JP2005150979A - Data protection apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data protection apparatus for protecting data and capable of taking precedence of the processing efficiency over others. <P>SOLUTION: A flowchart for explaining steps of processes executed in an image forming system includes a step S15 of discriminating whether confidential processing has been released by detail settings, when print processing (YES in S11 is received); a step S13 of setting the confidential processing and generating print data, when it is discriminated that the confidential processing has not been released (NO in S15) or no instruction has been received by the detail settings (NO in S12); or a step S16 of releasing the confidential processing and generating the print data, when it is discriminated that the confidential processing is released (YES in S15); and a step S14 of transmitting the generated print data to an image forming apparatus 1. The image forming apparatus 1 discriminates whether the received print data specifies the confidential processing, encrypts the print data and stores the encrypted print data to a storage section, when the confidential processing is designated; and stores the print data to the storage section, without encrypting the print data, when no confidential processing is specified. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data protection apparatus that can protect data without degrading the data processing efficiency.

  2. Description of the Related Art Image forming apparatuses such as digital multi-function peripherals that temporarily store and process electronic document data in a storage unit in the apparatus have been commercialized. The digital multi-function peripheral includes a scanner unit that reads an image of a document and a printer unit that forms an image on paper, and has a plurality of functions such as a copy function, a facsimile function, a scanner function, and a print function. Such a digital multi-function peripheral proposes to the user to improve operational efficiency and processing capacity by positioning it on a communication network as a data processing apparatus that efficiently processes data input from a plurality of interfaces. In addition, the digital multi-function peripheral is equipped with a large-capacity storage device such as a hard disk so that various data can be input and processed in parallel. It is possible to process sequentially.

In a storage device such as a hard disk, data is temporarily written and held for processing. After the processing is completed, when new data is input, the already processed data is overwritten and erased, and new data is received. Until new data is written, Data is left in the apparatus as it is, and there is a problem in terms of data protection. On the other hand, in recent years, there has been proposed a method in which the device itself erases the processed data so that the data remains in the device, so that the data is invalidated (see, for example, Patent Document 1). ).
JP-A-9-284572

  However, in recent years, since the performance of personal computers and the like has improved, the amount of data handled increases, and when the area storing this data is erased, it takes time to complete the erasure operation. Also, in the work of encrypting and decrypting data, as the amount of data increases, the processing time in the encryption process and the decryption process increases accordingly. In particular, recently, the capacity of data has increased due to the colorization of data and the increase in the number of pixels, and accordingly, processing has also become time consuming. For this reason, the work of receiving and processing new data tends to stagnate, and as a result, there is a problem that the processing capacity of the system is reduced. Here, if the data processing capability of the image processing unit of the digital multi-function peripheral is to be improved, it is necessary to mount a high-performance processing circuit as the image processing unit, which leads to an increase in the cost of the apparatus. It also has a point.

  The present invention has been made in view of such circumstances, and includes a receiving unit that receives data and a data protection unit that protects the received data, and determines whether or not protection of the received data should be stopped, An object of the present invention is to provide a data protection device capable of enhancing the confidentiality of data without reducing the processing efficiency by adopting a configuration in which the protection of data is stopped when it is determined that the data should be stopped.

  The data protection device according to the present invention is a data protection device comprising a receiving means for receiving data and a data protection means for protecting the received data, and determines whether or not protection of the data by the data protection means should be stopped The data protection is stopped when it is determined that the determination means should stop.

  In the present invention, data protection means for protecting data is provided, and it is determined whether or not protection of received data is to be stopped. When it is determined that the protection should be stopped, data protection is stopped. . Accordingly, since the necessity of processing by the data protection means can be assigned based on the result of the determination means, the processing efficiency is not lowered while ensuring the data protection function.

  The data protection device according to the present invention further comprises means for determining whether the received data is confidential or not, and when the means determines that the confidentiality is not present, the determination means should stop protecting the data. It is characterized by being judged.

