JP6468012B2 - Image forming apparatus, image forming system, and program - Google Patents

Description

  The present invention relates to an image forming apparatus, an image forming system, and a program.

  Cited Document 1 describes that a mobile terminal reads an authentication marker displayed on an image forming apparatus and transmits user information to an image forming apparatus specified by the read information.

JP2013-258528A

  By the way, when the image forming apparatus is connected to a local network, it is convenient that the terminal held by the user can use the image forming apparatus without accessing the network. If there is no authority to access the network, the image forming apparatus cannot be used.

  An object of the present invention is to provide an image forming apparatus, an image forming system, and a program that can use the image forming apparatus even when the user terminal is not authorized to access the network to which the image forming apparatus is connected. is there.

According to the first aspect of the present invention, there is provided user information acquisition means for acquiring user information for identifying a user, information for holding correspondence information in which user information and terminal information for identifying a terminal are associated with each other. First terminal information acquisition means for acquiring terminal information associated with the acquired user information from the processing device via the first communication interface, and terminal information from the terminal via the second communication interface. The terminal via the second communication interface when the second terminal information acquisition means for acquiring the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal. by the use permit means for permitting the use of the image forming apparatus, identification information assigned to a device on the second connected network to the communication interface Chi, on the basis of the list of identification information of the device to be permitted to use the image forming apparatus, and a filter means for receiving a packet from the device to permit use of the image forming apparatus, the authority means, said information When the terminal information acquired from the processing device matches the terminal information acquired from the terminal, the image forming apparatus adds identification information of the terminal to the list .

The invention according to claim 2, when the use of the image forming apparatus by the terminal is completed, further comprising a usage termination means for deleting the identification information of the terminal from the list, the image formation according to claim 1 Device.

A third aspect of the present invention is the image forming apparatus according to the first or second aspect , further comprising an assigning unit that assigns identification information to a device on a network connected to the second communication interface.

According to a fourth aspect of the present invention, the second terminal information acquisition means acquires terminal information of the terminal from a packet received from the terminal in communication for the assignment means to assign identification information to the terminal. The image forming apparatus according to claim 3 .

The invention according to claim 5 includes an image forming apparatus and an information processing apparatus, and the information processing apparatus associates user information for identifying a user with terminal information for identifying a terminal. The image forming apparatus is associated with the acquired user information via the first communication interface from the information processing apparatus and a user information acquisition unit that acquires user information. First terminal information acquisition means for acquiring the obtained terminal information, second terminal information acquisition means for acquiring terminal information from the terminal via the second communication interface, terminal information acquired from the information processing apparatus, , if the terminal information acquired from the terminal match, and use permit means for permitting use of the image forming apparatus according to the terminal via the second communication interface, Of the identification information assigned to the devices on the network connected to the second communication interface, the device that permits the use of the image forming device based on the list of the identification information of the device that permits the use of the image forming device. Filter means for accepting a packet from the terminal, and the use permission means sets the terminal identification information when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal. An image forming system to be added to the list .

The invention according to claim 6 further includes a user authentication device that authenticates the acquired user information, wherein the first terminal information acquisition unit acquires terminal information associated with the authenticated user information. The image forming system according to claim 5 .

The invention according to claim 7 is a user information acquisition means for acquiring user information for identifying a user, an information processing for holding correspondence information in which user information and terminal information for identifying a terminal are associated with each other First terminal information acquisition means for acquiring terminal information associated with the acquired user information from the device via the first communication interface, and terminal information from the terminal via the second communication interface Second terminal information acquisition means, and when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal, the terminal via the second communication interface use permit means for permitting the use of the image forming apparatus, identification information assigned to a device on the second connected network to the communication interface , Based on said list of identification information of the device to be permitted to use the image forming apparatus, a program for the filter means for receiving a packet from the device to allow the use of the image forming apparatus, causing a computer to function as the The use permission unit is a program for adding identification information of the terminal to the list when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal .

According to the invention described in claim 1, it is possible that the user of the terminal to use the image forming apparatus via another communication interface, even if there is no permission to access the network to the image forming apparatus is connected, the image It is possible to prevent access from terminals other than those permitted to use the forming apparatus .

According to the second aspect of the present invention, when the communication between the image forming apparatus and the terminal is ended, the communication can be unilaterally cut off from the image forming apparatus side without requiring extra communication for the end. Is possible.

