JP2007083456A - Image processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve the security of data while preventing the occurrence of a failure when an apparatus is started up. <P>SOLUTION: When detecting that a power switch is turned off, a copying machine checks whether or not a USB memory is mounted. When the USB memory is mounted, image data, which are set to achieve the security, are transferred to the USB memory from image data recorded in an HDD, and original image data are erased (steps 100-114). Along with that, an FAT of the HDD is updated on the basis of the erasing of the image data, and erasing information is generated. After that, a power source of the apparatus is turned off (steps 116-118, and 104). Thus, since the FAT remains in the HDD in the start-up of the apparatus, the apparatus can be put into an operating state even under a state in which the image data receding into the USB memory are not returned. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an information processing apparatus such as a print processing apparatus that performs print processing based on information such as input image data, and more specifically, information processing provided with storage means for storing and holding image data and the like. Relates to the device.

  The image recording apparatus having a printer function for forming an image on recording paper according to image data or the like has a scanner function for reading an image recorded on a document, and records an image corresponding to the document image read by the scanner function. There are also so-called multi-function copiers including a so-called print server function provided with a storage unit such as a copier that forms on a sheet or an HDD (Hard Disk Drive).

  In such a copying machine, image data or document data input via a network or the like is stored and retained in the HDD, and document data or image data recorded in the HDD is printed out at an arbitrary timing. It functions as a possible information processing device.

  On the other hand, in the copying machine, data such as image data stored in the HDD is managed based on file management information such as FAT (File Allocation Table). In the FAT, a storage position is assigned to each image data to be stored, and the storage position of the image data can be specified by referring to the FAT information.

  The copier stores the image data in the HDD when printing out the image data transmitted from the PC or the original image read by the scanner, and updates the FAT so that the corresponding data is deleted when the processing is completed. In the copying machine, when image data transmitted from a PC or the like is stored in the HDD, the stored image data can be read by updating the FAT.

  By the way, when erasing image data or the like recorded on the HDD, the image data in the HDD is not erased, and the file management information of the corresponding image data is erased so that the target image data does not exist in the HDD. Often.

  In recent years, there has been a problem of data leakage that causes image data remaining in the HDD to be read without being erased, and proposals have been made to prevent such data leakage (see, for example, Patent Document 1). ).

  In the proposal of this patent document 1, when the power of the image processing apparatus is turned off, by specifying the confidential storage mode, it is possible to select all erasure or partial erasure of data in the HDD. As a result, all the stored information such as image data and FAT information is transferred from the HDD having no removal function to the removable HDD, and the used area is erased after the transfer. When partial erasure is selected, the FAT information is transferred to the removable HDD, and the FAT area is erased.

Thereby, it is possible to prevent data remaining in the HDD from being read (data leakage prevention) by removing the removable HDD while the power is turned off.
JP 2003-101739 A

  However, if the FAT is erased from the HDD and the removable HDD is removed, the next time the image processing apparatus is turned on, if there is no removable HDD, the data left in the HDD without the removable function As a matter of course, the HDD itself cannot be used, and the image processing apparatus cannot substantially be started up.

  The present invention has been made in view of the above-described facts, and reliably prevents data remaining in the storage means such as the HDD from being read when the operation of the apparatus ends, while preventing the apparatus from starting up. An object of the present invention is to provide an information processing apparatus capable of performing the above.

  In order to achieve the above object, the present invention stores data in a data storage area, storage means for storing management information of the data in the data management area, and the data in the data storage area of the storage means Management information updating means for updating the management information in the data management area in accordance with the writing and erasing processing, and detachably provided in the operating state of the apparatus, and data can be written and read by detecting attachment An information processing apparatus that can be operated by turning on a power switch and that stops operation by turning off a power storage device, and is a data storage area of the storage means when the power switch is turned off In addition to writing the data stored in the storage medium to the recording medium, erasing the original data in the data storage area and updating the management information Data transfer means for updating the management information by means, and transfer information generation means for generating transfer information of data transferred to the storage medium by the data transfer means and erased from the storage means. Features.

