Device, authentication system, authentication processing method, and computer program product
AssigneeRicoh Company, Ltd.
InventorRyoji Araki
Life of this patent
Estimating the term…
Abstract
A first creator creates a first priority user information. When an installer installs a program that has a user authentication function, a second creator creates a second priority user information for use in the installed program separately from the first priority user information. An authenticator performs user authentication of the installed program using the created second priority user information.
Claims11
A device configured to perform plural predetermined functions, the device comprising:
- a main body including a first processor configured to execute one or more first programs of instructions to:
- provide a predetermined function to be performed, amongst the plural predetermined functions;
- generate authentication information to be used for user authentication, and register, in a first storage device, the generated authentication information to be used for user authentication;
- and
- provide the predetermined function amongst the plural predetermined functions when a user authentication result indicating that a specified user is an authorized user is obtained;
- and
- an operating body including a second processor configured to execute one or more second programs of instructions to:
- acquire, from the first storage device before performance of a user authentication process, the authentication information registered in the first storage device;
- register, in a second storage device, the acquired authentication information;
- generate first priority user information and register the first priority user information in the second storage device, the first priority user information including, amongst the acquired authentication information, specified authentication information corresponding to a specified user amongst recently-authenticated users each having been recently authenticated as an authorized user, the specified authentication information for each user in the first priority user information including corresponding user authentication time information;
- install, in the second storage device, a program that becomes usable by the user upon authentication of the user as an authorized user;
- generate second priority user information separately from the first priority user information and register the second priority user information in the second storage device, the second priority user information specifying recently-authenticated users each having been recently authenticated as an authorized user of the installed program;
- acquire input information that is input in the user authentication process;
- and
- perform the user authentication process, including collating the input information with the first priority user information or the second priority user information registered in the second storage device, to obtain a user authentication result of the user authentication process, and when the input information is collated with the first priority user information, notifying the main body of the user authentication result, and when the input information is collated with the second priority user information and the user authentication result indicates that the specified user is an authorized user, providing the program installed in the second storage device, to be used by the authorized user,
- wherein the operating body is further configured to disable, while the program is installed, the first priority user information and enable the second priority user information.
An authentication processing method that acquires, by an operating body, authentication information before performance of user authentication, that collates input information that is input in the operating body with the authentication information to be used for user authentication, and that provides a predetermined function amongst plural predetermined functions of a main body to be performed when an authorized user is authenticated, the method comprising:
- performing, by main body:
- providing the predetermined function to be performed amongst the plural predetermined functions;
- generating the authentication information to be used for user authentication, and registering, in a first storage device, the generated authentication information to be used for user authentication in a first storage device;
- and
- providing the predetermined function amongst the plural predetermined functions when a user authentication result indicating that a specified user is an authorized user is obtained;
- and
- performing, by the operating body:
- acquiring, before performance of a user authentication process, the authentication information registered in the first storage device;
- registering the acquired authentication information in a second storage device:
- generating first priority user information and registering the first priority user information in the second storage device, the first priority user information including, amongst the acquired authentication information, specified authentication information corresponding to a specified user amongst recently-authenticated users each having been recently authenticated as an authorized user, the specified authentication information for each user in the first priority user information including corresponding user authentication time information;
- installing, in the second storage device, a program that becomes usable by the user upon authentication of the user as an authorized user;
- generating second priority user information separately from the first priority user information and registering the second priority user information in the second storage device, the second priority user information specifying recently-authenticated users each having been recently authenticated as an authorized user of the installed program;
- acquiring input information that is input in the user authentication process;
- and
- performing the user authentication process, including collating the input information with the first priority user information or the second priority user information registered in the second storage device, to obtain a user authentication result of the user authentication process, and when the input information is collated with the first priority user information, notifying the main body of the user authentication result, and when the input information is collated with the second priority user information and the user authentication result indicates that the specified user is an authorized user, providing the program installed in the second storage device, to be used by the authorized user,
- wherein the method further comprises disabling, by the operating body, while the program is installed, the first priority user information and enabling the second priority user information.
A computer program product comprising a non-transitory computer-readable recording medium that contains an authentication processing program, wherein the authentication processing program, when executed, causes a computer of a main body to perform a method comprising:
- provide a predetermined function to be performed, amongst plural predetermined functions;
- generate authentication information to be used for user authentication, and register, in a first storage device, the generated authentication information to be used for user authentication;
- and
- provide the predetermined function amongst the plural predetermined functions to be performed when a user authentication result indicating that a specified user is an authorized user is obtained;
- and
- the authentication processing program, when executed, causes a computer of an operating body to:
- acquire from the first storage device before performance of a user authentication process, the authentication information registered in the first storage device;
- register, in a second storage device, the acquired authentication information;
- generate first priority user information and register the first priority user information in the second storage device, the first priority user information including, amongst the acquired authentication information, specified authentication information corresponding to a specified user amongst recently-authenticated users each having been recently authenticated as an authorized user, the specified authentication information for each user in the first priority user information including corresponding user authentication time information;
- install in the second storage device, a program that becomes usable by the user upon authentication of the user as an authorized user;
- generate second priority user information separately from the first priority user information and register the second priority user information in the second storage device, the second priority user information specifying recently-authenticated users each having been recently authenticated as an authorized user of the installed program;
- acquire input information that is input in the user authentication process;
- and
- perform the user authentication process, including collating the input information with the first priority user information or the second priority user information registered in the second storage device, to obtain a user authentication result of the user authentication process, and in a case that the input information is collated with the first priority user information, notifying the first unit main body of the user authentication result, and in a case that the input information is collated with the second priority user information and the user authentication result indicates that the specified user is an authorized user, providing the program installed in the second storage device, to be used by the authorized user,
- wherein the method further comprises disabling, by the operating body, while the program is installed, the first priority user information and enabling the second priority user information.
Dependencies are inferred from the claim text.