Abstract:
An information processing system including an operating device and an information processing main body device, the operating device comprising: an application control unit configured to acquire function information of at least one of application program installed in the operation device; and a use-authority determination unit configured to receive the operation from the user and notice to the application control unit, the information processing main body device comprising a authentication unit configured to submit to the use-authority determination unit a user authentication result including a use-authority information, wherein the use-authority determination unit determines whether or not the user is allowed to use the at least one of the application program on the basis of the function information and the use-authority information.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    The present application claims priority to and incorporates by reference the entire contents of Japanese Patent Application No. 2012-203676 filed in Japan on Sep. 14, 2012. 
       BACKGROUND OF THE INVENTION 
       [0002]    1. Field of the Invention 
         [0003]    The present invention relates to an image processing system, an operating device, and a program. 
         [0004]    2. Description of the Related Art 
         [0005]    According to a conventionally-known technology, when a new application program (hereafter, simply referred to as an application) is installed in an image forming apparatus, the authority to use the new application is set for each user. For example, Japanese Patent No. 4745657 discloses a technology related to the authority of use, i.e., the technology in which, when a new function is added to an apparatus, the restriction on the use of the added function is appropriately set. 
         [0006]    Recently, image forming apparatuses have been developed in which an apparatus main body and an operating device are controlled by different controllers. 
         [0007]    In the above-described image forming apparatus in which the apparatus main body and the operating device are controlled by different controllers, a new application to be executed by the operating device is sometimes added to the image forming apparatus. In the above case, there is the need for the technology for efficiently and appropriately setting the restriction on the use of the new application without the need of the user operation, or the like, for settings. 
         [0008]    The present invention has been made in consideration of the foregoing and has an object to provide an image processing system, an operating device, and a program by which it is possible to efficiently and appropriately set the restriction on the use of the application installed in the operating device without the need of the user operation, or the like, for settings. 
       SUMMARY OF THE INVENTION 
       [0009]    It is an object of the present invention to at least partially solve the problems in the conventional technology. 
         [0010]    According to an aspect of the invention, an information processing system is provided. The information processing system includes an operating device for receiving an operation from a user, and an information processing main body device that performs information processing in response to the operation from the user, each of the operating device and the information processing main body device is controlled by using a computer. The operating device includes: an application control unit configured to acquire function information of at least one of application program installed in the operation device; and a use-authority determination unit configured to receive the operation from the user and notice to the application control unit. The information processing main body device includes an authentication unit configured to submit to the use-authority determination unit a user authentication result including use-authority information indicating that the user is allowed to use the application program. The use-authority determination unit determines whether or not the user is allowed to use the at least one of the application program on the basis of the function information and the use-authority information. 
         [0011]    According to another aspect of the invention, an operating device for receiving an operation from a user and communicating with a main body device is provided. The operating device includes: a function-information acquiring unit that acquires function information of at least one of an application program installed in the operating device; a use-authority information acquiring unit that acquires, from the main body, use-authority information that the user is provided for the at least one of the application program; the use-authority determination unit determines whether or not the user is allowed to use the at least one of the application program on the basis of the function information and the use-authority information; and the application managing unit configured to execute the application program that the user has use-authority thereof in response to an execution instruction by the user. 
         [0012]    According to further aspect of the invention, a computer readable medium comprising the computer executable instructions configured to perform a method for using an operating device for receiving an operation from a user and communicating with a main body device is provided. The method comprising: acquiring function information of at least one of an application program installed in the operating device; acquiring, from the main body, use-authority information that the user is provided for the at least one of the application program; determining whether or not the user is allowed to use the at least one of the application program on the basis of the function information and the use-authority information; and executing the application program that the user has use-authority thereof in response to an execution instruction by the user. 