  In the present invention, it is determined whether or not the received data is confidential. If it is determined that there is no confidentiality, the data protection is determined to be stopped. Therefore, it is possible to protect the received data if it has confidentiality, and to stop the protection of the data if it does not have confidentiality, thus reducing the processing efficiency while ensuring the data protection function. Disappears.

  The data protection device according to the present invention further comprises means for accepting a request that the protection of the accepted data should be stopped, and when the accepting means accepts the request when accepting the data, the judging means It is characterized in that it is determined that data protection should be stopped.

  In the present invention, when a request for stopping data protection is received when data is received, data protection is stopped. Therefore, data protection can be stopped when a user requests a stop, and data can be protected when a user does not request it. Therefore, processing efficiency is given priority when necessary while securing the data protection function. The

  The data protection apparatus according to the present invention comprises a means for judging whether or not the received data is confidential in a data protection apparatus comprising a receiving means for receiving data and a data protection means for protecting the received data. Is judged to have no confidentiality, the protection of the data should be stopped.

  In the present invention, it is determined whether or not the received data is confidential. If it is determined that there is no confidentiality, the protection of the data is stopped. Therefore, if the received data has confidentiality, the data can be protected. If the received data does not have confidentiality, it is possible to stop the data protection, thereby reducing the processing efficiency while ensuring the data protection function. Is prevented.

  A data protection device according to the present invention includes a means for receiving a request to stop protection of received data in a data protection device comprising a receiving means for receiving data and a data protection means for protecting the received data. When the receiving unit receives the request when receiving the data, the protection of the data is to be stopped.

  In the present invention, when a request for stopping data protection is received when data is received, data protection is stopped. Therefore, data protection can be stopped when a user requests a stop, and data can be protected when a user does not request it. Therefore, processing efficiency is given priority when necessary while securing the data protection function. The

  The data protection apparatus according to the present invention is characterized in that the data protection means is means for encrypting the received data, and comprises means for storing the encrypted data.

  In the present invention, since data receiving means is provided as means for encrypting data, leakage of data to the outside is prevented.

  The data protection device according to the present invention comprises storage means for storing received data, and the data protection means is means for erasing data stored in the storage means.

  In the present invention, since the data storage means includes means for erasing data stored in the storage means, leakage of data to the outside is prevented.

  According to the present invention, data protection means for protecting data is provided, and it is determined whether or not to stop the protection of the received data. When it is determined that the protection should be stopped, the protection of the data is stopped. Therefore, since the necessity of processing by the data protection means can be assigned based on the result of the determination means, it is possible to prevent a reduction in processing efficiency while ensuring a data protection function.

  Also, according to the present invention, it is determined whether or not the received data is confidential. If it is determined that the confidentiality is not present, it is determined to stop data protection. Therefore, if the received data is confidential, it can be protected, and if it is not confidential, it is possible to stop the protection of the data, ensuring a data protection function and preventing a decrease in processing efficiency. can do.

  Furthermore, according to the present invention, when a request for stopping data protection is received when data is received, data protection is stopped. Therefore, data protection can be stopped when the user requests a stop, and data can be protected when the user does not request it. Therefore, priority is given to processing efficiency as needed while ensuring the data protection function. be able to.

  Further, according to the present invention, the presence or absence of confidentiality of the received data is determined. When it is determined that there is no confidentiality, the protection of the data is stopped. Therefore, if the received data has confidentiality, the data can be protected. If the received data does not have confidentiality, it is possible to stop the data protection, thereby reducing the processing efficiency while ensuring the data protection function. Can be prevented.

  Furthermore, according to the present invention, when a request for stopping data protection is received when data is received, data protection is stopped. Therefore, data protection can be stopped when the user requests a stop, and data can be protected when the user does not request it. Therefore, priority is given to processing efficiency as needed while ensuring the data protection function. be able to.

  Furthermore, according to the present invention, since the data receiving means is provided with means for encrypting the received data, leakage of data to the outside can be prevented.

  Furthermore, according to the present invention, since data erasing means for erasing data stored in the storage means is provided, leakage of data to the outside can be prevented.

