JP2006172180A - Authentication device and image forming device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security strength by preventing a third person from predicting a password by combining information inputted from a first authentication information inputting means with information inputted from a second authentication information inputting means to generate a password. <P>SOLUTION: According to this image forming device 100, information inputted from a key inputting part 121 and information inputted from a fingerprint inputting part 13 are combined and recorded as password information in header information of job data. When an output of the job data is instructed, an input of passwords is requested, it is determined whether the passwords inputted through the key inputting part 121 and the fingerprint inputting part 13 coincide with password information included in the job data, and in the case of their coincidence, the job data is outputted. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication apparatus that determines whether or not execution of a predetermined process is permitted based on an input password, and an image forming apparatus including the authentication apparatus.

  Conventionally, when logging in to a system or when a user accesses a highly secure function or data, the user who is trying to access is permitted by the user ID and the password, and the authorized user User authentication is performed to check if there is any. In addition, biometric information such as fingerprint information has been used as a password substitute.

For example, Patent Document 1 discloses a technique for performing personal authentication by a password input from a keyboard for a job with a low security level and performing personal authentication by inputting fingerprint information for a job with a high security level. Is described.
JP 2003-237262 A

  However, many passwords entered from the keyboard are relatively easy to predict, such as employee numbers and birthdays, and there is a problem that if a password is leaked, it is easily impersonated. Also, fingerprint information can be forged.

  An object of the present invention is to provide a password to a third party by combining the information input from the first authentication information input means and the information input from the second authentication information input means character input information into a password. It is difficult to predict and to improve the security strength.

In order to solve the above-described problem, an authentication apparatus according to the first aspect of the present invention provides:
First authentication information input means and second authentication information input means;
Password registration means for registering as password information by combining information input from the first authentication information input means and information input from the second authentication information input means;
When execution of a predetermined process is requested, a password input is requested, and the password entered via the first authentication information input means and the second authentication information input means is registered by the password registration means. An authentication unit that determines whether or not the password information matches, and if the password information matches, an authentication unit that permits execution of the predetermined process;
It is characterized by having.

The invention according to claim 2 is the invention according to claim 1,
The first authentication information input means includes an input key used for user registration.

The invention according to claim 3 is the invention according to claim 2,
The input key used for the user registration is a key for inputting characters, numbers or symbols.

The invention according to claim 4 is the invention according to any one of claims 1 to 3,

The second authentication information input means is biometric information input means for inputting biometric information.

The invention according to claim 5 is the invention according to any one of claims 1 to 3,
The second authentication information input means is an IC card reader that inputs information of an IC card.

The invention according to claim 6 is the invention according to claim 2 or 3,
The second authentication information input means includes an input key other than the input key used for the user registration.

The invention according to claim 7 is the invention according to claim 2 or 3,
The second authentication information input unit includes at least two types of input keys other than a biometric information input unit, an IC card reader, and an input key used for the user registration.

The invention according to claim 8 is the invention according to any one of claims 1 to 7,
And a password input end instruction means for instructing the end of the password input when the password input from the first authentication information input means and the second authentication information input means is completed. .

The image processing apparatus according to the ninth aspect of the present invention provides:
It has the authentication apparatus as described in any one of Claims 1-8, It is characterized by the above-mentioned.

  According to the first aspect of the present invention, the information input from the first authentication information input means and the information input from the second authentication information input means are combined and registered as password information, and a predetermined process When execution is requested, it is requested to input a password, and whether or not the password input through the first authentication information input means and the second authentication information input means matches the registered password information. If it matches, execution of a predetermined process is permitted. Therefore, as compared with the conventional case where a password consisting only of information input from one authentication information input means is used, the password is much less likely to be predicted by a third party, and the security strength can be improved.

  According to the second and third aspects of the present invention, compared to a password consisting only of information input from an input key for inputting characters, numbers, codes, etc., which has been conventionally used for user registration such as a user ID, it is markedly different. It becomes difficult for a third party to predict the password, and the security strength can be improved.