         [0013]    The above and other objects, features, advantages and technical and industrial significance of this invention will be better understood by reading the following detailed description of presently preferred embodiments of the invention, when considered in connection with the accompanying drawings. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0014]      FIG. 1  is a block diagram that illustrates the configuration of an image forming system; 
           [0015]      FIG. 2  is a diagram that schematically illustrates the data structure of a function-information storage unit; 
           [0016]      FIG. 3  is a diagram that schematically illustrates the data structure of a use-authority information storage unit; 
           [0017]      FIG. 4  is a sequence diagram that illustrates the process performed by the image forming system; 
           [0018]      FIG. 5  is a diagram that illustrates the data structure of an authentication ticket; 
           [0019]      FIG. 6  is a sequence diagram that illustrates the process performed by an image forming system according to a second embodiment; 
           [0020]      FIG. 7  is a sequence diagram that illustrates the process according to another example; 
           [0021]      FIG. 8  is a diagram that illustrates the conditions for determination made by a use-authority determination unit according to a first modified example; and 
           [0022]      FIG. 9  is a diagram that illustrates the conditions for determination made by the use-authority determination unit according to a second modified example. 
       
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
       [0023]    Exemplary embodiments of an image processing system, an operating device, and a program are explained in detail below with reference to the accompanying drawings. 
       First Embodiment 
       [0024]      FIG. 1  is a block diagram that illustrates the configuration of an image forming system  1  according to a first embodiment. The image forming system  1  includes an operating device  100  that is an operating device and a main body device  110  that is an image processing main body unit. The operating device is a device that receives user operations. The operating device  100  according to the present embodiment also controls displaying various types of information on the display screen, as described below. The main body device  110  is a device that performs image processing and image formation in the image forming system  1 . 
         [0025]    The operating device  100  and the main body device  110  are controlled by different OSs. Specifically, the operating device  100  has the operating device OS installed therein, and the main body device  110  has the main body device OS installed therein. 
         [0026]    The operating device  100  includes an operation panel  101 , operation application programs (hereafter, referred to as the operation apps)  102   a ,  102   b , an app management unit  103 , an operation receiving unit  104 , a display control unit  105 , a use-authority determination unit  106 , and a function-information storage unit  107 . The app management unit  103 , the operation receiving unit  104 , the display control unit  105 , and the use-authority determination unit  106  are implemented by the operating device OS. 
         [0027]    The operation panel  101  receives an input of operation from a user. Moreover, the operation panel  101  includes a display screen so as to display various types of information as a display unit. 
         [0028]    The operation apps  102   a  and  102   b  are the applications executed on the operating device  100 . According to the present embodiment, the operating device  100  has the first app  102   a  and the second app  102   b  installed therein as the operation apps. The operation apps include the ones for providing various functions of, for example, copier, printer, scanner, or the like, and the operating device  100  can have various operation apps installed therein. 
         [0029]    The number of operation apps installed in the operating device  100  is not limited to that in the embodiment. Furthermore, new operation apps are installed in or uninstalled from the operating device  100  as appropriate. 
         [0030]    The app management unit  103  manages the operation apps  102   a  and  102   b . For example, the app management unit  103  acquires, from each of the operation apps  102   a  and  102   b  installed in the operating device  100 , function information that indicates provided function, i.e., the function provided by each of the operation apps  102   a  and  102   b , and then writes the function information in the function-information storage unit  107 . That is, the app management unit  103  functions as a function-information acquiring unit. 
         [0031]    If each of the operation apps  102   a  and  102   b  is uninstalled, the function information on each of the operation apps  102   a  and  102   b , which is stored in the function-information storage unit  107 , is accordingly deleted from the function-information storage unit  107 . Thus, it is possible to reduce memory consumption. 
         [0032]      FIG. 2  is a diagram that schematically illustrates the data structure of the function-information storage unit  107 . The function-information storage unit  107  stores therein the function information on each of the operation apps  102   a  and  102   b  installed in the operating device  100 . As illustrated in  FIG. 2 , the function information includes the app ID (the first app, the second app) that is the information for identifying the operation app and includes information that indicates the provided function of the operation app. In the example illustrated in  FIG. 2 , the function information on the first app includes the app ID “first app” of the operation app and includes the provided function “copier”. Moreover, the function information on the second app includes the app ID “second app” and the provided functions “copier, printer, scanner”. 
         [0033]    Reference is made back to  FIG. 1 . The operation receiving unit  104  receives information that is input when a user operates the operation panel  101 . The operation receiving unit  104  receives an input of information, such as the name of a user, password, or the like. The operation receiving unit  104  also receives an input of an instruction to start up the operation app, or the like. The display control unit  105  controls displaying information on the operation panel  101 . 
