JP2007243840A - Image processing apparatus and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processing apparatus in which a user who has logged in any one image processing apparatus does not feel reduction in operability even without utilizing a virtual subnetwork when the virtual subnetwork is configured to seamlessly handle a terminal other than an operation terminal similarly to the operation terminal by connecting a plurality of image processing apparatuses via a network and exchanging user information or the like via the network beforehand. <P>SOLUTION: When a virtual subnetwork 501 is configured by connecting MFPs 100, 100A and 100B, control is performed to switch a method of user authentication, image listing display or transmission destination setting, for example, for a service that can be similarly offered in any case when logging in the virtual subnetwork 501 or logging in the single MFP 100, for example. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image processing apparatus and a program, and more particularly to an image processing apparatus and a program that can be connected to a network system including a plurality of image processing apparatuses.

  In recent years, it has become common to use image processing apparatuses such as printers, scanners, and facsimile machines connected via a network. When a plurality of image processing apparatuses are connected via a network, in order to further improve the operability of each image processing apparatus, a main user is assigned to each image processing apparatus, and a plurality of image processing apparatuses having the same work group are assigned. The present applicant has already filed patent applications for technologies for grouping and exchanging predetermined information in advance to construct a virtual sub-network (Japanese Patent Application Nos. 2005-160999, 2005-161000, 2005-161001, Japanese Patent Application No. 2005-236931).

JP 2005-209027 A

  When configuring the virtual sub-network, an image processing apparatus (home terminal) to be used mainly is assigned to each user, and the user information and terminal information are stored in advance in the network while storing the user information in the home terminal. It is possible to handle terminals other than the home terminal in the same manner as the home terminal by exchanging via the Internet. However, always being able to access image data stored in other image processing apparatuses connected to the virtual sub-network may cause problems such as information falsification and leakage. While login requires more careful authentication, for example, if the same service is provided when not accessing the virtual sub-network (when logging in to the image processing apparatus alone), the virtual sub-network In the same manner as in the case of accessing, conversely, the operability may be lowered.

  The present invention has been made in view of the above problems, and in configuring a virtual subnetwork, an image processing apparatus in which a user who logs in to the image processing apparatus alone does not feel a decrease in operability, and An object of the present invention is to provide a program that operates on the image processing apparatus.

  In order to solve the above problems, an image processing apparatus according to the present invention is an image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network. Sub-network configuration means for exchanging predetermined information by communication with the other image processing apparatus in advance and configuring a virtual sub-network in which each image processing apparatus and a user identifier are associated with each other; A first login receiving unit that receives a login to the network; and a second login receiving unit that receives a login to a usage mode that does not access the virtual subnetwork, and logs in via the first login receiving unit. The same type of service in the first case and in the second case of logging in via the second login acceptance means. It is characterized by switching the presentation form.

  In the configuration of the present invention, the same applies to the first case where the user is directed to log in to the virtual subnetwork and the second case where the user is directed to log in to the usage mode not accessing the virtual subnetwork. By switching the form of providing the same type of service that can be provided to the user, the user who logs in to the image processing apparatus alone does not feel a decrease in operability when configuring the virtual sub-network.

  As one specific example of the service, the service is a process of transmitting image data, and the setting method of the transmission destination can be switched between the first case and the second case. More specifically, in the first case, a user identifier associated with another image processing apparatus acquired by the predetermined information exchange is set as a transmission destination, and in the second case, The transmission destination setting method can be switched to set the transmission destination identifier as the transmission destination. When using a virtual sub-network, user identifiers and destination information are also exchanged by exchanging information during the configuration of the virtual sub-network, and the information can be used while accessing the virtual sub-network. In such a case, the use of such information is limited, and therefore, setting a transmission destination identifier as a transmission destination is intended to suppress a decrease in operability.

  The service is a process of presenting image data stored in a storage unit provided in an image processing apparatus, and the image data presentation method is switched between the first case and the second case. You can also. More specifically, in the first case, the image data stored in another image processing device constituting the virtual sub-network is presented, and in the second case, in the other image processing device. If the configuration is such that the presentation method of the image data is switched so as not to present the stored image data, it is possible to suppress the occurrence of security problems when configuring the virtual sub-network.

  The service is a user authentication process at the time of login, and the user authentication method can be switched between the first case and the second case. More specifically, the user authentication information may be different between the first case and the second case.

  In the first case, when the user authentication cannot be performed only with the user authentication information stored in the own device, the user authentication is performed with reference to the user authentication information stored in another device connected via the network. In the second case, the user authentication method may be switched so that the user authentication is performed with reference to only the user authentication information stored in the own device.

