JP6205946B2 - Service providing system, information collecting method and program - Google Patents

Description

  The present invention relates to a service providing system, an information collecting method, and a program.

  For example, companies have taken various measures for reducing useless printing or useless copying in order to reduce TCO (Total Cost of Ownership) with respect to the use of image forming apparatuses. As one of such measures, execution of printing or copying in a relatively low-cost manner such as monochrome printing or monochrome copying is encouraged. In addition, there are companies that have introduced an information processing system for grasping the usage status of an image forming apparatus and for restricting setting information relating to a print job, a copy job, and the like (for example, restriction on color printing).

  In the conventional information processing system, although it is possible to confirm the reduction effect as a whole, it is difficult to grasp which measure is effective. For example, even if the number of monochrome prints performed in the conventional information processing system could be grasped, the monochrome print was selected by the user's intention or was forced to be changed to monochrome print by the information processing system It was difficult to figure out.

  An information processing device, a program, and an information display device that assist in grasping the cause of cost reduction are conventionally known (see, for example, Patent Document 1).

  Conventionally, the function for supporting the grasp of the cost reduction factor provided by the information processing apparatus is an example of a service assumed to be provided in a private network such as in an office environment.

  Therefore, the function that supports the grasp of the cost reduction factor provided by the information processing device controls the service provision according to the service provision destination such as the user, organization, company, etc. Not supposed to do. For this reason, it has been difficult for the function that supports the grasp of the cost reduction factor provided by the information processing apparatus to control the service provision according to the service provider. Service provision from the cloud environment is an example of a service provision form.

  Embodiments of the present invention have been made in view of the above points, and provide a service providing system, an information collecting method, and a program that can control the provision of a service that supports the understanding of the factors of cost reduction according to the service provider. For the purpose.

To achieve the above object, the present claim 1 is composed of more than one information processing apparatus, a service providing system for providing a service to the service using apparatus connected via a network, a service providing destination identifying information, service identification information of the service to be provided, the user identification information of the user who uses the service, and a management information storage means for storing management information that associates the device identification information of the service using apparatus, the service Authentication information receiving means for receiving user authentication information used for user authentication or apparatus authentication information used for apparatus authentication as authentication information from the apparatus; authentication means for executing authentication processing of the received authentication information; and the authentication When the information is authenticated, the service associated with the authentication information is based on the authentication information and the management information. And service specifying means for specifying, upon receiving the usage request of the specified the service from the service using apparatus, and a means for executing a process corresponding to the usage request of the service, the execution unit, the service The service usage record information stored in association with the information for identifying the provider and the user identification information, and the service usage request according to the information for identifying the service provider and the track record information a rule information to be applied to the process, based on the user of the service provision destination of the and determining applicability rules determining means for rule information to be applied to the user, the application rule is determined by the determining means that said service provision destination Rule information applying means for applying the rule information applied to the service to processing according to the service use request, and the rule information application Stage by, characterized in that it comprises a storage means for storing a record of the rule information applied to the process according to the use requirements of the service.

  According to the embodiment of the present invention, it is possible to control the provision of a service that supports the understanding of the factor of cost reduction according to the service provider.

It is a lineblock diagram of an example of an information processing system concerning this embodiment. It is a hardware block diagram of an example of the computer system which concerns on this embodiment. It is a process block diagram of an example of the service provision system which concerns on this embodiment. It is a block diagram of an example of license information. The block diagram of an example of tenant information is shown. The block diagram of an example of user information is shown. The block diagram of an example of apparatus information is shown. The block diagram of an example of external service information is shown. It is a flowchart of an example showing the process sequence from tenant registration to service registration. It is an image figure of an example of a usage agreement screen. It is a sequence diagram of an example of user authentication and device authentication processing. It is a figure for demonstrating an example of the data processing function with which a service provision system is provided. It is a flowchart of an example showing the process sequence of the data processing function with which a service provision system is provided. It is a figure for demonstrating the data processing which divides the processing content of one data processing into the processing content of several data processing. It is a flowchart of an example of the authorization setting with respect to online storage. It is a flowchart of an example of a cooperation process with online storage. It is a processing block diagram of an example of a print service application. 1 is a processing block diagram of an example of an image forming apparatus. It is a block diagram of an example of upper limit management information. It is a block diagram of an example of rule information. It is a block diagram of an example of a consumption coefficient. FIG. 6 is a configuration diagram of an example of log information related to a print job. FIG. 10 is a sequence diagram illustrating an example of a processing procedure regarding a print job. 10 is a flowchart illustrating an example of a processing procedure executed by the image forming apparatus in response to a print job operation instruction.

Next, embodiments of the present invention will be described in detail.
[First Embodiment]
<System configuration>
FIG. 1 is a configuration diagram of an example of an information processing system according to the present embodiment. The information processing system 1 in FIG. 1 includes a private network N1 in the office, a network N2 of a service providing system 2 represented by a cloud service, and a network N3 such as the Internet. Networks N1 to N3 are examples of network environments.

  A firewall FW is installed in the network N1 in the office. The firewall FW restricts access from unauthorized access sources. An access control device 21 is installed in the network N2 of the service providing system 2. The access control device 21 restricts access via the network N3.

  The network N1 in the office is a private network inside the firewall FW. A terminal device 11, an image forming device 12, an authentication device 13, and other devices 14 are connected to the network N1.

  The terminal device 11 can be realized by an information processing device (computer system) equipped with a general OS or the like. The terminal device 11 is a device that can be operated by the user, such as a PC, a tablet PC, a notebook PC, a smartphone, or a mobile phone.

  The image forming apparatus 12 is an apparatus having an image forming function, such as a multifunction machine, a copier, a scanner, or a laser printer. The authentication device 13 can be realized by an information processing device equipped with a general OS or the like. The authentication device 13 provides a user authentication function. The other device 14 is a device such as a projector or an electronic blackboard device.

  Note that the terminal device 11, the image forming device 12, the authentication device 13, and the other devices 14 have wireless communication means or wired communication means. FIG. 1 shows an example in which the terminal device 11, the image forming device 12, the authentication device 13, and other devices 14 are each one, but a plurality of devices may be used.

  The service providing system 2 is a system constructed by a provider who provides a cloud service via the network N3. In addition, although this embodiment has described the cloud service as an example, it may be applied to a service provided via the network N3, such as a service provided by an ASP (Application Service Provider) or a Web service.

  The network N2 of the service providing system 2 is connected to the network N3 by the access control device 21. The network N2 includes an access control device 21, a print service providing device 22, a distribution service providing device 23, a portal service providing device 24, an authentication device 26, a data processing control device 27, a data processing execution control device 28, and a data processing device 29. It is connected.

  Details of the print service providing device 22, the distribution service providing device 23, the portal service providing device 24, the authentication device 26, the data processing control device 27, the data processing execution control device 28, and the data processing device 29 will be described later.

  Each device in the service providing system 2 such as the access control device 21 and the print service providing device 22 is realized by one or more information processing devices. That is, each device in the service providing system 2 may be realized by a single information processing device, or may be realized by being distributed to a plurality of information processing devices.

  Each device in the service providing system 2 may be realized by being integrated into one computer. In other words, the number of information processing devices constituting each device in the service providing system 2 does not limit the scope of application of the present invention.

  Also, some or all of the devices in the service providing system 2 may be realized in a private network such as the network N1 in the office. The information processing system 1 according to the present embodiment shows a preferable example. For example, the scope of the present invention is not limited by whether or not there is a firewall FW between the service providing system 2 and each device in the network N1 in the office that is accessed to use the service providing system 2.

  The service providing system 2 can be broadly divided into an apparatus that realizes a service providing function for providing various services and an apparatus that realizes a platform function that can be commonly used when providing various services.

  The print service providing device 22, the distribution service providing device 23, and the portal service providing device 24 are examples of devices that realize a service providing function for providing various services. The authentication device 26, the data processing control device 27, the data processing execution control device 28, and the data processing device 29 are examples of devices that realize a platform function that can be commonly used when providing various services.

  The general method of the service providing system 2 as described above is a conceptual way of understanding the present invention in an easy-to-understand manner, and the service providing system 2 must be configured based on such a way of understanding. It ’s not that.

  Further, a terminal device 11, a mail server 31, an online storage 32, and the like are connected to a network N3 such as the Internet. As shown in FIG. 1, the terminal device 11 may be connected to a network other than the network N1 in the office. The information processing system 1 in FIG. 1 shows an example in which a terminal device 11 is connected to a network N1 in an office and a network N3 such as the Internet.

  The mail server 31 performs processing related to electronic mail such as transmission and reception of the user's electronic mail. The online storage 32 performs a process related to a service that lends a storage area of the storage. The mail server 31 and the online storage 32 are realized by one or more information processing apparatuses.

<Hardware configuration>
The terminal device 11 and the authentication device 13 in FIG. 1 are realized by a computer system having a hardware configuration as shown in FIG. 2, for example. Similarly, each device in the service providing system 2 such as the access control device 21 and the print service providing device 22 in FIG. 1 is realized by a computer system having a hardware configuration as shown in FIG. The mail server 31 and online storage 32 of FIG. 1 are also realized by a computer system having a hardware configuration as shown in FIG. FIG. 2 is a hardware configuration diagram of an example of a computer system according to the present embodiment.

  A computer system 500 shown in FIG. 2 includes an input device 501, a display device 502, an external I / F 503, a RAM 504, a ROM 505, a CPU 506, a communication I / F 507, an HDD 508, and the like, which are mutually connected by a bus B. .

  The input device 501 includes a keyboard, a mouse, a touch panel, and the like, and is used by a user to input each operation signal. The display device 502 includes a display or the like, and displays a processing result by the computer system 500.

  The communication I / F 507 is an interface that connects the computer system 500 to the networks N1 to N3. Thereby, the computer system 500 can perform data communication via the communication I / F 507.

  The HDD 508 is a non-volatile storage device that stores programs and data. The stored programs and data include, for example, an OS that is basic software for controlling the entire computer system 500, and application software that provides various functions on the OS.

  The external I / F 503 is an interface with an external device. The external device includes a recording medium 503a. Accordingly, the computer system 500 can read and / or write the recording medium 503a via the external I / F 503. Examples of the recording medium 503a include a flexible disk, a CD, a DVD, an SD memory card, and a USB memory.

  The ROM 505 is a nonvolatile semiconductor memory (storage device) that can retain programs and data even when the power is turned off. The ROM 505 stores programs and data such as BIOS, OS settings, and network settings that are executed when the computer system 500 is started up. The RAM 504 is a volatile semiconductor memory (storage device) that temporarily stores programs and data.

  The CPU 506 is an arithmetic device that realizes control and functions of the entire computer system 500 by reading a program and data from a storage device such as the ROM 505 and the HDD 508 onto the RAM 504 and executing processing.

<Software configuration>
《Service provision system》
FIG. 3 is a processing block diagram of an example of the service providing system according to the present embodiment. The service providing system 2 of FIG. 3 implements a service application 51, a platform 52, a management data storage unit 53, and a platform API (Application Programming Interface) 54 by executing a program.

