GB2473269A

GB2473269A - Controlling access to a printer when a print server is not available

Info

Publication number: GB2473269A
Application number: GB0915608A
Authority: GB
Inventors: Karsten Huster
Original assignee: Canon Europa NV
Current assignee: Canon Europa NV
Priority date: 2009-09-08
Filing date: 2009-09-08
Publication date: 2011-03-09
Anticipated expiration: 2029-09-08
Also published as: GB2473269B; GB0915608D0

Abstract

A multi function print device 14 is connected to a network 15. It uses a database 16 on a network server 10 to authorise the use of the printer. A monitoring unit 22 checks the availability of the server. The device controller 28 uses one of several access modes if the unit cannot contact the server. One access mode may allow all users to access the device. Another may stop all users accessing the device. Users may enter identity information to the device using an input device 18. An identity checker 22 checks the information against information stored in a memory 20, if the server is not available. The memory may store emergency account information to use when the device cannot contact the server. The device may store information about the accounts of the most recent users of the device. The device may record use information, while the server is unavailable.

Description

Emergency Device-Access The present invention concerns print devices. More particularly, but not exclusively, this invention concerns print devices connected to a print server. The invention also concerns the provision of user access to those print devices when the print server is unavailable.

There are a number of print servers that include print management systems that provide a user or administrator with a way of monitoring and controlling the print jobs sent to a print device, or number of print devices. Print devices may include photocopiers and multi-functional printers (MFP5) An example of such a system can be seen in figure 1, where a print server 1 acts as an intermediary between client computers 2 and one or more print devices 3 in arranging for print jobs generated on the client computers 2 to be printed on a print device 3. The print server 1 provides funct�ons such as queuing of print jobs and logging of the amounts of printing done. Such a system is available commercially, an example of which is known as "Uniflow GM" (registered trade mark) . The print server 1 comprises a database which includes a plurality of user accounts. The user accounts may include a number of details, such as logon details, passwords, and printing rules (for example whether or not they are allowed to print in colour or a budget available to the user for printing) . This allows the use of a print device by individual users to be closely monitored.

The print device may be an MFP which can function in a number of different ways. For example, an MFP may print a print job sent, via the print server, by a client computer.

Alternatively or additionally, an MFP may allow people to walk up and scan or copy at the machine. An MFP may include an input device, where the input device allows a user to provide user identification details when copying or scanning at the machine. Once the user provides their user identification details, the MFP communicates with the print server in order to check the details of the user account, for example, whether they are permitted to copy in colour.

An MFP may also provide statistical and cost information to the print server which may collect and/or analyse this data.

Problems arise when the print server becomes unavailable. This may be due to a network failure meaning that communication with the print server is not possible.

Alternatively, the print server itself may fail despite the network being operational. When the print server becomes unavailable, it will no longer be possible to send print jobs from client computers via the print server to the MFP.

However, the MFP may still be able to provide a copy function (and potentially a scan function, though it may not be possible to send the scanned image to a client computer over the network due to the print server being unavailable) In such situations, it is usual for an MFP to be configured to "lock" and not allow any copying, so that users may not avail themselves of free copying (because it is no longer possible to authorise or log copying details against a user's account due to the print server being unavailable) Additionally, a user may attempt to use copy settings, such as colour, for which they do not have permission.

Therefore, the print server being unavailable causes the MFP to "lock" with a significant disruption to the users of the MFP. The present invention seeks to mitigate the above-mentioned problems.

A first aspect of the invention provides a print device for connection to a print server via a network comprising: detection means for detection of a failure of the network and/or a failure of the print server; and control means operable by a user to set one of a plurality of access modes, wherein the control means is configured to control access to functions of the print device by users in accordance with the set access mode in the event of detection of a failure by the detection means.

Advantageously, at least some of the functions of the print device may be used when a print server is unavailable.

For example, where the print device includes a copy function, the copy function may remain available to at least some of the users of the print device, in accordance with the access mode entered by the print device.

The detection means may be arranged to send a regular signal (for example, once every minute) to check the status of the network and/or the print server. The signal may be configured to access sample data in the print server to determine whether or not an error occurs. The detection means may be arranged such that after three or some other predetermined number of failed attempts to access sample data in the print server, the detecting means registers a "server offline" failure, which causes the print device to go into a "server offline" mode.

