Patent ID: 7933992

Claim:
A device management system including an image processing apparatus which is to undergo security management, and an information processing apparatus which generates information used to control said image processing apparatus for respective functions, said image processing apparatus comprising: an acceptance unit constructed to accept user information used to identify a user and an operation input of the user; and a request unit constructed to generate request information including the user information used to identify the user, and to request issuance of access control information including access restriction information indicating whether or not each of the functions of said image processing apparatus can be used, and said information processing apparatus comprising: an extraction unit constructed to extract the user information used to identify the user from the request information generated by said request unit; a determination unit constructed to (i) execute a separation image processing for extracting a specific image from a video sensed by a network camera for sensing the user who operates the image processing apparatus, and (ii) determine whether or not the user who operates the image processing apparatus has been sensed based on the separation image processing; an Access Control Ticket (ACT) generation unit constructed to (i) generate a first access restriction information for restricting, to the user, respective functions of the image processing apparatus in a case where it is determined that the user has been sensed by said determination unit, and (ii) generate a second access restriction information which restricts more functions to the user than the first access restriction information, in a case where it is determined that the user has not been sensed by said determination unit, wherein said ACT generation unit generates the first access restriction information or the second access restriction information based on the user information used to identify the user in the device management system so that one or more functions restricted to each user for using the image processing apparatus are different between the first access restriction information and the second access restriction information, and wherein said image processing apparatus has at least one function of copy function, a print function, and a Box print function; and a generation unit constructed to generate access control information which associates the first or second access restriction information generated by the ACT generation unit with the user information, and wherein said image processing apparatus further comprises: a control unit constructed to control use for respective functions of said image processing apparatus with respect to the operation input in accordance with the first or second access restriction information included in the access control information generated by said generation unit.