  According to the present invention, when the operation of the apparatus is stopped, the data stored in the data storage area of the HDD add storage means is evacuated from the storage means by transferring it to the storage medium, and the corresponding data is stored. Confidentiality protection is achieved by erasing from the data storage area of the means. At this time, the management information stored in the data management area of the storage means is only updated.

  As a result, when the apparatus is turned on next time, the apparatus can be operated even when the data saved in the storage medium is not restored.

  In the present invention, it is preferable that the storage medium is requested when the storage medium is in a non-detection state. As a result, it is possible to prevent the apparatus from being stopped without saving data from the storage medium.

  Further, the present invention is characterized in that the data transfer means transfers preset data to the storage medium.

  According to the present invention, it is set in advance whether or not each data is saved in the storage medium, and only the data set to be saved is moved to the storage medium. As a result, it is possible to shorten the time required for data movement and reduce the capacity of the storage medium.

  Further, when the apparatus is operated next time, the data remaining in the storage means can be used without performing special processing.

  As such a storage medium applied to the present invention, any removable media such as a semiconductor memory, HDD, MO, and DVD can be applied. In addition, it is preferable to use an interface standard that can be attached and detached while the apparatus is in operation, such as the USB standard or the IEEE 1394 standard, so that the storage medium can be attached to the storage medium at any timing after the power switch of the apparatus is turned on. The restored data can be restored.

  In the present invention, the data transfer unit may generate a folder on the storage medium based on an ID that can identify the device, and write the data in the folder. As a result, the data of a plurality of information processing apparatuses can be saved together in one storage medium.

  In the present invention, the transfer unit can divide and write the data into a plurality of storage units. Accordingly, for example, different storage media can be used depending on the level of security protection, and a large amount of data can be saved.

  Further, it is possible to divide the data at the security level into a plurality of storage media, and thus it is possible to surely prevent leakage due to reading the saved data from the storage media.

  Such an information processing apparatus to which the present invention is applied is configured to store the data written in the storage medium based on the transfer information when the power switch is turned on. And a data return means for enabling the management information update means to update the management information stored in the data management area.

  According to the present invention, when the power switch of the apparatus is turned on, the data saved in the storage medium is moved to the data storage area of the storage means, and the management information is updated. Thereby, the saved data can be used after the apparatus is started up.

  In the present invention, it is preferable that the storage medium is requested to be mounted when the detection unit is in the non-detection state.

  Further, in the present invention, the operation of the data transfer unit and the transfer information generation unit is stopped when an off operation of the power switch is detected in a state where an apparatus abnormality is detected. .

  According to the present invention, when the power switch is turned off while an apparatus abnormality is detected, it is possible to prevent the data stored in the storage unit from being saved, thereby making it unnecessary. Data save processing is performed, and it is possible to prevent the maintainability of the apparatus from being impaired due to complicated startup processing. Note that the abnormality detection of the apparatus may be based on a known process included in the apparatus itself.

  In addition, the information processing apparatus of the present invention secures a writing capacity of the data moved to the storage medium in the data storage area of the storage unit based on the transfer information when the mounting of the storage medium is not detected. It is characterized by that.

  According to the present invention, when the data saved in the storage medium is not restored, the storage capacity is secured in the data storage area of the storage means in accordance with the amount of saved data. Even after, the saved data can be reliably restored to the storage medium.

  Further, according to the present invention, when the mounting of the storage medium is detected, the data restoration means stores the data written on the storage medium in the data storage area of the storage means based on the transfer information. The management information is updated and the management information stored in the data management area is updated by the management information updating means.

  According to the present invention, the data saved in the storage medium can be written to the data storage area of the storage means and returned at any timing during operation of the apparatus.

  In the present invention, when the data transfer unit generates a folder on the storage medium based on an ID that can identify a device and writes the data in the folder, the storage is performed. What is necessary is just to transfer the data in the folder to the data storage area of the storage means by detecting the folder based on the ID when a medium is loaded. If the data restoration means reads the data from each of the plurality of storage media and writes it in the data storage area of the storage means when the data is divided and written to the plurality of storage media good.