According to the third aspect of the present invention, the list can be easily managed by using the identification information assigned by itself.

According to the invention described in claim 4 , it is possible to acquire the terminal information when assigning the identification information to the terminal.

According to the invention described in claim 5, it is possible that the user of the terminal to use the image forming apparatus via another communication interface, even if there is no permission to access the network to the image forming apparatus is connected, the image It is possible to prevent access from terminals other than those permitted to use the forming apparatus .

According to the invention described in claim 6 , it is possible to acquire terminal information after performing user authentication.

According to the invention described in claim 7, it is possible that the user of the terminal to use the image forming apparatus via another communication interface, even if there is no permission to access the network to the image forming apparatus is connected, the image It is possible to prevent access from terminals other than those permitted to use the forming apparatus .

1 is a block diagram illustrating a configuration example of an image forming system. 1 is a block diagram illustrating a configuration example of an image forming apparatus. It is a figure which shows the example of the content of a permission terminal list. It is a figure which shows the example of the content of an allocation list. It is a figure which shows the example of the content of the permission IP address list. FIG. 6 is a flowchart illustrating an operation example of the image forming apparatus. FIG. 7 is a continuation of FIG. FIG. 10 is a sequence diagram illustrating an operation example of the image forming system. It is a continuation of FIG. It is a sequence diagram concerning a modification.

  Embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram illustrating a configuration example of the image forming system 1. The image forming system 1 includes an image forming apparatus 2, a terminal 3, an authentication server 4, a usage authority server 5, and a personal computer 6 (PC).

  The image forming apparatus 2 includes a plurality of communication interfaces (communication IF). The image forming apparatus 2 is connected to a wired network via the first communication IF, and can communicate with the authentication server 4, the usage authority server 5, and the PC 6 via the first communication IF. However, the present invention is not limited to this, and a wireless network may be used instead of the wired network.

  The image forming apparatus 2 is connected to the wireless network via the second communication IF, and can communicate with the terminal 3 via the second communication IF. The wireless communication between the image forming apparatus 2 and the terminal 3 is, for example, one-to-one direct wireless communication not via an access point. This direct wireless communication is, for example, wireless communication by WiFi direct.

  The terminal 3 is a portable information terminal such as a smartphone or a tablet computer, for example.

  The authentication server 4 is an example of a user authentication device, and includes an authentication database for authenticating a user who uses the image forming system 1. Note that the authentication server 4 and the usage authority server 5 may be configured as a single server.

  The usage authority server 5 is an example of an information processing apparatus, and holds a permitted terminal list in which terminals of users who are permitted in advance to use the image forming apparatus 2 are registered. The permitted terminal list is an example of correspondence information.

  FIG. 2 is a block diagram illustrating a configuration example of the image forming apparatus 2. The image forming apparatus 2 includes a control unit 10, a first communication interface 11, a second communication interface 12, and a card reader 13. In addition, the image forming apparatus 2 includes a printing unit, a scanner unit, a user interface (UI) unit, and the like (not shown).

  For example, the control unit 10 includes a computer including a CPU and a memory, and the CPU executes information processing according to a program stored in the memory. The program may be provided from a computer-readable information recording medium such as a CD-ROM, or may be provided via a communication line such as the Internet.

  The control unit 10 obtains the user information acquisition unit 21, the terminal information request unit 23, the first terminal information acquisition unit 25, the allocation unit 27, and the second terminal information acquisition by executing information processing according to the program. A unit 29, a use permission unit 31, a filter unit 33, a filter management unit 35, a service execution unit 37, and a use end unit 39 are realized.

  Among these, the allocation unit 27, the second terminal information acquisition unit 29, the use permission unit 31, the filter unit 33, the filter management unit 35, and the use end unit 39 are connected to the wireless network via the second communication IF, for example. It functions as a WiFi direct communication module that implements WiFi direct wireless communication with the terminal 3 that has been connected.

  The user information acquisition unit 21 acquires user information from the card reader 13 and outputs the user information to the terminal information request unit 23. The card reader 13 reads user information from an IC card or a terminal possessed by the user.

  Specifically, the user information acquisition unit 21 outputs the user information acquired from the card reader 13 to the authentication server 4 via the first communication IF 11, and notifies the authentication server 4 that the user information has been authenticated. If received, the authenticated user information is output to the terminal information request unit 23.

