System and method for authenticating a user of an image processing system

• US 20060230286A1
• Filed: 03/30/2005
• Published: 10/12/2006
• Est. Priority Date: 03/30/2005
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited, Ricoh Corporation (Ricoh Company Limited)
• Original Assignee: Ricoh Company Limited, Ricoh Corporation (Ricoh Company Limited)
• Inventors: Kitada, Hiroshi
• Application Number:
  US11/092,831
• Publication Number:
  US 20060230286A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: H04N 1/0048 Indicating an illegal or impossible operation or selection to the user
• CPC Class Codes: H04N 1/32561 using a programmed control device, e.g. a microprocessor
• CPC Class Codes: H04N 1/4406 Restricting access, e.g. according to user identity mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08
• CPC Class Codes: H04N 1/4413 involving the use of passwords, ID codes or the like, e.g. PIN
• CPC Class Codes: H04N 2201/3277 The additional information being stored in the same storage device as the image data

Abstract

A method and system for multi-factor user authentication on an image processing device. The system includes a server used to authenticate a user, and to retrieve user information corresponding to user identification data. The user information is transmitted from the server to an image processing device, and processed by the image processing device. The processed image data can also be encrypted by using encryption information input to the image processing device.

Claims

1. A method for authenticating a user of an image processing system, comprising:

entering first user identification data at an image processing device;

sensing, at the image processing device, second user identification data from a physical object;

transmitting the first and second user identification data to a first server;

authenticating the user using the first and second user identification data;

transmitting information corresponding to the user from the first server to the image processing device.

2. The method of claim 1, wherein the step of entering first user identification data comprises:

entering a personal identification number

3. The method of claim 1, wherein the step of entering first user identification data comprises:

entering biometric information corresponding to the user, by presenting physical characteristics of the user to a device configured to collect biometric information.

4. The method of claim 3, wherein the step of entering first user identification data comprises:

entering physical characteristics of the user including at least one of the user'"'"'s facial characteristics, a fingerprint, retinal information and vocal information.

5. The method of claim 3, further comprising the steps of:

comparing the entered biometric information to a plurality of stored biometric information corresponding to authorized users; and

determining if entered biometric information matches one of the plurality of biometric information corresponding to authorized users.

6. The method according to claim 3, wherein the step of sensing the second user identification data comprises:

sensing the second user identification data from a device having a memory.

7. The method of claim 1, wherein the step of sensing the second user identification data comprises:

sensing the second user identification data from a device having a memory.

8. The method of claim 6, wherein the step of sensing the second user identification data comprises:

sensing the second user identification data from a memory which is a card.

9. The method of claim 1, wherein the step of sensing second user identification data, comprises:

sensing a digital signature corresponding to the user identified by the user identification data.

10. The method of claim 1, wherein the step of sensing second user identification data comprises:

sensing encryption information corresponding to the user identification data.

11. The method of claim 1, wherein the step of authenticating the user using the first and second identification data comprises:

comparing the first and second identification data against stored user identification data; and

determining if the first and second identification data match the stored user identification data.

12. The method of claim 1, wherein the step of transmitting information corresponding to the user from the first server to the image processing device comprises:

transmitting information related to a scan setting of the image processing device.

13. The method of claim 12, wherein the step of transmitting information corresponding to the user from the first server to the image processing device comprises:

transmitting information related to resolution, density, scan mode, color, paper size and file format settings for a scanned image.

14. The method of claim 1, wherein the step of transmitting information corresponding to the user from the first server to the image processing device comprises:

transmitting information indicating the identity of a network application corresponding to a destination for processed image data.

15. The method of claim 1, wherein the step of transmitting information corresponding to the user from the first server to the image processing device comprises:

transmitting an executable file configured to be executed by the image processing device.

16. The method of claim 1, further comprising the step of:

changing image processing settings of the image processing device based on the information corresponding to the user received from the first server.

17. The method of claim 1, further comprising the step of:

changing a user interface of the image processing device based on the information corresponding to the user received from the first server.

18. The method of claim 1, further comprising the step of:

changing a functionality of the image processing device based on the information corresponding to the user received from the first server.

19. The method of claim 1, wherein the step of transmitting the first and second user identification data to a first server comprises:

transmitting the first and second user identification data to a second server; and

transmitting the first and second user identification data from the second server to the first server.

20. The method of claim 19, further comprising the step of:

transmitting a confirmation from the first server to the second server indicating that a user authentication was successful at the first server.