  According to the present invention, since the management information is only updated and remains in the storage means and the data is moved to the storage medium, the management information of the storage means is restored when the apparatus is started up when the data is protected. It is possible to surely prevent a failure due to failure.

  Further, according to the present invention, it is possible to obtain an excellent effect that data saved in a storage medium can be restored and used at an arbitrary timing during operation of the apparatus.

  Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 shows a schematic configuration of a copying machine 10 applied as an image processing apparatus to the present embodiment. The copier 10 includes an image reading unit 12, an image output unit 14, an image processing unit 16, and a control unit 18.

  The image reading unit 12 is provided as an IIT (Image Input Terminal) serving as a scanner. When an original (not shown) is loaded, the image reading unit 12 reads an image recorded on the original and outputs image data corresponding to the read image. The image output unit 14 is provided as an IOT (Image Output Terminal) serving as a print engine, and forms an image based on image data on a recording sheet by applying, for example, an electrophotographic process.

  The image processing unit 14 performs predetermined image processing on the input image data. Also, when performing print processing according to image data using the image output unit 14, the image data is converted into a data format that can be processed by the image output unit 14 by performing RIP processing on the image data.

  The control unit 18 includes a CPU 20, a ROM 22, and a RAM 24, and controls the operation of each device of the image reading unit 12 and the image output unit 14 and also controls the processing of the image processing unit 16. Also connected to the control unit 18 is an operation panel 26 having a display for displaying various information, various settings, and operation keys (not shown) for inputting operation of the copying machine 10. .

  As a result, in the copying machine 10, based on an input operation from the operation panel 26, a printing process for recording an image corresponding to the image data on a recording sheet, reading of an original image by the image reading unit 12, and the image reading unit 12 Image copying using the image output unit 14 is possible.

  On the other hand, the copying machine 10 is provided with a network interface (network I / F) 28, and is connected to a LAN, an intranet, the Internet, or the like via the network I / F 28. As a result, the copying machine 10 can perform print processing based on a print job such as image data input from an image processing terminal such as a personal computer (not shown).

  Further, the copying machine 10 is provided with an HDD (Hard disk Drive) 30 serving as storage means. In the control unit 18, for example, data files (hereinafter referred to as image data) such as image data input via the network I / F 28 and image data input from the image reading unit 12 are stored in the HDD 30. The image data that is held and stored at an arbitrary timing can be read, and processing such as printout corresponding to the read image data can be performed.

  That is, the copier 10 has functions as a so-called print server and copy server as well as a copier and a network printer. Note that a conventionally known configuration can be applied to the basic configuration of the copying machine 10 as described above, and a detailed description thereof will be omitted in this embodiment.

  On the other hand, the copier 10 is provided with a power supply circuit 32 connected to an external commercial power supply or the like and a power switch 34. When the power switch 34 is turned on, the control unit 18 turns on the power circuit 32 to supply predetermined power to the image reading unit 12, the image output unit 14, and the image processing unit 16. Enable operation.

  The control unit 18 stops the operation of the power supply circuit 32 when a predetermined operation end operation is performed by turning off the power switch 34. That is, the control unit 18 executes the apparatus startup program by turning on the power switch 34 so that the copier 10 can be operated, and the apparatus stop program is executed by turning off the power switch 34. Thus, the copying machine 10 is stopped.

  By the way, the data storage area of the HDD 30 is composed of a large number of blocks, and each block is assigned a series of numbers as information indicating positions on the data storage area, and the data storage area is managed by this series of numbers. LBA (Logical Block Addressing) method is applied.

  The HDD 30 uses FAT (File Allocation Tables) as a file system, and the storage data is managed by the FAT. For this purpose, the HDD 30 stores FAT, which is file management information in which information for specifying image data and LAB of the image data are stored, in a predetermined area set as a FAT storage area. ing.

  Thus, normally, when writing a file of image data to the HDD 30, a block that is an empty area is specified from the FAT, a file containing the image data is stored in the corresponding block, and the corresponding file (image data) is specified. The FAT is updated by writing the LAB of the corresponding block to the FAT together with the information.