Hereinafter, an embodiment in which the data protection apparatus according to the present invention is applied to an image forming apparatus such as a digital multifunction peripheral will be described in detail with reference to the drawings.
Embodiment 1 FIG.
FIG. 1 is a schematic diagram illustrating the configuration of an image forming system according to the present embodiment. In the figure, reference numeral 1 denotes an image forming apparatus according to the present embodiment, and information processing apparatuses 2, 2,..., 2 such as personal computers and workstations are connected to the image forming apparatus 1 via a communication network N1. The external facsimile apparatus 3 is connected via the facsimile communication network N2. The information processing apparatus 2 is preinstalled with a driver program (printer driver) for using the image forming apparatus 1 via the communication network N1, generates print data through the printer driver, and generates the generated print data. The printing process is executed by transmitting the image to the image forming apparatus 1. Further, the image forming apparatus 1 includes means for encoding and decoding facsimile data transmitted via the facsimile communication network N2, and transmits the encoded facsimile data to the facsimile apparatus 3 as well as the facsimile apparatus 3 After the facsimile data transmitted from is received, it is decrypted to obtain image data for printing. Further, the image forming apparatus 1 includes an image reading unit configured by a CCD element (CCD: Charge Coupled Device) (see FIG. 2), optically reads an image of a document, and acquires image data.

  When the image forming apparatus 1 receives print data via the communication network N1, receives facsimile data via the facsimile communication network N2, or acquires image data through the image reading unit, the image forming apparatus 1 protects the data. For this purpose, the data is encrypted and temporarily stored in a non-volatile storage means, and data is read from the storage means and decrypted as necessary to form an image. In addition, in order to avoid stagnation of processing associated with encryption, etc., when the user designates it through the printer driver, the data protection by encryption can be released when it is determined that the read image data is not confidential. I am doing so.

  FIG. 2 is a block diagram illustrating the internal configuration of the image forming apparatus 1. The image forming apparatus 1 includes a CPU 101, and the CPU 101 reads and executes a control program stored in advance in the ROM 103, thereby controlling various hardware connected via the bus 102, and as a whole described above. The image forming apparatus 1 is operated to execute each function. The RAM 104 is constituted by a semiconductor memory, and temporarily stores data generated during execution of the control program, data input through the operation unit 105, various data received through the communication unit 109, and the like.

  The operation unit 105 is provided with various operation keys for accepting operation instructions from the user, setting values for each function such as the number of printed sheets, copy density, destination of facsimile data, switching operation of each function, output start instruction. Accept user's instructions. The display unit 106 includes a liquid crystal display, and displays the operation status of the image forming apparatus 1, various setting values input from the operation unit 105, and the like. In addition, a part of the display unit 106 includes a touch panel type software key configured to receive the setting operation described above.

  The image reading unit 107 includes a light source that irradiates light on a reading document, an image sensor such as a CCD element, an AD converter, and the like (not shown), and an image of the document set at a predetermined reading position. An image is formed on the image sensor and converted into an analog electric signal, and the converted analog signal is AD converted by an AD converter. The digital signal obtained by AD conversion is generated as digital image data after correcting the light distribution characteristics of the light source at the time of document reading, the sensitivity variation of the image sensor, and the like.

The image forming unit 108 is, for example, a charger that charges the photosensitive drum to a predetermined potential, laser writing that emits laser light in accordance with image data received from the outside and generates an electrostatic latent image on the photosensitive drum. An apparatus, a developing device that supplies toner to the electrostatic latent image formed on the surface of the photosensitive drum to make it visible, a transfer device that transfers the toner image formed on the surface of the photosensitive drum onto paper (not shown), etc. The image desired by the user can be formed on the paper by the electrophotographic method.
In the present embodiment, the image forming unit 108 is configured to perform image formation by an electrophotographic method using a laser writing device, but is configured to perform image formation by an inkjet method, a thermal transfer method, or a sublimation method. Of course, it may be.

