Patent Description:
<CIT> discloses an image forming apparatus. The image forming apparatus includes a first information receiving unit that receives first information which is the identification information of a user in a system provided in a specific organization including an image forming apparatus for performing first authentication, and a second information receiving unit that receives second information which is the identification information of the user in a service system on a cloud for performing second authentication. Further, the image forming apparatus includes an association storage unit that associates and stores the first information and the second information, and a use registration unit that registers the second information in the service system as the identification information of a user who uses the image forming apparatus using the identification information of the image forming apparatus in the service system. Furthermore, the image forming apparatus includes an acquisition unit that acquires print data including the second information from the service system, and a control unit that controls processing for printing the print data acquired by the acquisition unit using the first information stored in the association storage unit in association with the second information included in the acquired print data. <CIT> discloses systems and methods for authenticating a mobile device. The systems and methods provide for a wireless, touchless multi-factor authentication process for the mobile device, wherein a first factor of authentication includes providing authentication credentials to the mobile device and a second factor of authentication includes scanning a physical identification at a secure device. <CIT> discloses allowing access to a device by a user based on user authentication and user location.

In a case where a user is successful in the authentication of the system, the user can use an apparatus included in the system even without the allowance of the administrator of the apparatus. Accordingly, in a case where the user is to cause the apparatus, which is present in a predetermined range from the user, to execute processing and the user makes a mistake in selection, an undesired apparatus may be caused to execute processing.

An object of the present invention is to provide an information processing apparatus, an information processing program, and an information processing method that can prevent an undesired apparatus from being caused to execute processing even though a user makes a mistake in selection in a case where the user is to cause an apparatus, which is present in a predetermined range from the user, to execute the processing.

The invention is defined only by the scope of the appended claims.

Hereinafter, an example of an exemplary embodiment of the present disclosure will be described with reference to the drawings. In the respective drawings, the same or equivalent components and portions will be denoted by the same reference numerals. Further, since the scales of the drawings are exaggerated for convenience of description, there is a case where the scales are different from actual scales.

As shown in <FIG>, an information processing system <NUM> according to the present exemplary embodiment includes: a management device <NUM>; a user terminal 20A, an administrator terminal 30A, and an information processing apparatus 40A that are provided at a base A; and a user terminal 20B, an administrator terminal 30B, and an information processing apparatus 40B that are provided at a base B. Hereinafter, in a case where the respective user terminals 20A and 20B are described without being distinguished from each other, the respective user terminals 20A and 20B are referred to as "user terminals <NUM>". Further, in a case where the respective administrator terminals 30A and 30B are described without being distinguished from each other, the respective administrator terminals 30A and 30B are referred to as "administrator terminals <NUM>". Furthermore, in a case where the respective information processing apparatuses 40A and 40B are described without being distinguished from each other, the respective information processing apparatuses 40A and 40B are referred to as "information processing apparatuses <NUM>". The numbers of the bases, the user terminals <NUM>, the administrator terminals <NUM>, and the information processing apparatuses <NUM> are not limited to an example shown in <FIG>.

The management device <NUM>, the user terminals <NUM>, the administrator terminals <NUM>, and the information processing apparatuses <NUM> are adapted to communicate with each other via communication means N. An intra-company communication line, such as a local area network (LAN) or a wide area network (WAN) is applied as the communication means N in the present exemplary embodiment. However, as the communication means N, a public communication line, such as an internet or a telephone line, may be applied or an intra-company communication line and a public communication line may be applied in combination. Further, a wireless communication line is applied as the communication means N in the present exemplary embodiment. However, as the communication means N, a wired communication line may be applied or a wired communication line and a wireless communication line may be applied in combination.

The management device <NUM> is a cloud server providing a user management service, which is used to manage a user who can use the information processing apparatus <NUM> installed at each base, and a device management service, which is used to manage the information processing apparatus <NUM>, as cloud services. In the present exemplary embodiment, the device management service includes logic printers that are associated with the information processing apparatuses <NUM> to be described later, respectively. A server that does not provide a cloud service and the like may be applied as the management device <NUM>.