  Further, when erasing the image data file written in the HDD 30, the block in which the file of the corresponding image data is written becomes an empty area by updating the information regarding the corresponding image data on the FAT and the LAB. To be considered.

  On the other hand, in the copying machine 10, in order to prevent image data recorded in the HDD 30 from being unnecessarily read, a security level can be set for each image data. It should be noted that the secret protection level can be set in a plurality of stages such as 1 to 5 levels (the higher the number, the higher the protection level). However, here, as an example, the protection level for performing security protection 2 and a protection level 1 that does not require confidentiality protection are described in two stages. In addition, any method can be applied for setting the security level, and all image data may be set to the protection level 2 (the security level is 1 level).

  This security level is added to the attribute information of the image data, for example, and stored together with the image data in the data storage area of the HDD 30 as a file of the corresponding image data.

  When erasing the image data from the HDD 30, the control unit 18 checks the security level setting, and if the security level is set to the protection level 2, updates the FAT (from the FAT). The image data is erased from the data storage area by overwriting predetermined data (for example, “0”, etc.) or an empty file on the block in which the image data is recorded. Erase all).

  This prevents the image data that has been erased from the FAT but remains in the data storage area of the HDD 30 from being read out. Note that when erasing image data for which the security level is not set or the protection level is 1, only updating of the FAT is performed (normal erasure, partial erasure).

  The copier 10 is provided with a USB (Universal Serial Bus) interface (USB I / F) 36. In the copying machine 10, a USB mass storage class driver program is installed.

  As a result, in the copying machine 10, the USB memory 38 can be used as a hot plug type removable medium that can be inserted / removed in a hot-line manner that can be inserted / removed when the power of the copying machine 10 is on (operating). Here, a semiconductor memory is used as an example of the USB memory 38.

  On the other hand, the copying machine 10 is set to a security mode for protecting the leakage of image data stored in the HDD 30. When the control unit 18 detects the turning-off operation of the power switch 34 for stopping the normal device when the security mode is set, the control unit 18 executes the security mode, and after the security mode ends, The (power supply circuit 32) is turned off.

  The control unit 18 checks the operating states of various devices provided in the image reading unit 12, the image output unit 14, and the like, and detects whether or not an apparatus abnormality (apparatus error) has occurred. At this time, when a device abnormality that requires the device to be stopped is detected, a display prompting the user to turn off the power switch 34 such as “power stop request” is displayed on the display of the operation panel 26.

  Thus, when the power switch 34 of the copying machine 10 is turned off, the control unit 18 determines that the apparatus is abnormally stopped different from the normal apparatus stop, and prevents the security mode from being activated.

  In the security mode executed by the normal stop operation, when the copying machine 10 stops the apparatus, the security level recorded in the HDD 30 is erased on the FAT with respect to the image data of the protection level 2. At the same time, the data is erased from the data storage area of the HDD 30.

  That is, when the control unit 18 detects an operation of turning off the power switch 34, the image data stored in the HDD 30 is saved from the HDD 30 by transferring the image data having the security protection level 2 to the USB memory 38. Let

  At the same time, the control unit 18 erases the corresponding image data from the data storage area of the HDD 30 by writing predetermined data in the block of the data storage area of the HDD 30 in which the image data transferred to the USB memory 38 is stored. . Further, the control unit 18 updates the FAT stored in the HDD 30. That is, the file management information of the corresponding image data is deleted from the FAT.

  Further, the control unit 18 corresponds to, for example, the data amount used by the image data so that the storage capacity corresponding to the data amount can be secured in the HDD 30 with respect to the image data transferred to the USB memory 38. Blocks to be used are kept in use.

  That is, in the control unit 18, the apparent remaining capacity becomes the remaining capacity before the transfer of the image data so that the image data saved from the HDD 30 by being transferred to the USB memory 38 can be rewritten on the HDD 30. I am doing so.

  When the control unit 18 detects that the image data is saved from the HDD 30 to the USB memory or the USB memory 38 from which the image data is saved is pulled out from the USB I / F 36, the power supply circuit 32 is stopped and the copying machine 10 is stopped. Is in an operation stop state.