  According to the invention described in claim 4, the biometric information input means for inputting the biometric information to the second authentication information input means is used, and the information input by the first authentication information input means and the biometric information are combined. Since the password is used, even if the biometric information is forged, it is not possible to execute a predetermined process using only the biometric information. Therefore, compared to the case where only the biometric information is used for authentication, spoofing can be reliably prevented. , Security strength can be improved.

  According to the fifth aspect of the present invention, the IC card reader is used as the second authentication information input means, and the information input by the first authentication information input means and the information input by reading the IC card are obtained. Since the password is combined, even if the IC card is misused or forged, the IC card information alone cannot be used to execute a predetermined process, so only the IC card information is used for authentication. Compared to the case, spoofing can be surely prevented and the security strength can be increased.

  According to the invention described in claim 6, since an input key other than the key used for user registration is used for the second authentication information input means, the password is strengthened without increasing the cost as compared with the prior art, and the security strength is increased. Can be increased.

  According to the invention described in claim 7, the second authentication information input means includes at least two types of input keys other than the biometric information input means, the IC card reader, and the input keys used for user registration. Therefore, it becomes difficult for a third party to predict the password, and the security strength can be further increased.

  According to the invention described in claim 8, when the password input from the first authentication information input means and the second authentication information input means is completed, the password input completion for instructing the end of the password input is completed. Since the instruction means is provided, the user who registers the password can determine the length of the password, and can provide a third party with a password that is difficult to predict.

  According to the ninth aspect of the present invention, in the image forming apparatus, the information input from the first authentication information input unit and the information input from the second authentication information input unit are combined and used as password information. As a result, compared to the case where a password consisting only of information input from one authentication information input means is used, the password is much less likely to be predicted by a third party, and the security strength can be improved.

Hereinafter, an image forming apparatus 100 including a configuration of an authentication apparatus according to the present invention will be described with reference to the drawings.
In the present embodiment, the first authentication information input means is an input key (hereinafter referred to as a key input unit) for inputting characters, numbers, or symbols that has been conventionally used for user registration such as a user ID. 121) and the second authentication information input means is the fingerprint input unit 13 as an example.

First, the configuration will be described.
The image forming apparatus 100 is, for example, a digital copying machine, and includes a control unit 11, an operation display unit 12, a fingerprint input unit 13, a user data storage unit 14, an image input unit 15, an image processing unit 16, an image output unit 17, an HDD 18, A password registration unit 101, an authentication unit 102, a job data storage processing unit 103, a job data output processing unit 104, and the like are included, and each unit is connected by a bus 19.

  The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. The CPU of the control unit 11 reads out the system program and various processing programs stored in the ROM by operating the operation display unit 12 and expands them in the RAM. Each unit configuring the image forming apparatus 100 according to the expanded programs. And centralized control of the operation of each device.

The operation display unit 12 is configured by an LCD (Liquid Crystal Display) or the like, and displays various operation screens, device status displays, operation statuses of functions, and the like on the display screen according to instructions of display signals input from the control unit 11. I do. In addition, on the LCD display screen, a pressure-sensitive (resistive film pressure) touch panel with transparent electrodes arranged in a grid is configured, and the XY coordinates of the force point pressed by a finger or a touch pen are detected by voltage values. The detected position signal is output to the control unit 11 as an operation signal.
The operation screen displayed on the above-described display screen includes a user ID input screen, a password input instruction screen, and the like, which will be described later. These screens have input keys for inputting characters, numbers, or symbols, that is, The key input unit 121 as the first authentication information input unit is displayed, and an operation signal from the key input unit 121 is output to the control unit 11. Further, an end key 122 as a password input end instruction means is displayed on the password input instruction screen, and an operation signal from the end key 122 is output to the control unit 11.
The operation display unit 12 includes various operation buttons such as a numeric button, a clear button, a menu button, and a start button, and outputs an operation signal generated by the button operation to the control unit 11. Numeric buttons are included in the key input unit 121.

  The fingerprint input unit 13 acquires a fingerprint image data by reading a fingerprint placed at a predetermined position of the fingerprint input unit 13 by a capacitance type fingerprint sensor, and outputs the fingerprint image data to the control unit 11.