Alternatively or additionally, the detecting means may be arranged to send a regular PING (for example, once every minute) to the print server to check whether the network is operational. The detecting means may be arranged such that after three or some other predetermined number of failed PING5, the detecting device registers a "network down" failure which causes the printing device to go into a "network down" mode. The detecting means may be arranged to use a User Datagram Protocol (UDP) "keep alive" packet to detect whether the network is available. Alternatively, the detecting means may perform a Transmission Control Protocol (TCP) connect test onto a Port 445 (NetBIOS port) of the print server. The method of detecting a network failure may be set by a use operating the control device.

Referring to the print device entering an "emergency access" mode may cover both the situat�on when the print device enters the "server offline" mode and when the print device enters the "network down" mode. In both cases, though for different reasons, the print server is unavailable.

The detecting means may be arranged to continue to check for print server availability when the print device is in the "server offline" or "network down" mode. When the print device is in the "network down" mode, the detecting means may be arranged to check only for network availability until the network availability returns. The database access check will obviously fail when the network has failed and so there is little point in the detecting means attempting to access the database during a network failure.

One of the plurality of access modes may be an open access mode in which any user may access controlled functions of the print device. Such a mode may be advantageous when it is desirable to reduce the disruption caused by a network or print server failure to a minimum.

One of the plurality of access modes may be a closed access mode in which access to controlled functions of the print device is prohibited for all users. Such a mode may be advantageous when �t is desirable to prevent any abusive use of the print device during a network or print server failure.

The print device may further comprise an input device by which a user may enter identity information, and a memory storing details of at least one user account. The stored details of at least one user account may be entered into the memory by an administrator. The input device which allows a user to identify themselves may take a number of different forms. The user may possess a RFID card and the input device may be a RFID reader. The RFID card may include a code identifying the user which is read by the input device and compared by an authentication checker to identification codes included in the stored details of the at least one user account. The user may possess a smart card and the input device may be a smart card reader. The smart card may include a pin/or password and the user may enter the pin/password into the input device. The entered pin/password may be compared by an authentication checker to corresponding user pin/passwords included in the stored details of the at least one user account. The input device may comprise a keyboard for entering alpha-numeric information. The alpha-numeric information may be a username and/or a password/personal identification number (PIN) and the user may enter the alpha-numeric information into the input device. The entered alpha-numeric information may be compared by an authentication checker to corresponding alpha-numeric information included in the stored details of the at least one user account. The input device may be a biometric data reader. The biometric data may be a fingerprint, voice print, or retinal information, and when a user's biometric data is read by the input device the biometric data may be compared by an authentication checker to corresponding biometric data included in the stored details of the at least one user account. The type of user identification data and the type of input device may vary from installation to installation. The memory of the print device may include identification data relating to the subset of users in any of the categories mentioned above, including user names, passwords, biometric data, and RFID or smart card data.

The at least one user account may comprise at least one designated emergency account, and one of the access modes may be an emergency-accounts access mode in which the control means determines whether identity information received via the input device corresponds to a stored emergency account, and, if the identity information does correspond to a stored emergency user account, the control means allows the user to access at least some of the controlled functions of the printer device.

The at least one stored user account may comprise at least one user account that is dynamically determined based on use of the print device, and one of the access modes may be a use-based access mode in which the control means determines whether identity information received via the input device corresponds to a stored user account and, �f the identity information does correspond to a stored user account, allows the user to access at least some of the controlled functions of the printer device. The at least one user account that is dynamically determined may correspond to user accounts of a predetermined number of the most recent users to provide identity information at the input device. The predetermined number of the most recent users to provide identity information at the input device may be 10, 50, 100 or more.

The control means may be operable to separately set an access mode to be used in a case that a failure of the network is detected by the detection means and an access mode to be used in a case that a failure of the print server is detected by the detection means. For example, in certain circumstances, a failure of the network may indicate that the network has been sabotaged (e.g. by disconnection of a network cable) in an attempt to obtain free copies from the print device. Therefore, it may be desirable for the print device to shift into the emergency accounts access mode when the print device experiences a "network down" failure.

Alternatively, a failure of the print server may indicate a more serious server problem. The server problem may take some time to rectify and it may be des�rable to reduce the disruption caused by the print server problem to a minimum.