The user terminal <NUM> is an information processing terminal of a user who uses the information processing apparatus <NUM>. In the present exemplary embodiment, a personal computer is applied as the user terminal <NUM>. A smartphone, a tablet terminal, or the like may be applied as the user terminal <NUM>.

The administrator terminal <NUM> is an information processing terminal of an administrator who manages the information processing apparatus <NUM> provided at the same base as the administrator terminal <NUM>. In the present exemplary embodiment, a personal computer is applied as the administrator terminal <NUM>. A smartphone, a tablet terminal, or the like may be applied as the administrator terminal <NUM>.

The information processing apparatus <NUM> is an image forming apparatus that is connected to the management device <NUM> via a network. The logic printer associated with this image forming apparatus is managed by the device management service of the management device <NUM>. Accordingly, in a case where a user selects this logic printer, instructs document data to be printed to perform print settings, and instructs the logic printer to perform printing, print data generated by the logic printer is acquired and image forming processing is performed. In the present exemplary embodiment, an information forming apparatus executing functions, such as a print function, a copy function, a scan function, and a facsimile function, is applied as the information processing apparatus <NUM>. Any information processing apparatus may be applied as the information processing apparatus <NUM>. For example, a personal computer, a smartphone, or the like may be applied as the information processing apparatus <NUM>.

Next, the configuration of the management device <NUM> will be described with reference to <FIG>.

As shown in <FIG>, the management device <NUM> includes components, such as a central processing unit (CPU) <NUM>, a read only memory (ROM) <NUM>, a random access memory (RAM) <NUM>, a storage <NUM>, and a communication interface (I/F) <NUM>. The respective components are connected to each other via a bus <NUM> to be capable of communicating with each other.

The CPU <NUM> is a central processing unit, and executes various programs or controls each part. That is, the CPU <NUM> reads out programs from the ROM <NUM> or the storage <NUM> and executes the programs using the RAM <NUM> as a work area. The CPU <NUM> controls the respective components and performs various types of arithmetic processing according to the programs recorded in the ROM <NUM> or the storage <NUM>. In the present exemplary embodiment, a user management program for providing the user management service and a device management program for providing the device management service are stored in the ROM <NUM> or the storage <NUM>.

The ROM <NUM> stores various programs and various data. The RAM <NUM> temporarily stores programs or data as a work area. The storage <NUM> is formed of a hard disk drive (HDD) or a solid state drive (SSD), and stores various programs including an operating system and various data. An identification information group of users who can use the information processing system <NUM>, an identification information group of users who can use the information processing apparatus <NUM> of each base, and the like are stored in the storage <NUM>. In the present exemplary embodiment, the email address of the user terminal <NUM> is applied as the identification information. However, the identification information is not limited to this example. For example, the employee identification number or the like of a user may be applied as the identification information.

The communication I/F <NUM> is an interface that is used to communicate with other devices, such as the information processing apparatuses <NUM>. For example, standards, such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark), are used as the communication I/F <NUM>.

Next, the configuration of the user terminal <NUM> will be described with reference to <FIG>.

As shown in <FIG>, the user terminal <NUM> includes components, such as a CPU <NUM>, a ROM <NUM>, a RAM <NUM>, a storage <NUM>, and a communication I/F <NUM>. The respective components are connected to each other via a bus <NUM> to be capable of communicating with each other.

The CPU <NUM> is a central processing unit, and executes various programs or controls each part. That is, the CPU <NUM> reads out programs from the ROM <NUM> or the storage <NUM> and executes the programs using the RAM <NUM> as a work area. The CPU <NUM> controls the respective components and performs various types of arithmetic processing according to the programs recorded in the ROM <NUM> or the storage <NUM>. In the present exemplary embodiment, a transmission program, which is used to transmit identification information and a request for the use of the information processing apparatus <NUM> to the information processing apparatus <NUM>, is stored in stored in the ROM <NUM> or the storage <NUM>.

The ROM <NUM> stores various programs and various data. The RAM <NUM> temporarily stores programs or data as a work area. The storage <NUM> is formed of an HDD or an SSD, and stores various programs including an operating system and various data.

Next, the configuration of the administrator terminal <NUM> will be described with reference to <FIG>.