  In the first case, when the user authentication cannot be performed only with the user authentication information registered in the own device, the user authentication is performed with reference to the user authentication information registered in another device connected via the network. In the second case, the user authentication method may be switched so that the user authentication is performed with reference to only the user authentication information registered by the own device.

  The first login accepting unit is configured to always accept an input to switch to the virtual subnetwork when the user who has logged in via the second login accepting unit can log in to the virtual subnetwork. If so, the operability is further improved.

  Note that the program according to the present invention is a program that operates in an image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network. Predetermined information exchange is performed by communicating with a device in advance, and a sub-network configuration process that configures a virtual sub-network in which each image processing device and a user identifier are associated with each other and a log-in to the virtual sub-network are accepted In the service providing process, a first login accepting process, a second log-in accepting process for accepting a login to a use form that does not access the virtual subnetwork, and a service providing process for providing a service are executed. In the first case of logging in through the first login acceptance process, and before In the case of the second logging via a second log receiving process is characterized by switching the form of providing the same kind of services.

  The program here includes not only a program that can be directly executed by a processor such as a CPU, but also a program in a source program format, a compressed program, an encrypted program, and the like. The program according to the present invention may be distributed to the market while being recorded on various recording media, or may be supplied to the market via various networks such as the Internet.

  According to the image processing apparatus of the present invention, when configuring a virtual sub-network, there is an effect that it is possible to prevent a user who logs in to the image processing apparatus alone from deteriorating operability.

Embodiments of the present invention will be described below with reference to the drawings.
(Embodiment 1)
(1) Configuration of Image Processing System FIG. 1 is a diagram for explaining the configuration of an image processing system in an embodiment of the present invention. The image processing system 1 is configured by connecting MFPs (Multi Function Peripherals) 100, 100A, 100B, 100C, and the like to a network 500. In the present embodiment, a case where MFPs 100, 100A, 100B, and 100C have the same configuration and function will be described. Therefore, the MFP 100 will be described as an example unless otherwise specified.

  The MFP 100 is an image processing apparatus that integrates functions such as copying, network printing, scanner, FAX, and document server. Sometimes called a multifunction device. In this embodiment, an MFP will be described as an example. However, as long as the apparatus has a function of processing an image, for example, a scanner, a printer, a facsimile, a personal computer that generates image data, or the like can be used. .

  The network 500 of the present embodiment is a local area network (LAN), and the connection form may be wired or wireless. The network 500 is not limited to a LAN, but may be a wide area network (WAN) such as the Internet, a network using a general public line, or the like.

  In the present embodiment, the work groups set in MFP 100, MFP 100A, and MFP 100B are the same, and virtual sub-network 501 is configured by these three MFPs. The number of image processing apparatuses such as MFPs included in the image processing system 1 and the number of image processing apparatuses constituting the virtual sub-network 501 are arbitrary. For the configuration method of the virtual sub-network, etc., refer to the contents of other patent applications filed by the applicant of the present application described as the background art.

(2) Configuration of MFP 100 FIG. 2 is a block diagram illustrating an example of a hardware configuration of MFP 100. FIG. 3 is a diagram illustrating an example of the appearance of the MFP 100. As shown in FIG. 2, the MFP 100 includes a CPU 20, a ROM 21 that records programs executed by the CPU 20, a RAM 22 for loading programs to be executed and for storing data during program execution, and nonvolatile data. A hard disk drive (HDD) 23 for storing data and a communication interface (IF) 16 for connecting the MFP 100 to the network 500. An operation unit 11 and a display unit 12 are further connected to the CPU 20. Further, the scanner unit 13, the printer unit 14, the document feeder 17, the paper feeding device 18, and the FAX processing unit 24 operate under the control of the CPU 20.

  The CPU 20 loads an image processing program recorded in the ROM 21 or the like into the RAM 22 and executes it. The recording medium for storing the image processing program is not limited to the ROM 21 and may be a rewritable nonvolatile semiconductor memory such as a flash ROM. In addition, various disks such as flexible disks, MO, MD, and DVD, IC cards (including memory cards), and the like can be used as appropriate. When a rewritable nonvolatile memory such as a flash ROM is used, the image processing program can be updated by downloading a program from an information processing apparatus such as another MFP that can be connected via the network 500.

  The operation unit 11 is an input device such as various buttons and a touch panel for receiving an operation input by a user of the MFP 100. As the display unit 12, for example, a liquid crystal display device, an organic EL display panel, or the like can be used. If a touch panel made of a transparent member is provided as one of the operation units 11, an instruction to a button displayed on the display unit 12 can be detected by placing the touch panel on the display unit 12.