  The control unit 18 stores, for example, a serial number of the own machine as information for specifying the copying machine 10 (own machine). When transferring image data to the USB memory 38, the serial number is used as a folder name. A folder to be generated is generated, and a data file for each image data is generated in the corresponding folder. That is, the image data is stored in the USB memory 38 using the serial number as an ID.

  As a result, the image data of a plurality of copying machines 10 can be saved in one USB memory 38.

  On the other hand, when the USB memory 38 is attached while the apparatus is in operation (powered on), the control unit 18 checks whether or not a folder for the own device has been generated, and a folder for the own device has been generated. The image data in the corresponding folder is written into the HDD 30 and the FAT of the HDD 30 is updated. Thereby, the protection level 2 image data saved in the USB memory 30 can be read from the HDD 30.

  Here, as an operation of the present embodiment, an operation stop process in the copying machine 10 and an operation process including an operation start (startup) will be described. In the copying machine 10, the power switch 34 is turned on when starting the daily operation of the apparatus. As a result, it is possible to perform document copying and printing processing according to the image data of the print job input via the network.

  The copying machine 10 stores the corresponding image data in the HDD 30 prior to the printing process, and erases the corresponding image data from the HDD 30 when the printing process is completed. Further, the copying machine 10 can store image data input via a network and image data read from a document by the image reading unit 12 in the HDD 30, and store the stored image data in an arbitrary manner. It is also possible to erase at the timing.

  At this time, in the copying machine 10, if the security level protection level is set to the protection level 2 for the image data, not only the erased partial erase by updating the FAT but also the data storage in which the corresponding image data is recorded. All erasure is executed by overwriting predetermined data on the block in the area.

  Further, in the copying machine 10, when the power switch 34 is turned off at the end of the day's operation, the power circuit 32 is turned off and the operation of the apparatus is stopped. At this time, the control unit 18 of the copying machine 10 executes the security mode.

  Here, the security mode executed by the copying machine 10 (control unit 18) will be described with reference to FIG.

  In this flowchart, it is confirmed whether or not the power switch 34 is turned off in the first step 100. If it is detected that the power switch 34 is turned off, an affirmative determination is made in step 100 and the process proceeds to step 102. . In this step 102, it is confirmed whether or not the stop is based on the occurrence of an apparatus abnormality.

  That is, the control unit 18 detects the operating states of various devices provided in the image reading unit 12, the image output unit 14, and the like, and determines whether or not an apparatus abnormality has occurred. In addition, when an apparatus abnormality that stops the apparatus is detected, a display that prompts a stop operation of the apparatus is displayed on the display of the operation panel 26.

  As a result, when an abnormality that needs to be stopped is detected, it is determined that the operation is a stop operation based on the apparatus abnormality, an affirmative determination is made in step 102, and the process proceeds to step 104. I do. A known process can be applied to the apparatus stop process executed in step 104.

  On the other hand, when an apparatus abnormality that needs to be stopped is not detected, it is determined as a normal stop operation, and a negative determination is made in step 102 to start execution of the security mode.

  In the security mode, first, in step 106, it is confirmed whether or not the USB memory 38 as a removable medium for backing up image data is attached. If the USB memory 38 is not attached at this time, a negative determination is made at step 106 and the routine proceeds to step 108.

  In this step 108, a display prompting the user to install the USB memory 38 such as “Please install the backup medium” is displayed on the display of the operation panel 26.

  In step 110, it is confirmed based on the display on the operation panel 26 whether the USB memory 38 is attached.

  Since the copying machine 10 uses a hot-plug USB memory 38 that can be hot-plugged as a backup medium, it can be mounted even when the apparatus is in an on state (operating state). Is detected, an affirmative determination is made at step 110 and the routine proceeds to step 112. If the USB memory 38 is already attached when the power switch 34 is turned off, an affirmative determination is made in step 106 and step 112 is executed.

  In step 112, image data whose security level is set to protection level 2 is read from the HDD 30 and written to the USB memory 38. At this time, a folder for the own device is generated based on the serial number of the own device (copier 10), and a file for each image data is written in the generated folder.