  The communication unit 109 includes a communication interface conforming to the communication standard of the communication network N1, receives print data from the information processing devices 2, 2,..., 2 connected to the communication network N1, and transmits the information. Information to be notified to the treatment devices 2, 2,. When the image forming apparatus 1 is used as a so-called network scanner, image data of a document obtained by the image reading unit 107 is transmitted to a desired information processing apparatus 2 through the communication unit 109. The communication unit 109 controls transmission / reception of such various data.

  The facsimile communication unit 110 includes a line termination circuit for connecting to the facsimile communication network N2, and receives facsimile data from the facsimile apparatus 3 transmitted via the facsimile communication network N2. The facsimile communication unit 110 includes a decoding circuit for decoding the received facsimile data, and transfers image data obtained by decoding to the image memory 111. Further, the facsimile communication unit 110 includes an encoding circuit for encoding facsimile data to be transmitted, and transmits the facsimile data encoded by the encoding circuit to a target facsimile apparatus. The facsimile communication unit 110 executes such facsimile data transmission / reception and facsimile data encoding / decoding processing.

  The image memory 111 is composed of a semiconductor memory. The image data is generated by reading an image of a document by the image reading unit 107, the image data developed from the print data received through the communication unit 109, and received through the facsimile communication unit 110. The image data developed from the facsimile data is temporarily stored. The image data temporarily stored in the image memory 111 is transferred to a transfer destination according to the purpose of use according to an instruction from the CPU 101. That is, when image formation is performed on paper, it is transferred to the image forming unit 108, when it is transmitted to the information processing apparatus 2 as scanner data, it is transferred to the communication unit 109, and when it is transmitted as facsimile data, it is facsimile communication. When the image data is stored, it is transferred to the storage unit 112.

  The storage unit 112 is configured by an HDD device having a nonvolatile memory or a magnetic recording medium on a disk, and a part of the storage area is received through the image data read by the image reading unit 107 and the communication unit 109. This is used to store print data and facsimile data received through the facsimile communication unit 110 as a history. When a user's request is accepted through the operation unit 105 or when a request transmitted from the information processing apparatus 2 is received by the communication unit 109, various data stored in the storage unit 112 are read. Therefore, when it is necessary to re-execute the printing process due to the failure of the printing process or the lack of the number of output copies, various data stored in the storage unit 112 without requesting the data again from the data transmission source. Can be read out arbitrarily to execute the printing process.

  FIG. 3 is a block diagram illustrating the internal configuration of the information processing apparatus 2. Specifically, the information processing apparatus 2 is a personal computer, a workstation, or the like, and includes a CPU 201 for controlling each hardware unit described later. A ROM 203, a RAM 204, an operation unit 205, a display unit 206, an auxiliary storage device 207, a storage unit 208, and a communication unit 209 are connected to the CPU 201 via a bus 202. The ROM 203 stores in advance a control program for controlling these hardware units, and the CPU 201 loads and executes the control program to control each hardware unit.

  The operation unit 205 includes input devices such as a keyboard and a mouse, and receives user instructions. A display unit 206 is a CRT display, a liquid crystal display, or the like, and displays information input through the operation unit 205. The auxiliary storage device 207 includes various software such as a printer driver recorded on a recording medium such as an FD or a CD-ROM, an FD drive for reading data created by a user, a CD-ROM drive, or the like. Various software and data read by the auxiliary storage device 207 are stored in a storage unit 208 formed of a hard disk. A user calls a printer driver for using the image forming apparatus 1 from arbitrary software stored in the storage unit 208 to generate print data, and transmits the generated print data through the communication unit 209 to perform print processing. Can be executed by the image forming apparatus 1.

  FIG. 4 is a schematic diagram illustrating an example of a print setting screen generated by a printer driver installed in the information processing apparatus 2. When the printer driver is called from arbitrary software such as a document creation program or a graphics creation program installed in the storage unit 208 in advance, the printer driver generates a print setting screen 20 as shown in FIG. 206 is displayed. The print setting screen 20 includes a printer device used when a plurality of printer devices and digital multifunction devices are connected to the communication network N1, a printer selection field 21 for selecting a digital multifunction device, and details of print data to be generated. A detailed setting button 22 for setting, a range setting field 23 for setting a printing range, and a number setting field 24 for setting the number of copies are provided. When the execution button 25 is selected and operated, each setting field is set. Print data is generated according to the contents, and the print data is transmitted to the destination device selected in the printer selection field 21. When the cancel button 26 is selected, the print setting screen 20 is closed without generating print data.