  The scanner unit 13 photoelectrically reads an image such as a photograph, a character, a picture, or a chart drawn on a document, and generates digital image data (here, density data representing RGB or black density). The image data obtained in this way is used for printing in the printer unit 14. Alternatively, it is converted into a file in a format such as TIFF, PDF, JPEG, etc. and stored in the hard disk 23. The image file can be transmitted to another MFP via the communication interface 16, or can be faxed via the fax processing unit 24. The document feeder 17 is provided on the upper part of the main body of the MFP 100 (see FIG. 3), and is used to sequentially send one or more originals to the scanner unit 13.

  The printer unit 14 prints an image read by the scanner unit 13, an image data image transmitted from an information processing apparatus such as another MFP, a received FAX image, etc. on a recording sheet such as paper or film. To do. The paper feeding device 18 is provided at the lower part of the main body of the MFP 100 and is used to supply a recording sheet suitable for an image to be printed to the printer unit 14. The recording sheet on which the image is printed by the printer unit 14 is discharged to a paper discharge tray 19 (see FIG. 3).

  The communication interface 16 includes a device for exchanging data with other MFPs via the network 500 and a device for performing FAX transmission / reception via a telephone line. As the communication interface 16, for example, a NIC (network interface card), TA (terminal adapter), or the like can be used.

(3) Configuration of Virtual Subnetwork 501 In virtual subnetwork 501 in the present embodiment, in each of MFPs 100, 100A, and 100B, users who mainly use it are set in advance. Therefore, each of MFPs 100, 100A, and 100B stores registered user information for registering users who are mainly used. The registered user information will be described later, but includes at least a user identifier for identifying the user.

  In the present embodiment, the MFP in which the registered user information of the user is stored is referred to as “home terminal”. For example, if registered user information of user “David” is stored in MFP 100, the home terminal of user “David” is MFP 100. Note that the registered user information is stored in each of MFPs 100, 100A, and 100B in order to improve operability by preliminarily defining users to be used in advance, and for registered users who do not store registered user information. Use is not prohibited.

  In the present embodiment, MFP 100C is assumed to have a different work group from other MFPs, and therefore is not recognized as an image processing apparatus constituting virtual sub-network 501. That is, when configuring the virtual sub-network 501 in the present embodiment, work group information is exchanged by broadcast packets, and the virtual sub-network is configured by image processing apparatuses in the same work group.

  Here, it is assumed that MFP 100A and 100B are already connected to network 500 and virtual sub-network 501 is configured, and MFP 100 is newly connected to network 500. The MFP 100 needs to be set with apparatus identification information for identifying the MFP 100 and the above-described registered user information. When device identification information and registered user information are set in MFP 100, MFP 100 transmits the device identification information and registered user information to other MFPs 100A and 100B. Thereby, the virtual sub-network 501 is constructed in the MFPs 100, 100A, 100B.

  Hereinafter, specific processing contents when the virtual sub-network 501 is constructed will be described using the MFP 100 as an example. FIG. 4 is a flowchart for explaining processing contents of the newly connected MFP 100 and other MFPs.

  Prior to the construction of the virtual sub-network 501, terminal information is first registered in the MFP 100 (S101). The terminal information includes device identification information for identifying MFP 100 and a work group name. The device identification information is preferably location information in the network 500 assigned to the MFP 100, and for example, an IP address can be used. Next, registered user information of a user who uses MFP 100 as a home terminal is input to MFP 100 (S102). When a plurality of users use MFP 100 as a home terminal, registered user information of each of the plurality of users is input.

  The registered user information includes a user identifier for identifying the user. The user identifier may be unique information for each user, such as a user ID consisting of characters or symbols, a user name, and the user name is used as the user identifier in the present embodiment. The registered user information includes personal information for each user in addition to the user identifier. The user personal information is information related to the user and includes, for example, accompanying information, address book, panel setting information, authentication information, and history information. When the virtual sub-network 501 is configured, the user personal information can be logged in to access the virtual sub-network 501 and operate other MFPs in the same manner as the home terminal, improving operability. Used to make it.

  The terminal information and the registered user information are input by the operation of the operation unit 11 by the user. Specifically, an input screen for terminal information and an input screen for registered user information are displayed on the display unit 12, and the user operates the operation unit 11 according to these screens to input terminal information and registered user information. The terminal information is normally registered by the terminal manager, whereas the registered user information is usually input by the user.