         [0034]    The use-authority determination unit  106  uses the information acquired from the main body device  110  and the information stored in the function-information storage unit  107  to determine whether the operating user who operates the operation panel  101  has the authority to use the function provided by the operation apps  102   a  and  102   b  installed in the operating device  100 . That is, the use-authority determination unit  106  also functions as a use-authority information acquiring unit. 
         [0035]    The main body device  110  includes a use-authority information storage unit  111 , a use-authority information management unit  112 , and an authentication unit  113 . The use-authority information storage unit  111  stores therein use authority information. Here, the use authority information is the information as to whether each user has the authority to use the main body function of the main body device  110 , and the information is defined for each user. The use-authority information management unit  112  and the authentication unit  113  are implemented by the main body device OS. 
         [0036]      FIG. 3  is a diagram that schematically illustrates the data structure of the use-authority information storage unit  111 . Specifically, the use-authority information storage unit  111  stores the use authority information that is related to the user name and the password. In the example illustrated in  FIG. 3 , the function information related to the user name “Mr. A” indicates that the user has the authority to use the copier function of the main body device  110  but does not have the authority to use the printer and scanner functions of the main body device  110 . 
         [0037]    The use-authority information management unit  112  manages the use-authority information storage unit  111 . The authentication unit  113  acquires, from the operating device  100 , the user name and the password that are input when the user operates the operation panel  101 , compares them with the combination of the user name and the password that are stored in the use-authority information storage unit  111 , thereby authenticating the operating user. 
         [0038]      FIG. 4  is a sequence diagram that illustrates the process performed by the image forming system  1 . When the image forming system  1  is started up, the app management unit  103  outputs the start-up notification to the use-authority determination unit  106  (Step S 100 ). Next, the use-authority determination unit  106  requests the app management unit  103  to provide the function information on each of the operation apps installed in the operating device  100  (Step S 101 ). 
         [0039]    The app management unit  103  then acquires the function information from all the operation apps (the first app  102   a  and the second app  102   b ) installed in the operating device  100  (Steps S 102 , S 103 ). The app management unit  103  then sends, to the use-authority determination unit  106 , the function information acquired from each of the operation apps (Step S 104 ). The use-authority determination unit  106  writes the acquired function information in the function-information storage unit  107 . The function information is used later when the process to authenticate the operating user is performed, and it is used to determine whether the operating user has the authority to use the function provided by the operation app. 
         [0040]    Next, when the operation is started by the user, the operation panel  101  notifies the app management unit  103  via the operation receiving unit  104  of the start of the operation (Step S 110 ). When receiving the notification of the start of the operation, the app management unit  103  requests the use-authority determination unit  106  to perform authentication (Step S 111 ). The use-authority determination unit  106  displays, via the display control unit  105 , the authentication screen on the operation panel  101  (Step S 112 ). Here, the authentication screen is the screen to request the operating user who operates the operation panel  101  to log in. 
         [0041]    The operation panel  101  receives an input of the authentication information from the operating user via the authentication screen displayed on the operation panel  101 . Specifically, the authentication information here is the user name and the password. The operation panel  101  sends the authentication information to the use-authority determination unit  106  (Step S 113 ). 
         [0042]    Next, when the use-authority determination unit  106  receives, via the operation receiving unit  104 , the authentication information that is input through the operation panel  101 , the use-authority determination unit  106  sends the authentication information to the authentication unit  113  in the main body device  110  and requests it to authenticate the operating user by using the authentication information (Step S 114 ). 
         [0043]    When receiving the authentication information, the authentication unit  113  in the main body device  110  sends an inquiry to the use-authority information management unit  112  about the use authority information (Step S 115 ). The authentication unit  113  compares the combination of the user name and the password indicated by the authentication information acquired from the operating device  100  with the combination of the user name and the password indicated by the use authority information stored in the use-authority information storage unit  111 . If they match, the authentication unit  113  determines that the authentication has succeeded. If they do not match, the authentication unit  113  determines that the authentication has failed. 
         [0044]    The authentication unit  113  sends the authentication result to the use-authority determination unit  106  (Step S 116 ). If the authentication has succeeded, the authentication ticket as well as the authentication result indicating that the authentication has succeeded is sent to the use-authority determination unit  106 . Here, the authentication ticket includes the user name and password indicated by the authentication information and includes the use authority information. The use authority information included in the authentication ticket is the use authority information that is in the use-authority information storage unit  111  and that is related to the user name indicated by the authentication information. 