As shown in <FIG>, the administrator terminal <NUM> includes components, such as a CPU <NUM>, a ROM <NUM>, a RAM <NUM>, a storage <NUM>, and a communication I/F <NUM>. The respective components are connected to each other via a bus <NUM> to be capable of communicating with each other.

The CPU <NUM> is a central processing unit, and executes various programs or controls each part. That is, the CPU <NUM> reads out programs from the ROM <NUM> or the storage <NUM> and executes the programs using the RAM <NUM> as a work area. The CPU <NUM> controls the respective components and performs various types of arithmetic processing according to the programs recorded in the ROM <NUM> or the storage <NUM>. In the present exemplary embodiment, a deletion instruction program is stored in stored in the ROM <NUM> or the storage <NUM>. The deletion instruction program is used to transmit an instruction to delete any of identification information from an identification information group of users who can use the information processing apparatus <NUM> that is stored in the management device <NUM>.

Next, the configuration of the information processing apparatus <NUM> will be described with reference to <FIG>.

As shown in <FIG>, the information processing apparatus <NUM> includes components, such as a CPU <NUM>, a ROM <NUM>, a RAM <NUM>, a storage <NUM>, and a communication I/F <NUM>. The respective components are connected to each other via a bus <NUM> to be capable of communicating with each other.

The CPU <NUM> is a central processing unit, and executes various programs or controls each part. That is, the CPU <NUM> reads out programs from the ROM <NUM> or the storage <NUM> and executes the programs using the RAM <NUM> as a work area. The CPU <NUM> controls the respective components and performs various types of arithmetic processing according to the programs recorded in the ROM <NUM> or the storage <NUM>. In the present exemplary embodiment, an information processing program for executing information processing, a deletion program for executing deletion processing, and a switching program for executing switching processing, which will be described later, are stored in stored in the ROM <NUM> or the storage <NUM>.

The ROM <NUM> stores various programs and various data. The RAM <NUM> temporarily stores programs or data as a work area. The storage <NUM> is formed of an HDD or an SSD, and stores various programs including an operating system and various data. The installation location of the information processing apparatus <NUM>, the histories of users who have used the information processing apparatus <NUM>, and the like are stored in the storage <NUM>.

The communication I/F <NUM> is an interface that is used to communicate with other devices, such as the management device <NUM>, the user terminal <NUM>, and the administrator terminal <NUM>. For example, standards, such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark), are used as the communication I/F <NUM>.

Next, the flow of processing of the information processing system <NUM> according to the present exemplary embodiment will be described with reference to <FIG> and <FIG> and <FIG>. First, information processing for requesting the management device <NUM> to allow a user of the user terminal <NUM> to use the information processing apparatus <NUM> even though the use of the information processing apparatus <NUM> is not allowed in advance in a case where the user terminal <NUM> is present in a predetermined range from the information processing apparatus <NUM> will be described with reference to <FIG> and <FIG>. In the following description, the owner of the user terminal <NUM> is simply referred to as "user". Further, in the following description, the information processing apparatus <NUM> that the user requests to use is simply referred to as "information processing apparatus <NUM>".

In Step S100 of <FIG> and <FIG>, the CPU <NUM> of the user terminal <NUM> transmits the identification information of a user and a request for the use of the information processing apparatus <NUM>, which are received from the user, to the information processing apparatus <NUM>.

In Step S102, the CPU <NUM> of the information processing apparatus <NUM> transmits the identification information of the user and the request for the use of the information processing apparatus <NUM>, which are received from the user terminal <NUM>, to the management device <NUM> to request the information processing system <NUM> to authenticate the user.

In Step S104, the CPU <NUM> of the management device <NUM> determines whether or not the identification information received from the information processing apparatus <NUM> is stored in the storage <NUM> in advance as the identification information of a user who can use the information processing system <NUM> to execute the authentication of the information processing system <NUM>. Specifically, the CPU <NUM> determines that the authentication is successful in a case where the received identification information is included in the identification information group of users who can use the information processing system <NUM> that is stored in advance. On the other hand, the CPU <NUM> determines that the authentication is failed in a case where the received identification information is not included in the identification information group of users who can use the information processing system <NUM> that is stored in advance.