Therefore, it may be desirable for the print device to shift into the use-based access mode when the print device experiences a server offline" failure. Alternatively, the print device may enter a single operational mode regardless of the type of failure which causes the print server to be unavailable.

The control means may be configured to record at least some details relating to use of the print device undertaken during a period in which a failure is detected by the detection means. For example, the control means may record the number of copies made by a particular user.

Alternatively or additionally, the control means may record copy details such as whether the copy was made in colour, single or double sided, or the size of the copy. This data may be stored and sent back to the print server when the print server becomes available again.

The print device may be a multi-functional printer.

Alternatively, the print device may be a photocopier.

A second aspect of the invention provides a print device for connection to a print server via a network comprising: detection means for detection of a failure of the network and/or a failure of the print server; an input device by which a user may enter identity information, and a memory storing details of at least one user account, and a control means, wherein the control means is configured to control access to functions of the print device in the event of a detection of a failure of the network and/or failure of the print server by the detection means by determining whether identity information received via the input dev�ce corresponds to a stored user account, and, if the ident�ty information corresponds to a stored user account, allowing the user to access at least some of the controlled functions of the print device. The at least one stored user account may comprise at least one designated emergency account, and the control means may determine whether identity information of a user received via the input device corresponds to a stored emergency account, and, if rece�ved information does correspond to a stored emergency account, the control means may allow the user to access at least some of the controlled functions of the printer device.

The at least one stored user account may comprise at least one user account that is dynamically determined based on use of the print device, and the control means may be configured to determine whether identity information received via the input device corresponds to a stored user account, and, if the identity informat�on does correspond to a stored user account, allows the user to access at least some of the controlled functions of the printer device.The at least one user account that is dynamically determined may correspond to user accounts of a predetermined number of the most recent users to provide identity information at the input device.

A third aspect of the invention provides a method of configuring a print device connected to a print server via a network, the print device including a control means, the method including the step of: a user operating the control means to set one of a plurality of access modes, wherein the control means is configured to control access to functions of the print device by users in accordance with the set access mode in the event of a failure of the network and/or print server.

A fourth aspect of the invention provides a method of accessing at least some functions of a print device connected to a print server via a network during a print -10 -server and/or network failure, comprising the steps of: the print device storing details of at least one user account in a memory; a user entering identification information to the print device via an input device; and a control means of the print device allowing access to at least some functions of the print device if the identification information corresponds to a stored user account.

A fifth aspect of the invention provides computer program product for controlling a print device connected to a print server via a network, the computer program, when executed on a host print device, controlling the print device when a print server and/or network failure is detected to allow access to at least some functions of the print device in accordance with an access mode set by a user.

A sixth aspect of the invention provides a computer readable medium comprising a computer program for controlling a print device connected to a print server via a network, the computer program, when executed on a host print device, controlling the print device when a print server and/or network failure is detected to allow access to at least some functions of the print device in accordance with an access mode set by a user.

It will of course be appreciated that features described in relation to one aspect or embodiment of the present invention may be incorporated into other aspects or embodiments of the present invention. For example, the method of the invention may incorporate any of the features described with reference to the apparatus of the invention and vice versa.

-11 -

Description of the Drawings

Embodiments of the present invention will now be described by way of example only with reference to the accompanying schematic drawings of which: Figure 1 shows a known print management system; Figure 2 shows a pr�nt management system according to a first embodiment of the invention; Figure 3 shows a flow diagram of a f�rst exemplary method of operating the print management system shown 1-5 in figure 2; and Figure 4 shows a flow diagram of a second exemplary method of operating the print management system shown in figure 2.

Detailed Description

Figure 2 shows a print management system including a print device, in this case a multi functional printer (MFP) according to a first embodiment of the invention. A print server 10 acts as an intermediary between a number of client computers 12 and a MFP 14. The print server 10 is connected to the MFP 14 via a network 15. The print server 10 includes a database 16 including a plurality of user accounts. (The database may be located on the same server or on a separate computer.) The database 16 is compiled by -12 -an administrator of the print server 10. The user accounts include information such as user identification, print permission settings (for example, whether the user has permission to print colour copies), and accounting details (including some or all of the type of prints made, the number of prints made, the cost of prints made, or total printing budget available) . The MFP 14 is arranged to receive print jobs from the print server 10, which have been sent by the client computers 12.