  In the next step 114, the original image data (file) in the HDD 30 is deleted. That is, the image data in the HDD 30 is moved to the USB memory 38 in steps 112 and 114. At this time, the original image data is copied from the HDD 30 by writing data of a predetermined value (for example, “0”) to the block in which the image data of the HDD 30 is stored or by storing an empty file of the same data size. Any method can be applied as long as it can be erased.

  At the same time, in step 116, rewriting such as updating of the FAT in the HDD 30 is performed, and in step 118, erasure information relating to image data copied (moved) from the HDD 30 to the USB memory 38 is generated.

  At this time, for example, in the HDD 30, for example, 1 Mbyte image data with the file name “abc” can be rewritten to data with all 1 Mbyte data values with the file name “abc-e”. At this time, information related to the image data after rewriting to FAT is written, and it is clearly indicated that the image data with the file name “abc” is rewritten to data with the file name “abc-e” as erasure information. Generate information.

  When the image data with the file name “abc” and the data amount of 1 Mbyte is deleted, the FAT is updated accordingly, and the image data with the file name “abc” and the data amount of 1 Mbyte is deleted as the deletion information. The information indicating that is deleted is generated.

  Thus, the image data moved to the USB memory 38 can be returned to the HDD 30 and an area for returning the corresponding image data to the HDD 30 can be secured.

  Note that the FAT rewriting and erasing information of the HDD 30 accompanying the movement of the image data is not limited to this, and the image data moved to the USB memory 38 can be returned to the HDD 30 and the corresponding image can be returned. Any configuration can be applied as long as an area for returning data to the HDD 30 is secured.

  As described above, when the operation of the copying machine 10 is stopped, the image data in the HDD 30 is saved (moved) to the USB memory 30 and is deleted from the HDD 30. Can be reliably prevented from being read from.

  On the other hand, FIG. 3 shows an outline of the restoration process of the image data saved in the security mode.

  This flowchart is executed when the power switch 34 is turned on in order to operate the copying machine 10, and in the first step 120, image data saved in the USB memory 38, which is a removable medium, based on the erasure information. Check if there is any. When the power switch 34 is turned on, the copying machine 10 starts supplying predetermined power from the power supply circuit 32 to each device and the like, and executes predetermined startup processing to copy and print images. Execution such as output becomes possible.

  Here, when there is image data saved in the USB memory 38, an affirmative determination is made in step 120, and the routine proceeds to step 122. If there is no saved image data, a negative determination is made at step 120, and this process ends.

  In this step 122, it is confirmed whether or not the USB memory 38 is attached. If the USB memory 38 is attached at this time, an affirmative determination is made at step 122 and the routine proceeds to step 124. In this step 124, it is confirmed whether or not the USB memory 38 stores the image data saved from the own device.

  In the USB memory 38, the serial number of the copying machine 10 is set as an ID, and image data is stored in a file specified by the serial number. By confirming whether or not, it is possible to easily and accurately determine whether or not the USB memory 38 stores the image data of the own device.

  Here, when the USB memory 38 is saving the image data of its own device, an affirmative determination is made in step 124 and the process proceeds to step 126, and the image data in the folder is moved to the HDD 30 based on the erasure information. At the same time, the FAT of the HDD 30 is updated.

  In step 128, the corresponding folder in the USB memory 30 or the file in the folder (the file of the moved image data) is deleted.

  When the saved image data is restored in this way, in step 130, for example, a display prompting the user to remove the USB memory 38 such as “Removable media can be removed” is displayed on the operation panel 26. The process is terminated by displaying on the display.

  The display indicating that the USB memory 38 can be removed is not limited to this, and an arbitrary configuration such as providing an access lamp or the like in the USB I / F 36 and clearly indicating the state of the access lamp or the blinking state is applied. can do.

  On the other hand, when the USB memory 38 is not attached, a negative determination is made at step 122 and the routine proceeds to step 132. In step 132, a display prompting the user to install the USB memory 38 such as “Please install the removable media” is displayed on the display of the operation panel 26. At this time, the restoration process of the image data can be canceled.