  The terminal information request unit 23 outputs the user information received from the user information acquisition unit 21 to the usage authority server 5 via the first communication IF 11 and requests terminal information corresponding to the user information.

  The usage authority server 5 holds a permitted terminal list as shown in FIG. In the permitted terminal list, terminal information for identifying a terminal is associated with user information for identifying a user. The terminal information is information that can identify the terminal, such as a MAC address (Media Access Control address), an IMEI (International Mobile Equipment Identity) number, a terminal-specific device certificate, or a serial number. Further, in the permitted terminal list, user information is associated with authority information representing the user's use authority. The usage authority is, for example, a range of services available to the user, time, money, and the like.

  The first terminal information acquisition unit 25 acquires terminal information corresponding to the user information from the usage authority server 5 via the first communication IF 11 and outputs the terminal information to the usage permission unit 31. That is, the first terminal information acquisition unit 25 acquires the terminal information of the terminal of the user who is permitted to use the image forming apparatus 2 in advance from the usage authority server 5.

  The assigning unit 27 assigns identification information such as an IP address to devices on the wireless network connected to the second communication IF 12. The allocation unit 27 functions as, for example, a DHCP (Dynamic Host Configuration Protocol) server.

  The allocation unit 27 allocates identification information such as an IP address to the terminal 3 to be permitted when the permission notification from the use permission unit 31 is received. The assignment unit 27 holds an assignment list as shown in FIG. Specifically, the assigning unit 27 acquires terminal information from the terminal 3 through prior communication with the terminal 3 on the wireless network connected to the second communication IF 12, and the terminal information includes identification information such as an IP address. Associate.

  The second terminal information acquisition unit 29 acquires the terminal information acquired by the allocation unit 27 in advance communication with the terminal 3 from the allocation unit 27 and outputs the terminal information to the usage permission unit 31. That is, the second terminal information acquisition unit 29 acquires the terminal information of the user terminal 3 on the wireless network connected to the second communication IF 12.

  The use permission unit 31 determines whether the terminal information acquired from the first terminal information acquisition unit 25 and the terminal information acquired from the second terminal information acquisition unit 29 match. A permission notice for permitting assignment of identification information such as an IP address is output to the assignment unit 27.

  That is, the use permission unit 31 stores the terminal information acquired from the user terminal 3 on the wireless network connected to the second communication IF 12 in the user terminal registered in advance in the permitted terminal list of the use authority server 5. When it matches the terminal information, an assignment notification permitting assignment of identification information such as an IP address to the terminal 3 (and thus permitting use of the image forming apparatus 2 by the terminal 3) is output to the assignment unit 27. To do.

  The allocation unit 27 allocates identification information such as an IP address to the terminal 3 to be permitted when the permission notification from the use permission unit 31 is received. Further, the assigning unit 27 outputs identification information such as an IP address assigned to the terminal 3 to be permitted to the filter managing unit 35 and registers it in the permitted IP address list held by the filter managing unit 35.

  The filter unit 33 determines whether the packet data received via the second communication IF 12 can be accepted by the service execution unit 37 based on the permitted IP address list held by the filter management unit 35. The filter unit 33 functions as a firewall, for example. The filter management unit 35 holds a permitted IP address list as shown in FIG. 5, and the filter unit 33 has identification information such as an IP address registered in the permitted IP address list held by the filter management unit 35. Only the packet data from the existing terminal 3 is transferred to the service execution unit 37.

  That is, the terminal 3 owned by the user can use the image forming apparatus 2 by registering identification information such as the IP address assigned by the assigning unit 27 in the permitted IP address list held by the filter managing unit 35. It becomes possible.

  The service execution unit 37 executes services such as printing and scanning based on the packet data received from the terminal 3 via the second communication IF 12. Further, the service execution unit 37 restricts the use of the image forming apparatus 2 that exceeds the range of services, time, money, etc. that can be used by the user, based on the authority information acquired together with the terminal information from the usage authority server 5. When the service execution is completed, the service execution unit 37 outputs an end notification to the use end unit 39.

  The use end unit 39 receives the end notification from the service execution unit 37 or receives the end notification from the terminal 3 owned by the user, and the like from the permitted IP address list held by the filter management unit 35. The identification information such as the IP address is deleted. As a result, reception of packet data from the terminal 3 is blocked, and the image forming apparatus 2 cannot be used.