  FIG. 5 is a schematic diagram showing an example of a detail setting screen displayed when the detail setting button 22 is selected and operated. When the detailed setting button 22 is selected on the print setting screen 20 described above, the detailed setting screen 30 shown in FIG. 5 is generated by the printer driver and displayed on the display unit 206. The detailed setting screen 30 accepts settings relating to the necessity of double-sided printing, the necessity of binding processing, and the like, as well as settings relating to the necessity of data protection. In the present embodiment, a check box 31 is prepared for accepting settings relating to the necessity of data protection. In the default state, the check box 31 is checked, that is, the print data is printed on the image forming apparatus 1 side. The detailed setting screen 30 is displayed with the default state of performing encryption and erasure of data after the printing process. When processing by the image forming apparatus 1 is stagnant or when it is desired to prioritize processing efficiency, the user cancels the check on the check box 31 to cancel the processing related to data protection on the image forming apparatus 1 side. Can be made.

  6 and 7 are flowcharts for explaining the procedure of processing executed in the image forming system according to this embodiment. First, the CPU 201 of the information processing apparatus 2 determines whether or not to accept a printing process by determining whether or not a printer driver is called from each application software (step S11). When it is determined that the print process is not accepted (S11: NO), the process waits until the print process is accepted. When it is determined that the print process is accepted (S11: YES), the detailed setting button is displayed on the print setting screen 20 output by the printer driver. It is determined whether or not there is a detailed setting instruction by determining whether or not a selection operation has been performed (step S12). If the detailed setting button 22 is not selected and it is determined that there is no detailed setting instruction (S12: NO), the confidential processing is turned on to generate print data (step S13), and the print data is transferred to the image forming apparatus. 1 (step S14). If it is determined in step S12 that there is a detailed setting instruction (S12: YES), the check box 31 checked in the default state on the detailed setting screen 30 as shown in FIG. 5 is selected by the user. It is determined whether or not confidential processing has been canceled by determining whether or not it has been canceled by an operation (step S15). If it is determined on the detailed setting screen 30 that the confidential process has not been canceled (S15: NO), the process proceeds to step S13, the confidential process is turned on to generate print data (S13), and the generated print data Is transmitted to the image forming apparatus 1 (S14). On the detailed setting screen 30, when the check of the check box 31 is canceled by the selection operation by the user, that is, when it is determined that the confidential processing is released (S15: YES), the confidential processing is turned off to print data. (Step S16), and the generated print data is transmitted to the image forming apparatus 1 (S14).

  The CPU 101 of the image forming apparatus 1 constantly monitors the communication unit 109 to determine whether or not the print data transmitted from the information processing apparatuses 2, 2,. When the print data transmitted from any one of the information processing apparatuses 2 is received (step S17), the CPU 101 determines whether or not the confidential processing is on based on the content indicated by the print data (step S18). ). If it is determined that the confidential processing is on (S18: YES), the flag F is set to 1 and stored in the RAM 104 (step S19). Then, the print data is encrypted (step S20), and the encrypted print data is stored in the storage unit 112 (step S21). Next, the CPU 101 determines whether or not the printing process can be executed (step S22), and determines that the printing process cannot be executed because there is other print data waiting for the process. (S22: NO), wait for the order of processing. If it is determined that the print process can be executed and the print process can be executed (S22: YES), the print data stored in the storage unit 112 is read and decrypted (step S23), and is expanded from the print data. The image data to be transferred is transferred to the image forming unit 108 via the image memory 111, and the image forming unit 108 executes a printing process (step S24). Note that the encryption processing and decryption processing performed by the image forming apparatus 1 may be executed by software processing according to a computer program stored in advance in the ROM 103, or a dedicated processing circuit may be provided separately to provide hardware. The form may be executed by a hardware process.