         [0045]      FIG. 5  is a diagram that illustrates the data structure of the authentication ticket. As illustrated in  FIG. 5 , the authentication ticket includes the user name, the password, and the use authority information on the operating user with respect to each provided function of the main body device. The authentication ticket is held by the use-authority determination unit  106  until a log-out instruction is received from the operating user. 
         [0046]    An explanation is given below of the process performed when the authentication of the operating user has succeeded. If the authentication has failed, the use-authority determination unit  106  displays on the operation panel  101  that the authentication has failed, and the process terminates. If the authentication has succeeded, the use-authority determination unit  106  terminates the display of the authentication screen via the display control unit  105  and causes the operation panel  101  to display the operation page where an operation is received from the operating user (Step S 117 ). 
         [0047]    The use-authority determination unit  106  also notifies the app management unit  103  that the authentication has succeeded (Step S 118 ). Furthermore, the use-authority determination unit  106  identifies the operation app that can be operated by the operating user in accordance with the authentication ticket and the function information stored in the function-information storage unit  107  and then notifies the app management unit  103  of the identified operation app that can be used (Step S 119 ). 
         [0048]    Specifically, the use-authority determination unit  106  compares the main body function that the user has the authority to use with the provided function, the main body function being indicated by the authentication ticket and the provided function being indicated by the function information on each operation app that is stored in the function-information storage unit  107 . If the provided function matches the main body function, the use-authority determination unit  106  determines that the operating user has the authority to use the operation app. That is, if the operating user has the authority to use the main body function that matches the provided function of the operation app, the use-authority determination unit  106  determines that the operating user has the authority to use the operation app. In a case where the operation app has multiple provided functions, if any of the provided functions of the operation app matches the main body function, the use-authority determination unit  106  determines that the operating user has the authority to use the operation app. 
         [0049]    Conversely, if the provided function that is indicated by the function information on the operation app does not match the main body function that the operating user has the authority to use and that is indicated by the authentication ticket, the use-authority determination unit  106  determines that the operating user does not have the authority to use the operation app. That is, the use-authority determination unit  106  determines that the operating user does not have the authority to use the operation app if the operating user does not have the authority to use the main body function that matches the provided function of the operation app. 
         [0050]    In accordance with the details of the notification made by the use-authority determination unit  106 , the app management unit  103  notifies each of the operation apps (the first app  102   a , the second app  102   b ) whether the operating user is allowed to use each of the operation apps (the first app  102   a , the second app  102   b ) (Steps S 120 , S 121 ). 
         [0051]    Next, the display control unit  105  displays, on the operation panel  101 , the display screen that includes the icon for selecting the operation app installed in the operating device  100 . When the operating user selects a predetermined icon, the operation receiving unit  104  receives an instruction to start up the operation app selected on the operation panel  101 . The operation panel  101  then instructs the app management unit  103  to start up the operation app via the operation receiving unit  104  (Step S 130 ). The start-up instruction includes the information for instructing the start-up and also includes the app ID of the operation app that is the target of the start-up instruction. 
         [0052]    The app management unit  103  identifies the operation app that is the target of the start-up instruction by using the app ID included in the start-up instruction. The app management unit  103  then requests the identified operation app to be started up (Step S 131 ).  FIG. 4  illustrates a case where the instruction to start up the first app  102   a  is received. That is, the app management unit  103  requests the first app  102   a  to be started up at Step S 131 . 
         [0053]    The operation app (the first app  102   a  in the example of  FIG. 4 ), which has received the start-up request, determines whether the operation app is to be started up in accordance with the notification indicating whether the operating user is allowed to use it or not, the notification having been received during the start-up. The information as to whether the operation app is started up or not is sent to the operation panel  101  via the display control unit  105  (Step S 132 ). 
         [0054]    If the operation app is not started up, the display control unit  105  displays, on the operation panel  101 , information, such as an error message, to notify the operating user that the operation app, for which the start-up instruction has been made, is not started up. If the operation app is started up, the normal display is maintained. If the operation app (the first app  102   a ), for which the start-up request has been received, determines that it is to be started up, the operation app is actually started up, and a function of the operation app is performed. Thus, the process is completed. 