  The service application 51 of FIG. 3 includes a portal service application 61, a print service application 62, and a distribution service application 63 as an example. The service application 51 is an application having a function for providing various services.

  For example, the portal service application 61 is implemented in the portal service providing apparatus 24 of FIG. The print service application 62 is implemented in the print service providing apparatus 22. The distribution service application 63 is implemented in the distribution service providing apparatus 23.

  The portal service application 61 is an application that provides a portal site for a user to use various services such as a print service and a distribution service. The portal service application 61 performs tenant registration processing, service registration processing, and various management information registration processing described later in cooperation with the platform 52 as processing for the user to use various services.

  The print service application 62 is an application that provides a print service that realizes printing by the image forming apparatus 12 by storing, for example, print data and transmitting the print data to the image forming apparatus 12.

  The distribution service application 63 is an application that provides a distribution service that performs data processing on image data transmitted from various apparatuses such as the image forming apparatus 12 and distributes the processed data to the online storage 32 of FIG.

  The service application 51 is not limited to the example of FIG. 1, and may have an application that provides a service for transmitting stored image data (projection data) to another device 14 such as a projector. The service application 51 may include an application that provides a service for transmitting stored image data (projection data) to another device 14 such as an electronic blackboard device. As described above, the service application 51 has an application that provides some service to each apparatus such as the image forming apparatus 12 used by the user.

  The platform API 54 is an interface for the service application 51 to use the platform 52. The platform API 54 is a predefined interface provided for the platform 52 to receive a request from the service application 51, and is configured by a function, a class, or the like, for example. Note that when the service providing system 2 is configured to be distributed among a plurality of information processing apparatuses, for example, a Web API that can be used via a network can be used as the platform API 54.

  The platform 52 includes a communication unit 71, an access control unit 72, a mail transmission unit 73, a setting registration unit 74, an authorization setting processing unit 75, a license authentication unit 76, a user authentication unit 77, a user device authentication unit 78, and an in-house cooperation authentication unit 79. The external cooperation authentication unit 80, the data processing control unit 81, one or more processing queues 82, one or more data processing requesting units 83, and one or more data processing units 84.

  The communication unit 71 is a functional unit that executes communication with each apparatus such as the image forming apparatus 12, and is implemented in the access control apparatus 21 of FIG. 1, for example. The access control unit 72 is a functional unit that executes access control according to various types of access requested from each device such as the image forming device 12 to the service providing system 2, and is implemented in the access control device 21, for example.

  The mail transmission unit 73 is a functional unit that transmits mail, and is implemented in, for example, the authentication device 26 of FIG. The setting registration unit 74 is a functional unit that sets and registers various types of management data stored in the management data storage unit 53, and is implemented in the authentication device 26, for example. The authorization setting processing unit 75 is a functional unit that executes processing for setting authorization for an external service such as the online storage 32, and is implemented in the authentication device 26, for example.

  The license authentication unit 76 is a functional unit that performs authentication related to a license based on later-described license information and tenant information stored in the management data storage unit 53, and is implemented in the authentication device 26, for example. The user authentication unit 77 is a functional unit that performs user authentication based on a login request from a device that does not require device authentication, such as the terminal device 11, and is implemented in the authentication device 26, for example. The user device authentication unit 78 is a functional unit that performs user authentication based on a login request from a device that requires device authentication, such as the image forming device 12, and is implemented in the authentication device 26, for example.

  An in-house cooperation authentication unit 79 is a functional unit that performs user authentication when a user performs authentication by the authentication device 13 of FIG. 1 and logs in using a user ID acquired from the authentication device 13 in an apparatus such as the image forming apparatus 12. For example, it is implemented in the authentication device 26. The external cooperation authentication unit 80 is a functional unit that executes an authentication process for logging in to the online storage 32 in FIG. 1, and is implemented in the authentication device 26, for example.

  The data processing control unit 81 is a functional unit that controls data processing to be executed based on a request from the service application 51, and is implemented in the data processing control device 27, for example. The one or more processing queues 82 are message queues corresponding to the type of data processing, and a request message related to data processing is registered from the data processing control unit 81. The processing queue 82 is implemented in the data processing control device 27, for example.

  The one or more data processing requesting units 83 monitor the processing queue 82 assigned to the one or more data processing requesting units 83 and receive a request message related to data processing from the processing queue 82. The data processing request unit 83 is a functional unit that requests the data processing unit 84 to execute data processing corresponding to the received message, and is implemented in the data processing execution control device 28, for example.

  The one or more data processing units 84 are functional units that execute data processing in response to a request from the data processing requesting unit 83, and are implemented in the data processing device 29, for example. Examples of the data processing executed by the data processing unit 84 include a request dividing process requested by the service application 51, a data format conversion process for converting the data format, an OCR process for executing the OCR, and the like. Furthermore, examples of data processing executed by the data processing unit 84 include upload processing for uploading data to the online storage 32.

  Depending on the type of data processing, the data processing requesting unit 83 and the data processing unit 84 may be mounted in the data processing execution control device 28, for example.

  The management data storage unit 53 includes a management information storage unit 91, a data processing information storage unit 92, and a data storage unit 93 as an example.

  The management information storage unit 91 stores management information such as license information, tenant information, user information, and device information. The management information storage unit 91 is implemented in the authentication device 26, for example. The data processing information storage unit 92 stores information related to requested data processing. The data processing information storage unit 92 is implemented in the data processing control device 27, for example. The data storage unit 93 stores other data such as application data and print data. The data storage unit 93 is implemented in the data processing control device 27, for example.

  The management data stored in the management data storage unit 53 in FIG. 3 is as follows, for example. FIG. 4 is a configuration diagram of an example of license information. The license information has a license type, an ID, a registration code, and a registration state as data items. The license type is information indicating the type of license. There are tenant, print service, distribution service, etc. as license types. The ID is an ID of each license and is information used for license authentication. The registration code is information used when registering a tenant. The registration status is information indicating whether or not the license registration (ID registration) by the user has been completed (whether registered or not registered).

  FIG. 5 shows a configuration diagram of an example of tenant information. Tenant information has tenant ID, name, service ID, service type, expiration date, external service, address information, usage area information, etc. as data items. The tenant ID is an ID whose license type is “tenant” in the license information, and is registered when the user performs tenant registration.

  The name is a name set by the user when performing tenant registration. For example, a company name or an organization name is set. The service ID is an ID of a service whose license type is “print service” or “distribution service” in the license information, and is registered when the user performs service registration after tenant registration.

  The service type is information indicating the license type (service type) corresponding to the service ID. The expiration date is the expiration date of the service ID. The expiration date of the service ID registered in a specific device is managed from the time of registration.

  The external service is information representing an external service used in cooperation with the service providing system 2. An example of the external service is the online storage 32 shown in FIG. The address information is an email address of an administrator registered at the time of tenant registration. Use area information is information about the country / region where the service is used. The online storage 32 is an example of an external service. Information such as an account, password, authorization token, and scope, which will be described later, is an example of information used when using an external service.

  The authorization is to set a use range (authority) in using the service such as which service is used and which resource is allowed to be accessed when the user uses the service. Authorization can be set using a standard API authorization technique called OAuth, for example. From the viewpoint of using an external service such as the online storage 32 from the service providing system 2, the external service serves as an OAuth service provider, and the service providing system 2 serves as an OAuth consumer.

  FIG. 6 shows a configuration diagram of an example of user information. User information includes data items such as tenant ID, login user ID and password, in-house authentication user ID, online storage account, password, authorization token and scope, and address information. Have.

  User information manages information of each user in tenant ID units. The login user ID and password are authentication information used for user authentication when logging into the service providing system 2. The user ID for login may be a user name or the like as long as the user ID can be identified when logging in to the service providing system 2. The in-house authentication user ID is user identification information for identifying a user in the authentication device 13 of the network N1 in the office, and is used for user authentication when logging in using the user identification information acquired from the authentication device 13. It is. The user ID for in-house authentication may be user identification information that can identify the user in the authentication device 13 of the network N1 in the office, and may be a card ID of an IC card carried by the user, a terminal ID of a portable terminal, or the like.

  The account and password for online storage are authentication information used when logging into the online storage 32. The authorization token is information for using the online storage 32 within a specific authority range. The scope is information for specifying a use range set by authorization.

  The account may be a user ID, a user name, an address for online storage, or the like, and may be authentication information used for authentication when the user logs in to the target online storage 32. The address information is the user's mail address.

  FIG. 7 shows a configuration diagram of an example of device information. The device information includes tenant ID, device ID, service ID, service type, use start date, use end date, and the like as data items. The device information manages information on each device in units of tenant IDs.

  The device ID is information for identifying a device, and is information used for device authentication. An example of the device ID is the machine number of the device. The service ID and service type are the same information as the service ID and service type in the tenant information, and are registered when the user registers the service ID for a specific device.

  The use start date is information on the date when the service ID is registered. The use end date is information on the date when the expiration date of the registered service ID ends. The device registered in the device information can use the service of the registered service ID from the use start date to the use end date of the service ID.

  Depending on the type of service and the type of license, there may be an indefinite expiration date (substantially no expiration date limitation). In addition, even if the device information is not registered, some of the functions provided by the service providing system 2 can be used except for services (functions) that cannot be used unless device authentication is performed.

  In the present embodiment, the terminal device 11 is shown as an example of a device that does not require registration of device information. In the present embodiment, the image forming apparatus 12 is shown as an example of an apparatus that requires registration of apparatus information.

  Examples of functions that can be used in the terminal device 11 include management data setting registration, print data input, and deletion. Examples of functions that can be used in the image forming apparatus include acquisition of print data, transmission of distribution data, and the like.

  It is up to the provider who provides the service to determine what functions are required for device authentication and what functions are not required for device authentication. There may be no service.

  FIG. 8 shows a configuration diagram of an example of external service information. The external service information includes an external service ID, a service name, a client ID, a client secret, a product name, a scope, an authorization destination URL, a redirect destination URL, and the like as data items. The external service ID is information for specifying (identifying) the external service.

  The service name is the name of the external service. The client ID is information that identifies the service providing system 2 issued by an external service. The client secret is secret information for assuring the identity of the client ID, and is information that plays a role like a password. The product name is information for specifying the service application 51. The scope is information for specifying the usage range of the external service. The authorization destination URL is the URL of the authorization system provided in the external service (for example, the URL of the authorization server provided in the external service). The redirect destination URL is a URL of the service providing system 2 redirected from an external service (for example, a URL of a function as an authorization client of the authorization setting processing unit 75).

  As can be seen from the above description, the tenant ID is related to the service provided by the service providing system 2, the user using the service, and the device using the service, and the user, device, and service are managed in the service providing system 2. Information. The tenant ID is information (use target specifying information) that specifies a use target such as which service is provided to which user and further to which device among services that the service providing system 2 can provide.

<Details of processing>
Below, the detail of the process of the information processing system 1 which concerns on this embodiment is demonstrated.