In Step S106, the CPU <NUM> of the management device <NUM> transmits the result of the authentication executed in Step S104 to the information processing apparatus <NUM>.

In Step S108, the CPU <NUM> of the information processing apparatus <NUM> determines whether or not the user has been successful in the authentication of the information processing system <NUM> from the result of the authentication received from the management device <NUM>. In a case where the user has been successful in the authentication of the information processing system <NUM> (YES in Step S108), the CPU <NUM> proceeds to Step S112. On the other hand, in a case where the user has failed in the authentication of the information processing system <NUM> (NO in Step S108), the CPU <NUM> proceeds to Step S110.

In Step S110, the CPU <NUM> of the information processing apparatus <NUM> transmits use-disallowance information, which shows that the information processing apparatus <NUM> is not available, to the user terminal <NUM>.

In Step S112, the CPU <NUM> of the information processing apparatus <NUM> asks the management device <NUM> whether or not the user can use the information processing apparatus <NUM>. Specifically, the CPU <NUM> asks the management device <NUM> whether or not the user can use the logic printer of the device management service associated with the information processing apparatus <NUM>.

In Step S114, the CPU <NUM> of the management device <NUM> determines whether or not the user can use the information processing apparatus <NUM>. Specifically, the CPU <NUM> determines whether or not the identification information received from the information processing apparatus <NUM> is stored in the storage <NUM> in advance as the identification information of a user who can use the information processing apparatus <NUM>. The CPU <NUM> determines that the use of the information processing apparatus <NUM> is allowed in a case where the received identification information is included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in advance. On the other hand, the CPU <NUM> determines that the use of the information processing apparatus <NUM> is not allowed in a case where the received identification information is not included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in advance.

In Step S116, the CPU <NUM> of the management device <NUM> transmits the result of the determination of whether or not the user can use the information processing apparatus <NUM>, which has been executed in Step S114, to the information processing apparatus <NUM>.

In Step S118, the CPU <NUM> of the information processing apparatus <NUM> determines whether or not the user has been allowed to use the information processing apparatus <NUM> in advance from the result of the determination that is received from the management device <NUM>. In a case where the user has been allowed to use the information processing apparatus <NUM> in advance (YES in Step S118), the CPU <NUM> proceeds to Step S130. On the other hand, in a case where the user has not been allowed to use the information processing apparatus <NUM> in advance (NO in Step S118), the CPU <NUM> proceeds to Step S122.

In Step S122, the CPU <NUM> of the information processing apparatus <NUM> determines whether or not the identification information of the user has been received from the user terminal <NUM> in Step S100 through near field communication (for example, NFC, Wi-Fi (registered trademark), Bluetooth (registered trademark), or the like). In a case where the identification information of the user has been received through near field communication (YES in Step S122), the CPU <NUM> proceeds to Step S130. On the other hand, in a case where the identification information of the user has not been received through near field communication (NO in Step S122), the CPU <NUM> proceeds to Step S124.

In Step S124, the CPU <NUM> of the information processing apparatus <NUM> requests the user terminal <NUM> to transmit the position information of the user terminal <NUM>. In the present exemplary embodiment, the internet protocol address (IP address) of the user terminal <NUM> is applied as the position information. This IP address is information that shows position information on a network. However, the position information is not limited to this example. Information about the current position of the user terminal <NUM> that is acquired in a case where the user terminal <NUM> receives signals from a GPS satellite, and the like may be applied as the position information.

In Step S126, the CPU <NUM> of the user terminal <NUM> transmits the position information of the user terminal <NUM> to the information processing apparatus <NUM>.

In Step S128, the CPU <NUM> of the information processing apparatus <NUM> determines whether or not the user terminal <NUM> is present in a predetermined range from the information processing apparatus <NUM> using the position information received through the processing of Step S126. In a case where the user terminal <NUM> is present in the predetermined range from the information processing apparatus <NUM> (YES in Step S128), the CPU <NUM> proceeds to Step S130. On the other hand, in a case where the user terminal <NUM> is not present in the predetermined range from the information processing apparatus <NUM> (NO in Step S128), the CPU <NUM> proceeds to Step S110. Any method may be used as a method of determining whether or not the user terminal <NUM> is present in the predetermined range from the information processing apparatus <NUM> by the CPU <NUM>. For example, in a case where the network address part of the IP address of the user terminal <NUM> is the same as the network address part of the IP address of the information processing apparatus <NUM>, the CPU <NUM> may determine that the user terminal <NUM> is present in the predetermined range from the information processing apparatus <NUM>. Further, in a case where GPS information acquired from the user terminal <NUM> is closer than a predetermined distance from the physical position of the information processing apparatus <NUM>, the CPU <NUM> may determine that the user terminal <NUM> is present in the predetermined range from the information processing apparatus <NUM>.