  At this time, for example, a cancel key is provided in the UI displayed on the display so that the restoration process of the image data can be ended by operating the cancel key.

  From this point, in the next step 134, it is confirmed whether or not the USB memory 38 is attached. In step 136, it is confirmed whether or not the cancel key has been operated.

  As a result, when the USB memory 38 is attached, an affirmative determination is made at step 134 and the routine proceeds to step 124.

  When the attached USB memory 38 is not for the own device, that is, when the folder of the own device is not formed in the attached USB memory 38, a negative determination is made in step 124, and the process proceeds to step 138. “Replace removable media.” Or “Removable media is different.” Since the attached USB memory 38 is not for the device itself, a message prompting the user to replace the USB memory 38 is displayed. The UI used at this time is also provided with a cancel key, for example, and this cancel key is operated so that the restoration processing of the image data can be completed.

  From this point, in the next step 140, it is confirmed whether or not the USB memory 38 has been replaced. When it is detected that the USB memory 38 has been replaced, an affirmative determination is made in step 140 and the process proceeds to step 124. Image data restoration processing using the memory 38 is executed.

  On the other hand, if the cancel key is operated in a state where the USB memory 38 is not attached, an affirmative determination is made in step 136 or step 142 and the process proceeds to step 144.

  In this step 144, based on the erasure information, a disk capacity is secured in the data recording area so that the saved image data can be written to the HDD 30. As a result, the remaining capacity in the apparent HDD 30 is reduced, and the restoration process is terminated.

  At this time, since the copying machine 10 does not perform the process of saving the FAT in the HDD 30 to the USB memory 38 and erasing the FAT in the HDD 30, the copying machine 10 performs a restoration process on the saved image data. Even if it is not in a state, there is no problem in processing.

  On the other hand, in the copying machine 10, the USB memory 38 is used as a removable medium for saving image data for security protection. As a result, when the apparatus is in operation, image data restoration processing is executed at an arbitrary timing. To make it possible.

  Here, FIG. 4 shows an outline of the image data restoration process during operation of the apparatus. The basic processing here is the same as the processing in FIG. 3 described above, and the same step numbers are assigned to the same processing, and the description thereof is omitted.

  This flowchart is executed when the copying machine 10 is operating in a state where the restoration processing of the saved image data is not completed. In the first step 150, it is confirmed whether or not the USB memory 38 is attached. To do.

  Here, when the USB memory is attached, an affirmative determination is made in step 150 and the process proceeds to step 124 to check whether or not the data of the own device is stored, and when the data of the own device is stored, An affirmative determination is made in step 124, and image data restoration processing is executed in steps 126 to 130.

  As a result, the image data is restored, so that the copying machine 10 can perform processing using the corresponding image data. If the data of the device itself is not stored in the attached USB memory 38, a negative determination is made in step 124 and the process proceeds to step 138 to prompt the user to replace the USB memory 38 and cancel the restoration processing of the image data. When the USB memory 38 is exchanged, an affirmative determination is made in step 140 and the process returns to step 124 to resume the return process. If canceled, an affirmative determination is made in step 142 and the process ends. .

  As described above, the copying machine 10 can perform image data restoration processing not only when the apparatus is started up but also at any timing during operation.

  On the other hand, in the present embodiment described above, the serial number is used as the ID for identifying the copying machine 10, but the present invention is not limited to this, and any information can be applied as long as the apparatus can be identified. .

  In addition, the image data recorded in the HDD 30 is saved using one USB memory 38. However, the present invention is not limited to this, and the image data is divided and saved using a plurality of USB memories 38. It may be.

  At this time, for example, the security level is set to 3 levels or higher instead of 2 levels, and the same security level can be saved to the same USB memory 38. For example, the security level can be saved to a different USB memory 38 for each security level. . As a result, the image data saved in the USB memory 38 can be managed according to the security level.

  Further, when data having a high security level is divided into a plurality of USB memories 38 when a plurality of USB memories 38 are used, it is possible to reliably protect important image data (data).