  The user data storage unit 14 is configured by a non-volatile memory or the like, and in accordance with an instruction from the control unit 11, a user ID input by the key input unit 121 of the operation display unit 12 and a fingerprint input unit 13 in a fingerprint data registration process described later. Is stored in association with the feature point data of the fingerprint input by.

  The image input unit 15 includes a scanner below a contact glass on which a document is placed, and reads an image of the document. The scanner is composed of a light source, a CCD (Charge Coupled Device), etc., and forms an image of the reflected light of the light scanned from the light source to the original and photoelectrically converts it to read the image of the original. The image data is converted into digital image data by a converter and output to the image processing unit 16.

  The image processing unit 16 performs image processing such as spatial filter processing, enlargement / reduction processing, rotation processing, and gradation correction processing on the image data input from the image input unit 15 and outputs the processed image data to the image output unit 17.

  The image output unit 17 includes a pulse width modulator, a laser light source, a photosensitive drum, a charger, a developing unit, a paper feed unit, a paper discharge unit, a fixing device, and the like, and is input from the image processing unit 16. Image data is pulse-width modulated by a pulse width modulator to emit laser light, and the surface of the photosensitive drum charged by the charger is irradiated with laser light to form an electrostatic latent image. Then, the image output unit 17 conveys the printing paper of the size and orientation input from the operation display unit 12 from the paper feeding unit, and causes the developer to attach toner to the area including the electrostatic latent image on the surface of the photosensitive drum. After the toner is transferred and fixed on the conveyed printing paper, it is discharged from the paper discharge unit.

  An HDD (Hard Disc Drive) 18 creates a folder for each user in accordance with an instruction from the control unit 11 and associates the job data instructed to be stored with a job ID for identifying the job. Store in the folder of the user who instructed to save. Here, a job refers to a series of operations relating to image formation such as copy output. For example, when copying a plurality of originals, a series of operations relating to a plurality of copies is one job, When copying, a series of operations related to copying for a plurality of copies is one job. The job data is composed of header information and image data used in the job. The header information is information including information related to the job (for example, job ID, number of pages, setting information, etc.) and password information set for the job.

  The password registration unit 101 registers password information by combining information input from the key input unit 121 and information input from the fingerprint input unit 13. The password registration unit 101 is realized by software processing in cooperation with the CPU of the control unit 11 and the password registration processing program stored in the ROM. Details will be described later (see FIG. 5).

  The authentication unit 102 displays a password input instruction screen when requested to execute a predetermined process in which a password is set, such as a job data output process (see FIG. 7), via the operation display unit 12. The user is requested to input the password, and it is determined whether the password input through the key input unit 121 and the fingerprint input unit 13 matches the password information registered in the password registration unit 101. Authentication is performed, and if they match, execution of a predetermined process is permitted. The authentication unit 102 is realized by software processing in cooperation with the CPU of the control unit 11 and an authentication processing program stored in the ROM. Details will be described later (see FIG. 8).

  The job data storage processing unit 103 takes in the job data and stores the job data in the HDD 18. When a password setting is requested via the operation display unit 12, the job data storage processing unit 103 registers the password by the password registration unit 101, and records the registered password information in the header of the job data. The job data storage processing unit 103 is realized by software processing in cooperation with the CPU of the control unit 11 and a job data storage processing program stored in the ROM. Details will be described later (see FIG. 4).

  When the job data output processing unit 104 is instructed to output job data via the operation display unit 12, the job data output processing unit 104 reads out the job data instructed to output from the HDD 18 and outputs it. If a password is set in the job data, the authentication unit 102 determines that the input password matches the password information recorded in the header information of the job data, and output of the job data is permitted. Then, the job data instructed to be output is read from the HDD 18 and output. The job data output processing means 104 is realized by software processing in cooperation with the CPU of the control unit 11 and a job data output processing program stored in the ROM. Details will be described later (see FIG. 7).

  Note that the function of each processing program that implements the password registration unit 101, the authentication unit 102, the job data storage processing unit 103, and the job data output processing unit 104 is realized by dedicated hardware that operates under the control of the control unit 11. Also good.

Next, the operation of the present embodiment will be described.
[Fingerprint data registration process]
FIG. 2 shows fingerprint data registration processing executed by the control unit 11. This process is executed when the “fingerprint registration function” is selected from the operation display unit 12.