  6 and 7 are flowcharts showing an operation example of the image forming apparatus 2.

  When the user holds the IC card or the terminal 3 over the card reader 13, the control unit 10 acquires user information from the card reader 13 (S11-S13), and authenticates the acquired user information via the first communication IF 11. Confirm with the server 4 (S14).

  When the authentication by the authentication server 4 fails (S15), the control unit 10 notifies the user that the authentication is not possible using a UI unit (not shown).

  On the other hand, when the authentication by the authentication server 4 is successful (S15), the control unit 10 outputs the acquired user information to the usage authority server 5 via the first communication IF 11, and associates the usage authority server 5 with the user information. Terminal information and authority information obtained are acquired (S17).

  If the terminal information cannot be acquired, that is, if the terminal 3 has no authority to use (S18), the control unit 10 notifies the user that the terminal information cannot be acquired using a UI unit (not shown) (S19).

  On the other hand, when the terminal information can be acquired, that is, when the terminal 3 has a use authority (S18), the control unit 10 notifies the own WiFi direct module of the acquired terminal information (S20).

  Further, the control unit 10 acquires the terminal information of the terminal 3 from the packet data related to the WiFi direct received from the terminal 3 via the second communication IF 12 (S21). That is, the user operates the terminal 3 and searches for the image forming apparatus 2 using the WiFi direct function of the terminal 3. The terminal information of the terminal 3 is acquired from the packet data transmitted from the terminal 3 to the image forming apparatus 2 at the time of searching by the WiFi direct function.

  When the terminal information acquired from the usage authority server 5 via the first communication IF 11 and the terminal information acquired from the terminal 3 via the second communication IF 12 do not match (S22), the control unit 10 Is notified to the user through a UI unit (not shown) (S19).

  On the other hand, when the terminal information acquired from the usage authority server 5 via the first communication IF 11 matches the terminal information acquired from the terminal 3 via the second communication IF 12 (S22), the control unit 10 Communication with the terminal 3 via the second communication IF 12 is permitted (S23).

  Thereby, the control unit 10 can accept the use of the print service and the scan service by the terminal 3 via the second communication IF 12 (S24). The control unit 10 may store communication contents when the terminal 3 uses the service in association with user information or terminal information.

  Thereafter, the control unit 10 accepts authentication cancellation (S25).

  When the authentication cancellation by the operation of the authentication cancellation button of the image forming apparatus 2 is received (S26), the control unit 10 transmits display information for confirming whether the authentication can be canceled to the terminal 3, and further the terminal 3 When a notification indicating that the user has agreed to cancel the authentication is received (S27), the control unit 10 performs the authentication cancellation (S28) and blocks communication with the terminal 3 (S29).

  When the authentication cancellation by the operation of the terminal 3 is received (S26, S30), the control unit 10 performs the authentication cancellation (S28) and cuts off the communication with the terminal 3 (S29).

  When the usage by the terminal 3 exceeds the usage authority (S26, S30), the control unit 10 transmits display information for notifying the user that the usage authority has been exceeded to the terminal 3 (S31). The authentication is canceled (S28), and the communication with the terminal 3 is blocked (S29).

  Note that, when the service with the terminal 3 is interrupted when the communication with the terminal 3 is interrupted, the communication with the terminal 3 may be interrupted after waiting for the completion of the service. If the usage authority is exceeded, communication with the terminal 3 may be blocked without waiting for an operation by the user.

  8 and 9 are sequence diagrams illustrating an operation example of the image forming system 1. In the figure, the operation of the control unit 10 described above is described more specifically.

  First, when the user holds the IC card or the terminal 3 over the image forming apparatus 2, the image forming apparatus 2 acquires user information (P01).

  When the user information is acquired, the image forming apparatus 2 confirms the acquired user information with the authentication server 4 via the first communication IF 11 (P02). If the acquired user information is user information registered in the authentication database, the authentication server 4 notifies the image forming apparatus 2 that authentication has been performed.

  When the user information is authenticated, the image forming apparatus 2 requests the usage authority server 5 for the MAC address (an example of terminal information) associated with the acquired user information via the first communication IF 11 (P03). The usage authority server 5 obtains information such as a MAC address as information for identifying a terminal associated with the acquired user information, and a service, time, amount, etc. that can be used by the user as authority information set by the user. The information is read from the permitted terminal list and transmitted to the image forming apparatus 2.