In Step S130, the CPU <NUM> of the information processing apparatus <NUM> determines whether or not the identification information received through the processing of Step S100 is included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in the storage <NUM> in advance. In a case where the received identification information is included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in the storage <NUM> in advance (YES in Step S130), the CPU <NUM> proceeds to Step S132. In the present exemplary embodiment, the identification information group of users who belong to the same organization as an organization including the information processing apparatus <NUM> is applied as the identification information group of users who can use the information processing apparatus <NUM> that is stored in advance. However, the identification information group of users who can use the information processing apparatus <NUM> is not limited to this example. For example, the identification information group of a user having the same type of a job as a worker working in an organization including the information processing apparatus <NUM> may be applied as the identification information group stored in advance.

In Step S132, the CPU <NUM> of the information processing apparatus <NUM> transmits the identification information, which is received through the processing of Step S100, to the management device <NUM> and requests the management device <NUM> to store the identification information in the storage <NUM> as the identification information group that specifies users who can use the information processing apparatus <NUM>.

In Step S132, the CPU <NUM> of the information processing apparatus <NUM> may request the management device <NUM> to store the identification information of a user as the identification information group that specifies users who can use the information processing apparatus <NUM> only in a case where the CPU <NUM> receives an instruction to store the identification information of the user in the management device <NUM> from the administrator terminal <NUM>. Specifically, in a case where the identification information received through the processing of Step S100 is included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in the storage <NUM> in advance (YES in Step S130), the CPU <NUM> asks the administrator terminal <NUM> whether or not to store the received identification information through e-mail or the like. Then, in a case where the CPU <NUM> receives an instruction to store the received identification information from the administrator terminal <NUM>, the CPU <NUM> may request the management device <NUM> to store the identification information as the identification information group that specifies users who can use the information processing apparatus <NUM>.

In Step S134, the CPU <NUM> of the management device <NUM> stores the identification information, which is received through the processing of Step S132, in the storage <NUM> as the identification information group that specifies users who can use the information processing apparatus <NUM>. Then, the CPU <NUM> proceeds to Step S138.

On the other hand, in a case where the CPU <NUM> of the information processing apparatus <NUM> determines that the identification information received through the processing of Step S100 is not included in the identification information group of users who can use the information processing apparatus <NUM> that is stored in the storage <NUM> in advance (NO in Step S130), the CPU <NUM> proceeds to Step S136. In Step S136, the CPU <NUM> of the information processing apparatus <NUM> requests the management device <NUM> to allow the user terminal <NUM> to use the information processing apparatus <NUM>.

In Step S138, the CPU <NUM> of the management device <NUM> performs predetermined processing to allow the user terminal <NUM> to use the information processing apparatus <NUM>, and transmits the fact that the user terminal <NUM> is allowed to use the information processing apparatus <NUM> to the information processing apparatus <NUM>.

In Step S140, the CPU <NUM> of the information processing apparatus <NUM> transmits use-allowance information, which shows that the user can use the information processing apparatus <NUM>, to the user terminal <NUM>.

According to the above-mentioned information processing, for example, even though the information processing apparatus 40A installed at the base A is allowed to be used by only the user terminal 20A installed at the base A, a user B can use the information processing apparatus 40A in a case where the user terminal 20B of the user B of the base B is present in a predetermined range from the information processing apparatus 40A.

Next, deletion processing for requesting the management device <NUM> to delete identification information, which is instructed to be deleted by the administrator terminal <NUM>, by the information processing apparatus <NUM> will be described with reference to <FIG>.