  First, a message “Please input user ID” on the operation display unit 12 and a user ID input screen on which various input keys constituting the key input unit 121 are displayed are displayed, and a user ID input instruction is given ( Step S1). When a user ID is input from the key input unit 121 by pressing various input keys and / or numeric buttons displayed on the user ID input screen (step S2), the user data storage unit 14 is referred to and input. It is determined whether or not the registered user ID is a registered user ID (step S3). If it is determined that the registered user ID is not a registered ID but a new registration (step S3; NO), the process is as follows. The process proceeds to step S8.

  On the other hand, if it is determined that the input user ID is an already registered ID (step S3; YES), a fingerprint input instruction message “Place your finger on the fingerprint input unit” is displayed on the operation display unit 12. It is displayed (step S4). When a fingerprint is input from the fingerprint input unit 13 and fingerprint image data is acquired and its feature point data is calculated (step S5), the user data storage unit 14 associates it with the registered ID input in step S2. When it is determined that the feature point data match with the stored feature point data, that is, when it is determined that the user is identified by the user ID (step S6; YES), the process is The process proceeds to step S7. If it is determined that they do not match, that is, if it is determined that the user is not identified by the user ID (step S6; NO), this process ends.

  In step S7, the user data storage unit 14 is referenced to determine whether there is an unregistered fingerprint (step S7). If it is determined that there is an unregistered fingerprint (step S7; YES), the operation An unregistered fingerprint registration request is displayed on the display unit 12 (step S8). For example, if the right thumb is not registered, a message “Register the right thumb. Put the right thumb on the fingerprint input unit 13” is displayed. When a fingerprint is input from the fingerprint input unit 13 and fingerprint image data is acquired (step S9), it is determined whether or not the acquired fingerprint image data has a certain image quality that can be recognized. Is determined not to be satisfied (step S10; NO), a message requesting re-input is displayed on the operation display unit 12 (step S11), and the process returns to step S9. If it is determined that the image quality exceeds a certain level (step S10; YES), the feature point data is calculated (step S12), and the finger type information and the feature point data are associated with each other and temporarily stored in the RAM. (Step S13), the process returns to Step S7.

  When registration of feature point data of all fingerprints is completed and it is determined in step S7 that there is no unregistered fingerprint (step S7; NO), the process proceeds to step S14, and the newly registered feature in the process It is determined whether or not there is point data, and if it is determined that there is newly registered feature point data (step S14; YES), the user ID and feature point data of each finger type are associated with each other and the user data is stored. Is stored in the unit 14 (step S15), and the process ends.

  FIG. 3 shows an example of data storage in the user data storage unit 14. As shown in FIG. 3, the user data storage unit 14 stores a user ID and feature point data for each finger type in association with each other.

  Through the fingerprint data registration process, the feature point data of the user's ten-finger fingerprint is registered. By registering the feature point data, the user can combine the information input from the key input unit 121 and the information input from the fingerprint input unit 13 in a password registration process described later. It is possible to create a password that is difficult to predict. In the present embodiment, as an example of registering and using a password that is a combination of information input from the key input unit 121 and information input from the fingerprint input unit 13 in the image forming apparatus 100, job data is used. The case of executing the function of saving and outputting the saved job data will be described as an example, but the present invention can be applied to other password-settable functions.

[Job data saving process]
FIG. 4 shows job data storage processing executed by the control unit 11. This processing is executed when the “image storage registration function” is selected from the operation display unit 12.

  First, when a password setting presence / absence selection screen in which a message such as “Do you want to set a password?” Is displayed on the operation display unit 12 and the password setting is selected (step S21; YES). The password registration process shown in FIG. 5 is executed (step S22).