  When acquiring the MAC address, the image forming apparatus 2 notifies the WiFi direct module of the acquired MAC address (P04).

  The terminal 3 starts WiFi direct negotiation with the image forming apparatus 2 via the second communication IF 12 (P05). At this time, the image forming apparatus 2 behaves as a group owner (GO).

  When the user performs an operation of selecting the image forming apparatus 2, the terminal 3 starts searching using the WiFi direct function and transmits a DHCP packet to the image forming apparatus 2 (P06). The image forming apparatus 2 acquires the MAC address of the terminal 3 from the received DHCP packet (P07). The DHCP packet transmitted here is a discover message (DHCP Discover) that requests the image forming apparatus 2 to assign an IP address.

  The operation of P05-P07 may be before or after the operation of P02-P04.

  When the MAC address acquired from the usage authority server 5 via the first communication IF 11 matches the MAC address acquired from the terminal 3 via the second communication IF 12, the image forming apparatus 2 An IP address is assigned, and the assigned IP address is registered in the permitted IP address list as a permitted IP address for which communication is permitted.

  At this time, a DHCP packet is exchanged between the image forming apparatus 2 and the terminal 3. Specifically, the image forming apparatus 2 transmits an offer message (DHCP Offer) for notifying an available IP address (P06-1), and the terminal 3 officially requests an IP address assignment. Request message (DHCP Request) is transmitted (P09). Thereafter, the image forming apparatus 2 transmits an acknowledge message (DHCP Ack) for allowing the requested IP address to be assigned, and the terminal 3 performs setting for using the assigned IP address. Thereby, the IP address of the terminal 3 is determined.

  When the IP address assigned to the terminal 3 is registered in the permitted IP address list, the terminal 3 starts communication for using the print service or scan service of the image forming apparatus 2 (P10). The image forming apparatus 2 may store communication contents when the terminal 3 uses the service in association with user information or terminal information.

  Thereafter, when the image forming apparatus 2 receives the authentication cancellation by the operation of the authentication cancellation button (P11), the image forming apparatus 2 transmits display information for confirming whether the authentication can be canceled to the terminal 3 (P12). When the user performs an operation for agreeing to cancel the authentication, the terminal 3 transmits a notification that the user has agreed to cancel the authentication to the image forming apparatus 2. When the notification that the user has agreed to cancel the authentication is received, the image forming apparatus 2 deletes the IP address of the terminal 3 from the permitted IP address list and blocks communication (P13).

  When the user performs an operation for deauthentication at the terminal 3, the terminal 3 requests the image forming apparatus 2 to deauthenticate (P14), and the image forming apparatus 2 notifies the terminal 3 that deauthentication is to be performed. Then, the IP address of the terminal 3 is deleted from the permitted IP address list, and communication is blocked (P13).

  Further, when the use of the image forming apparatus 2 exceeds the range of services, time, money, etc. that can be used by the user, the image forming apparatus 2 notifies the terminal 3 that the communication is cut off and permits the use. The IP address of the terminal 3 is deleted from the IP address list, and communication is blocked (P13).

  FIG. 10 is a sequence diagram according to a modification. In the figure, during the period when the first user terminal 3 can use the service of the image forming apparatus 2, the second user terminal 3 also uses the service of the image forming apparatus 2 through the operations of P1-P10. The operation when it becomes possible is shown.

  When the authentication cancellation button of the image forming apparatus 2 is pressed while a plurality of terminals 3 can use the service of the image forming apparatus 2, there is a problem that it is not possible to determine which terminal 3 is to be deauthenticated.

  Therefore, when the image forming apparatus 2 accepts the authentication cancellation by the operation of the authentication cancellation button when a plurality of terminals 3 can use the service of the image forming apparatus 2 (S21), which of the terminals 3 is to be deauthenticated Is displayed on a UI unit (not shown), and selection by the user is accepted (S22).

  If the user performs an operation of selecting a terminal 3 whose authentication is to be canceled using a UI unit (not shown), the image forming apparatus 2 accepts the authentication cancellation of the selected terminal 3 (P23), and may the authentication be canceled? Display information for confirmation is transmitted to the selected terminal 3 (P24). Here, it is assumed that the authentication cancellation of the terminal 3 of the first user has been input.