<Processing from tenant registration to service registration>
FIG. 9 is a flowchart illustrating an example of a processing procedure from tenant registration to service registration. First, a user who wants to perform tenant registration (for example, an administrator of a company or organization) acquires a tenant ID and a registration code from a service provider (for example, a person in charge of providing and selling services) of the service providing system 2.

  Examples of the method for acquiring the tenant ID and the registration code include a method of acquiring directly from the service provider, a method of acquiring and accessing the dedicated site operated by the service provider from the user terminal device 11, and the like. .

  In step S <b> 1, the user operates the input device 501 of the terminal device 11 so that the terminal device 11 accesses the portal site of the service providing system 2. The terminal device 11 accesses the portal site of the service providing system 2 based on a user operation.

  Since the access control unit 72 of the service providing system 2 is an access to the portal site, the access from the terminal device 11 is permitted and the portal service application 61 is accessed.

  The portal service application 61 displays a top screen on the display device 502 of the terminal device 11. The user operates the input device 501 of the terminal device 11 and can select whether to request a login or a new tenant registration from the top screen. Here, the description will be continued assuming that a new tenant registration request is selected. If the user is registered in the user information of the management information storage unit 91 (administrator or other user), a login request can be selected by inputting the tenant ID, user ID, and password.

  When a new tenant registration is requested, the portal service application 61 of the service providing system 2 displays an input screen for temporarily registering a tenant ID on the display device 502 of the terminal device 11 in step S2. The user operates the input device 501 of the terminal device 11 to input for temporary registration of a tenant ID, and then requests temporary registration. The terminal device 11 makes a temporary registration request to the portal site of the service providing system 2 based on a user operation.

  The information input for temporary registration of the tenant ID includes, for example, information on the country / region where the service is used (usage region information) and the terms of service displayed according to the country / region where the service is used ( Information indicating that you agree with the Terms and Conditions). The information input for the temporary registration of the tenant ID includes information such as a tenant ID, a registration code, an e-mail address, and a language used.

  Therefore, the service providing system 2 holds information on terms of use (a contract) according to the country / region to be used. The portal service application 61 of the service providing system 2 performs display control for displaying the usage rule corresponding to the usage area information input for the temporary registration of the tenant ID by the user on the display device 502 of the terminal device 11, and the usage rule. Let the user choose whether or not to agree.

  FIG. 10 is an image diagram of an example of the usage agreement screen. The usage agreement screen 1010 displays a selection column 1011 for allowing the user to select a country / region where the service is to be used, a usage agreement column 1012 for displaying a usage agreement corresponding to the selection column 1011, and whether to accept the usage agreement. And a check box 1013 to be selected.

  When provisional registration is requested from the terminal device 11 of the user, the portal service application 61 performs a license authentication process for confirming the validity of the tenant ID and the registration code included in the information input for provisional registration of the tenant ID. Request to section 76. Upon receiving the request, the license authentication unit 76 executes the license authentication process, and the license information in FIG. 4 stored in the management information storage unit 91 stores the tenant ID and the registration code requested for the validity confirmation process. It is judged (verification).

  If the tenant ID and registration code for which the validity confirmation process is requested are stored, the license authentication unit 76 determines whether the registration state associated with the tenant ID and registration code is “unregistered”. .

  If the registration state is “unregistered”, the license authentication unit 76 determines that the tenant ID and registration code for which the validity confirmation processing is requested are valid information, and authenticates the tenant ID (license). . The license authentication unit 76 notifies the portal service application 61 of the license authentication result.

  When the tenant ID and the registration code are valid information, the portal service application 61 registers the tenant ID, e-mail address, and usage area information included in the information input to temporarily register the tenant ID in the setting registration unit 74. Request registration. The setting registration unit 74 registers the tenant ID, the mail address, and the usage area information in the tenant information in the management information storage unit 91 in response to a request from the portal service application 61.

  When registration is performed by the setting registration unit 74, the portal service application 61 generates a main registration URL as an access destination for displaying a main registration screen in step S3, and the main registration URL is described. Create an email. The portal service application 61 requests the mail transmission unit 73 to transmit the created mail. The e-mail transmission unit 73 transmits an e-mail addressed to the e-mail address included in the input information for provisional registration of the tenant ID.

  When the mail is transmitted by the mail transmitting unit 73, the portal service application 61 displays a notification screen indicating that the mail has been transmitted on the display device 502 of the terminal device 11. The main registration URL is managed, for example, by an expiration date (for example, one hour) from the time of generation. In addition, it is assumed that the email transmitted from the email transmission unit 73 does not describe at least one of the tenant ID and the registration code from the viewpoint of enhancing security.

  Next, the user operates the input device 501 of the terminal device 11 so as to access the main registration URL described in the received mail. The terminal device 11 accesses the main registration URL based on a user operation. Note that the terminal device 11 that accesses the URL for main registration may not be the same as the terminal device 11 that has requested temporary registration. The access control unit 72 causes the terminal device 11 to access the portal service application.

  The portal service application 61 confirms whether the access to the main registration URL is valid (access to the generated main registration URL and access within the expiration date). If it is valid, the portal service application 61 displays the main registration screen on the display device 502 of the terminal device 11.

  The user operates the input device 501 of the terminal device 11, inputs the tenant ID for main registration on the main registration screen, and then requests main registration. Information input on the registration screen is tenant information such as a tenant ID, name, and registration code, and user information such as a login user ID, password, and address information. Note that either the tenant ID or the registration code already entered by the user in the temporary registration of the tenant ID may be displayed in a state of being input in advance. However, from the viewpoint of security enhancement, at least one of the information to be input by the user out of the tenant ID or the registration code is not described in the e-mail containing the main registration URL as described above. .

  When the main registration is requested from the user terminal device 11, the portal service application 61 performs license activation processing (main registration processing) based on the tenant ID and registration code input on the main registration screen to the license authentication unit 76. Request.

  Upon receiving the request, the license authentication unit 76 executes a license authentication process, and determines whether the tenant ID and the registration code input on the main registration screen are stored in the license information stored in the management information storage unit 91. The license authentication unit 76 stores the input tenant ID and registration code in the license information, and if the registration state associated with the tenant ID and registration code is “unregistered”, the input tenant ID and It is determined that the registration code is valid information.

  If it is determined that the input tenant ID and registration code are valid information, the license authentication unit 76 requests the setting registration unit 74 to change the status of the license information. The setting registration unit 74 changes the value of the registration state associated with the valid tenant ID and registration code in the license information stored in the management information storage unit 91 to “registered”.

  When the license activation process is completed, the portal service application 61 requests the setting registration unit 74 to register the tenant information and user information input by the user on the main registration screen in the terminal device 11. The setting registration unit 74 registers the name input as part of the tenant information on the main registration screen in the tenant information stored in the management information storage unit 91. In addition, the setting registration unit 74 registers a tenant ID, a login user ID and password, address information, and the like in the user information stored in the management information storage unit 91.

  When the registration of various information settings by the setting registration unit 74 is completed, the portal service application 61 causes the display device 502 of the terminal device 11 to display a tenant registration completion screen. Further, the portal service application 61 creates an e-mail containing a tenant registration completion notification and requests the e-mail transmission unit 73 to send an e-mail. The mail transmission unit 73 transmits an e-mail in which a tenant registration completion notification is described to an e-mail address (address information registered in the tenant information) input by the user to temporarily register the tenant ID in the terminal device 11.

  For example, the user checks the tenant registration completion screen displayed on the display device 502 of the terminal device 11. By completing the registration of the tenant ID, user ID, and password, the user can request login from the top screen of the portal site from the next time. By logging in from the top screen of the portal site, the user can perform registration processing of tenant information, user information, and device information associated with the tenant ID.

  In step S4, a user such as an administrator operates the input device 501 of the terminal device 11 to input a tenant ID, user ID, and password from the top screen of the portal site, and then requests login.

  Upon receiving the login request, the portal service application 61 requests the user authentication unit 77 for user authentication. The user authentication unit 77 determines (collates) whether the combination of the tenant ID, the user ID, and the password received from the terminal device 11 is stored in the user information stored in the management information storage unit 91.

  If the combination of the tenant ID, the user ID, and the password received from the terminal device 11 is stored, the user authentication unit 77 authenticates the user who made the login request. When the user is authenticated by the user authentication unit 77, the portal service application 61 permits login.

  A user who logs in to the portal service application 61 can register a service ID of a service to be used. The portal service application 61 displays a service registration screen for registering a service ID on the display device 502 of the terminal device 11. The user operates the input device 501 of the terminal device 11, inputs a service ID from the service registration screen displayed on the display device 502 of the terminal device 11, and then requests service registration. The terminal device 11 makes a service registration request to the portal service application 61 based on a user operation.

  When service registration is requested from the user's terminal device 11, the portal service application 61 refers to the license information stored in the management information storage unit 91, and selects an ID that matches the service ID entered on the service registration screen by the user. . The portal service application 61 acquires a license type (service type) associated with the selected ID.

  Further, the portal service application 61 refers to the tenant information stored in the management information storage unit 91 and acquires the use area information associated with the tenant ID of the logged-in user. The portal service application 61 causes the display device 502 of the terminal device 11 to display a usage rule corresponding to the acquired license type and usage area information, and allows the user to select whether or not to agree to the usage rule.

  Therefore, the service providing system 2 holds usage agreement (agreement) information corresponding to the country / region used for each service type (license type). The portal service application 61 performs display control to display the usage area information input for the temporary registration of the tenant ID by the user and the usage rule corresponding to the service type for which the service registration is requested, and whether or not to accept the usage rule. Can be selected by the user.

  When the user operates the input device 501 of the terminal device 11 and inputs a selection for agreeing to the terms of use, the portal service application 61 performs service registration based on the tenant ID of the logged-in user and the service ID input on the service registration screen. The process is requested to the license authentication unit 76.

  The license authentication unit 76 confirms (checks) whether the service ID input on the service registration screen is stored as the ID in the license information stored in the management information storage unit 91. If the service ID input on the service registration screen is stored as an ID, the license authentication unit 76 determines that the service ID is valid (authenticates the service ID). If it is determined that the service ID is valid, the license authentication unit 76 requests the setting registration unit 74 to register the service ID. The setting registration unit 74 registers the service ID and service type in association with the tenant ID of the logged-in user for the tenant information stored in the management information storage unit 91.

  In step S5, a user such as an administrator performs device registration of a service ID. The user operates the input device 501 of the terminal device 11 to display a device registration screen on the display device 502 of the terminal device 11. The user operates the input device 501 of the terminal device 11 to input a service ID and a device ID of a device that can use the service by the service ID on the device registration screen, and request device registration of the service ID. .

  When the device registration of the service ID is requested from the terminal device 11, the portal service application 61 performs license authentication for the device registration processing of the service ID based on the tenant ID of the logged-in user, the service ID input on the device registration screen, and the device ID. Request to section 76.

  The license authentication unit 76 determines (collates) whether the tenant information stored in the management information storage unit 91 stores the combination of the tenant ID of the logged-in user and the service ID input on the device registration screen.

