Device Access Based on Centralized Authentication

• US 20090133104A1
• Filed: 01/21/2009
• Published: 05/21/2009
• Est. Priority Date: 12/05/2001
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Yang, Joseph, Khosrova, Eliza, Martinez, Martin, Seikh, Attaullah, Iwamoto, Neil Y., Chern, Wei-Jhy, Slick, Royce E., Paek, Jeanette Y.
• Granted Patent: US 7,925,767 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04N 1/00509 Personalising for a particular user or group of users, e.g. a workgroup or company

Abstract

Access control to a networked peripheral device by a walk-up user, wherein the networked peripheral device is accessible by both the walk-up user and a remote user, based on centralized access management information. Access control comprises receiving authenticated information for the walk-up user from the networked peripheral device at a centralized location, determining at the networked peripheral device a level of access to the networked peripheral device by the walk-up user based on received access management information for the walk-up user, and allowing the walk-up user to access the determined user-available features of the networked peripheral device based on the determined level of access.

Claims

1-16. -16. (canceled)

17. An information processing apparatus for controlling access to a peripheral device by a user, the peripheral device being accessible by the user based on access management information, the peripheral device providing the user with a plurality of features and/or services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the information processing apparatus comprising:

a reception unit configured to receive, from a computer, authentication information corresponding to a user;

an authentication unit configured to authenticate the user using the received authentication information; and

a transmission unit configured to transmit, to the computer, access management information which specifies a feature and/or a service of the peripheral device available to the authenticated user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the authenticated user from among the plurality of features and/or services of the peripheral device,

wherein the access management information and a job are transmitted from the computer to the peripheral device,

wherein the transmitted access management information is used for determining by the peripheral device whether the user can use the feature and/or the service of the peripheral device necessary to perform the job.

18. An information processing apparatus according to claim 17,

wherein said reception unit receives, from the peripheral device, authentication information corresponding to a second user,

said authentication unit authenticates the second user using the received authentication information corresponding to the second user,

said transmission unit transmits, to the peripheral device, access management information which specifies a feature and/or a service of the peripheral device available to the second user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the second user from among the plurality of features and/or services of the peripheral device,

the transmitted access management information is used for determining by the peripheral device whether the second user can use the feature and/or the service of the peripheral device necessary to perform the job.

19. An information processing apparatus according to claim 17, wherein the access management information is transmitted along with the job from the computer to the peripheral device.

20. A computer which transmits a job to a peripheral device, the peripheral device being accessible by a user based on access management information, and the peripheral device providing the user with a plurality of features and/or services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the computer comprising:

a reception unit configured to receive, from an information processing apparatus, access management information which specifies a feature and/or a service of the peripheral device available to a user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the user from among the plurality of features and/or services of the peripheral device; and

a transmission unit configured to transmit the received access management information and a job to the peripheral device,

wherein the transmitted access management information is used by the peripheral device for determining whether the user can use the feature and/or the service of the peripheral device necessary to perform the job.

21. A computer according to claim 20, further comprising:

a second transmission unit constructed to transmit, to the information processing apparatus, authentication information corresponding to the user,

wherein the access management information is transmitted from the information processing apparatus to the computer based on a result of authentication using the authentication information.

22. A computer according to claim 20, wherein said transmission unit transmits the received access management information along with the job to the peripheral device.

23. A control method in an information processing apparatus for controlling access to a peripheral device by a user, the peripheral device being accessible by the user based on access management information, the peripheral device providing the user with a plurality of features and/or services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the control method comprising:

receiving, from a computer, authentication information corresponding to a user;

authenticating the user using the received authentication information; and

transmitting, to the computer, access management information which specifies a feature and/or a service of the peripheral device available to the authenticated user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the authenticated user from among the plurality of features and/or services of the peripheral device,

wherein the access management information and a job are transmitted from the computer to the peripheral device,

wherein the transmitted access management information is used for determining by the peripheral device whether the user can use the feature and/or the service of the peripheral device necessary to perform the job.

24. A control method according to claim 23, further comprising:

receiving, from the peripheral device, authentication information corresponding to a second user;

authenticating the second user using the received authentication information corresponding to the second user; and

transmitting, to the peripheral device, access management information which specifies a feature and/or a service of the peripheral device available to the second user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the second user from among the plurality of features and/or services of the peripheral device,

wherein the transmitted access management information is used for determining by the peripheral device whether the second user can use the feature and/or the service of the peripheral device necessary to perform the job.

25. A control method according to claim 23, wherein the access management information is transmitted along with the job from the computer to the peripheral device.

26. A control method in a computer which transmits a job to a peripheral device, the peripheral device being accessible by a user based on access management information, and the peripheral device providing the user with a plurality of features and/or services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the method comprising:

receiving, from an information processing apparatus, access management information which specifies a feature and/or a service of the peripheral device available to a user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the user from among the plurality of features and/or services of the peripheral device; and

transmitting the received access management information and a job to the peripheral device,

wherein the transmitted access management information is used by the peripheral device for determining whether the user can use the feature and/or the service of the peripheral device necessary to perform the job.

27. A control method according to claim 26, further comprising:

transmitting, to the information processing apparatus, authentication information corresponding to the user,

wherein the access management information is transmitted from the information processing apparatus to the computer based on a result of authentication using the authentication information.

28. A control method according to claim 26, wherein the received access management information is transmitted along with the job to the peripheral device.