The MFP 14 is also arranged to provide scanning and copying services to users that walk up to the machine. The MFP includes an input device 18 at which a user may identify themselves. The input device 18 may be, for example, any commonly available input device, such as a RFID card reader, a smart card reader, a biometric sensor or device keyboard.

When the print server 10 is available, the MFP 14 will access the database 16 in order to check the user account details and provide the requested services if allowable.

The MFP may also be arranged to send accounting details concerning the operations performed to the particular user's account.

The MFP 14 includes a control means 28 arranged to be operable by a user to set one of a plurality of access modes to control access to the print device 14 in the event of the print server becoming unavailable.

The MFP 14 also includes a memory provided by a memory unit 20. The memory unit 20 is arranged to store at least some data relating to a subset of the user accounts that is stored in the database 16, wherein the data is sufficient for a user to identify themselves via the input device 18.

-13 -The subset of user accounts is selected by an administrator of the print server 16. Selection of the subset of user accounts may be by selection of an ind�vidual user account or a number of individual user accounts, or alternatively by selection of a group or groups of user accounts. The user accounts that make up the subset of user accounts are known as "emergency accounts". The data relating to the "emergency accounts" may be only some of the data stored in the database 16 concerning the subset of user accounts, such that enough data is stored that the user account can be locally identified at the MFP 14 by a user entering identification details into the input device 18. The memory unit 20 may also be arranged to cache data concerning recently logged in users of the MFP 14, the cached data being sufficient for a user account to be locally identified at the MFP 14 by a user entering identification details into the input device 18. In this embodiment, the memory un�t 20 is arranged to cache the details of the previous 50 users that have logged into the MFP 14, though this number may be considerably higher or lower depending on the requirements of the MFP 14. In such a way, the user accounts stored in the memory unit 20 are dynamically determined.

The MFP 14 includes a control means including an authentication checker 24 arranged to compare the identification details entered at the �nput device 18 with the identification details stored in the memory unit 20 and verify whether a user has a user account within the subset of user accounts (emergency accounts) or has a user account in the cached memory of recent user accounts.

-14 -The MFP 14 includes a detecting means including a monitoring device 22 arranged to undertake continual tests of the availability of the network. The monitoring dev�ce 22 pings the print server 10 once every minute to test the status of the network connecting the MET 14 and the print server 10. If three consecutive pings to the print server fail, the monitoring device 22 is arranged to register a "network down" failure and the MFP 14 enters a "network down" mode. In one embodiment of the invention, the detecting means is arranged to use a User Datagram Protocol (UDP) "keep alive" packet to detect whether the network is available. In an alternative embodiment, the detecting means may perform a Transmission Control Protocol (TCP) connect test onto a Port 445 (NetBIOS port) to detect whether the network is available. A user may be able to select the method of monitoring the network status by choosing one of a number of options available at the control device 28. The monitoring device 22 is also arranged to send a basic database query to the database 16 once every minute in order to determine the availability of the print server. The pings and the database queries may be sent alternately. A sample account in the database 16 is queried in order to indicate whether or not there are any errors with the print server 10. If three consecutive database queries fail, the monitoring device 22 is arranged to register a "server offline" failure and the MFP 14 enters a "server offline" mode. The "network down" mode and "server offline" mode may have the same consequences, in which case a common "emergency access" mode is entered by the MFP. If the monitoring device 22 registers a "network down" failure, -15 -the monitoring device may continue to send the pings to detect the status of the network, but cease to send the database queries as they will obviously fail due to the network failure. If the monitoring device 22 registers a "server offline" failure, the monitoring device may continue to test both the network status and the server status.

When the monitoring device 22 detects a server or network failure the MET 14 enters the "server offline", Thetwork down" or emergency access" mode, the functionality of the MFP 14 is much reduced. The access mode entered by the MFP 14 is determined based on the settings input by a user into the control means 28. Any function that relies on access to the print server 10 is unavailable. For example, it is no longer possible to send print jobs from the client computers 12 to the MFP 14 via the print server 10.

However, according to this embodiment of the invention, certain functions of the MFP 14 are still available to at least some of the users of the MFP 14 that wish to walk up to the MFP 14 and use the copying function of the MFP 14.