         [0055]    Thus, in the image forming system  1  according to the first embodiment, it is possible to set the authority to use the operation app by using the operating device  100  without requiring determination of the main body device  110 , i.e., without applying loads to the main body device  110 . That is, the image forming system  1  makes it possible to efficiently set the authority to use the operation app. 
         [0056]    Furthermore, in the image forming system  1  according to the present embodiment, a determination on the authority to use the operation app is made on the basis of the authority of use that is set for each user with respect to the main body function. That is, the image forming system  1  makes it possible to appropriately set the authority to use the provided function of the operating device. 
         [0057]    In another example of the image forming system  1  according to the first embodiment, when the display control unit  105  displays the icons of the operation apps on the operation panel  101  after the process is performed at Steps S 120  and S 121  that are explained with reference to  FIG. 4 , the display control unit  105  may display the icon of the operation app that can be used by the operating user with the normal brightness (first brightness) and display the icon of the operation app that cannot be used by the operating user with second brightness that is lower (darker) than the normal brightness. Furthermore, in this case, if the operating user selects the operation app that cannot be used by the operating user, the app management unit  103  may not start up the selected operation app. Thus, the operating user can easily understand which operation apps can be used. 
       Second Embodiment 
       [0058]    Next, an explanation is given of the image forming system  1  according to a second embodiment.  FIG. 6  is a sequence diagram that illustrates the process performed by the image forming system  1  according to the second embodiment. The image forming system  1  according to the second embodiment does not perform the process from Step S 100  to Step S 104  that are illustrated with reference to  FIG. 4 . Specifically, the image forming system  1  according to the second embodiment does not perform the process to acquire, from each of the operation apps installed in the operating device  100 , the function information on the operation app and the process to write it in the function-information storage unit  107 . 
         [0059]    As illustrated in  FIG. 6 , in the image forming system  1  according to the second embodiment, when the operation is started by the user, the operation panel  101  notifies the app management unit  103  via the operation receiving unit  104  that the operation has been started (Step S 200 ). The subsequent process from Step S 201  to Step S 208  is the same as that from Step S 111  to Step S 118  that are explained with reference to  FIG. 4 . 
         [0060]    When the operation panel  101  is operated by the operating user and when the operation panel  101  instructs the app management unit  103  via the operation receiving unit  104  to start up a predetermined operation app (Step S 210 ), the app management unit  103  requests the use-authority determination unit  106  to authenticate the target operation app that is the target of the start-up instruction (Step S 211 ). Here, an explanation is given of a case where the instruction to start up the first app  102   a  is indicated. 
         [0061]    The use-authority determination unit  106  then requests the function information on the target operation app (the first app  102   a ) from the app management unit  103  (Step S 212 ). The app management unit  103  then acquires the provided function from the target operation app (the first app  102   a ) (Step S 213 ) and notifies it to the use-authority determination unit  106  (Step S 214 ). 
         [0062]    The use-authority determination unit  106  determines whether the operating user has the authority to use the target operation app, for which the start-up instruction has been made, in accordance with the authentication ticket acquired from the main body device  110  at Step S 206  and the function information on the target operation app. 
         [0063]    Specifically, the use-authority determination unit  106  refers to the authentication ticket so as to identify the main body function which the operating user has the authority to use. The use-authority determination unit  106  also refers to the provided function information on the target operation app so as to identify the provided function of the target operation app. The use-authority determination unit  106  determines that the operating user has the authority to use the target operation app if the provided function of the target operation app matches the main body function which the operating user has the authority to use. 
         [0064]    In a case where the target operation app has multiple provided functions, the use-authority determination unit  106  determines that the operating user has the authority to use the target operation app if any of the provided functions of the target operation app matches the main body function. Furthermore, the use-authority determination unit  106  determines that the operating user does not have the authority to use the target operation app if the provided functions of the target operation app do not match the main body functions. 
         [0065]    Next, the use-authority determination unit  106  notifies the app management unit  103  whether the operating user can use the target operation app (Step S 215 ). When receiving the notification that the target operation app is allowed to be used, the app management unit  103  requests the first app  102   a  that is the target operation app to be started up (Step S 216 ). When the first app  102   a  is started up, the notification that the first app  102   a  has been started up is made to the display control unit  105  (Step S 217 ), and the display control unit  105  displays, on the operation panel  101 , the operation page that is obtained after the start-up. If the app management unit  103  receives the notification that the target operation app is not allowed to be used, the app management unit  103  does not request the first app  102   a  that is the target operation app to be started up but does displays an error on the operation panel  101  via the display control unit  105 . 