  If the combination of the tenant ID of the logged-in user and the service ID input on the device registration screen is stored, the license authentication unit 76 refers to the license information stored in the management information storage unit 91. The license authentication unit 76 determines whether the registration state associated with the service ID input on the device registration screen is “unregistered”.

  If the registration state is “unregistered”, the license authentication unit 76 requests the setting registration unit 74 to register the service ID. A service ID whose registration status is “unregistered” is a service ID for which the device registration of the service ID is not performed. The setting registration unit 74 registers the tenant ID of the logged-in user, the service ID input on the device registration screen, and the device ID in the device information stored in the management information storage unit 91. Further, the setting registration unit 74 refers to the tenant information stored in the management information storage unit 91, and acquires the service type and expiration date specified from the tenant ID and the service ID. The setting registration unit 74 registers the service type, the use start date, and the use end date in the device information stored in the management information storage unit 91 based on the acquired service type and expiration date.

  As the use start date, the date of the day of device registration of the service ID is stored. In the use end date, the date of the final date calculated based on the expiration date (for example, one year) acquired from the tenant information and the use start date is stored. However, the use start date may be specified, for example, in the service registration request in step S4. When the use start date can be specified, the use start date specified in the service registration request is stored in the device information use start date. When the device registration of the service ID is completed, the setting registration unit 74 changes the value of the registration state associated with the service ID that has registered the device to “registered” in the license information stored in the management information storage unit 91. To do.

  As described above, through the processing from tenant registration to service registration, a user such as an administrator can perform tenant registration, service ID registration, and device registration of a service ID by accessing the service providing system 2 from the terminal device 11. Therefore, the user can easily complete the procedure necessary for receiving the provision of the service. In addition, the service providing system 2 can manage the provided service, the user who uses the service, and the device which uses the service for each tenant ID for which the license validation process has been performed.

<< User authentication / equipment authentication function of service provision system >>
FIG. 11 is a sequence diagram of an example of user authentication / device authentication processing. FIG. 11A shows user authentication from the terminal device 11 that does not require device authentication. FIG. 11B shows user device authentication from the image forming apparatus 12 requiring device authentication. FIG. 11C shows in-house cooperation authentication from the image forming apparatus 12 requiring device authentication.

  As shown in FIG. 11A, in the user authentication from the terminal device 11, the user inputs the tenant ID, the user ID, and the password as login information from the top screen or the like of the portal site. In step S11, the terminal device 11 accepts login information input by the user.

  In step S12, the terminal device 11 makes a login request to the service providing system 2 using the login information input by the user. The access control unit 72 of the service providing system 2 requests the user authentication unit 77 for user authentication.

  In step S <b> 13, the user authentication unit 77 confirms whether the login information received from the terminal device 11 exists in the user information stored in the management information storage unit 91. The user authentication unit 77 determines that the user authentication is successful if the user information stored in the management information storage unit 91 includes the login information received from the terminal device 11. If the login information received from the terminal device 11 does not exist, the user authentication unit 77 determines that user authentication has failed.

  When the user authentication is successful, the access control unit 72 permits login from the terminal device 11 to the service providing system 2 (login for using the service). In step S <b> 14, the access control unit 72 transmits a login response based on the result of user authentication by the user authentication unit 77 to the terminal device 11.

  11B and 11C, the image forming apparatus 12 uses a login user ID and password in user authentication for logging in to the service providing system 2, or a user for in-house authentication. Holds the setting of whether to use the ID. Note that the setting of whether to use a login user ID and password or an in-house authentication user ID can be changed as appropriate. Further, it is assumed that the image forming apparatus 12 holds the tenant ID and the apparatus ID in its own storage area.

  In the case of setting to use a login user ID and password, in order to log in to the service providing system 2, the image forming apparatus 12 performs user apparatus authentication as shown in FIG.

  In step S21, the image forming apparatus 12 displays an input screen that allows the user to input a login user ID and password. The user inputs a login user ID and password from the input screen displayed on the image forming apparatus 12. The image forming apparatus 12 receives the login user ID and password input by the user.

  In step S22, the image forming apparatus 12 transmits the login user ID and password input by the user and the tenant ID and apparatus ID held in its own storage area to the service providing system 2 as login information. Make a login request. The access control unit 72 of the service providing system 2 requests the user device authentication unit 78 for user device authentication.

  In step S <b> 23, the user device authentication unit 78 confirms whether the combination of the tenant ID and the device ID included in the login information received from the image forming apparatus 12 exists in the device information stored in the management information storage unit 91. If the combination of the tenant ID and the device ID exists, the user device authentication unit 78 determines that the device authentication is successful. If the combination of the tenant ID and the device ID does not exist, the user device authentication unit 78 determines that the device authentication has failed.

  Furthermore, the user device authentication unit 78 checks whether the user information stored in the management information storage unit 91 includes a combination of the tenant ID, login user ID, and password included in the login information received from the image forming device 12. To do. If the combination of the tenant ID, login user ID, and password included in the login information received from the image forming apparatus 12 exists in the user information stored in the management information storage unit 91, the user device authentication unit 78 performs user authentication. Judge that succeeded. If the combination of the tenant ID, the login user ID, and the password included in the login information received from the image forming apparatus 12 does not exist, the user apparatus authentication unit 78 determines that the user authentication has failed.

  When the device authentication and the user authentication are successful, the access control unit 72 permits login (login for using the service) from the image forming apparatus 12 to the service providing system 2. In step S <b> 24, the access control unit 72 transmits a login response based on the result of device authentication and user authentication by the user device authentication unit 78 to the terminal device 11.

  In the case of setting to use a user ID for in-house authentication, the image forming apparatus 12 performs in-house cooperation authentication shown in FIG. 11C in order to log in to the service providing system 2. First, the user performs user authentication in the image forming apparatus 12. The user authentication executed in the image forming apparatus 12 is user authentication executed for using the image forming apparatus 12 or using a specific function of the image forming apparatus 12. Here, an example in which the authentication apparatus 13 performs user authentication using a card ID stored in an IC card or the like carried by the user will be described.

  In step S31, the user authenticates the user by causing a card reader (not shown) connected to the image forming apparatus 12 to read the card ID. In step S <b> 32, the image forming apparatus 12 transmits the card ID read by the card reader to the authentication apparatus 13 to make an authentication request.

  In step S <b> 33, the authentication device 13 makes an authentication determination using the card ID received from the image forming device 12. The authentication device 13 stores user authentication information in which a card ID and a user ID are associated with each other in a storage area. The authentication device 13 refers to the user authentication information in which the card ID and the user ID are associated, and confirms whether the user ID associated with the card ID received from the image forming device 12 can be specified.

  If the user ID associated with the card ID can be identified, the authentication device 13 determines that the user authentication has succeeded. In step S <b> 34, the authentication apparatus 13 transmits the specified user ID to the image forming apparatus 12 together with the authentication result indicating the successful authentication.

  Next, for example, the user can request login to the service providing system 2 by selecting login to the service providing system 2 from the display screen of the image forming apparatus 12. In step S <b> 35, the user requests login from the image forming apparatus 12 to the service providing system 2.

  When the user is requested to log in to the service providing system 2, the image forming apparatus 12 transmits the identified user ID, the tenant ID and the device ID held in its own storage area to the service providing system 2 as login information. And make a login request. The access control unit 72 of the service providing system 2 requests the in-house cooperation authentication unit 79 for in-house cooperation authentication.

  In step S <b> 36, the in-house cooperation authentication unit 79 confirms whether the combination of the tenant ID and the device ID included in the login information received from the image forming apparatus 12 exists in the device information stored in the management information storage unit 91.

  If there is a combination of tenant ID and device ID, the in-house cooperation authentication unit 79 determines that device authentication is successful. If the combination of tenant ID and device ID does not exist, the in-house cooperation authentication unit 79 determines that device authentication has failed.

  Further, the in-house cooperation authentication unit 79 confirms whether the combination of the tenant ID and the user ID for in-house authentication included in the login information received from the image forming apparatus 12 exists in the user information stored in the management information storage unit 91. . If the combination of the tenant ID and the user ID for in-house authentication included in the login information received from the image forming apparatus 12 exists in the user information stored in the management information storage unit 91, the in-house cooperation authentication unit 79 succeeds in user authentication. Judge that

  If the combination of the tenant ID and the user ID for in-house authentication included in the login information received from the image forming apparatus 12 does not exist, the in-house cooperation authentication unit 79 determines that the user authentication has failed.

  When the device authentication and the user authentication are successful, the access control unit 72 permits login (login for using the service) from the image forming apparatus 12 to the service providing system 2. In step S <b> 37, the access control unit 72 transmits a login response based on the results of device authentication and user authentication by the in-house cooperation authentication unit 79 to the terminal device 11.

  Note that if the device authentication is successful and the user authentication is not successful by the in-house cooperation authentication unit 79, the service providing system 2 displays an input screen for allowing the user to input a login user ID and password. May be displayed.

  In this case, the user can input a login user ID and password on the input screen and request login again. The image forming apparatus 12 transmits the login user ID and password input by the user and the tenant ID stored in the storage area of the image forming apparatus 12 to the user apparatus authentication unit 78 of the service providing system 2 to make a login request.

  The user device authentication unit 78 checks whether the combination of the tenant ID, the login user ID, and the password received from the image forming device 12 exists in the user information stored in the management information storage unit 91.

  The user device authentication unit 78 determines that the user authentication is successful if the user information stored in the management information storage unit 91 includes the combination of the tenant ID, the login user ID, and the password received from the image forming device 12. . The access control unit 72 permits login to the service providing system 2.

  Further, the setting registration unit 74 stores the user ID for in-house authentication received from the image forming apparatus 12 in association with the tenant ID received from the image forming apparatus 12, the login user ID, and the password. Register in the stored user information. In this way, by registering the user ID for in-house authentication received from the image forming apparatus 12 in the user information in association with the tenant ID, login user ID and password, the user can use the user ID for in-house authentication from the next time. Login using is possible.

<< Data processing function of service provision system >>
In the service providing system 2, the data processing control unit 81, the processing queue 82, the data processing requesting unit 83, and the data processing unit 84 of the platform 52 perform various data processing requested by the processing requesting unit 101 of the service application 51 as follows. Run like so.

  FIG. 12 is a diagram for explaining an example of a data processing function provided in the service providing system. The processing request unit 101 of the service application 51 records data to be processed in the data storage unit 93 of the management data storage unit 53. Data to be processed is data to be processed such as application data and image data.

  Further, the processing request unit 101 transmits a data processing request (hereinafter referred to as a request) to the data processing control unit 81 of the platform 52. The request to be transmitted includes the processing contents of the data processing and information on the recording destination of the processing target data (for example, URI).

  The data processing control unit 81 analyzes the received request and registers a message in a processing queue (message queue) 82 corresponding to the processing content of the data processing. A processing queue 82 is provided for each processing content of data processing.