Figures 3 and 4 show various ways in which the MFP 14 as described for figure 2 may operate when the print server is unavailable and the MFP 14 has entered the "server offline", "network down" or "emergency access" mode, including which users may operate the MFP 14 and what functions are available.

Figure 3 shows a first exemplary method of operating the invention according to the first embodiment of the invention when a user has set the MFP 14 to enter the emergency-account only access mode in the event of detecting a network failure. The method begins by the monitoring unit -16 - 22 of the MFP 14 registering a "network down" failure SlOO.

As a result, the MFP 14 enters the "emergency account only" access mode S102. When the MFP 14 enters the "emergency account only" operational mode S102, any user account that is currently logged into the MFP 14 is automatically logged out S104. In order to use the MFP 14, a user attempts to log in S106 to the MFP 14 using the input device 18. The data entered into the input device 18 is sent to the authentication checker 24 S108. The authentication checker 24 of the MFP 14 compares SilO the user identification data with the identification data included �n the subset of user accounts stored in the memory unit 20. If the user is verified as having an account in the subset of accounts, the MFP 14 allows the user to access the MET copy function S112.

If the user has not been designated an emergency account, the MFP 14 does not allow the user to access the MFP copy function S114.

Figure 4 shows a second exemplary method of operat�ng the invention according to the first embodiment of the invention when a user has set the MFP 14 to enter the use-based access mode in the event of detecting a server failure. The method begins by the monitoring device 22 of the MFP 14 registering a "server offline" failure. As a result the MFP 14 enters a use based access mode S202. As described above, the memory unit 20 of the MFP 14 is arranged to cache details concerning the previous 50 users that have logged into the MFP 14. When the MFP 14 enters the "emergency and cached account only" operational mode S202, a user that is currently logged into the MFP 14 is allowed to finish their copy job and log out normally. When -17 -a new user attempts to log in S204 to the MFP 14 using the input device 18, the identification details are sent S206 to the authentication checker 24. The authentication checker 24 compares S208 the user identification details with the details of the subset of user accounts stored in the memory unit 20. If the user has been designated an emergency account, the MFP 14 allows the user to access the MFP copy function S210. If the user has not been designated an emergency account, the MFP 14 compares S212 the user identification with the cached user account information stored in the memory unit 20. These are the dynamically determined user accounts stored in the memory unit 20. If the user is identified one of the prev�ous 50 users to log onto the MFP 14, the MFP 14 allows the user to access the MFP 14 copy function S214. If the user is not one of the previous 50 users to log onto the MFP 14, the MFP 14 does not allow the user to access the MFP copy function.

In the examples given above, the operational behaviour of the MFP 14 differs depending on whether the monitoring unit 24 of the MFP 14 registers a "network down" failure or a "server offline" failure. However, �n a method according to an alternative embodiment of the invention, the MFP 14 may be configured by a user to enter the same operating mode for both a "network down" failure and a "server offline" failure.

Further embodiments of the invention (not shown) may have the MFP 14 behaving according to alternative operational modes in comparison to those described above with reference to figures 3 and 4, when the MFP 14 registers a "network down" failure or "server offline" failure. In -18 -one alternative embodiment, if the print server becomes unavailable, the MFP may be configured by a user to enter a closed access mode. In the closed access mode, the MFP 14 automatically logs out any user that is currently logged in to the MFP 14 and does not allow any further access to users until the print server becomes available again. In another embodiment, the MFP 14 may enter an open access mode. In this operational mode, the MFP 14 becomes unconditionally open for use by any user. In the open access mode, a user currently logged into the MFP 14 may continue to use it.

Additionally, the MFP 14 may include an additional memory unit to which all MFP functions are recorded during the unavailability of the print management server 10. The details may subsequently be sent to a designated "server unavailable" account on the print server 10, when the print server 10 becomes available again.

Whilst the present invention has been described and illustrated with reference to particular embodiments, it will be appreciated by those of ordinary skill in the art that the invention lends itself to many different variations not specifically illustrated herein.

Where in the foregoing description, integers or

elements are mentioned which have known, obvious or foreseeable equivalents, then such equ�valents are here�n incorporated as if individually set forth. Reference should be made to the claims for determining the true scope of the present invention, which should be construed so as to encompass any such equivalents. It will also be appreciated by the reader that integers or features of the invention that are described as preferable, advantageous, convenient -19 -or the like are optional and do not limit the scope of the independent claims. Moreover, it is to be understood that such optional integers or features, whilst of possible benefit in some embodiments of the invention, may not be desirable, and may therefore be absent, in other embodiments.