         [0066]    Thus, in the image forming system  1  according to the second embodiment, it is not determined whether the operating user has the authority to use the operation app until the operating user inputs the start-up instruction. When the start-up instruction is input, it is determined whether the operating user has the authority to use the target operation app for which the start-up instruction is made. Thus, it is possible to improve processing efficiency. Furthermore, there is no need to read the function information on all the operation apps installed in the operating device  100  and to store it in the function-information storage unit  107  like the image forming system  1  according to the first embodiment does. Thus, it is possible to reduce memory utilization. 
         [0067]    Other configurations and processes of the image forming system  1  according to the second embodiment are the same as those of the image forming system  1  according to the first embodiment. 
         [0068]    In another example of the image forming system  1 , when the operation receiving unit  104  receives, in response to the operation of the operating user, an instruction to display the operation page that is used for inputting the instruction to execute a predetermined operation app, the display may be restricted depending on whether the operating user has the authority to use it or not. 
         [0069]      FIG. 7  is a sequence diagram that illustrates the process according to the present example. The process illustrated in  FIG. 7  is the process performed after the operation page is displayed at Step S 217  illustrated in  FIG. 6 . When the instruction to display the provided-function execution page is input in response to the operation of the operating user while the operation page is displayed on the operation panel  101 , the operation receiving unit  104  receives the display instruction. Here, the provided-function execution page is the operation page where it is possible to instruct the execution of a predetermined provided function by the user operation among the provided functions of the running operation app. The provided-function execution page is, for example, the page that includes a reception button for receiving the instruction to execute a provided function. 
         [0070]    When the display instruction has been input, the operation panel  101  requests the currently-running operation app via the operation receiving unit  104  to change the page into the one corresponding to the display instruction (Step S 230 ). Here, an explanation is given of a case where the instruction to display the provided-function execution page related to the printer function of the first app  102   a  has been input. That is, at Step S 230 , the first app  102   a , which is the running operation app, is requested to change the page. 
         [0071]    Next, the first app  102   a  notifies the app management unit  103  of “copier” that is the provided function that can be provided by the first app  102   a  (Step S 231 ). The app management unit  103  then notifies the use-authority determination unit  106  of the information on the provided function “copier” and also instructs the use-authority determination unit  106  to determine whether it can be used or not (Step S 232 ). 
         [0072]    The use-authority determination unit  106  compares the main body function indicated by the authentication ticket with the notified provided function so as to determine whether the operating user has the authority to use the notified provided function. The use-authority determination unit  106  then notifies the app management unit  103  whether the operating user can use the provided function that is executed on the provided-function execution page (Step S 233 ). 
         [0073]    Next, the app management unit  103  notifies the first app  102   a  of the result of the determination as to whether the provided function can be used (Step S 234 ). When receiving the notification of the result of the determination as to whether the provided function can be used, the first app  102   a  displays, on the operation panel  101  via the display control unit  105 , the provided-function execution page for which the display instruction has been made (Step S 235 ). 
         [0074]    If the first app  102   a  receives the notification of the determination result indicating that the provided function is not allowed to be used, the first app  102   a  does not display the provided-function execution page for which the display instruction has been made. In this case, the first app  102   a  may display, on the operation panel  101  via the display control unit  105 , the image for notifying an error to the operating user. 
         [0075]    Thus, according to the present example, if the operation app has multiple provided functions, it is determined whether the operating user has the authority to use each of the provided functions. In accordance with the result of the determination, it is possible to limit the usage of the operating user on a per-provided-function basis. 
         [0076]    Although the present invention has been explained above by using the embodiment, various changes or modifications may be added to the above-described embodiment. 
         [0077]    A first modified example will be explained below. In the image forming system  1  according to the embodiment, it is determined that the operating user has the authority to use the operation app if the provided function of the operation app matches the main body function indicated by the authentication ticket for the operating user; however, the operating device  100  may determine whether the operating user has the authority to use the operation app on the basis of the main body functions indicated by the authentication ticket for the operating user, and the specific conditions for determination are not limited to that in the embodiment. 
