DEVICE AND MANAGEMENT MODULE

• US 20160078208A1
• Filed: 09/04/2015
• Published: 03/17/2016
• Est. Priority Date: 09/11/2014
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Namiki, Hitoshi, Morita, Naoya
• Application Number:
  US14/845,415
• Publication Number:
  US 20160078208A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 10/20 Administration of product repair or maintenance
• CPC Class Codes: G06Q 10/30 Administration of product recycling or disposal
• CPC Class Codes: Y02W 90/00 Enabling technologies or technologies with a potential or indirect contribution to greenhouse gas [GHG] emissions mitigation

Abstract

A device holding control target data inside, includes a state management unit configured to manage the present life cycle state of the device; a user authentication unit configured to authenticate a user and output a group of the user; and an access control unit configured to acquire a present life cycle state when an access request to access the control target data is received, acquire the group of the authenticated user, acquire access possibility information based on the present life cycle state and the group of the user, and control access to the control target data based on the access possibility information. The state management unit manages a fixed life cycle state, and a variable life cycle state that can be added, changed, or deleted, and the access control unit implements control on the fixed life cycle state before the variable life cycle state.

Claims

1. A device holding control target data inside the device, the device comprising:

a state management unit configured to manage a life cycle state that the device is presently in;

a user authentication unit configured to receive authentication data, authenticate a user, and give a response indicating a group to which the user belongs; and

an access control unit configured to

acquire a present life cycle state from the state management unit when an access request to access the control target data is received,

authenticate the user by the user authentication unit and acquire the group of the authenticated user,

acquire access possibility information based on the present life cycle state and the group of the user who has made the access request, the access possibility information being acquired from a state access control policy associated with the control target data, and

control access to the control target data based on the access possibility information, wherein

the state management unit manages a fixed life cycle state and a variable life cycle state having a parent that is one of the fixed life cycle states, wherein the variable life cycle state can be added, changed, or deleted, and

the access control unit implements control with respect to the fixed life cycle state before the variable life cycle state.

2. The device according to claim 1, wherein

the user authentication unit manages a fixed group and an additional group whose parent is the fixed group, wherein the additional group can be added, changed, or deleted,

3. The device according to claim 1, wherein

the state management unit manages state data associated with the life cycle state, the state data including one or more of a transition condition for performing state change, a definition of a process to be forcibly executed when performing state change, and a definition of a process to be forcibly executed when transiting to a next state.

4. The device according to claim 1, wherein

the state management unit changes the life cycle state by being triggered by a human-induced input operation or an automatic detection operation.

5. The device according to claim 1, further comprising:

an authentication unit configured to determine whether another device is a valid by performing authentication, when communicating with the other device.

6. A management module installed in a device holding control target data inside the device, the management module comprising:

a state management unit configured to manage a life cycle state that the device is presently in;

a user authentication unit configured to receive authentication data, authenticate a user, and give a response indicating a group to which the user belongs; and

an access control unit configured to

acquire a present life cycle state from the state management unit when an access request to access the control target data is received,

authenticate the user by the user authentication unit and acquire the group of the authenticated user,

acquire access possibility information based on the present life cycle state and the group of the user who has made the access request, the access possibility information being acquired from a state access control policy associated with the control target data, and

control access to the control target data based on the access possibility information, wherein

the state management unit manages a fixed life cycle state and a variable life cycle state having a parent that is one of the fixed life cycle states, wherein the variable life cycle state can be added, changed, or deleted, and

the access control unit implements control with respect to the fixed life cycle state before the variable life cycle state.

7. A non-transitory computer-readable recording medium storing a program that causes a computer that constitutes a management module installed in a device holding control target data inside the device, to execute a process comprising:

managing a life cycle state that the device is presently in;

receiving authentication data,

authenticating a user, and giving a response indicating a group to which the user belongs;

acquiring a present life cycle state managed at the managing when an access request to access the control target data is received, authenticating the user and acquiring the group of the authenticated user, acquiring access possibility information based on the present life cycle state and the group of the user who has made the access request, the access possibility information being acquired from a state access control policy associated with the control target data, and controlling access to the control target data based on the access possibility information, wherein

the managing includes managing a fixed life cycle state and a variable life cycle state having a parent that is one of the fixed life cycle states, wherein the variable life cycle state can be added, changed, or deleted, and

the controlling includes implementing control with respect to the fixed life cycle state before the variable life cycle state.