. First, step S12
In 01, the administrator tool 101 sets and updates predetermined data in the directory server 111, and in step S1202, the managed device 121
(122) is notified that predetermined data has been set and updated. As a result, it is possible to provide a mechanism for matching the contents of the directory server 111 with the data referenced and operated on the device 121 (122) side.

FIG. 13 is a flowchart showing a basic access control system from the device 121 (122) to the directory server 111. First, step S13
In 10, it is determined whether the event processing is performed when the notification that the directory service (hereinafter abbreviated as DS) has been updated. If there is a notification that the DS has been updated, the process advances to step S1311, and the data group acquired and operated from the DS is acquired again from the DS, and the internal data is updated. And
In step S1312, the mode in which the operation is prohibited is canceled until an error occurs in the data acquired from the DS and the data is updated. This process is a process corresponding to step S1332 described later.

Next, in step S1320, it is determined whether the event processing is a notification of the occurrence of an error in the processing using the data acquired from the DS in the device 121 (122). Here, in the case of error notification, step S
In step 1321, the error counter corresponding to the target data is incremented, and in step S1330, it is checked whether the number of allowable errors set in advance according to the data type has been exceeded. Here, if it exceeds, step S
In step 1331, a system administrator registered in advance is notified by mail, and in step S1332, the operation of the error target data is prohibited.

If it is within the range of the allowable number of errors in step S1330, the process proceeds to step S1335,
The data is acquired again from the DS, and the internal processing unit that has notified the error in step S1336 is notified that the data has been updated.

Next, in step S1340, after receiving the notification that the data has been updated in step S1336, the processing of the event that is to be generated in each related processing unit when the processing using the data ends normally. To determine. Here, if the update data is normally terminated, the process advances to step S1341 to clear the error counter that was incremented in step S1321.

Each event process described above is implemented as a shared function in the object management unit 610, and is one form of a function for performing data synchronization with the directory service.

In addition to the access information of various servers, the type of data acquired from the DS and used may be the mounting information of the device, such as various destination information, so that the data can be operated according to user settings. Is also possible.

FIG. 14 is a flowchart showing the registration processing in the device 121 (122). First, in step S1410, it is determined whether the DS operation mode for acquiring and operating the DS data is set, and if the mode is set, the process proceeds to step S1411, and the device 121
An item is selected from the data operated in (122). Then, in step S1420, it is confirmed whether or not the corresponding data is registered in the DS, and if registered, the process proceeds to step S1421 to set whether to use the data from the DS or to register the data directly from the operation unit 602. I do. If there is no data on the DS, the process advances to step S1430 to end the setting process or move to the next item. It should be noted that the data items registered on the DS have been previously notified by the administrator tool 101.

When the above-mentioned step S1430 ends, the process proceeds to step S1431, and the data corresponding to the items set to use the data from the DS are collectively acquired from the DS and managed as internal data.

On the other hand, if the mode is not set in the above step S1410, the operation proceeds to step S1440 and the operation unit 60
It is judged whether it is a data registration or update operation from 2. If the registered data is updated from the operation unit 602, step S1
Proceeding to step 441, an item to be operated is selected, and in step S1450, it is confirmed whether or not the operation mode of the DS data is previously set. Here, in the DS operation mode, the process proceeds to step S1460, and it is determined whether or not the data can be updated with respect to the DS (the function 121 or 122 is set not to accept the DS update from the viewpoint of system operation). You can do that) first. If it is not possible, the process directly proceeds to step S1470 without accepting the registration or change operation, but if possible, the process proceeds to step S1461 to accept the data update operation,
In step S1462, the content is registered in DS. Here, for simplification of the explanation, the example of updating the data sequentially is shown, but in actuality, after all the registration and update operations have been completed to minimize the traffic on the network. , Are implemented so that they are collectively registered in the DS.

If it is not the DS operation mode in step S1450, the flow advances to step S1451 to directly operate the operation unit 6
The data update process from 02 is accepted. Then, in step S1470, it is checked whether or not all the update processes are completed. If not completed, the process returns to step S1441 to move to the next item. After that, when all update processing is completed, this processing is completed.

As described above, according to the present embodiment, it is possible to construct a network system that utilizes the directory service and is easier to manage, with the following effects. (1) In a device connected to a network system in which a directory server is arranged on a network, the information registered in the directory server can be taken in as system data in the device and the function of the device can be executed using the information. it can. (2) Which of the system data in the device is used as the data managed by the directory server can be selectively set. (3) It is possible to prevent the operating unit from arbitrarily changing the data acquired and used from the directory server. (4) When data is changed from the operation unit, the data on the directory server can be updated to ensure data consistency. (5) When an error is detected, the latest data is automatically obtained from the directory server, so that the data consistency can be automatically obtained. (6) An administrator can be automatically notified of an abnormality such as an access error caused by the data acquired from the directory server. (7) When a data abnormality is detected, the use can be prohibited until the data is updated, and the adverse effect can be minimized.

Even when the present invention is applied to a system composed of a plurality of devices (eg, host computer, interface device, reader, printer, etc.), a device composed of one device (eg, copier, facsimile) Device).

Further, an object of the present invention is to supply a storage medium having a program code of a software module which realizes the functions of the above-described embodiments to a system or an apparatus, so that the computer (CPU or MPU) of the system or the apparatus can operate. Needless to say, this can be achieved by reading and executing the program code stored in the storage medium.