         [0078]      FIG. 8  is a diagram that illustrates the conditions for determination made by the use-authority determination unit  106  according to the first modified example. In the example illustrated in  FIG. 8 , the use-authority determination unit  106  determines that the operating user has the authority to use the provided function “copier” of the operation app if the authentication ticket for the operating user indicates that the operating user has the authority to use both the “copier” and “printer” of the main body app. Furthermore, the use-authority determination unit  106  determines that the operating user has the authority to use the provided function “printer” of the operation app if the authentication ticket of the operating user indicates that the operating user has the authority to use any of the “copier”, “printer”, and “fax” of the main body app. Moreover, the use-authority determination unit  106  determines that the operating user has the authority to use the provided function “fax” of the operation app if the authentication ticket for the operating user indicates that the operating user has the authority to use all of the “copier”, “printer”, and “fax” of the main body app. 
         [0079]    Thus, the administrator, or the like, can arbitrarily set the relation between the authority to use the main body app and the authority to use the operation app. 
         [0080]    The conditions for determination may be set for each operation app by the administrator, or the like, by using the operation panel  101 . That is, the administrator, or the like, can make secure settings for each operation app so as to limit the users who can use the operation app. 
         [0081]    A second modified example will be explained below. In the embodiment, the provided function of the operation app is the same as that of the main body app; however, it may be determined, on the basis of the main body function indicated by the authentication ticket for the operating user, whether the operating user has the authority to use the provided function that is not present in the main body. 
         [0082]      FIG. 9  is a diagram that illustrates the conditions for determination made by the use-authority determination unit  106  according to the second modified example. In the example illustrated in  FIG. 9 , the use-authority determination unit  106  determines that the operating user has the authority to use the provided function “map” of the operation app if the authentication ticket for the operating user indicates that the operating user has the authority to use the “copier” of the main body app. Furthermore, the use-authority determination unit  106  determines that the operating user has the authority to use the provided function “calendar” of the operation app if the authentication ticket of the operating user indicates that the operating user has the authority to use any of the “copier”, “printer”, and “fax” of the main body app. 
         [0083]    The operating device  100  and the main body device  110  according to the present embodiment include a control device, such as a CPU, a storage device, such as a ROM (read only memory) or a RAM, an external storage device, such as an HDD or CD drive device, a display device, such as a display, and an input device, such as a keyboard or mouse; thus, they have the hardware configuration that uses the typical computer. 
         [0084]    The program to be executed by the operating device  100  and the main body device  110  according to the present embodiment is provided by being stored, in the form of a file that is installable and executable, in a recording medium readable by a computer, such as a CD-ROM, flexible disk (FD), CD-R, or a digital versatile disk (DVD). 
         [0085]    Furthermore, a configuration may be such that the program to be executed by the operating device  100  and the main body device  110  according to the present embodiment is stored in a computer connected via a network such as the Internet and provided by being downloaded via the network. Moreover, a configuration may be such that the program to be executed by the operating device  100  and the main body device  110  according to the present embodiment is provided or distributed via a network such as the Internet. A configuration may be such that the program according to the present embodiment is provided such that it is installed in the ROM, or the like, in advance. 
         [0086]    The program to be executed by the operating device  100  and the main body device  110  according to the present embodiment has a modular configuration that includes the above-described units. In terms of actual hardware, the CPU (processor) reads the program from the above-described storage medium and executes the read program so as to load the above-described units into a main storage device so that each of the units is generated in the main storage device. 
         [0087]    Although an explanation is given of the image forming system in the above-described embodiment, any image forming apparatuses, such as multifunction peripherals, copiers, printers, scanners, facsimile machines, or the like, are applicable if they have at least two functions out of copier, printer, scanner, and facsimile functions. 
         [0088]    According to the present invention, it is possible to efficiently and appropriately set the restriction on the use of the application installed in the operating device without the need of control performed by the controller in the device main body. 
         [0089]    Although the invention has been described with respect to specific embodiments for a complete and clear disclosure, the appended claims are not to be thus limited but are to be construed as embodying all modifications and alternative constructions that may occur to one skilled in the art that fairly fall within the basic teaching herein set forth.