21. The method of claim 20, further comprising the step of:

transmitting a request from the second server to the first server for the information corresponding to the user.

22. The method of claim 21, further comprising the step of:

transmitting the information corresponding to the user from the first server to the second server in response to the request; and

transmitting the information corresponding to the user from the second server to the image processing device.

23. The method of claim 1, further comprising the steps of:

sensing, at the image processing device, encryption information;

encrypting image data processed by the image processing device;

transmitting the encrypted image data from the image processing device to a network application

24. The method of claim 23, further comprising the step of:

transmitting the encrypted image data from the image processing device to the second server.

25. The method of claim 24, further comprising the step of:

transmitting the encrypted image data from the second server to a network application connected to the second server.

26. The method of claim 23, further comprising the step of:

retrieving the encrypted image data from the network application and decrypting the image data.

27. A system for authenticating a user of an image processing system, comprising:

means for entering first user identification data at an image processing device;

means for sensing, at the image processing device, second user identification data from a physical object;

means for transmitting the first and second user identification data to a first server;

means for authenticating the user using the first and second user identification data;

means for transmitting information corresponding to the user from the first server to the image processing device.

28. The system of claim 27, wherein:

the means for entering first user identification data collects first user identification data which includes a personal identification number.

29. The system of claim 27, wherein:

the means for entering first user identification data collects first user identification data which includes biometric information corresponding to the user.

30. The system of claim 29, wherein:

the means for entering first user identification data collects physical characteristics of the user including at least one of the user'"'"'s facial characteristics, a fingerprint, retinal information and vocal information.

31. The system of claim 29, further comprising:

means for comparing the biometric information corresponding to the user to a plurality of stored biometric information corresponding to authorized users; and

means for determining if the biometric information corresponding to the user matches one of the plurality of biometric information corresponding to authorized users.

32. The system according to claim 29, wherein:

the means for sensing the second user identification data senses the second user identification data from a device having a memory.

33. The system of claim 27, wherein:

the means for sensing the second user identification data senses the second user identification data from a device having a memory.

34. The system of claim 32, wherein:

the means for sensing the second user identification data senses the second user identification data from a memory which is a card.

35. The system of claim 27, wherein:

the means for sensing the second user identification data senses the second user identification data which includes a digital signature corresponding to the user identified by the user identification data.

36. The system of claim 27, wherein:

the means for sensing the second user identification data senses the second user identification data which includes encryption information corresponding to the user identification data.

37. The system of claim 27, wherein:

the means for authenticating the user compares the first and second identification data against stored user identification data, and determines if the first and second identification data match the stored user identification data.

38. The system of claim 27, wherein:

the means for transmitting information corresponding to the user transmits information related to a scan setting of the image processing device.

39. The system of claim 36, wherein:

the means for transmitting information corresponding to the user transmits information related to resolution, density, scan mode, color, paper size and file format settings for a scanned image.

40. The system of claim 27, wherein:

the means for transmitting information corresponding to the user transmits information indicating the identity of a network application corresponding to a destination for processed image data.

41. The system of claim 27, wherein:

the means for transmitting information corresponding to the user transmits an executable file configured to be executed by the image processing device.

42. The system of claim 27, further comprising:

means for changing image processing settings of the image processing device using the information corresponding to the user received from the first server.

43. The system of claim 27, further comprising:

means for changing a user interface of the image processing device using the information corresponding to the user received from the first server.

44. The system of claim 27, further comprising:

means for changing a functionality of the image processing device using the information corresponding to the user received from the first server.

45. The system of claim 27, further comprising:

the means for transmitting the first and second user identification data transmits the first and second user identification data to a second server, and

means for transmitting the first and second user identification data from the second server to the first server.

46. The system of claim 45, further comprising:

means for transmitting a confirmation from the first server to the second server indicating that a user authentication was successful at the first server.

47. The system of claim 46, further comprising:

means for transmitting a request from the second server to the first server for the information corresponding to the user.

48. The system of claim 47, further comprising:

means for transmitting the information corresponding to the user from the first server to the second server in response to the request; and

means for transmitting the information corresponding to the user from the second server to the image processing device.

49. The system of claim 27, further comprising:

means for sensing encryption information at the image processing device;

means for encrypting image data processed by the image processing device;

means for transmitting the encrypted image data from the image processing device to a network application.

50. The system of claim 49, further comprising:

means for transmitting the encrypted image data from the image processing device to the second server.