  On the other hand, if it is determined in step S18 that confidential processing is not turned on (S18: NO), the flag F is set to 0 and stored in the RAM 104 (step S25), and the received print data is encrypted. It is made to memorize | store in the memory | storage part 112, without doing (step S26). Then, the CPU 101 determines whether or not the printing process can be executed (step S27). If it is determined that there is another print data waiting for processing and the print processing cannot be executed (S27: NO), the processing order is waited. When it is determined that the printing process can be executed and the printing process can be executed (S27: YES), the print data stored in the storage unit 112 is read, and the image data for printing is developed according to the read print data. The printing process is executed by transferring the image data to the image forming unit 108 via the image memory 111 (S24).

  After the printing process is completed, it is determined whether or not the value of the flag F stored in the RAM 104 is 1 (step S28). If it is determined that F = 1 (S28: YES), that is, confidentiality is required. If it is determined that the printing process has been executed based on the print data, the print data is erased from the storage unit 112 (step S29). For example, the print data may be erased by deleting the management information indicating the storage location of the print data, and the print data at the storage location is overwritten with random data so that it is difficult to reproduce. It may be a configuration. If it is determined that F = 1 is not satisfied (S28: NO), that is, if it is determined that the print process is executed based on the print data for which the confidential process is not designated, the print data stored in the storage unit 112 is deleted. The processing by this system is terminated without doing so.

Embodiment 2. FIG.
In the first embodiment, the data protection is canceled using the printer driver on the information processing apparatus 2 side. However, when the copy function of the image forming apparatus 1 is used, the operation unit 105 is used. It may be configured to release data protection. In this embodiment as well, the configuration of the image forming apparatus 1 is exactly the same as that of the first embodiment, and thus the description thereof is omitted.

  FIG. 8 is a schematic diagram illustrating an example of the operation unit 105 and the display unit 106. The operation unit 105 includes hardware keys such as a numeric keypad for inputting numerical values, a clear key, a full release key, and a start key for starting image reading. The display unit 106 includes a liquid crystal display device, and displays information input through the operation unit 105 and information to be displayed to the user, and a part of the display unit 106 constitutes a touch panel. The user's selection operation is accepted based on the display content. In this embodiment, the data protection is released by pressing the special function key 106a.

  FIG. 9 is a schematic diagram for explaining an example of contents displayed on the display unit 106. When the special function key 106 a included in the display unit 106 described above is selected, a screen as shown in FIG. 9A appears on the display unit 106. In this screen example, four software keys are provided to make detailed settings for the printing process, and cancellation of data protection can be set by selecting and operating the upper left data protection key. FIG. 9B is an example of a screen that appears on the display unit 106 when the data protection key is selected. In the default state, the data protection function (security function) is activated, and the function is temporarily displayed. A display asking whether or not to stop is displayed, and the protection function is stopped when the stop button is selected and operated.

  FIG. 10 is a flowchart for explaining a procedure performed by the image forming apparatus 1 according to this embodiment. First, the CPU 101 of the image forming apparatus 1 determines whether or not to start a printing process (step S31). If it is determined not to start the printing process (S31: NO), the process waits until the printing process is started. If it is determined to start the printing process (S31: YES), the image reading unit 107 performs a document reading process (step S32).

  Next, the CPU 101 determines whether or not the special function key 106a is selected from the display unit 106 and detailed setting is instructed (step S33). When it is determined that the detailed setting is not instructed (S33: NO), the flag F is set to 1 and stored in the RAM 104 (step S34). Then, the print data is encrypted (step S35), and the encrypted print data is stored in the storage unit 112 (step S36). Next, the CPU 101 determines whether or not the printing process can be executed (step S37), and determines that the printing process cannot be executed because there is other print data waiting for the process. (S37: NO), wait for the order of processing. If it is determined that the print process can be executed and the print process can be executed (S37: YES), the print data stored in the storage unit 112 is read and decrypted (step S38), and is expanded from the print data. The image data is transferred to the image forming unit 108 via the image memory 111, and the image forming unit 108 executes print processing (step S39).