  Thereafter, it is determined whether or not the initial setting in the MFP 100 has been completed (S103). If the initial setting has not been completed, the process returns to step S101. If the initial setting has been completed (S103: YES), the work group name is transmitted by broadcast to other terminals other than the MFP 100 (S104).

  When the other terminal connected to the network 500 such as the MFP 100A receives the work group name transmitted from the MFP 100 (S201: YES), it is determined whether or not the work group name is the same as the work group name set in the own device. (S202: YES), the terminal information set to the own device and the registered user information are transmitted to the MFP 100 (S203). Since MFP 100C has a different work group name, MFP 100C does not transmit its own terminal information or the like to MFP 100. In this way, the virtual sub-network 501 is constructed between terminals having the same workgroup name.

  On the MFP 100 side, information transmitted from terminals (MFP 100A, MFP 100B) in the same work group is received (S105), and user data is generated (S106). Then, the terminal information registered in the MFP 100 and the registered user information in the initial setting are transmitted (S107). On the other terminal (MFP 100A, MFP 100B) side, when the terminal information transmitted from the MFP 100 and the registered user information are received (S204: YES), user data is generated and added (S205). In this embodiment, user data respectively generated in MFP 100 and other terminals is a collection of terminal information and user identification information of MFPs 100, 100A, and 100B, and includes terminal information and user identifiers for each terminal. . User data generated in each MFP is stored in the hard disk. Through the above processing, the same user data is stored in MFPs 100, 100A, and 100B.

  In the present embodiment, terminal information is registered and registered user information is input in the initial setting process executed by MFP 100. However, MFP 100 is already connected to network 500, and a user is added. In this case, the same process as the initial setting process is executed. In this case, the terminal information registration process in step S101 is not necessary.

  The initial setting process is not limited to when the MFPs 100, 100A, and 100B are connected to the network 500, and may be executed after the MFPs 100, 100A, and 100B are turned on, or executed at predetermined time intervals. You may make it do. In this way, for example, the MFP 100 can acquire the registered user information of the user newly registered in the other MFPs 100A and 100B and store the latest user data. In this case, instead of the initial setting processing in steps S101 to S103 of MFP 100 shown in FIG. 4, the transmission of registered user information is requested to terminals having the same work group name, such as other MFPs 100A and 100B.

  In response to this transmission request, the other MFPs 100A and 100B execute the processing shown in FIG. 4 and transmit the registered user information stored in its own hard disk in response to the transmission request received from the MFP 100. Thus, even if the registered user information stored in other MFPs 100A and 100B is changed, user data is generated from the changed registered user information and stored in hard disk 23 of MFP 100.

  FIG. 5 is a diagram for describing registered user information and user data. FIG. 5A is a diagram illustrating an example of registered user information registered in the MFP 100, and FIG. 5B is a diagram illustrating an example of registered user information registered in the MFP 100A. FIG. 5C illustrates an example of registered user information registered in the MFP 100B. FIG. 5D shows an example of user data.

  The registered user information according to the present embodiment includes a number, a user identifier, and user personal information. The user personal information includes accompanying information, an address book, panel setting information, authentication information, and history information. The accompanying information is information unique to each user, such as a department name to which the user belongs, an e-mail address assigned to the user, face image data obtained by photographing the user's face, and the like.

  The address book is information in which destination information registered and transmitted by the user is collected, and includes, for example, a user identifier, an e-mail address, a facsimile number, and the like of the destination user. An initial setting of the transmission method for each registered user (for example, designation of whether the transmission method as the initial setting is an e-mail or a FAX transmission) may be included.

  The panel setting information is screen information customized by the user. The authentication information is information used for user authentication at the time of login to the virtual sub-network 501, and here, a password is used. In MFP 100 and the like according to the present embodiment, login when using virtual sub-network 501 and login to the MFP alone can be performed separately, and authentication information used for login to virtual sub-network 501 is as follows. The password used when logging into the MFP alone is managed separately.

  In the case of logging in to the virtual sub-network 501, face image data can be used as authentication information. For biometric authentication, fingerprint information, voiceprint, iris, vein pattern, etc. are used as authentication information. The history information is data generated in the MFPs 100, 100A, 100B when the user instructs the MFPs 100, 100A, 100B to execute processing, and includes the contents of the instructions. The content of the instruction includes, for example, an e-mail transmission, a transmission destination, and a transmission content if the instruction is an e-mail transmission processing instruction. Note that the user data shown in FIG. 5D includes a number, a user identifier, and device identification information of the home terminal.

