Device access based on centralized authentication

• US 7,925,767 B2
• Filed: 01/21/2009
• Issued: 04/12/2011
• Est. Priority Date: 12/05/2001
• Status: Expired due to Fees

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Yang, Joseph, Seikh, Attullah, Khosrova, Eliza, Slick, Royce E, Martinez, Martin, Paek, Jeanette Y, Chern, Wei-Jhy, Iwamoto, Neil Y
• Primary Examiner(s): Vu; Thong H
• Application Number:
  US12/320,134
• Publication Number:
  US 20090133104A1
• Time in Patent Office: 811 Days
• Field of Search: 370/352, 709/202
• US Class Current: 709/229
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04N 1/00509 Personalising for a particular user or group of users, e.g. a workgroup or company

Abstract

Access control to a networked peripheral device by a walk-up user, wherein the networked peripheral device is accessible by both the walk-up user and a remote user, based on centralized access management information. Access control comprises receiving authenticated information for the walk-up user from the networked peripheral device at a centralized location, determining at the networked peripheral device a level of access to the networked peripheral device by the walk-up user based on received access management information for the walk-up user, and allowing the walk-up user to access the determined user-available features of the networked peripheral device based on the determined level of access.

Claims

1. A peripheral device for controlling use of a plurality of features and/or services of a peripheral device by a user, the plurality of services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the peripheral device comprising:

a reception unit configured to receive, from a computer, authentication information corresponding to a user;

an authentication unit configured to authenticate the user using the received authentication information; and

a transmission unit configured to transmit, to the computer, access management information which specifies a feature and/or a service of the peripheral device available to the authenticated user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the authenticated user from among the plurality of features and/or services of the peripheral device,

wherein a job is transmitted from the computer to the peripheral device after the access management information is transmitted to the computer,

wherein the access management information is used for determining whether the user can use a feature and/or a service of the peripheral device necessary to perform the job.

2. A peripheral device according to claim 1, wherein the transmission unit does not transmit the access management information to the computer if authentication by the authentication unit is not successful.

3. A peripheral device according to claim 1, wherein the access management information is transmitted along with the job from the computer to the peripheral device.

4. A computer which transmits a job to a peripheral device which provides a plurality of features and/or services, the plurality of services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the computer comprising:

a reception unit configured to receive, from a peripheral device, access management information which specifies a feature and/or a service of the peripheral device available to a user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the user from among the plurality of features and/or services of the peripheral device; and

a transmission unit configured to transmit a job to the peripheral device after the access management information is received,

wherein the access management information is used for determining whether the user can use the feature and/or a service of a peripheral device necessary to perform the job.

5. A computer according to claim 4, further comprising:

a second transmission unit configured to transmit, to the peripheral device, authentication information corresponding to the user,

wherein the access management information is transmitted from the peripheral device to the computer based on a result of authentication using the authentication information.

6. A computer according to claim 4, wherein said transmission unit transmits the received access management information along with the job to the peripheral device.

7. A control method in a peripheral device for controlling use of a plurality of features and/or services of a peripheral device by a user, the plurality of services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the control method comprising:

receiving, from a computer, authentication information corresponding to a user;

authenticating the user using the received authentication information; and

transmitting, to the computer, access management information which specifies a feature and/or a service of the peripheral device available to the authenticated user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the authenticated user from among the plurality of features and/or services of the peripheral device,

wherein a job is transmitted from the computer to the peripheral device after the access management information is transmitted to the computer,

wherein the access management information is used for determining whether the user can use a feature and/or a service of the peripheral device necessary to perform the job.

8. A control method according to claim 7, wherein the access management information is not transmitted from the peripheral device to the computer if the authentication is not successful.

9. A control method according to claim 7, wherein the access management information is transmitted along with the job from the computer to the peripheral device.

10. A control method in a computer which transmits a job to a peripheral device which provides a plurality of features and/or services, the plurality of services including at least one of a printer service, a scanner service, a facsimile service and a copy service, the method comprising:

receiving, from the peripheral device, access management information which specifies a feature and/or a service of the peripheral device available to a user from among the plurality of features and/or services of the peripheral device, or which specifies a feature and/or a service of the peripheral device not available to the user from among the plurality of features and/or services of the peripheral device; and

transmitting a job to the peripheral device after the access management information is received,

wherein the access management information is used for determining whether the user can use a feature and/or a service of the peripheral device necessary to perform the job.

11. A control method according to claim 10, further comprising:

transmitting, to the peripheral device, authentication information corresponding to the user,

wherein the access management information is transmitted from the peripheral device to the computer based on a result of authentication using the authentication information.

12. A control method according to claim 10, wherein the received access management information is transmitted along with the job to the peripheral device.