  On the other hand, if it is determined in step S33 that the detailed setting has been instructed (S33: YES), it is determined whether or not the instruction is cancellation of confidential processing (step S40). If it is determined that the confidential process is not cancelled (S40: NO), the process proceeds to step S34. If it is determined that the details of the details are the cancellation of confidential processing (S40: YES), the flag F is set to 0 and stored in the RAM 104 (step S41), and the received print data is encrypted. Without being stored in the storage unit 112 (step S42). Then, the CPU 101 determines whether or not the printing process can be executed (step S43). If it is determined that the print process cannot be executed because there is another print data waiting for the process (S43: NO), the process waits. When it is determined that the printing process can be executed and the printing process can be executed (S43: YES), the print data stored in the storage unit 112 is read, and the image data for printing is developed according to the read print data. The printing process is executed by transferring to the image forming unit 108 via the image memory 111 (S39).

  After the printing process is completed, it is determined whether or not the value of the flag F stored in the RAM 104 is 1 (step S44). If it is determined that F = 1 (S44: YES), that is, confidentiality is required. If it is determined that the printing process has been executed based on the print data, the print data is erased from the storage unit 112 (step S45). The print data may be erased by, for example, deleting the management information indicating the storage location of the print data. The print data at the storage location is overwritten with random data so that it is difficult to reproduce. It may be a configuration. If it is determined that F = 1 is not satisfied (S44: NO), that is, if it is determined that the printing process is executed based on the print data for which the confidential process is not designated, the print data stored in the storage unit 112 is deleted. The process by this system is terminated without performing the process.

Embodiment 3 FIG.
In the first embodiment and the second embodiment, the processing efficiency is prioritized when the user consciously designates cancellation of data protection. However, the confidentiality of the image data read by the image forming apparatus 1 itself is used. Whether or not to cancel the data protection may be determined according to the result. Since the internal configuration of the image forming apparatus 1 is basically the same as that of the first embodiment, the description thereof is omitted.

  FIG. 11 is a flowchart illustrating a procedure performed by the image forming apparatus 1 according to the present embodiment. First, the CPU 101 of the image forming apparatus 1 determines whether or not to start a printing process (step S51). If it is determined not to start the printing process (S51: NO), the process waits until the printing process is started. If it is determined to start the printing process (S51: YES), the image reading unit 107 performs a document reading process (step S52).

  Next, the CPU 101 requests a password for user authentication from the user, and performs user authentication based on the password entered through the operation unit 105 (step S53). Then, it is determined whether or not the image data acquired by reading the document in response to the result of the user authentication is confidential data (step S54). That is, the password of the user who handles the confidential data is registered in the storage unit 112 in advance, and it is determined whether or not it matches the password registered at the user authentication stage. If it is determined that they match, the image data read by the user is handled as confidential data. If it is determined that the data is confidential data (S54: YES), the flag F is set to 1 and stored in the RAM 104 (step S55). Then, the print data is encrypted (step S56), and the encrypted print data is stored in the storage unit 112 (step S57). Next, the CPU 101 determines whether or not the printing process can be executed (step S58), and determines that the printing process cannot be executed because there is other print data waiting for the process. (S58: NO), wait for the order of processing. If it is determined that the print process can be executed and the print process can be executed (S58: YES), the print data stored in the storage unit 112 is read and decrypted (step S59), and is expanded from the print data. The image data is transferred to the image forming unit 108 via the image memory 111, and the image forming unit 108 executes a printing process (step S60).

  On the other hand, if it is determined in step S54 that the read image data is not confidential data (S54: NO), the flag F is set to 0 and stored in the RAM 104 (step S61), and the original image is read and generated. The stored print data is stored in the storage unit 112 without being encrypted (step S62). Then, the CPU 101 determines whether the printing process can be executed (step S63). When it is determined that there is other print data waiting for processing and thus the print processing cannot be executed (S63: NO), the processing order is waited. When it is determined that the printing process can be executed and the printing process can be executed (S63: YES), the print data stored in the storage unit 112 is read, and the image data for printing is developed according to the read print data. Printing is executed by transferring the image data to the image forming unit 108 via the image memory 111 (S60).