  As described above, in MFPs 100, 100A, and 100B having the same work group name, the same user data is generated and stored. Thereby, a virtual sub-network 501 composed of MFPs 100, 100A, and 100B is formed. When the virtual sub-network 501 is formed, a user who uses any one of the MFPs 100, 100A, and 100B as a home terminal can be specified based on the user data. Therefore, a user other than the home terminal can be selected using the user data. When the user operates, the user personal information recorded in the home terminal can be taken into the terminal.

(4) Login to the virtual sub-network 501 and login to the MFP alone In order to use the virtual sub-network 501 as described above, a login operation is required. Specifically, the login operation is to input user identification information. However, always allowing login to the virtual sub-network 501 is that confidential information is stored in another MFP 100A, for example. In some cases, this may lead to a decrease in security.

  Therefore, in the present embodiment, by changing the forms of provision of various services between login to the virtual sub-network 501 and login to a single unit such as the MFP 100 when login to the virtual sub-network 501 is not intended. To improve the operability. FIG. 6 is a diagram showing an example of an initial screen displayed on the display unit 12 when a virtual subnetwork is constructed in the MFP 100 or the like according to the present embodiment. This initial screen is displayed, for example, when the MFP 100 is powered on. When a user logs in to the virtual sub-network 501 and uses a service using information input when the virtual sub-network 501 is constructed or image information stored in another MFP configuring the virtual sub-network 501 Presses the “Virtual Subnetwork Login” button 210.

  On the other hand, there is a case where the user logs in to the MFP 100 alone, such as when the user does not intend to access the virtual sub-network login 501 or when the registered user information is not registered in any MFP. In this case, the “login to this MFP alone” button 220 is pressed. When the button 220 is pressed, a user authentication process for logging in to the MFP alone is executed. FIG. 7 is a diagram illustrating an example of a user authentication screen displayed on the display unit 12 when the button 220 is pressed.

  The user can log in to the MFP 100 alone by inputting the user name and password on the screen as shown in FIG. FIG. 8 is a diagram showing an example of the contents of a user authentication table that is provided individually for each MFP 100, 100A, and 100B when logging in to the MFP alone. The user with the user name “David” can set a password different from the password for logging in to the virtual sub-network 501.

  Next, a login operation to the virtual subnetwork 501 when the “virtual subnetwork login” button 210 is pressed on the initial screen shown in FIG. 6 will be described. Hereinafter, a terminal (any one of MFPs 100, 100A, and 100B) on which the virtual subnetwork user performs a login operation is referred to as an operation terminal. Here, in order to simplify the description, a case where a user with a user identifier “Julie” (the home terminal is MFP 100A) performs a login operation on MFP 100 will be described. In this case, MFP 100 becomes an operation terminal.

  FIG. 9 is a flowchart illustrating an example of a flow of processing executed in the operation terminal and the home terminal according to the present embodiment. The flowchart on the left side of the figure shows the flow of input processing on the operation terminal side, and the flowchart on the right side shows the flow of user user personal information management processing on the home terminal side. In the login operation to the virtual sub-network 501 in the present embodiment, first, the user name of the user with the user identifier “Julie” is input on the MFP 100 as the operation terminal (step S301). If a user name has been input (S301: YES), the process proceeds to step S302, and if not, a standby state is entered. That is, on the operation terminal side, first, the process from step S302 is executed on condition that a user name as an example of a user identifier is input.

  In step S302, it is determined from the input user identifier whether the operation terminal is the user's home terminal. That is, the user identifier stored in the hard disk 23 of the operation terminal is searched using the user identifier, and the device identification information stored in association with the user identifier is the device identification information assigned to the own device. Judge whether or not. If it is the user's home terminal, the process proceeds to step S305, and if not, the process proceeds to step S303. Here, since MFP 100 is not the home terminal of the user with the user identifier “Julie”, the process proceeds to step S303.

  In step S303, the home terminal of the user with the user identifier “Julie” is requested to transmit user personal information. This transmission request includes at least a user identifier. Therefore, the user identifier is transmitted using the device identification information of the home terminal, here, the IP address of MFP 100A.

  On the other hand, in MFP 100A as the home terminal, it is determined whether or not a transmission request for user personal information has been received (step S401). If a transmission request is received, the process proceeds to step S402, and if not, the process ends. In step S402, the registered user information stored in the hard disk of MFP 100A is searched using the user name included in the received transmission request, and the user personal information stored in association with the user identifier is extracted. . Then, the extracted user personal information is transmitted to the operation terminal that has transmitted the transmission request (step S403).