  Further, the data processing control unit 81 registers request information in the data processing information storage unit 92 of the management data storage unit 53. The request information includes a recording destination of processing target data, a processing content of data processing, a request status, and the like.

  The request status includes “accepted”, “running”, “completed”, and the like. The request status represents a status indicating the processing status of data processing. The request status is “accepted” when the data processing control unit 81 registers the request information.

  Each data processing request unit 83 monitors one or more processing queues 82 assigned to each data processing request unit 83. That is, each data processing request unit 83 monitors requests for processing contents of one or more data processing. Each data processing request unit 83 acquires a message registered in the monitored processing queue 82.

  For example, in FIG. 12, the “first data processing request unit” 83 monitors the “first processing queue” 82 and the “second processing queue” 82 having different data processing contents. The “second data processing request unit” 83 monitors “first processing queue” 82 to “third processing queue” 82 having different data processing contents. FIG. 12 illustrates an example in which the “first data processing request unit” 83 and the “second data processing request unit” 83 monitor the “first processing queue” 82 and the “second processing queue” 82 in an overlapping manner.

  Note that the assignment of the processing queue 82 monitored by each data processing requesting unit 83 can be set and changed as appropriate. For example, it is conceivable that the assignment of the processing queue 82 monitored by each data processing request unit 83 is set and changed as appropriate according to the request frequency and processing time for each processing content of the data processing.

  The data processing request unit 83 acquires request information from the data processing information storage unit 92 based on the message acquired from the monitored processing queue 82. The data processing request unit 83 causes the data processing unit 84 to execute data processing of the request based on the recording destination of the processing target data included in the acquired request information and the processing content of the data processing.

  Next, the data processing request unit 83 updates the request information from the execution result of the data processing executed by the data processing unit 84, and registers the updated request information in the data processing information storage unit 92. The update of the request information includes a process of deleting the processing contents of the data processing executed from the request, a process of changing the request state if there is a change, and the like. Further, if the request information includes the details of the data processing to be performed next, the data processing request unit 83 registers the message in the processing queue 82 corresponding to the processing details of the data processing.

  The data processing request unit 83 records the processing target data after processing in the data storage unit 93 when the processing target data before and after the data processing are different due to the data processing unit 84 executing the data processing of the request. To do. Further, the data processing request unit 83 updates the request information in accordance with the information of the recording destination of the processed data after processing.

  FIG. 13 is a flowchart illustrating an example of a processing procedure of a data processing function included in the service providing system. In step S <b> 41, the processing request unit 101 of the service application 51 records the processing target data in the data storage unit 93 of the management data storage unit 53. Further, the processing request unit 101 transmits a request (data processing request) to the data processing control unit 81 of the platform 52.

  In step S42, the data processing control unit 81 analyzes the request and registers a message in the processing queue 82 according to the processing content of the data processing. Further, the data processing control unit 81 registers request information in the data processing information storage unit 92 of the management data storage unit 53.

  In step S <b> 43, each data processing request unit 83 acquires a message registered in the monitored processing queue 82 from the processing queue 82. In step S44, the data processing request unit 83 acquires request information from the data processing information storage unit 92 based on the acquired message. Then, the data processing request unit 83 causes the data processing unit 84 to execute the data processing of the request based on the acquired request information.

  In step S45, the data processing request unit 83 updates the request information from the execution result of the data processing executed by the data processing unit 84, and after registering the updated request information in the data processing information storage unit 92, the flowchart of FIG. Terminate the process.

  If the request information includes the processing content of the next data processing, the data processing requesting unit 83 registers the message in the processing queue 82 corresponding to the processing content of the data processing and then performs the processing of the flowchart of FIG. finish.

  Hereinafter, some specific examples of the processing contents of the data processing will be described, but the processing contents of the data processing are not limited to specific examples. As a specific example of the processing contents of data processing, firstly, there is data processing for converting the data format of processing target data.

  For example, data processing for converting image data into PDF (Portable Document Format) data is an example of data processing for converting the data format of processing target data. In the data processing for converting image data into PDF data, the processing content of the data processing is expressed as “image2pdf” or the like.

  Data processing for converting PDF data into PDL (Page Description Language) data is also an example of data processing for converting the data format of processing target data. In data processing for converting PDF data to PDL data, the processing content of the data processing is expressed as “pdf2pdl” or the like.

  Further, data processing for converting Microsoft (registered trademark) Office (registered trademark) document data into PDL data is an example of data processing for converting the data format of processing target data. In the data processing for converting Office document data into PDL data, the processing content of the data processing is expressed as “office2pdl” or the like.

  As a specific example of the processing content of the data processing, secondly, the processing content of one data processing is divided into the processing content of a plurality of data processing, and the request of each data processing unit 84 according to the processing content of the divided data processing There is data processing to convert to.

  For example, data processing for converting image data into PDL data can be realized by dividing data processing for converting image data into PDF data and data processing for converting PDF data into PDL data. In the data processing for converting the image data into PDL data, the processing content of the data processing is expressed as “image2pdl” or the like.

  For example, the data processing unit 84 executes data processing that divides a data processing request of “image2pdl” into data processing requests of “image2pdf” and “pdf2pdl”. As described above, the data processing unit 84 includes a unit that performs data processing in which one data processing request is divided into a plurality of data processing requests.

  Thus, for example, even if there is no data processing unit 84 that can execute “image2pdl” data processing, the desired “image2pdl” data processing can be performed by linking the “image2pdf” and “pdf2pdl” data processing. Can be executed.

  FIG. 14 is a diagram for explaining data processing in which the processing content of one data processing is divided into a plurality of processing details of data processing. FIG. 14 illustrates a case where there is no data processing unit 84 that can execute the data processing of “image2pdl”.

  Even in such a case, FIG. 14 shows that data processing of “image2pdl” and “pdf2pdl” can be linked to each other to execute desired data processing of “image2pdl”.

  Since the service providing system 2 according to the present embodiment can perform data processing in which the processing content of one data processing is divided into a plurality of processing details, it can flexibly cope with an increase in the types of processing content of the data processing.

  Further, as a specific example of the processing contents of the data processing, thirdly, there is data processing for linking with the external storage. For example, data processing for requesting the external cooperation authentication unit 80 to log in to the online storage 32 using an online storage account and password corresponding to the logged-in user is an example of data processing for cooperation with the external storage.

  Data processing for saving data in the logged-in online storage 32 and data processing for acquiring data from the logged-in online storage 32 are examples of data processing for linking with external storage.

<Linking with online storage>
FIG. 15 is a flowchart of an example of authorization setting for online storage. A user such as an administrator operates the input device 501 of the terminal device 11 and inputs a tenant ID, user ID, and password from the top screen of the portal site, and then requests login. Upon accepting the login request, the portal service application 61 displays the external service registration screen on the display device 502 of the terminal device 11 after permitting the login.

  In step S51, the user selects an online storage (external service) 32 to be used from the list of external services stored in the external service information of the management information storage unit 91 on the external service registration screen, and requests registration. .

  The portal service application 61 that has received the registration request requests the setting registration unit 74 to register the online storage 32 selected by the user. The setting registration unit 74 registers the online storage 32 selected by the user in the tenant information in the management information storage unit 91 in association with the tenant ID of the logged-in user.

  In step S52, the user selects the user ID of the user to whom the authorization setting is to be applied, the external service ID (or service name of the external service) for which the authorization setting is to be performed, and the scope to be set for the user on the portal site authorization setting screen. Request registration of authorization settings. The portal service application 61 receives an authorization setting request.

  In step S53, the portal service application 61 that has received the authorization setting request requests the authorization setting processing unit 75 for the authorization setting. The authorization setting processing unit 75 acquires parameters necessary for authorization setting from the external service information in the management information storage unit 91. In addition to the external service ID and scope, the parameters necessary for the authorization setting include a client ID associated with the selected external service ID, a redirect destination URL, and an arbitrary session key for maintaining the session. It is.

  In step S54, the authorization setting processing unit 75 that has acquired the parameters necessary for authorization setting acquires the authorization destination URL associated with the selected external service ID from the external service information in the management information storage unit 91. The authorization setting processing unit 75 redirects a request including a parameter necessary for authorization setting (a request using a parameter necessary for authorization setting as a GET request query) from the terminal device 11 to the authorization destination URL.

  By redirecting the request from the terminal device 11 to the authorization destination URL, authorization setting is performed between the terminal device 11 and the online storage 32. After the authorization setting, the session at the HTTP level is interrupted because the online storage 32 is redirected to the authorization setting processing unit 75. Therefore, the session key is used to maintain the same session.

  The redirected online storage 32 displays a login screen on the display device 502 of the terminal device 11. The user operates the input device 501 of the terminal device 11 to input an account and password from the login screen, and then requests login. The online storage 32 that has received the login request receives the login request.

  If the login is successful, the online storage 32 displays an authorization screen on the display device 502 of the terminal device 11. The user confirms the authorization screen. When performing the authorization, the user requests the authorization by operating the input device 501 of the terminal device 11 and, for example, pressing an authorization button displayed on the authorization screen. The online storage 32 that has received the authorization request registers the authorization.

  In step S55, the online storage 32 redirects the authorization code indicating that authorization has been granted and the session key from the terminal device 11 to the redirect destination URL. In step S56, the authorization setting processing unit 75 of the service providing system 2 receives the authorization code. If the user has already logged in when redirecting to the online storage 32, the display of the login screen is omitted.

  In step S <b> 56, the authorization setting processing unit 75 that has received the authorization code acquires parameters necessary for acquiring the authorization token from the external service information in the management information storage unit 91. In addition to the received authorization code, parameters necessary for obtaining the authorization token include a client ID and a client secret associated with the external service ID of the online storage 32 that has transmitted the authorization code.

  In step S57, the authorization setting processing unit 75 sends the acquired client ID and client secret and the received authorization code to the online storage 32 and requests acquisition of the authorization token. The online storage 32 verifies the received authorization code and transmits an authorization token to the authorization setting processing unit 75 of the service providing system 2.

  In step S58, the authorization setting processing unit 75 that has received the authorization token requests the setting registration unit 74 to register the authorization token. The setting registration unit 74 registers the user information in the management information storage unit 91 in association with the user to whom the authorization setting selected on the authorization setting screen is applied, the received authorization token, and the scope. When the registration of the authorization token is completed, the authorization setting processing unit 75 notifies the portal service application 61 of the completion of registration. The portal service application 61 displays a screen showing the setting result of the authorization setting on the display device 502 of the terminal device 11.

  When the online storage 32 sends the authorization token to the service providing system 2, it sends the expiration date of the authorization token and a refresh token for reissuing the authorization token when the expiration date has expired. May be.

  FIG. 16 is a flowchart of an example of a linkage process with the online storage. In step S <b> 61, the user who has logged in to the service providing system 2 requests processing to cooperate with the online storage 32 from the terminal device 11, the image forming device 12, or the like.

  When a process to cooperate with the online storage 32 is requested, the external cooperation authentication unit 80 of the service providing system 2 performs a login process to the online storage 32 in step S62.