In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

A storage medium for supplying the program code is, for example, a floppy (registered trademark) disk,
Hard disk, optical disk, magneto-optical disk, CD-
ROM, CD-R, magnetic tape, non-volatile memory card, ROM, etc. can be used.

Further, by executing the program code read by the computer, not only the functions of the above-described embodiment are realized, but also the OS (operating system) running on the computer based on the instruction of the program code. It is needless to say that this also includes a case where the above) performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments.

Further, after the program code read from the storage medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, based on the instruction of the program code, It goes without saying that a case where the CPU provided in the function expansion board or the function expansion unit performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments is also included.

[0052]

As described above, according to the present invention,
It is possible to strengthen the cooperation between the device and the directory service, realize a more flexible construction of the network system, and reduce the increasing management cost.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of a network system in the present embodiment.

FIG. 2 is a diagram for explaining a device operation method in this system.

FIG. 3 is a diagram for explaining a device operation method in this system.

FIG. 4 is a diagram for explaining a device operation method in this system.

FIG. 5 is a diagram for explaining a device operation method in this system.

FIG. 6 is a block diagram showing a configuration of a device 121 in this system.

FIG. 7 is a diagram showing an object model operated by a device of the present system.

FIG. 8 is a diagram showing an object model operated by a directory server of the present system.

FIG. 9 is a diagram showing object operation commands applied to the entire system.

FIG. 10 is a diagram for explaining an object operation applied in this system.

FIG. 11 is a flowchart showing object processing in a device.

FIG. 12 is a flowchart showing an environment setting process in the present embodiment.

FIG. 13 is a flowchart showing a basic access control method from the device 121 (122) to the directory server 111.

FIG. 14 is a flowchart showing a registration process in the device 121 (122).

[Explanation of symbols]

101 Administrator Tool 111 Directory Server 112 Groupware server 113 Document Management Server 114 mail server 115 Delivery server 116 log server 117 resource server 121 Device A 122 Device B 131 User 1 132 User 2 133 User 3 134 User 4

Claims (22)

[Claims] 1. A system data management method in a device in which a server providing a directory service is connected to a network system arranged on a network, and an information acquisition step of accessing the server to acquire predetermined information. And a step of taking in the information registered in the server as system data in the device and executing the function of the device by using the information. 2. The system data according to claim 1, further comprising a setting step of selectively setting data items to be acquired and operated from the server from the system data used inside the device. Management method. 3. The system data management method according to claim 1, further comprising a prohibition step of prohibiting modification of data set to acquire data from the server. 4. A registration step of registering data in the server, and a permission step of permitting modification of data set to acquire data from the server when the content of the modified data can be registered in the server. The system data management method according to claim 1, further comprising: 5. The method further comprising an update step of automatically re-acquiring data from the server and updating the data in the system when an error occurs using the data acquired from the server. The system data management method according to item 1. 6. The system data according to claim 1, further comprising a notification step of notifying a pre-registered administrator of an error when an error occurs using the data acquired from the server. Management method. 7. When an error occurs using the data obtained from the server, until the data is updated,
The system data management method according to claim 1, further comprising a prohibition step of prohibiting the use of the data. 8. A server for providing a directory service is a device connected to a network system arranged on a network, the information acquiring unit accessing the server to acquire predetermined information, and registered in the server. A device that takes in the obtained information as system data in the device and executes the function of the device by using the information. 9. The device according to claim 8, further comprising setting means for selectively setting a data item to be acquired and operated from a server from system data used inside the device. 10. The device according to claim 8, further comprising a prohibition unit that prohibits modification of data set to acquire data from the server. 11. Registering means for registering data in the server, and permitting means for permitting modification of data set to acquire data from the server if the content of the modified data can be registered in the server. 9. The device of claim 8, further comprising: 12. The apparatus further comprises update means for automatically re-acquiring the data from the server and updating the data in the system when an error occurs using the data acquired from the server. Item 9. The device according to item 8. 13. The device according to claim 8, further comprising notifying means for notifying a pre-registered administrator of an error when an error occurs using the data acquired from the server. 14. The method according to claim 8, further comprising a prohibition unit that prohibits the use of the data until the data is updated when an error occurs using the data acquired from the server. Device. 15. A program for a system data management method in a device connected to a network system, wherein a server that provides a directory service is provided, the information acquisition for accessing the server and acquiring predetermined information. A program comprising: a module; and an execution module that fetches information registered in the server as system data in a device and executes the function of the device by using the information. 16. The program according to claim 15, further comprising a setting module that selectively sets a data item to be acquired and operated from a server from system data used inside the device. 17. The program according to claim 15, further comprising a prohibition module that prohibits modification of data set to acquire data from the server. 18. A registration module for registering data in the server, and a permission module for permitting modification of data set to acquire data from the server when the content of the modified data can be registered in the server. 16. The program according to claim 15, further comprising: 19. The system further comprises an update module for automatically re-acquiring data from the server and updating the data in the system when an error occurs using the data acquired from the server. 16. The program according to item 15. 20. The program according to claim 15, further comprising a notification module for notifying a pre-registered administrator of an error when an error occurs using the data acquired from the server. 21. The method according to claim 15, further comprising a prohibition module for prohibiting the use of the data until the data is updated when an error occurs using the data obtained from the server. Program of. 22. A computer-readable storage medium in which the program according to claim 15 is stored.