  The operation terminal is in a standby state until the user personal information is received from the home terminal in response to the transmission request for the user personal information transmitted in step S303 (S304: NO). When the user personal information is received, step S306 is received. (S304: YES). If the operation terminal matches the home terminal (S302: YES), the registered user information stored in hard disk 23 of MFP 100, which is the operation terminal, is searched and stored in association with the input user identifier. The user personal information is read (S305). In step S306, the user personal information read in step S305 or the user personal information received in step S304 is set for the login user and stored in the RAM 22.

  Next, the login user is prompted to input authentication information by screen display or voice output, and is set in a standby state until the authentication information is input (S307: NO). If the authentication information is input (S307: YES), the input authentication information is compared with the authentication information of the user personal information stored in the RAM 22 in step S306, and if both match, the authentication is OK (S308). : YES) In the present embodiment, if the two do not match (S308: NO), the process returns to step S301.

  The user authentication process (S309) may be executed on the home terminal. In this case, both the user identifier and the authentication information are input in step S301, and the user identifier and the authentication information are combined and transmitted to the home terminal in step S303. In step S402, MFP 100A as the home terminal compares authentication information in the extracted user personal information with authentication information included in a transmission request from the operation terminal, and determines whether authentication is OK. In step S403, the determination result is transmitted to the operation terminal.

  As described above, according to the present embodiment, when the virtual sub-network is configured by switching the user authentication method between the login to the virtual sub-network 501 and the login to the MFP alone, the security is reduced. It prevents the invitation.

(5) Switching of Destination Setting Service Hereinafter, the processing of the flowchart of FIG. 9 will be further described. When user authentication to the virtual sub-network 501 is OK on the operation terminal side and login is permitted (S308: YES), panel display processing is executed on the operation terminal side (S309). FIG. 10 is a flowchart illustrating an example of the contents of the panel display process.

  In the panel display process in the state of logging in to the virtual sub-network 501, a screen customized according to the panel setting information included in the user personal information is displayed on the display unit 12 (S501). In the panel display processing, it is normal to determine the screen to be displayed according to the panel setting information. For example, when logging in to the MFP alone, the panel setting information set in advance at the time of shipment is referred to. In the state where the user is logged in to the virtual network 501, the display screen is determined by switching to the panel setting information included in the user personal information.

  For example, on the copy screen, the copy screen displayed according to the copy information of the initially set panel setting information is switched to the copy information included in the panel setting information of the user personal information, and the copy screen is displayed according to the switched copy information. . The copy information is, for example, print condition setting information such as the magnification “equal magnification”, the number of copies “2”, and the sort “valid”.

  At this time, MFP 100A that is the home terminal may not have the function that MFP 100 that is the operation terminal has, for example, the case where the sorter is attached to MFP 100A but not to MFP 100. Even if sort “valid” is displayed on the copy screen, the MFP 100 does not have a sort function, so the copy screen and the function that can be executed by the MFP 100 become inconsistent. For this reason, in the copy screen, of the information included in the panel setting information, the display mode is set to other display in order to indicate that it is impossible to accept instructions for functions that cannot be realized by the operation terminal. Make it different. The display mode for indicating that it is impossible to accept an instruction can lower the density of a display related to sorting as compared to other displays, for example.

  The panel display process includes display of another service providing screen in addition to the display of the copy screen exemplified above. For example, it includes an address book display that is displayed when a transmission destination (other MFP user, facsimile, e-mail, network printer, file server, groupware server) is designated. In the panel display process, when a destination is designated, the address book included in the user personal information stored in the RAM 22 in step S306 in the flowchart of FIG.

  FIG. 11 is a diagram illustrating an example of a screen displayed on the display unit 12 for setting a transmission destination in a state where the user is logged in to the virtual network 501. In the example shown in the figure, an image file list display area 121 and a destination list display area 122 are provided on the display unit 12, and a file designated in the image file list display area 121 (in the example shown in FIG. The file “jpg” is selected.) can be selected from the user names displayed in the destination list display area 122 and designated. That is, when logged in to the virtual network 501, the destination setting can be specified by the user name.

  As described above, when the user logs in to the virtual network 501, the destination can be set only by specifying the user name. The user personal information exchanged between the MFPs 100, 100A, and 100B for the user registered in the virtual network 501 This is because the address book information is included. Therefore, for example, when the login user to the MFP 100 alone similarly designates the transmission destination by specifying the user name, the user name is entered and then the individual MFP is inquired and the same is used. This must be done for all MFPs belonging to the domain, and it takes a lot of time to complete the destination setting.