  After the printing process is completed, it is determined whether or not the value of the flag F stored in the RAM 104 is 1 (step S64). If it is determined that F = 1 (S64: YES), that is, confidentiality is required. If it is determined that the printing process has been executed based on the print data, the print data is erased from the storage unit 112 (step S65). For example, the print data may be erased by deleting the management information indicating the storage location of the print data, and the print data at the storage location is overwritten with random data so that it is difficult to reproduce. It may be a configuration. If it is determined that F = 1 is not satisfied (S64: NO), that is, if it is determined that the printing process is executed based on the print data for which the confidential process is not designated, the print data stored in the storage unit 112 is deleted. The process by this system is terminated without performing the process.

  In this embodiment, the user authentication is performed to determine whether or not the print data is confidential. However, the image data developed from the print data is processed to include a specific image and information. It may be configured to handle it as confidential data when it is detected.

1 is a schematic diagram illustrating a configuration of an image forming system according to an exemplary embodiment. 2 is a block diagram illustrating an internal configuration of the image forming apparatus. FIG. It is a block diagram explaining the internal structure of an information processing apparatus. 6 is a schematic diagram illustrating an example of a print setting screen generated by a printer driver installed in the information processing apparatus. FIG. It is a schematic diagram which shows an example of the detailed setting screen displayed when a detailed setting button is selected and operated. 4 is a flowchart illustrating a procedure of processing executed in the image forming system according to the present embodiment. 4 is a flowchart illustrating a procedure of processing executed in the image forming system according to the present embodiment. It is a schematic diagram which shows an example of an operation part and a display part. It is a schematic diagram explaining an example of the content displayed on a display part. 6 is a flowchart illustrating a procedure performed by the image forming apparatus according to the present embodiment. 6 is a flowchart illustrating a procedure performed by the image forming apparatus according to the present embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image forming apparatus 2 Information processing apparatus 3 Facsimile apparatus 101 CPU
103 ROM
104 RAM
105 Operation Unit 106 Display Unit 107 Image Reading Unit 108 Image Forming Unit 109 Communication Unit 110 Facsimile Communication Unit 111 Image Memory 112 Storage Unit 201 CPU
203 ROM
204 RAM
205 Operation Unit 206 Display Unit 207 Auxiliary Storage Unit 208 Storage Unit 209 Communication Unit N1 Communication Network N2 Facsimile Communication Network

Claims (7)

In a data protection device comprising a receiving means for receiving data and a data protection means for protecting the received data,
It comprises a judging means for judging whether or not the protection of the data by the data protection means should be stopped, and when the judging means judges that the data should be stopped, the protection of the data is stopped. Data protection device.   The apparatus further comprises means for determining whether the received data is confidential or not, and when the means determines that the confidentiality is not present, the determination means determines that the protection of the data should be stopped. The data protection device according to claim 1.   Means for accepting a request to stop protection of the received data, and when the accepting means accepts the request when accepting the data, the judging means judges that protection of the data should be stopped; The data protection device according to claim 1 or 2, wherein the data protection device is configured as described above. In a data protection device comprising a receiving means for receiving data and a data protection means for protecting the received data,
A data protection apparatus comprising: means for determining whether or not the received data is confidential; and when the means determines that there is no confidentiality, protection of the data is stopped. In a data protection device comprising a receiving means for receiving data and a data protection means for protecting the received data,
A unit for receiving a request to stop protection of received data is provided, and when the reception unit receives the request when receiving the data, the protection of the data is stopped. Data protection device.   6. The data protection device according to claim 1, wherein the data protection means is means for encrypting the received data, and comprises means for storing the encrypted data. .   6. The storage device according to claim 1, further comprising storage means for storing received data, wherein the data protection means is means for erasing data stored in the storage means. Data protection device.

Images