  Thereafter, when the first user performs an operation for agreeing to cancel the authentication, the terminal 3 transmits a notification to the image forming apparatus 2 that the user has agreed to cancel the authentication. When receiving a notification that the user has agreed to deauthenticate, the image forming apparatus 2 deletes the IP address of the terminal 3 of the first user from the permitted IP address list and blocks communication (P25).

  Note that after the number of terminals 3 that can use the service of the image forming apparatus 2 becomes one, the image forming apparatus 2 accepts the authentication cancellation by operating the authentication cancellation button as in FIG. 9 (S13). , After sending display information for confirming whether authentication can be canceled without displaying a message asking which terminal 3 authentication is to be canceled on the UI unit (P12), the permitted IP address The IP address of the terminal 3 is deleted from the list, and communication is blocked (P13).

  Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and various modifications can be made by those skilled in the art.

  DESCRIPTION OF SYMBOLS 1 Image forming system, 2 Image forming apparatus, 3 Terminal, 4 Authentication server, 5 Usage authority server, 6 Personal computer, 10 Control part, 11 1st communication interface, 12 2nd communication interface, 13 Card reader, 21 User Information acquisition unit, 23 Terminal information request unit, 25 First terminal information acquisition unit, 27 Allocation unit, 29 Second terminal information acquisition unit, 31 Usage permission unit, 33 Filter unit, 35 Filter management unit, 37 Service execution unit 39 End of use.

Claims (7)

User information acquisition means for acquiring user information for identifying a user;
Terminal information associated with the acquired user information from the information processing apparatus holding correspondence information in which user information and terminal information for identifying the terminal are associated with each other via the first communication interface. First terminal information acquisition means for acquiring
Second terminal information acquisition means for acquiring terminal information from the terminal via the second communication interface;
Usage permission means for permitting use of the image forming apparatus by the terminal via the second communication interface when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal. When,
Of the identification information assigned to the devices on the network connected to the second communication interface, the device that permits the use of the image forming device based on the list of the identification information of the device that permits the use of the image forming device. Filter means for accepting packets from
The use permission unit adds identification information of the terminal to the list when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal.
Image forming apparatus. When the use of the image forming apparatus by the terminal ends, the terminal further includes a use end unit that deletes the terminal identification information from the list
The image forming apparatus according to claim 1 . An assigning unit for assigning identification information to a device on a network connected to the second communication interface;
The image forming apparatus according to claim 1 or 2. The second terminal information acquisition means acquires terminal information of the terminal from a packet received from the terminal in communication for assigning identification information to the terminal by the assignment means.
The image forming apparatus according to claim 3 . An image forming apparatus and an information processing apparatus,
The information processing apparatus includes:
Holding correspondence information in which user information for identifying a user and terminal information for identifying a terminal are associated with each other;
The image forming apparatus includes:
User information acquisition means for acquiring user information;
First terminal information acquisition means for acquiring terminal information associated with the acquired user information from the information processing apparatus via a first communication interface;
Second terminal information acquisition means for acquiring terminal information from the terminal via the second communication interface;
Usage permission for permitting use of the image forming apparatus by the terminal via the second communication interface when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal Means,
Of the identification information assigned to the devices on the network connected to the second communication interface, the device that permits the use of the image forming device based on the list of the identification information of the device that permits the use of the image forming device. Filter means for accepting packets from,
Bei to give a,
The use permission unit adds identification information of the terminal to the list when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal.
Image forming system. A user authentication device for authenticating the acquired user information;
The first terminal information acquisition means acquires terminal information associated with the authenticated user information;
The image forming system according to claim 5 . User information acquisition means for acquiring user information for identifying a user;
Terminal information associated with the acquired user information from the information processing apparatus holding correspondence information in which user information and terminal information for identifying the terminal are associated with each other via the first communication interface. First terminal information acquisition means for acquiring
Second terminal information acquisition means for acquiring terminal information from the terminal via the second communication interface; and
Usage permission means for permitting use of the image forming apparatus by the terminal via the second communication interface when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal. ,
Of the identification information assigned to the devices on the network connected to the second communication interface, the device that permits the use of the image forming device based on the list of the identification information of the device that permits the use of the image forming device. Filter means to accept packets from,
As a program for causing a computer to function as
The use permission unit adds identification information of the terminal to the list when the terminal information acquired from the information processing apparatus matches the terminal information acquired from the terminal.
program.

Images