  For example, the external cooperation authentication unit 80 receives a login request to the online storage 32 from the data processing unit 84. The external cooperation authentication unit 80 acquires, from the user information in the management information storage unit 91, information required for the login process associated with the user who has logged into the service providing system 2 and the online storage 32 that performs the login process. Specifically, the external cooperation authentication unit 80 acquires information required for the login process of the online storage 32 associated with the tenant ID of the user who has logged in the service providing system 2, the login user ID, and the password.

  For example, in the case of the user information in FIG. 6, when receiving a login request to “online storage A”, the external cooperation authentication unit 80 acquires an account and a password as information necessary for the login processing to “online storage A”.

  In the case of the user information shown in FIG. 6, when receiving a login request to “online storage B”, the external cooperative authentication unit 80 acquires an account and an authorization token as information necessary for the login processing to “online storage B”. To do.

  If the online storage 32 to be linked is not set to be authorized like “online storage A” and is an external service that performs login processing, the external linkage authentication unit 80 uses the account and password to make “online storage A”. Require login to. The account and password are examples of authentication information for the external service. The “online storage A” requested to log in executes authentication for the received account and password. If the authentication is successful, “online storage A” transmits a response to permit login to the external cooperation authentication unit 80. If the authentication fails, “online storage A” transmits a response not permitting login to the external cooperation authentication unit 80.

  When the external cooperation authentication unit 80 receives a response indicating that login is permitted from “online storage A”, the service providing system 2 uploads (saves) data to “online storage A” or from “online storage A”. Data can be downloaded (acquired).

  As described above, when the external cooperation authentication unit 80 receives the response indicating that the login is permitted from the online storage 32, the service providing system 2 can execute the processing in cooperation with the online storage 32 in step S63.

  If the linked online storage 32 is an external service for which authorization is set such as “online storage B”, the external linkage authentication unit 80 requests login to “online storage B” using an account and an authorization token. . An account and an authorization token are examples of authorization information for an external service. The “online storage B” requested to log in confirms the validity of the received account and authorization token. If the validity can be confirmed, “online storage B” transmits a response to permit login to the external cooperation authentication unit 80. If the authentication fails, “online storage B” transmits a response to the effect that login is not permitted to the external cooperation authentication unit 80.

  When the external cooperation authentication unit 80 receives a response indicating that login is permitted from “online storage B”, the service providing system 2 performs processing to cooperate with the online storage 32 within the use range set by the scope in step S63. Can be realized.

《Process to support understanding of cost reduction factors》
Hereinafter, an example will be described in which the information processing system 1 according to the present embodiment performs processing for supporting the understanding of the factor of cost reduction. For example, in the information processing system 1 according to the present embodiment, the print service application 62 is configured to include a processing block as shown in FIG. 17 in order to realize processing for supporting the grasp of the cost reduction factor.

  FIG. 17 is a processing block diagram of an example of the print service application. The print service application 62 includes an authentication request reception unit 121, a job acquisition request reception unit 122, a log reception unit 123, an upper limit management information update unit 124, a rule storage unit 125, and a consumption coefficient storage unit 126. Note that the processing block diagram of FIG. 17 represents processing blocks necessary for explaining processing for supporting the understanding of the cause of cost reduction.

  The authentication request accepting unit 121 accepts an authentication request from the image forming apparatus 12 to which login has been attempted by the user. The authentication request reception unit 121 requests the user device authentication unit 78 of the platform 52 to execute authentication in response to the authentication request from the image forming apparatus 12. When the authentication is successful, the authentication request receiving unit 121 returns the upper limit management information and rule information of the user who has succeeded in the authentication to the image forming apparatus 12. The user upper limit management information is stored in, for example, the management information storage unit 91. Details of the user upper limit management information and the rule information will be described later.

  In response to the print job request from the image forming apparatus 12, the job acquisition request reception unit 122 returns a list of print jobs of the user who made the print job request. In addition, the job acquisition request reception unit 122 transmits the print job selected by the user from the print job list to the image forming apparatus 12.

  The log receiving unit 123 receives log information regarding the print job executed in the image forming apparatus 12 from the image forming apparatus 12 and stores the log information in the data storage unit 93 or the like. The upper limit management information updating unit 124 updates the point consumption amount and the like in the upper limit management information based on the log information and the consumption coefficient. Details of the log information and the consumption coefficient will be described later. The rule storage unit 125 stores rule information. The consumption coefficient storage unit 126 stores a consumption coefficient.

  Further, in the information processing system 1 according to the present embodiment, the image forming apparatus 12 is configured to include a processing block as shown in FIG. 1 in order to realize a process for supporting the grasp of the cost reduction factor.

  FIG. 18 is a processing block diagram of an example of the image forming apparatus. The image forming apparatus 12 includes an authentication request unit 131, a job acquisition unit 132, a job display unit 133, an operation instruction reception unit 134, an application rule determination unit 135, a job execution unit 136, a job deletion request unit 137, and a log transmission unit 138. It is a configuration. Note that the processing block diagram of FIG. 18 shows processing blocks necessary for explaining the processing for supporting the understanding of the cause of cost reduction.

  The authentication request unit 131 makes an authentication request based on the authentication information input by the user to the print service application 62 of the service providing system 2. If the authentication is successful, the authentication request unit 131 receives the upper limit management information and the rule information from the print service application 62. The job acquisition unit 132 makes a print job request to the print service application 62 and receives a list of print jobs or a print job. The job display unit 133 displays a list of received print jobs on the operation panel.

  The operation instruction receiving unit 134 receives an input of an operation instruction (for example, execution or deletion) for any print job included in the list of print jobs. The application rule determination unit 135 determines whether or not to apply a rule to the print job based on the user point consumption, the print job setting information (print condition), and the rule information regarding the print job selected as the execution target. Determine. Note that the application rule determination unit 135 also determines a rule to be applied when it is necessary to apply a rule.

  Applying a rule means, for example, rewriting (changing) a setting value for at least a part of setting items in print job setting information. The job execution unit 136 controls execution of a print job selected as an execution target. When the rule needs to be applied, the job execution unit 136 executes the print job after applying the rule to the print job.

  The job deletion request unit 137 transmits a request to delete the print job selected as the deletion target to the print service application 62 of the service providing system 2 when the print job deletion is instructed. The log transmission unit 138 generates log information related to the operation (execution or deletion) of the print job, and transmits the log information to the print service application 62 of the service providing system 2.

  FIG. 19 is a configuration diagram of an example of the upper limit management information. The upper limit management information has tenant ID, user ID, authority information, upper limit value, and consumption as data items. The tenant ID and user ID are used as user identification information. The authority information is an identification name of a job or function permitted to be executed or used by the user. The upper limit value is an upper limit value of points given to the user. The consumption is the consumption of points by the user. The consumption amount may be initialized to “0” at regular intervals (for example, every month). In this case, it can be said that the upper limit value is a point given to the user in a certain period.

  Thus, the upper limit management information includes the upper limit value of a parameter (hereinafter referred to as “point”) whose value is consumed (decreased) in accordance with the use of the image forming apparatus 12, and the current point consumption. That is, each user is permitted to use the image forming apparatus 12 within the range of the upper limit value given to the user. Basically, the point consumption is determined according to job setting information to be executed by the image forming apparatus 12.

  FIG. 20 is a configuration diagram of an example of rule information. As shown in FIG. 20, the rule information is set for each tenant ID. Note that the rule information may be set in common in the service providing system 2 instead of each tenant ID.

  The rule information stores rules that are candidates for application according to the point consumption rate. The consumption rate is the ratio of consumption to the upper limit value. That is, the consumption rate is an example of the relationship between the upper limit value and the consumption amount.

  In FIG. 20, when the consumption rate is 80% or more, the rule (restriction) “forced duplex” is set as an application candidate. When the consumption rate is 90% or more, the rule “forced monochrome” is a candidate for application. When the consumption rate is 100%, the rule “forced deletion” is an application candidate.

  “Forced double-sided” means that double-sided printing, which is one of setting items constituting print job setting information, is forcibly selected (validated). “Forced monochrome” means that monochrome printing is forcibly set for a color mode, which is one of the setting items constituting the setting information of a print job. “Forced deletion” means that a print job is forcibly deleted from the service providing system 2.

  At relatively high consumption rates, rules with relatively low consumption rates are also candidates for application. For example, in the rule information shown in FIG. 20, when the consumption rate is 90%, “forced monochrome” in addition to “forced monochrome” is also an application candidate.

  Therefore, in the following, a rule according to a consumption rate includes a rule set for a consumption rate equal to or lower than the consumption rate. Note that setting items other than double-sided printing and color mode, such as aggregation, may be the target of the rule. In this case, it is desirable that setting items related to or affect consumption of consumables such as toner and printing paper are targeted.

  The term “candidate” is used because a rule according to the consumption rate of the user's points is not always applied to the print job. This is because whether or not it is actually applied depends on print job setting information.

  That is, “forced monochrome” is not valid (invalid) for a print job for which monochrome printing has been set from the beginning. Therefore, in this case, even if the consumption rate of the user is 81%, “forced monochrome” is not applied to the print job. In the present embodiment, it is assumed that the rule information is common to all users associated with the same tenant ID. However, different rule information may be set for each user.

  As described above, the rule information is information indicating rules (rules) or restrictions applied with respect to use of the image forming apparatus 12 (for example, execution of a print job) according to the relationship between the upper limit value of points and the consumption amount. is there.

  FIG. 21 is a configuration diagram of an example of the consumption coefficient. As shown in FIG. 21, the consumption coefficient is used to calculate the point consumption related to printing for one page in accordance with the values of the items constituting the setting information of the print job (for each value of the setting items). It is a coefficient. For example, FIG. 21 shows an example in which coefficients of “3.0”, “1.0”, “1.0”, and “2.0” are set for color, monochrome, A4, and A3. .

  For example, in the case of A4 size color printing, the point consumption per page is 3.0 × 1.0 = 3.0. If the print job is 2 pages, 2 × 3.0 = 6.0 is the point consumption. The consumption amount of points calculated in this way is added by the upper limit management information updating unit 124 to the current value of the consumption amount of the user's upper limit management information.

  FIG. 22 is a configuration diagram of an example of log information related to a print job. FIG. 22 shows log information described in an XML (eXtensible Markup Language) format as an example. However, the log information may be described in other formats. In XML, a range surrounded by a start tag and an end tag is called an element. The tag name of the start tag is used as the element name.

  In the log information of FIG. 22, the accountLog element Er1 is a root element. The accountLog element Er1 includes a startTime attribute and an endTime attribute. The value of the startTime attribute is the date and time when log information was first recorded after the login user logged in. However, the value of the startTime attribute may be the login date and time of the login user. The value of the endTime attribute is the date and time when log information was last recorded for the logged-in user. For example, the value of the endTime attribute is updated each time log information is recorded. However, the value of the endTime attribute may be the date and time when the logged-in user logs out.