FIG. 5 shows password registration processing executed by the control unit 11.
In the password registration process, first, a message “Please enter user ID” on the operation display unit 12 and a user ID input screen on which various input keys constituting the key input unit 121 are displayed are displayed. An input instruction is given (step S101). When a user ID is input from the key input unit 121 by pressing various input keys and / or numeric buttons displayed on the user ID input screen (step S102), a “fingerprint input unit” is displayed on the operation display unit 12. The fingerprint input instruction message “Please put your finger on” is displayed (step S103). When a fingerprint is input from the fingerprint input unit 13 and fingerprint image data is acquired and its feature point data is calculated (step S104), the feature point data stored in association with the user ID in the user data storage unit 14 If it is determined that the feature point data match, that is, if it is determined that the user is identified by the user ID (step S105; YES), the process proceeds to step S106. When it is determined that they do not match, that is, when it is determined that the user is not identified by the user ID (step S105; NO), the process and the job data storage process are ended.

  In step S106, input a password such as “Register the password. Enter from the displayed key or fingerprint input section. Enter the end key when password registration ends.” , A password input instruction screen including a key input unit 121 and an end key 122 as a password input end instruction means is displayed (step S106), and input is awaited. Further, 1 is set to the counter n held in the RAM (step S107).

  When a character, number, or sign key is input from the key input unit 121 (step S108; YES), the input key data and the input order n are associated with each other and temporarily stored in the RAM (step S109). n is incremented by 1 (step S115), and the process proceeds to step S116. When a fingerprint is input from the fingerprint input unit 13 and fingerprint image data is acquired (step S110; YES), it is determined whether or not the acquired fingerprint image data has a certain image quality that can be recognized. When it is determined that the image quality is not satisfied (step S111; NO), a message requesting re-input is displayed on the operation display unit 12 (step S112), and the process returns to step S110. If it is determined that the image quality exceeds a certain level (step S111; YES), feature point data is calculated (step S113), and the feature point data and the input order n are associated and temporarily stored in the RAM ( In step S114, the counter n is incremented by 1 (step S115), and the process proceeds to step S116.

  If the end key 122 is not pressed in step S116 (step S116; NO), the process returns to step S108, the processes of steps S108 to S115 are repeatedly executed, and inputs from the key input unit 121 and the fingerprint input unit 13 are accepted. It is done. When the end key 122 is pressed (step S116; YES), the input key data, feature point data, and input order data are associated with the user ID and stored in the password information holding means formed in the RAM ( In step S117), the process proceeds to step S23 in FIG. When the end key 122 is pressed, the input password information is confirmed, and when the password information is composed of input data of only one of the key input unit 121 or the fingerprint input unit 13, It is preferable to display a warning message on the operation display unit 12 and input a password combining data input from both the key input unit 121 and the fingerprint input unit 13.

  FIG. 6 shows a data configuration example of password information held in the password information holding means. 6, in steps S108 to S114, the user ID “0001” is input as “middle finger fingerprint of right hand” from the fingerprint input unit 13 → “key” from the key input unit 121 → fingerprint of right little finger from the fingerprint input unit 13 ”And the end key 122 is pressed.

  In the password registration process described above, the key input data and the fingerprint input data are combined into a password, and the user can specify the length of the password by pressing the end key 122. It is difficult to create a password with very high security strength.

  In step S23 of FIG. 4, when a message such as “Please place a document and press the start key” is displayed on the operation display unit 12 and job data is loaded (step S23), a job ID is issued, Information regarding the job including the job ID and password information stored in the password information holding means are recorded in the header of the fetched job data (step S24), and the job data is stored in a folder corresponding to the user of the HDD 18 (step S27). ), This process ends. The folder corresponding to the user is a folder to which a user ID is assigned. If there is no folder corresponding to the ID of the user who saved the job data in the HDD 18, a new folder is created and the job data Is stored.

  On the other hand, if it is selected not to set a password in step S21 (step S21; NO), a message such as “Please place a document and press the start key” is displayed on the operation display unit 12, and the job data Capture is executed (step S25). Information indicating that no password is set is recorded in the header of the job data (step S26), the job data is stored in a folder corresponding to the user of the HDD 18 (step S27), and the process ends.

[Job data output processing]
Next, job data output processing for outputting job data stored in the HDD 18 in the above-described job data storage processing will be described.
FIG. 7 shows job data output processing executed by the control unit 11. This process is a process executed when the “saved data output function” is selected from the operation display unit 12. The job data output process is an example of a process that is executed when the input passwords match.