51. The system of claim 49, further comprising:

means for transmitting the encrypted image data from the second server to a network application connected to the second server.

52. The system of claim 47, further comprising:

means for retrieving the encrypted image data from the network application and decrypting the image data.

53. A system for authenticating a user of an image processing system, comprising:

an input connected to an image processing device and configured to receive first user identification data;

a sensor connected to the image processing device and configured to sense second user identification data from a physical object;

an interface of the image processing device configured to transmit the first and second user identification data to a first server;

a module of the first server configured to authenticate the user using the first and second user identification data;

an interface of the first server configured to transmit information corresponding to the user from the first server to the image processing device.

54. The system of claim 53, wherein:

the input is configured to receive the first user identification information which includes a personal identification number.

55. The system of claim 53, wherein the input configured to receive first user identification data comprises:

a device configured to collect biometric information corresponding to the user, by collecting physical characteristics of the user.

56. The system of claim 55, wherein:

the device configured to collect biometric information is configured to collect information representative of physical characteristics of the user including at least one of the user'"'"'s facial characteristics, a fingerprint, retinal information and vocal information.

57. The system of claim 55, wherein the device configured to collect biometric information comprises:

a processor configured to compare the collected biometric information to a plurality of stored biometric information corresponding to authorized users and determine if the collected biometric information matches one of the plurality of biometric information corresponding to authorized users.

58. The system according to claim 55, wherein:

the sensor is configured to sense the second user identification data from a device having a memory.

59. The system of claim 53, wherein:

the sensor is configured to sense the second user identification data from a device having a memory.

60. The system of claim 58, wherein:

the sensor is configured to sense the second user identification data from a device having a memory which is a card.

61. The system of claim 53, wherein:

the sensor is configured to sense the second user identification data which includes a digital signature corresponding to the user identified by the user identification data.

62. The system of claim 53, wherein:

the sensor is configured to sense the second user identification data which includes encryption information corresponding to the user identification data.

63. The system of claim 53, wherein the first server comprises:

another module configured to compare the first and second identification data against stored user identification data and determine if the first and second identification data match the stored user identification data.

64. The system of claim 53, wherein:

the interface of the first server is configured to transmit information corresponding to the user which includes information related to a scan setting of the image processing device.

65. The system of claim 62, wherein:

the interface of the first server is configured to transmit information corresponding to the user which includes information related to resolution, density, scan mode, color, paper size and file format settings for a scanned image.

66. The system of claim 53, wherein:

the interface of the first server is configured to transmit information corresponding to the user which includes information indicating the identity of a network application corresponding to a destination for processed image data.

67. The system of claim 53, wherein:

the interface of the first server is configured to transmit information corresponding to the user which includes an executable file configured to be executed by the image processing device.

68. The system of claim 53, wherein the image processing device comprises:

a processor configured to change image processing settings of the image processing device based on the information corresponding to the user received from the first server.

69. The system of claim 53, wherein the image processing device comprises:

a processor configured to change a user interface of the image processing device based on the information corresponding to the user received from the first server.

70. The system of claim 53, wherein the image processing device comprises:

a processor configured to change a functionality of the image processing device based on the information corresponding to the user received from the first server.

71. The system of claim 53, further comprising:

the interface of the image processing device configured to transmit the first and second user identification data to a second server; and

an interface of the second server configured to transmit the first and second user identification data from the second server to the first server.

72. The system of claim 71, wherein:

the interface of the first server is configured to transmit a confirmation from the first server to the second server indicating that a user authentication was successful at the first server.

73. The system of claim 72, wherein:

the interface of the second server is configured to transmit a request from the second server to the first server for the information corresponding to the user.

74. The system of claim 73, wherein:

the interface of the first server is configured to transmit the information corresponding to the user from the first server to the second server in response to the request; and

the interface of the second server is configured to transmit the information corresponding to the user from the second server to the image processing device.

75. The system of claim 53, further comprising:

the sensor connected to the image processing device configured to sense encryption information;

a processor of the image processing device configured to encrypt image data processed by the image processing device using the encryption information;

the interface of the image processing device configured to transmit the encrypted image data from the image processing device to a network application

76. The system of claim 75, wherein:

the interface of the image processing device is configured to transmit the encrypted image data from the image processing device to the second server.

77. The system of claim 76, wherein:

the interface of the second server is configured to transmit the encrypted image data from the second server to a network application connected to the second server.

78. The system of claim 75, further comprising:

a processing device configured to retrieve the encrypted image data from the network application and decrypt the image data.