  In the present embodiment, when logging in to the MFP alone, for example, when setting the transmission destination of image data obtained by reading a document with the scanner unit 13, the state where the user is logged in to the virtual network 501. By using different setting methods, operability deterioration is prevented. FIG. 12 is a diagram illustrating an example of a transmission destination setting screen when logging in to the MFP alone. As in the past, the transmission method and the transmission destination are designated.

  The screen of FIG. 12 includes a destination information input box 300, a button for specifying a transmission method, that is, a button 310 to be pressed when specifying transmission by e-mail as the transmission method, and FTP (File Transfer) as the transmission method. A button 320 to be pressed when specifying (protocol) and a button 330 to be pressed when specifying FAX transmission as a transmission method are provided.

  When the e-mail button 310 is pressed, the user inputs a mail address in the transmission destination information input box 300 as transmission destination information. When the FTP button 320 is pressed, the user inputs an IP address as transmission destination information in the transmission destination information input box 300. When the FAX transmission button 330 is pressed, the user inputs a FAX number as transmission destination information in the transmission destination information input box 300.

  Returning to the flowchart of FIG. 10, when the user logs in to the virtual network 501, when the function of the MFP 100 as the operation terminal is executed in response to the panel display (S501), the history information is based on the execution result. Generated. This history information is added to the history information of the user personal information stored in the RAM 22 of the MFP 100 that is the operation terminal (step S502).

  In subsequent step S503, it is determined whether or not a logout instruction has been issued. If there is a logout instruction, the process proceeds to step S506. Until there is a logout instruction, operation acceptance by the user (S507) and panel display (S501) based on the instruction by the login user “Julie” are repeatedly executed. The logout instruction in this embodiment is (1) when a logout button (not shown) arranged on the operation unit 11 or displayed on the display unit 12 is pressed (S503), (2) an operation terminal. Either an instruction to turn off the power of MFP 100 is input (S504), or (3) an operation input is not performed for a predetermined time after logon (S505).

  When there is a logout instruction, the screen displayed on the display unit 12 is set as an initial screen, all parameters (including panel setting information) set in the MFP 100 are set to initial values (S506), and the flowchart of FIG. Return. Then, it is determined whether or not the user personal information stored in the RAM 22 has been changed by the panel display process (S310). Normally, the user personal information is often changed because history information is added as a result of some operation, but when the user personal information is not changed, such as when logging out without any operation (S310). : NO), the user personal information stored in the RAM 22 of the operation terminal is deleted (S314), and the process is terminated. By performing the information erasing process in this way, it is possible to enhance security, such that the personal information of the previously logged-in user is not used for the next logged-in user. In this case, it is preferable to notify logout to the home terminal (represented by a connector C in FIG. 9).

  The user personal information may be changed not only by changing the history information but also by changing the setting contents of the copy screen display via the panel display. In this case, the panel setting information of the user personal information is changed. Also, the address book can be changed via the panel display. For example, adding a new destination, changing or deleting an existing destination. Changing the address book changes the address book of the user personal information.

  If the user personal information has been changed (S310: YES), it is determined whether or not it is the login user's home terminal (S311). If it is the home terminal (S311: YES), the home terminal (in this case, the operation terminal) The personal user information stored in the MFP 100 is changed (S312).

  If the operation terminal is not a home terminal (S311: NO), an instruction to change user personal information is transmitted to the home terminal (in this case, MFP 100A) (S313). This change instruction includes the user identifier “Julie” of the logged-in user and the changed user personal information.

  MFP 100A, which is a home terminal, determines whether or not a change instruction for changing user personal information has been received (S404). When the transmission request is received (S404: YES), the registered user information stored in the hard disk is rewritten using the user identifier and the changed user personal information included in the received change instruction (405). More specifically, the user personal information of the registered user information including the user identifier included in the change instruction among the registered user information stored in the hard disk of MFP 100A is rewritten to the user personal information included in the change instruction.

  Thereby, the change of the user personal information performed by MFP 100 as the operation terminal can be reflected in the registered user information stored in MFP 100A as the home terminal. Therefore, even when the MFP 100, 100A, or 100B is next logged in to the virtual sub-network 501, panel display processing is executed based on the changed user personal information. If an instruction to turn off the power is input (see S504 in FIG. 10), the MFP 100, which is an operation terminal, does not immediately turn off the power but instead executes the processing up to S314 in FIG. Disconnect.

