Information processor, method for managing the same and computer program product

• US 20060271781A1
• Filed: 03/10/2006
• Published: 11/30/2006
• Est. Priority Date: 05/26/2005
• Status: Active Grant

• Current Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Original Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Inventors: Murakawa, Akira
• Granted Patent: US 8,266,675 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An information processor is provided that can maintain security in the entire network and use recording media resources efficiently. An image forming apparatus includes a user information memorizing portion for memorizing local user data of users who have ever used the image forming apparatus, a user information deleting portion for deleting any one or more of the local user data when the local user data memorized in the user information memorizing portion has an amount greater than a predetermined value, an authentication request portion for requesting an authentication server to authenticate a user who desires to use the image forming apparatus, and a user information generating portion, when local user data of the user authenticated by the authentication server are not memorized in the user information memorizing portion, for generating local user data of the user in the user information memorizing portion to let the same memorize the generated data.

Claims

1. An information processor capable of connecting, via a communication line, to an authentication server that performs user authentication, the information processor comprising:

a user information memorizing portion for memorizing user information pertaining to each user who has ever used the information processor;

a user information deleting portion for performing a deletion process to delete any one or more of the user information when the user information memorizing portion memorizes the user information in excess of an amount greater than a predetermined value;

an authentication request portion for requesting the authentication server to authenticate a user who desires to use the information processor; and

a user information generating portion, when user information of the user who is authenticated by the authentication server is not memorized in the user information memorizing portion, for generating user information of the user in the user information memorizing portion to let the user information memorizing portion memorize the generated user information.

2. The information processor according to claim 1, wherein the user information includes information on authorization to use the information processor, the authorization being given to a user pertaining to the user information.

3. The information processor according to claim 1, wherein the user information deleting portion, in generation of user information by the user information generating portion, performs the deletion process until an amount of the user information memorized in the user information memorizing portion is down to a predetermined value.

4. The information processor according to claim 1, wherein

the user information includes information indicating a usage count that a user pertaining to the user information has used the information processor for a predetermined period of time, and

the user information deleting portion checks the usage count indicated in each piece of the user information that is memorized in the user information memorizing portion to preferentially perform the deletion process of user information having a smaller value of the usage count compared to other user information.

5. The information processor according to claim 1, wherein

the user information includes information indicating a last login date and time that a user pertaining to the user information logged in to the information processor most recently, and

the user information deleting portion checks the last login date and time indicated in each piece of the user information that is memorized in the user information memorizing portion to preferentially perform the deletion process of user information whose last login date and time is more previous compared to other user information.

6. The information processor according to claim 4, further comprising a user information update portion, every time when a process is performed based on a command from a user, for updating the usage count included in the user information of the user.

7. The information processor according to claim 5, further comprising a user information update portion, every time when a process is performed based on a command from a user, for updating a last login date and time included in the user information of the user.

8. The information processor according to claim 1, further comprising a user authentication process portion for authenticating a user in place of the authentication server when a communication between the information processor and the authentication server is impossible, wherein

the user information includes a password in a user account of a user pertaining to the user information, and

the user authentication process portion performs the user authentication based on a password included in the user information of a user who desires to use the information processor and a password entered by the user.

9. A method for managing an information processor capable of connecting, via a communication line, to an authentication server that performs user authentication, the method comprising:

letting a user information memorizing portion memorize user information pertaining to each user who has ever used the information processor; and

letting the information processor perform a first process, a second process and a third process when a user desires to use the information processor,

the first process being a process of requesting the authentication server to authenticate the user,

the second process being a process of generating, when the authentication server verifies that the user is an authorized user and the user information of the user is not memorized in the user information memorizing portion, user information of the user in the user information memorizing portion, and

the third process being a process of deleting the existing user information other than the generated user information of the user from the user information memorizing portion when the user information memorizing portion memorizes the user information in excess of an amount greater than a predetermined value.

10. The method according to claim 9, wherein the user information includes information on authorization to use the information processor, the authorization being given to a user pertaining to the user information.

11. The method according to claim 9, wherein, in letting the information processor perform the second process, the third process is performed until an amount of the user information memorized in the user information memorizing portion is down to a predetermined value.

12. The method according to claim 9, wherein

the user information includes information indicating a usage count that a user pertaining to the user information has used the information processor for a predetermined period of time, and

the third process involves checking the usage count indicated in each piece of the user information that is memorized in the user information memorizing portion to preferentially perform the deletion process of user information having a smaller value of the usage count compared to other user information.

13. The method according to claim 9, wherein

the user information includes information indicating a last login date and time that a user pertaining to the user information logged in to the information processor most recently, and

the third process involves checking the last login date and time indicated in each piece of the user information that is memorized in the user information memorizing portion to preferentially perform the deletion process of user information whose last login date and time is more previous compared to other user information.

14. The method according to claim 12, further comprising letting the information processor perform a fourth process, every time when a process is performed based on a command from a user, of updating the usage count included in the user information of the user.

15. The method according to claim 13, further comprising letting the information processor perform a fourth process, every time when a process is performed based on a command from a user, of updating a last login date and time included in the user information of the user.

16. The method according to claim 9, further comprising

letting the information processor perform a fifth process of authenticating a user in place of the authentication server when a communication between the information processor and the authentication server is impossible, wherein

the user information includes a password in a user account of a user pertaining to the user information, and

the first process involves performing the user authentication based on a password included in the user information of a user who desires to use the information processor and a password entered by the user.

17. A recording medium storing a computer program used for an information processor that includes a user information memorizing portion for memorizing user information pertaining to users for each user, the program making the information processor perform processing of:

when a user desires to use the information processor,

requesting an authentication server, which is connected via a communication line to the information processor, to authenticate the user;

generating, when the authentication server verifies that the user is an authorized user and the user information of the user is not memorized in the user information memorizing portion, user information of the user in the user information memorizing portion; and

deleting the existing user information other than the generated user information of the user from the user information memorizing portion when the user information memorizing portion memorizes the user information in excess of an amount greater than a predetermined value.