  In the present embodiment described above, the USB memory 38 connected by USB is used as the removable medium. However, the connection of the removable medium is not limited to this, and a hot plug system such as the IEEE 1394 standard can be applied.

  Further, the removable medium is not limited to the USB memory 38 using a semiconductor memory, and any recording medium can be applied as long as it is a rewritable recording medium such as HDD, DVD, and MO.

  Furthermore, in the present embodiment, the copying machine 12 having a print server function (copy server function) has been described as an example. However, the present invention has any configuration as long as it has a storage unit such as the HDD 30. It can be applied to a copying machine, a printer, and the like. In particular, the present invention is applied to an information processing apparatus in which the power switch 34 is turned on at the start of operation on the day and the power switch 34 is turned off at the end of operation on the day. Can be maintained.

1 is a schematic configuration diagram showing an example of a copying machine applied to the present embodiment. It is a flowchart which shows the outline of the security protection process at the time of an apparatus stop. 5 is a flowchart showing an outline of a restoration process of image data when the apparatus is started up. 5 is a flowchart showing an outline of a restoration process of image data during operation of the apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Copy machine 12 Image reading part 14 Image output part 16 Image processing part 18 Control part 26 Operation panel 30 HDD (storage means)
34 Power switch 36 USB I / F
38 USB memory

Claims (12)

Storage means for storing data in the data storage area and storing management information of the data in the data management area;
Management information updating means for updating the management information in the data management area in accordance with the writing and erasure processing of the data in the data storage area of the storage means;
A storage medium that is detachably provided in the operation state of the apparatus and capable of writing and reading data by detecting attachment;
Including an information processing device that can be operated by an on operation of a power switch and that stops operation by an off operation,
When the power switch is turned off, the data stored in the data storage area of the storage means is written to the recording medium, the original data in the data storage area is erased, and the management information update means Data transfer means for updating management information;
Transfer information generating means for generating transfer information of data transferred to the storage medium by the data transfer means and erased from the storage means;
An information processing apparatus comprising:   The information processing apparatus according to claim 1, wherein the storage medium is requested to be mounted when the storage medium is in a non-detection state.   The information processing apparatus according to claim 1, wherein the data transfer unit transfers preset data to the storage medium.   4. The data transfer unit according to claim 1, wherein the data transfer unit generates a folder on the storage medium based on an ID that can identify a device, and writes the data in the folder. The information processing apparatus according to item 1.   The information processing apparatus according to claim 1, wherein the transfer unit divides and writes the data into a plurality of storage units.   The operation of the data transfer unit and the transfer information generation unit is stopped when an off operation of the power switch is detected in a state where an apparatus abnormality is detected. Information processing device. When the power switch is turned on, the data written in the storage medium is transferred to the data storage area of the storage unit based on the transfer information, and the management information update unit transfers the data Data return means for updating the management information stored in the management area;
The information processing apparatus according to claim 1, wherein the information processing apparatus includes:   The information processing apparatus according to claim 7, wherein when the detecting unit is in a non-detecting state, the information processing apparatus requests the mounting of the storage medium.   8. The storage capacity of the data moved to the storage medium is secured in a data storage area of the storage unit based on the transfer information when mounting of the storage medium is not detected. Item 9. The information processing apparatus according to Item 8.   When the attachment of the storage medium is detected, the data restoration means transfers the data written in the storage medium to the data storage area of the storage means based on the transfer information, and the management The information processing apparatus according to claim 9, wherein the management information stored in the data management area is updated by an information update unit.   When the data transfer means creates a folder based on an ID that allows the device to be specified in the storage medium and writes the data in the folder, when the storage medium is loaded, The information according to any one of claims 7 to 10, wherein the data in the folder is transferred to a data storage area of the storage means by detecting the folder based on the ID. Processing equipment.   When the transfer means writes the data in a plurality of storage media in a divided manner, the data restoration means reads the data from each of the plurality of storage media and stores it in the data storage area of the storage means. The information processing apparatus according to any one of claims 7 to 11, wherein writing is performed.

Images