In Step S200, the CPU <NUM> of the administrator terminal <NUM> transmits an instruction to delete any identification information from the identification information group of users who can use the information processing apparatus <NUM>, which is stored in the storage <NUM>, to the information processing apparatus <NUM>.

In Step S202, the CPU <NUM> of the information processing apparatus <NUM> requests the management device <NUM> to delete identification information that is instructed to be deleted by the processing of Step S200.

In Step S204, the CPU <NUM> of the management device <NUM> deletes the identification information, which is instructed to be deleted by the processing of Step S202, from the storage <NUM>. In addition, the CPU <NUM> may perform processing so that the identification information deleted in Step S204 cannot be stored in the storage <NUM> again as the identification information of a user who can use the information processing apparatus <NUM>.

Next, the flow of switching processing for switching whether or not to request the management device <NUM> to store the identification information by the information processing apparatus <NUM> will be described with reference to <FIG>.

In Step S300 of <FIG>, the CPU <NUM> of the information processing apparatus <NUM> reads out the installation location of the information processing apparatus <NUM> from the storage <NUM> and determines whether or not the installation location of the information processing apparatus <NUM> is a predetermined location. In a case where the CPU <NUM> determines that the installation location of the information processing apparatus <NUM> is the predetermined location (YES in Step S300), the CPU <NUM> proceeds to Step S302. On the other hand, in a case where the CPU <NUM> determines that the installation location of the information processing apparatus <NUM> is not the predetermined location (NO in Step S300), the CPU <NUM> proceeds to Step S304. In the present exemplary embodiment, a location where only a person belonging to an organization including the information processing apparatus <NUM> can visit is applied as the predetermined location. However, the predetermined location is not limited to this example. For example, a location where only a person belonging to an organization including the information processing apparatus <NUM> and a person allowed by the person belonging to the organization can visit, and the like may be applied as the predetermined location.

In a case where the CPU <NUM> requests to allow the user terminal <NUM> to use the information processing apparatus <NUM> in Step S302, the CPU <NUM> is set to request the management device <NUM> to store the received identification information of a user without depending on an instruction given from the administrator terminal <NUM> and ends this switching processing. In a case where the identification information of a user is stored in the management device <NUM> without depending on an instruction given from the administrator terminal <NUM>, a burden on an administrator can be reduced.

In Step S304, the CPU <NUM> reads out the histories of users who have used the information processing apparatus <NUM> in a predetermined period (for example, the last one week) from the storage <NUM>, and determines whether or not persons not belonging to an organization including the information processing apparatus <NUM> have used the information processing apparatus <NUM>. In a case where the CPU <NUM> determines that persons not belonging to the organization including the information processing apparatus <NUM> have used the information processing apparatus <NUM> in the predetermined period (YES in Step S304), the CPU <NUM> proceeds to Step S306. On the other hand, in a case where the CPU <NUM> determines that persons not belonging to an organization including the information processing apparatus <NUM> did not use the information processing apparatus <NUM> in the predetermined period (NO in Step S304), the CPU <NUM> proceeds to Step S302.

In Step S304, the CPU <NUM> may determine whether or not a ratio of users who do not belong to the organization including the information processing apparatus <NUM> among users who have used the information processing apparatus <NUM> in the predetermined period is equal to or higher than a predetermined ratio (for example, <NUM>%). In this case, in a case where the CPU <NUM> determines that the ratio of users who do not belong to the organization including the information processing apparatus <NUM> among users who have used the information processing apparatus <NUM> is equal to higher than the predetermined ratio, the CPU <NUM> proceeds to Step S306. On the other hand, in a case where the CPU <NUM> determines that the ratio of users who do not belong to the organization including the information processing apparatus <NUM> among users who have used the information processing apparatus <NUM> is lower than the predetermined ratio, the CPU <NUM> proceeds to Step S302.

In a case where the CPU <NUM> requests the management device <NUM> in Step S306 to allow the user terminal <NUM> to use the information processing apparatus <NUM>, the CPU <NUM> is set to request the management device <NUM> to store the received identification information of a user only in a case where an instruction is given from the administrator terminal <NUM>, and ends this switching processing.