  The accountLog element Er1 includes one user element Eu1 and a plurality of account elements Eac1 to Eac5 as child elements. The value “aaa” of the name attribute of the user element Eu1 indicates the user name. That is, the user name of the login user.

  One account element has a type attribute, a rule attribute, and a del attribute. The value of the type attribute indicates the type of job. “Print” indicates a print job. The value of the rule attribute indicates the applied rule by 1-4. “1” indicates forced monochrome, “2” indicates forced duplex, “3” indicates forced monochrome and forced duplex, and “4” indicates forced deletion. Further, the value of the del attribute indicates a deletion form when a print job is deleted. “1” indicates deletion according to a user instruction. “2” indicates forced deletion, that is, deletion by applying a rule.

  The account element includes attributes and quantities elements as child elements. For example, account element Eac1 includes attributes element Eat1 and page element Ep1. The attributes element indicates setting information of the print job, and includes an attribute element as a child element for each setting item constituting the setting information. The attribute element includes a code attribute and a value attribute. The value of the code attribute indicates the identifier of the setting item.

  In FIG. 22, “color”, “twosides”, or “size” is shown as the value of the code attribute, and the color mode, printing surface, and paper size are shown in order. The value of the value attribute indicates a value (setting value) for the setting item.

  Regarding “color”, “1” indicates monochrome and “2” indicates color. Regarding “twosides”, “0” indicates a table in single-sided printing designation, “1” indicates a table in double-sided printing designation, and “2” indicates the reverse side in double-sided printing designation. Regarding the paper size, “1” indicates A4 and “2” indicates A3. When the rule is applied, the value of the value attribute indicates a value after being changed by applying the rule. The value of the page element indicates the number of pages that have been printed or deleted.

  The account element may be recorded for each print job, or may be recorded for each unit in which the value of each attribute of the account element and the value of each attribute of the attribute element match. In the latter case, if the number of printed or deleted pages is added to the value of the page element in response to execution or deletion of a print job in which the value of each attribute of the account element and the value of each attribute of the attribute element match. Good.

  The account element Eac1 is log information indicating execution of a print job to which forced monochrome is applied. The account element Eac2 is log information indicating deletion of a print job in accordance with a user instruction in response to forced monochrome being applied.

  As will be described later, when a rule is applied, the user is inquired whether to execute a print job in a state where the rule is applied. When the user selects deletion of the print job in response to the inquiry, log information as shown in the account element Eac2 is recorded, for example. The account element Eac3 is a log indicating forced deletion of the print job. The account element Ec4 is log information corresponding to the print side of a print job to which forced monochrome and forced duplex are applied. The account element Ec4 is log information corresponding to the reverse side of the print surface for a print job to which forced monochrome and forced duplex are applied.

  Hereinafter, a processing procedure related to a print job executed in the information processing system 1 according to the present embodiment will be described. FIG. 23 is a sequence diagram illustrating an example of a processing procedure related to a print job.

  When operating a print job stored in the service providing system 2, the user moves to the image forming apparatus 12. In step S111, the user inputs authentication information from a login screen displayed on the operation panel of the image forming apparatus 12, for example, and requests login.

  In step S112, the authentication request unit 131 of the image forming apparatus 12 transmits an authentication request including authentication information (authentication information used for user authentication and authentication information used for apparatus authentication) to the print service application 62 of the service providing system 2. . In step S <b> 113, the authentication request reception unit 121 of the print service application 62 sends an authentication request including authentication information to the user device authentication unit 78 of the platform 52.

  In step S114, the user device authentication unit 78 performs authentication based on the authentication information included in the authentication request. In step S <b> 115, the user device authentication unit 78 returns an authentication result to the print service application 62. In step S <b> 116, the authentication request reception unit 121 of the print service application 62 returns an authentication result to the image forming apparatus 12. When the authentication result indicates that the authentication is successful, the authentication request receiving unit 121 returns the upper limit management information of the authenticated user (hereinafter referred to as a login user) and the rule information to the image forming apparatus 10 together with the authentication result.

  Note that the authentication request unit 131 of the image forming apparatus 12 rejects the login of the user when the returned authentication result indicates an authentication failure. Therefore, in this case, step S117 and subsequent steps are not executed. On the other hand, when the returned authentication result indicates successful authentication, the authentication request unit 131 stores the upper limit management information and the rule information returned together with the authentication result.

  If the authentication is successful, the job acquisition unit 132 transmits a print job request to the print service application 62 of the service providing system 2 in step S117. In step S 118, the job acquisition request reception unit 122 of the print service application 62 returns a list of print jobs of the user who made the print job request in response to the print job request from the image forming apparatus 12.

  In step S119, the job display unit 133 of the image forming apparatus 12 displays a screen showing a list of print jobs (hereinafter referred to as a print job list screen) on the operation panel. For example, the print job list screen includes a list of job names of the print jobs.

  In step S120, processing corresponding to the user's operation instruction is executed for the print job selected by the user from the print jobs displayed on the print job list screen. For example, a print job is executed or a print job is deleted. Details of the processing in step S120 will be described later.

  In response to the execution of the process in step S120, the log transmission unit 138 of the image forming apparatus 12 records log information regarding the executed process. For example, when a print job is executed, the log information includes print job setting information, an identifier of a rule applied to the print job, and the like. When the logged-in user logs out, in step S121, the log transmission unit 138 transmits log information recorded regarding processing executed during login to the print service application 62.

  In step S122, when the log reception unit 123 of the print service application 62 receives the log information, the log information is stored in the data storage unit 93 or the like. In step S123, the upper limit management information updating unit 124 refers to the log information and the consumption coefficient stored in the consumption coefficient storage unit 126, and updates the consumption in the user information of the logged-in user.

  Next, details of step S120 will be described. FIG. 24 is a flowchart illustrating an example of a processing procedure executed by the image forming apparatus in response to a print job operation instruction.

  In step S <b> 201, the operation instruction reception unit 134 receives an operation instruction input from a user regarding a print job selected on the print job list screen (hereinafter, referred to as a target job). As the operation instruction, execution or deletion of the target job can be selected.

  When deletion of the target job is instructed, the job deletion request unit 137 proceeds from step S202 to step S203, and deletes the target job from the service providing system 2. Specifically, the job deletion request unit 137 transmits a target job deletion request to the print service application 62 of the service providing system 2. The print service application 62 performs processing for deleting the target job. Subsequently, in step S204, the log transmission unit 138 records log information regarding the deletion of the target job according to the user's instruction.

  In this case, since the rule is not applied, the value of the type attribute of the log information is “print”, the value of the rule attribute is “0 (no rule applied)”, and the value of the del attribute is “1 (deleted by user instruction)” ”Is recorded. Setting information of the target job is recorded in the attributes element. In the page element, the number of pages of the target job is recorded.

  On the other hand, when the execution of the target job is instructed, the operation instruction receiving unit 134 proceeds from step S202 to step S205, and refers to the authority information included in the upper limit management information of the login user to determine whether the login user has the print authority. Determine whether or not. When the logged-in user does not have print authority, the operation instruction receiving unit 134 rejects execution of the target job.

  If the logged-in user has print authority, the application rule determining unit 135 determines a rule to be an application candidate for the target job in step S206 according to the point user's point consumption rate. Specifically, the application rule determination unit 135 calculates the consumption rate of the login user's points by dividing the consumption included in the login user's upper limit management information by the upper limit value.

  In step S207, the application rule determination unit 135 compares the point consumption rate with the rule information to determine an application candidate rule. For example, according to the example of FIG. 20, if the consumption rate is less than 80%, it is determined that the application of the rule is unnecessary. If the consumption rate is 80% or more and less than 90%, forced double-sided is determined as an application candidate. If the consumption rate is 90% or more and less than 100%, forced duplex and forced monochrome are determined as application candidates. If the consumption rate is 100%, forced deletion is an application candidate.

  If the application candidate rule includes forced deletion, the job deletion request unit 137 proceeds from step S207 to step S208, and deletes the target job from the service providing system 2. Subsequently, in step S209, the log transmission unit 138 records log information regarding the deletion of the target job according to the user's instruction. In the log information, an account element having a type attribute value of “print”, a rule attribute value of “4 (forced deletion)”, and a del attribute value of “2 (forced deletion)” is recorded.

  In the case of forced deletion, the image forming apparatus 12 may display a screen for inquiring the user whether or not forced deletion is permitted on the operation panel. The image forming apparatus 12 may delete the print job when an input indicating permission is performed by the user, and may not delete the print job when an input indicating disapproval is performed.

  If the application candidate rule does not include forced deletion, the application rule determination unit 135 proceeds to step S210, and determines a rule that is valid for the setting information of the target job among the application candidate rules. A rule in which the setting information of the target job is changed by applying the rule is determined to be an effective rule.

  That is, a rule in which the value of the rule change destination (after change) and the value of the setting item in the setting information of the target job regarding the setting item to be changed by the rule is determined to be an effective rule. On the other hand, a rule that does not change the setting information of the target job even when the rule is applied is determined to be an invalid rule. That is, a rule in which the value of the rule change destination (after change) for the setting item to be changed by the rule matches the value of the setting item in the setting information of the target job is determined to be an invalid rule.

  If there is no valid rule, the job execution unit 136 proceeds from step S211 to step S212, and executes the target job according to the initial setting information. Note that the case where there is no effective rule is included even when there is no application candidate rule. Subsequently, in step S213, the log transmission unit 138 records log information regarding the execution of the target job to which no rule is applied. An account element having a type attribute value of “print”, a rule attribute value of “0 (no rule applied)”, and a del attribute value of “0 (no deletion)” is recorded.

  If there is a valid rule, the job execution unit 136 proceeds from step S211 to step S214, and applies the valid rule to the setting information of the target job. As a result, the setting information is changed. For example, the color mode is changed from “color” to “monochrome”, or “single-sided printing” is changed to “double-sided printing”. Subsequently, the job execution unit 136 inquires of the user whether the execution of the target job after applying the effective rule is permitted.

  Specifically, the job execution unit 136 includes, for example, a screen for inputting whether to execute the target job to which all rules included in the rule list are applied including a list of valid rules on the operation panel. Display.

  When permission to execute the target job is input, the job execution unit 136 proceeds from step S215 to step S216, and executes the target job according to the changed setting information. In step S217, the log transmission unit 138 records log information regarding the execution of the target job to which the rule is applied. An “account” element is recorded in which the value of the type attribute is “print”, the value of the rule attribute is a value corresponding to the applied rule, and the value of the del attribute is “0 (no deletion)”.

  On the other hand, when the non-permission (rejection) of execution of the target job is input, the job execution unit 136 proceeds from step S215 to S218, and displays a screen on the operation panel 15 for allowing the user to select whether or not the target job is necessary. The user is inquired about whether or not the target job needs to be deleted. When a deletion instruction is input by the user, the job deletion request unit 137 proceeds from step S218 to step S219, and deletes the target job from the service providing system 2.