  First, a list of job data stored in the HDD 18 and an output job specification screen on which a message “Please select a job to output” is displayed on the operation display unit 12, and an output job is specified ( In step S31), the job data of the designated job is retrieved from the HDD 18, the presence / absence of password setting is determined from the header information of the job data (step S32), and it is determined that the password is set (step S33; YES). ), The authentication process shown in FIG. 8 is executed (step S34).

FIG. 8 shows an authentication process executed by the control unit 11.
In the authentication process, first, a mismatch flag held in the RAM is initialized (step S201). Next, a message “Please input user ID” and a user ID input screen on which various keys constituting the key input unit 121 are displayed are displayed, and a user ID input instruction is given (step S202). When a user ID is input from the key input unit 121 by pressing various input keys and / or numeric buttons displayed on the user ID input screen (step S203), “input password” is displayed on the operation display unit 12. When the input is completed, press the end key. "A password input instruction screen including the key input unit 121 and the end key 122 is displayed (step S204). Wait. Further, 1 is set to the counter n held in the RAM (step S205).

  When a character, number, or sign key is input from the key input unit 121 (step S206; YES), the input key data is compared with the nth data of the password information included in the job data. When a fingerprint is input from the fingerprint input unit 13 and fingerprint image data is acquired (step S208; YES), feature point data is calculated (step S209), and the calculated feature point data and nth data of password information are calculated. Is compared (step S210).

  As a result of the comparison in step S207 or S210, if it is determined that there is a mismatch (step S211; YES), a mismatch flag is set (step S212), and the process proceeds to step S213. When the data input by the key input unit 121 or the fingerprint input unit 13 does not match the nth data of the password information, the output of the job data is rejected. Since the input person can recognize whether the input is different, no display is performed here.

  If the end key 122 is not pressed in step S213 (step S213; NO), the counter n is incremented (step S214), the process returns to step S206, and the processes of steps S206 to S212 are repeatedly executed. When the end key 122 is pressed (step S213; YES), the process proceeds to step S35 in FIG.

  At the end of the authentication process, if the mismatch flag is set, it indicates that the output of the specified job data is rejected. If the mismatch flag is not set, the output of the specified job data is Indicates permission.

  In step S35 of FIG. 7, a mismatch flag is referred to, and it is determined whether or not the passwords match. If they do not match (step S35; NO), the operation display unit 12 indicates that the password is incorrect. Are displayed (step S36), and the process ends. If the passwords match (step S35; YES), that is, if execution of job data output processing is permitted in the authentication process or if no password is set (step S33; NO), the job whose output is specified Data is read from the HDD 18 and output from the image output unit 17 (step S37), and this process ends.

  As described above, according to the image forming apparatus 100, the information input from the key input unit 121 and the information input from the fingerprint input unit 13 that inputs a fingerprint as biometric information are combined to form a password. Compared to a password consisting only of information input from the key input unit 121 as in the prior art, the password is much less likely to be predicted by a third party. Even if the information from the fingerprint input unit 13 is forged, execution of the requested process is not permitted only with the information input from the fingerprint input unit 13, so that spoofing can be reliably prevented and security can be prevented. Strength can be increased.

  Note that the description in the present embodiment shows a preferred example of the image forming apparatus 100 according to the present invention, and the present invention is not limited to this.

  For example, in the above-described embodiment, the first authentication information input unit is the key input unit 121 including character, number, and code input keys that are conventionally used for user registration such as a user ID in the operation display unit 12. The second authentication information input means is the fingerprint input unit 13, and the information input from the key input unit 121 and the information input from the fingerprint input unit 13 are combined and registered as a password. The authentication information input means is not limited to this. As the second authentication information input means, biological information input means for inputting biological information other than fingerprints, for example, information such as an iris may be used. Further, the authentication device included in the image forming apparatus 100 includes an IC card reading device that reads information of an IC card (for example, an IC card in which personal information of the user is recorded), which is used as second authentication information. The password may be a combination of the information input from the key input unit 121 serving as the first authentication information input unit and the information input from the IC card reader serving as the second authentication information input unit. As a result, the password is much less likely to be predicted by a third party than in the past, and even if the IC card is misused or forged, execution of the requested process is not permitted only with the information on the IC card. Therefore, it is possible to reliably prevent spoofing and increase the security strength. Further, as the second authentication information input means, a key or button other than the key input unit 121 as the first authentication information input means, that is, a menu selection button or clear that has not been used for registration of a user ID or the like conventionally. Various function keys and buttons such as buttons and function selection buttons may be used to combine the information input from these and the information input from the first authentication information input means to form a password. Thereby, compared with the past, a password can be strengthened without increasing the cost, and the security strength can be increased.