In a case where the CPU <NUM> requests to allow the user terminal <NUM> to use the information processing apparatus <NUM> in Step S306, the CPU <NUM> may be set not to request the management device <NUM> to store the received identification information of a user regardless of whether or not there is an instruction given from the administrator terminal <NUM>.

The exemplary embodiments have been described above, but the technical scope of the present invention is not limited to the scope described in the above-mentioned exemplary embodiments. The exemplary embodiments can have various changes or improvements without departing from the scope of the invention, and embodiments including the changes or improvements are also included in the technical scope of the present invention.

Further, the exemplary embodiments do not limit the inventions according to claims, and not all of the combinations of features described in the exemplary embodiments are necessary for means for addressing the problems of the invention. The above-mentioned exemplary embodiments include inventions at various stages, and various inventions are extracted from the combinations of a plurality of disclosed components. As long as effects are obtained even though some components are deleted from all the components disclosed in the exemplary embodiments, configuration from which these some components are deleted may be extracted as an invention.

For example, a case where the information processing system <NUM> includes the user terminal <NUM> has been described in the present exemplary embodiment. However, the information processing system <NUM> may not include the user terminal <NUM>. In this case, for example, in Step S100 of <FIG> and <FIG>, the CPU <NUM> of the information processing apparatus <NUM> may receive identification information and the like by an operation input from a user via a user interface of a display unit, such as a liquid crystal display, included in the information processing apparatus <NUM>. Further, in Step S100 of <FIG> and <FIG>, the CPU <NUM> of the information processing apparatus <NUM> may receive identification information and the like by contact from an integrated circuit (IC) card of a user via an authentication unit or the like included in the information processing apparatus <NUM>. Then, in a case where the CPU <NUM> receives identification information from a user without using the user terminal <NUM> and the user is successful in the authentication of the information processing system <NUM>, the CPU <NUM> does not acquire the position information of the user and may request the management device <NUM> to allow the user to use the information processing apparatus <NUM>.

An aspect in which the information processing program is installed in the storage <NUM> has been described in the present exemplary embodiment, but the present invention is not limited thereto. The information processing program according to the present exemplary embodiment may be provided in a form where the information processing program is recorded on a computer-readable storage medium. For example, the information processing program according to the present exemplary embodiment may be provided in forms where the information processing program is recorded on optical discs, such as a compact disc (CD)-ROM and a digital versatile disc (DVD)-ROM, or forms where the information processing program is recorded on semiconductor memories, such as a universal serial bus (USB) memory and a memory card. Further, the information processing program according to the present exemplary embodiment may be acquired from an external device via the communication I/F <NUM>.

Furthermore, a case where information processing is realized by software configuration using a computer through the execution of a program has been described in the above-mentioned exemplary embodiment, but the present invention is not limited thereto. For example, an aspect in which information processing is realized by hardware configuration or a combination of hardware configuration and software configuration may be provided.

In addition, the configuration of the information processing apparatus <NUM> described in the above-mentioned exemplary embodiment is an example, and it goes without saying that unnecessary portions may be deleted or new portions may be added without departing from the scope of the present invention.

Further, the flow (see <FIG> and <FIG>) of the processing of the information processing program described in the above-mentioned exemplary embodiment is an example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the order of processing may be changed without departing from the scope of the present invention.

Claim 1:
An information processing apparatus (<NUM>), comprising:
a processor (<NUM>) configured to:
receive identification information and a request for use of the information processing apparatus (<NUM>) from a user terminal (<NUM>) of a user; and
transmit the identification information to a management device (<NUM>), wherein the management device (<NUM>) authenticates the user and determines whether the user is allowed to use the information processing apparatus (<NUM>) according to the identification information;
in a case where the user is successfully authenticated by the management device (<NUM>) and the user is not allowed to use the information processing apparatus (<NUM>) indicated by the management device (<NUM>), acquire position information of the user from the user terminal (<NUM>);
determine whether the user is present in a predetermined range from the information processing apparatus (<NUM>) according to the position information;
in a case where the user is determined present in the predetermined range from the information processing apparatus (<NUM>) and the received identification information is not included in the group of users who can use the information processing apparatus, request the management device (<NUM>) to allow the user to use the information processing apparatus (<NUM>).