  Subsequently, in step S220, the log transmission unit 138 records log information regarding the forced deletion of the target job. An “account” element is recorded in which the value of the type attribute is “print”, the value of the rule attribute is a value corresponding to the applied rule, and the value of the del attribute is “1 (deleted by user instruction)”.

  24 is repeated until the logged-in user logs out, log information relating to the logged-in user is accumulated. In step S121 in FIG. 23, the accumulated log information is transmitted to the print service application 62 in a format as shown in FIG. 22, for example. However, the log transmission unit 138 may transmit the log information to the print service application 62 every time the log information is recorded.

  According to the log information shown in FIG. 22, it is possible to distinguish or grasp whether a relatively low-cost setting value setting such as monochrome or double-sided printing has been performed by applying a rule or by the user's intention. Can do.

  In addition, it is possible to distinguish or grasp whether the print job is deleted by applying a rule or by the user's intention. In addition, it is possible to distinguish or grasp whether the deletion of the print job performed by the user's intention is facilitated by the application of the rule or is based on the user's intention from the beginning.

  In the above description, the configuration in which the image forming apparatus 12 includes the application rule determination unit 135 has been described as an example. However, the information processing system 1 of the present embodiment may be provided with some functions of the application rule determination unit 135 and the job execution unit 136 on the service providing system 2 side. In this case, the service providing system 2 determines the rules that are candidates for application and applies the valid rules to the setting information of the target job. Therefore, the print job transmitted from the print service application 62 to the image forming apparatus 12 is a target job in which valid rules are applied to the setting information.

<Summary>
According to the information processing system 1 according to the present embodiment, it is possible to assist in grasping the cause of cost reduction while appropriately managing the provided service, the user who uses the service, and the device which uses the service.

  The present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims. For example, in the information processing system 1 according to the present embodiment, an example has been described in which the print service application 62 realizes the function on the service providing system 2 side for assisting in grasping the cause of cost reduction. The function on the service providing system 2 side for assisting in grasping the cause of cost reduction may be realized by providing an upper limit management service application in the service application 51, for example.

  Note that the service use device described in the claims corresponds to the terminal device 11, the image forming device 12, and the like. The authentication information receiving means corresponds to the portal service application 61 and the like. The authentication unit corresponds to the user authentication unit 77, the user device authentication unit 78, and the like. The service specifying means corresponds to the portal service application 61 or the like. The execution unit corresponds to the print service application 62, the data processing control unit 81, the processing queue 82, the data processing request unit 83, the data processing unit 84, and the like.

DESCRIPTION OF SYMBOLS 1 Information processing system 2 Service provision system 11 Terminal apparatus 12 Image forming apparatus 13 Authentication apparatus 14 Other apparatus 21 Access control apparatus 22 Print service provision apparatus 23 Distribution service provision apparatus 24 Portal service provision apparatus 26 Authentication apparatus 27 Data processing control apparatus 28 Data processing execution control device 29 Data processing device 31 Mail server 32 Online storage 51 Service application 52 Platform 53 Management data storage unit 54 Platform API (Application Programming Interface)
61 Portal service application 62 Print service application 63 Distribution service application 71 Communication unit 72 Access control unit 73 Mail transmission unit 74 Setting registration unit 75 Authorization setting processing unit 76 License authentication unit 77 User authentication unit 78 User device authentication unit 79 Internal cooperation authentication unit 80 External Cooperation Authentication Unit 81 Data Processing Control Unit 82 Processing Queue 83 Data Processing Request Unit 84 Data Processing Unit 91 Management Information Storage Unit 92 Data Processing Information Storage Unit 93 Data Storage Unit 101 Processing Request Unit 121 Authentication Request Accepting Unit 122 Job Acquisition Request Reception unit 123 Log reception unit 124 Upper limit management information update unit 125 Rule storage unit 126 Consumption coefficient storage unit 131 Authentication request unit 132 Job acquisition unit 133 Job display unit 134 Operation instruction reception unit 135 Applicable rule determination unit 136 Job execution 137 job deletion request unit 138 log transmission unit 500 Computer system 501 input device 502 display device 503 external I / F
503a Recording medium 504 RAM
505 ROM
506 CPU
507 Communication I / F
508 HDD
B bus FW firewall N1-N3 network

JP 2013-25413 A

Claims (14)

A service providing system configured to provide a service to a service using device configured by one or more information processing devices and connected via a network,
Management information storage means for storing information for identifying a service providing destination, service identification information for a service to be provided, user identification information for a user who uses the service, and management information associated with device identification information for the service using device; ,
Authentication information receiving means for receiving user authentication information used for user authentication or device authentication information used for device authentication as authentication information from the service using device;
An authentication means for executing authentication processing of the received authentication information;
A service specifying means for specifying the service associated with the authentication information based on the authentication information and the management information when the authentication information is authenticated;
An execution means for executing processing according to the service use request when receiving the specified service use request from the service use device;
With
The execution means includes
The service usage request information stored in association with the information for identifying the service providing destination and the user identification information, and the service usage request according to the information for identifying the service providing destination and the usage history information. Application rule determining means for determining the rule information applied to the user of the service providing destination based on the rule information applied to the corresponding process;
Rule information applying means for applying rule information applied to the user of the service providing destination determined by the application rule determining means to processing according to the service use request;
Storage means for storing a record of the rule information applied to processing according to the service use request by the rule information application means;
A service providing system comprising: The application rule determining means includes
Information for identifying the service providing destination and the usage amount of the service recorded in association with the user identification information and the usage upper limit of the service;
Depending on the relationship between the service usage amount recorded in association with the service providing destination information and the user identification information, and the service usage upper limit, the process is set according to the service usage request. Based on applicable rule information,
The service providing system according to claim 1, wherein rule information applied to setting of processing according to a use request of the service from the user is determined. The storage means stores the record of the rule information applied to the setting of the process according to the service use request by the rule information applying means for each setting of the process according to the service use request. The service providing system according to claim 2, characterized in that: The storage means is a setting that has been set by the user or a setting that has been changed from a setting that has been set by the user by applying the rule information. 4. The service providing system according to claim 3, wherein the information is stored in an identifiable manner. The application rule determining means includes
Information for identifying the service providing destination and the usage amount of the service recorded in association with the user identification information and the usage upper limit of the service;
The processing corresponding to the service usage request is stopped according to the relationship between the service usage amount recorded in association with the information for identifying the service providing destination and the user identification information and the service usage upper limit. Based on the rule information,
5. The service providing system according to claim 1, wherein a stop of a process in response to a request for use of the service from the user is determined. The storage unit stores, in an identifiable manner, whether the process is instructed by the user or the application of the rule information for the cancellation of the process in response to the service use request. The service providing system according to claim 5. The usage record information of the service is the usage amount of the service and the usage upper limit of the service set for each user of the service providing destination , and the usage amount of the service corresponds to the usage request of the service The service according to any one of claims 1 to 6, wherein when the processing is executed by the execution unit, a different amount is added according to a setting of the processing according to the use request of the service. Offer system. Among the service identification information, for identifying a first service and registering the first service identification information that is a license of the first service and a service that provides the first service identification information License information storage means for storing license information associated with the information;
A license that accepts a registration request including the first service identification information and the registration information, and executes a license authentication process based on the accepted first service identification information and the registration information and the license information Authentication means;
2. A setting registration unit for registering in the management information as a service for providing the received first service identification information when validity is confirmed by a license authentication process. 7. The service providing system according to any one of claims 7. The management information storage means stores first user identification information and second user identification information as user identification information of a user who logs in to the service providing system,
The authentication information receiving means receives either the first user authentication information or the second user authentication information authenticated by another authentication device as user authentication information used for user authentication from the service using device. And
The authentication means executes a user authentication process based on the first user authentication information and the first user identification information when the authentication information receiving means receives the first user authentication information, 9. The authentication information receiving unit, when receiving the second user authentication information, executes a user authentication process based on the second user authentication information and the second user identification information. The service provision system described. The management information storage means stores third user authentication information as user authentication information of a user who logs in to an external service connected to the service providing system via a network,
The execution means, based on the third user authentication information of the user authenticated by the authentication means, when the process according to the service use request includes a process linked to the external service, 10. The service providing system according to claim 8, wherein a login process to the service is executed. Execution request information storage means for storing execution request information of processing according to the service use request for each processing content;
Data processing control means for registering execution request information for executing specific data processing in the execution request information storage means for each processing content in response to a request to use the service;
A plurality of data processing means for executing data processing according to the processing content in accordance with the execution request information stored in the execution request information storage means;
With
9. The data processing means registers execution request information for the next data processing in the execution request information storage means for each processing content when there is next data processing after execution of the data processing. The service provision system as described in any one of thru | or 10. The plurality of data processing means include at least
Data for registering the generated execution request information in the execution request information storage means as execution request information for the next data processing after executing data processing for generating a plurality of the execution request information according to the execution request information Including processing means,
The service providing system according to claim 11. An information collection method executed in a service providing system configured to provide a service to a service using device configured by one or more information processing devices and connected via a network,
A management information storing step for storing information for identifying a service providing destination, service identification information for a service to be provided, user identification information for a user who uses the service, and management information associated with device identification information for the service using device; ,
An authentication information receiving step for receiving user authentication information used for user authentication or device authentication information used for device authentication as authentication information from the service using device;
An authentication step for executing authentication processing of the received authentication information;
A service specifying step of specifying the service associated with the authentication information based on the authentication information and the management information when the authentication information is authenticated;
An execution step of executing processing according to the service use request when receiving the specified service use request from the service use device;
With
The execution step includes:
The service usage request information stored in association with the information for identifying the service providing destination and the user identification information, and the service usage request according to the information for identifying the service providing destination and the usage history information. An application rule determination step for determining rule information applied to the user of the service providing destination based on rule information applied to a process according to
A rule information applying step for applying rule information applied to the user of the service providing destination determined by the application rule determining step to processing according to the use request of the service;
A storing step of storing a record of the rule information applied to the processing according to the service use request by the rule information applying step;
An information collecting method comprising: A service providing system configured to provide a service to a service using device configured by one or more information processing devices and connected via a network;
Management information storage means for storing information for identifying a service providing destination, service identification information for a service to be provided, user identification information for a user who uses the service, and management information associated with device identification information for the service using device,
Authentication information receiving means for receiving user authentication information used for user authentication or device authentication information used for device authentication as authentication information from the service using device;
An authentication means for executing authentication processing of the received authentication information;
A service specifying means for specifying the service associated with the authentication information based on the authentication information and the management information when the authentication information is authenticated;
Execution means for executing processing according to the service use request when receiving the specified service use request from the service use device;
Function as
The execution means includes
The service usage request information stored in association with the information for identifying the service providing destination and the user identification information, and the service usage request according to the information for identifying the service providing destination and the usage history information. Application rule determining means for determining the rule information applied to the user of the service providing destination based on the rule information applied to the corresponding process;
Rule information applying means for applying rule information applied to the user of the service providing destination determined by the application rule determining means to processing according to the service use request;
Storage means for storing a record of the rule information applied to processing according to the service use request by the rule information application means;
The program characterized by having.

Images