Claims

-20 -Claims 1. A print device for connection to a print server via a network comprising: detection means for detection of a failure of the network and/or a failure of the print server; and control means operable by a user to set one of a plurality of access modes, wherein the control means is configured to control access to functions of the print device by users in accordance with the set access mode �n the event of detection of a failure by the detection means.
2. A print device according to claim 1, wherein one of the plurality of access modes is an open access mode in which any user may access controlled functions of the print device.
3. A print device according to claim 1 or claim 2, wherein one of the plurality of access modes is a closed access mode in which access to controlled functions of the print device is prohibited for all users.
4. A print device according to any preceding claim, further comprising: an input device by which a user may enter identity information, and a memory storing details of at least one user account.
5. A print device according to claim 4, wherein the at least one user account comprises at least one designated -21 -emergency account, and one of the access modes is an emergency-accounts access mode in which the control means determines whether identity information received via the input device corresponds to a stored emergency account, and, if the identity information does correspond to a stored emergency user account, the control means allows the user to access at least some of the controlled functions of the printer device.
6. A print device according to claim 4 or claim 5, wherein the at least one stored user account comprises at least one user account that is dynamically determined based on use of the print device, one of the access modes is a use-based access mode in which the control means determines whether identity information received via the input device corresponds to a stored user account and, if the identity information does correspond to a stored user account, allows the user to access at least some of the controlled functions of the printer device.
7. A print device according to claim 6, wherein the at least one user account that is dynamically determined corresponds to user accounts of a predetermined number of the most recent users to provide identity information at the input device.
8. A print device according to any preceding claim, wherein the control means is operable to separately set an access mode to be used in a case that a failure of the network is detected by the detection means and an access -22 -mode to be used in a case that a failure of the print server is detected by the detection means.
9. A print device according to any preceding claim, wherein the control means is configured to record at least some details relating to use of the print device undertaken during a period in which a failure is detected by the detection means.
10. A print device according to any preceding claim, wherein the print device is a multi-functional printer.
11. A print device for connection to a print server via a network comprising: detection means for detection of a failure of the network and/or a failure of the print server; an input device by which a user may enter identity information, and a memory storing details of at least one user account, and a control means, wherein the control means is configured to control access to functions of the print device in the event of a detection of a failure of the network and/or failure of the print server by the detection means by determining whether identity �nformation received via the input device corresponds to a stored user account, and, if the identity information corresponds to a stored user account, allowing the user to access at least some of the controlled functions of the print device.

-23 -
12. A print device according to claim 11, wherein the at least one stored user account comprises at least one designated emergency account, and the control means determines whether identity information of a user received via the input device corresponds to a stored emergency account, and, if received information does correspond to a stored emergency account, the control means allows the user to access at least some of the controlled functions of the printer device.
13. A print device according to claim 11 or claim 12, wherein the at least one stored user account comprises at least one user account that is dynamically determined based on use of the print device, the control means is configured to determine whether identity information received via the input device corresponds to a stored user account, and, if the identity information does correspond to a stored user account, allows the user to access at least some of the controlled functions of the printer device.
14. A print device according to claim 13, wherein the at least one user account that is dynamically determined corresponds to user accounts of a predetermined number of the most recent users to provide ident�ty information at the input device.
15. A method of configuring a print device connected to a print server via a network, the print device including a control means, the method including the step of: -24 -a user operating the control means to set one of a plurality of access modes, wherein the control means is configured to control access to functions of the print device by users in accordance with the set access mode �n the event of a failure of the network and/or print server.
16. A method of accessing at least some functions of a print device connected to a print server via a network during a print server and/or network failure, comprising the steps of: the print device storing details of at least one user account in a memory; a user entering identification information to the print device via an input device; and a control means of the print device allowing access to at least some functions of the print device if the identification information corresponds to a stored user account.
17. A computer program product for controlling a print device connected to a print server via a network, the computer program, when executed on a host print device, controlling the print device when a pr�nt server and/or network failure is detected to allow access to at least some functions of the print device in accordance with an access mode set by a user.
18. A computer readable medium comprising a computer program as claimed in claim 17.