  Further, the second authentication information input means may include at least two types of function keys and buttons other than the first authentication information input means in the fingerprint input unit 13, the IC card reader, and the operation display unit 12. Good. As a result, it becomes more difficult to predict the password and the security strength can be improved.

  In the above embodiment, the case where the authentication apparatus according to the present invention is applied to an image forming apparatus has been described as an example. However, the authentication apparatus according to the present invention is also applicable to various apparatuses other than the image forming apparatus. can do. By applying the authentication apparatus according to the present invention to an image forming apparatus, it is possible to improve the security strength of the image forming apparatus and to more securely protect data stored in the image forming apparatus. In the above embodiment, the case where the password according to the present invention is used for the process of saving and outputting job data has been described as an example. However, the present invention is not limited to this, and the process for securing other security is described. It is possible to use. In the above-described embodiment, the case where the image forming apparatus of the present invention is applied to a digital copying machine has been described as an example. However, the present invention is not limited to this, and other image forming apparatuses such as a facsimile, a printer, or a complex machine thereof. Is also applicable.

  In addition, the detailed configuration and detailed operation of each apparatus constituting the image forming apparatus 100 can be changed as appropriate without departing from the spirit of the present invention.

1 is a block diagram illustrating a functional configuration of an image forming apparatus 100 configured to include an authentication apparatus according to the present invention. It is a flowchart which shows the fingerprint data registration process performed by the control part 11 of FIG. It is a figure which shows the example of data storage of the user data storage part 14 of FIG. It is a flowchart which shows the job data preservation | save process performed by the control part 11 of FIG. It is a flowchart which shows the password registration process performed by the control part 11 of FIG. It is a figure which shows an example of the password registered by the password registration process of FIG. It is a flowchart which shows the job data output process performed by the control part 11 of FIG. It is a flowchart which shows the authentication process performed by the control part 11 of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Image forming apparatus 11 Control part 12 Operation display part 121 Key input part (1st authentication information input means)
122 End key (password entry end instruction means)
13 Fingerprint input section (second authentication information input means)
14 User data storage unit 15 Image input unit 16 Image processing unit 17 Image output unit 18 HDD
19 Bus 101 Password registration means 102 Authentication means 103 Job data storage processing means 104 Job data output processing means

Claims (9)

First authentication information input means and second authentication information input means;
Password registration means for registering as password information by combining information input from the first authentication information input means and information input from the second authentication information input means;
When execution of a predetermined process is requested, a password input is requested, and the password entered via the first authentication information input means and the second authentication information input means is registered by the password registration means. An authentication unit that determines whether or not the password information matches, and if the password information matches, an authentication unit that permits execution of the predetermined process;
An authentication apparatus comprising:   The authentication apparatus according to claim 1, wherein the first authentication information input unit includes an input key used for user registration.   The authentication apparatus according to claim 2, wherein the input key used for user registration is an input key for inputting characters, numbers, or symbols.   The authentication apparatus according to claim 1, wherein the second authentication information input unit is a biometric information input unit that inputs biometric information.   The authentication apparatus according to claim 1, wherein the second authentication information input unit is an IC card reader that inputs information of an IC card.   4. The authentication apparatus according to claim 2, wherein the second authentication information input unit includes an input key other than the input key used for the user registration.   The second authentication information input means comprises at least two types of input keys other than a biometric information input means, an IC card reader, and an input key used for the user registration. 4. The authentication device according to 3.   A password input end instruction means is provided for instructing the end of the password input when the password input from the first authentication information input means and the second authentication information input means is completed. The authentication apparatus as described in any one of Claims 1-7.   An image forming apparatus comprising the authentication device according to claim 1.

Images