(Modification)
Although the embodiment of the present invention has been described above, the content of the present invention is not limited to the specific examples described in the embodiment, and for example, the following modifications may be implemented. it can.

  (1) In the above-described embodiment, the user personal information is erased from the RAM 22 when logging out on the operation terminal (S314 in FIG. 9), but temporarily stored in the hard disk 23 and the same user logs in again. In such a case, the temporarily stored personal user information may be read out. For example, when a predetermined time elapses due to a sudden meeting or the like and the logout process is performed (see S505 in FIG. 10), a quick return can be achieved. In this case, if the user personal information temporarily stored is deleted after a predetermined time set longer than the above S505, the security weakening can be prevented.

  (2) In the above embodiment, as a specific example of switching the service provision mode between the case of login to the virtual sub-network 501 and the case of login to the MFP alone, user authentication and image data transmission at the time of login are described. However, the switching process is not limited to these, and information exchange is performed via the network when the virtual subnetwork is configured, and user personal information for each user is included in the exchanged information. (The content of user personal information is not limited to the above.) In the case of login to a single MFP, in principle, information is not exchanged with an image processing apparatus such as another MFP via a network. Depending on the conditions, there are various cases where switching the service provision form contributes to improving the operability for the user.

  For example, when displaying a list of image data as illustrated in FIG. 11, images stored in each MFP with the same work group name can be presented in a situation where the user logs in to the virtual sub-network 501. In this case, not only the image stored in the home terminal, but also the image waiting for transmission to the home terminal or the logged-in user, or the image temporarily stored in another MFP can be presented. is there. When it is not preferable to present all images stored in all MFPs constituting the virtual sub-network 501, it is possible to present only when the owner name of the image file matches the user name, for example.

  On the other hand, when the user logs in to the MFP alone, it is assumed that the user is assumed to be used within the range of the MFP itself, so images stored in other MFPs in the virtual sub-network 501 are not presented. By presenting only the images that exist in the MFP that has logged in as a single unit, it is possible to select images more easily and improve operability in addition to preventing security degradation due to extra presentation. To do.

  (3) Even when logging in to the MFP alone, it may be necessary to log in to the virtual sub-network 501. In order to deal with such a case, even when logged in to the MFP alone, for example, in the case of a user registered in the virtual sub-network 501, a button for jumping to the login screen for the virtual sub-network is displayed on the display unit 12. It is preferable to display the above. FIG. 13 is a diagram illustrating an example of a display mode of the display unit 12 in this case. As shown in the figure, even when logged in to the MFP alone, as long as the logged-in user is a user who can log in to the virtual subnetwork to which the MFP belongs, the display unit 12 is instructed to switch to the virtual subnetwork login. If the button 340 to be displayed is always displayed, the operability is further improved. When the button 340 is pressed, the authentication process described with reference to FIG.

  (4) In the above embodiment, switching of a screen used for user authentication and switching of user authentication information between the case of login to the MFP alone and the case of login to the virtual sub-network 501 have been described. Various other methods of switching the authentication method are conceivable, including the case where the authentication server is used.

  For example, in the case of login to the virtual sub-network 501, if user authentication cannot be performed only with the user authentication information stored in the own device, other devices (including other terminals and authentication servers) connected via the network The user authentication is also performed by referring to the user authentication information stored in (.), And when logging in to the MFP alone, the user authentication is performed by referring only to the user authentication information stored in the own machine. The authentication method can be switched.

  In the case of login to the virtual sub-network 501, if user authentication cannot be performed only with the user authentication information registered by the own device, the user authentication information registered by another device connected via the network is also referred to. In the case of login to the MFP alone, the user authentication method can be switched so that the user authentication is performed by referring only to the user authentication information registered in the own machine. .

  The present invention can be applied to an image processing apparatus such as an MFP.

It is a figure for demonstrating the structure of the image processing system in embodiment of this invention. 2 is a block diagram illustrating an example of a hardware configuration of MFP 100. FIG. 2 is a diagram illustrating an example of the appearance of an MFP 100. FIG. 10 is a flowchart for explaining processing contents of MFP 100 and another MFP newly connected. It is a figure for demonstrating registration user information and user data. 6 is a diagram showing an example of an initial screen displayed on the display unit 12 when a virtual sub-network is constructed in the MFP 100 or the like. FIG. 6 is a diagram illustrating an example of a user authentication screen displayed on the display unit 12 when a button 220 is pressed (when logging into an MFP alone). FIG. 6 is a diagram illustrating an example of the contents of a user authentication table when logging into an MFP alone. FIG. It is a flowchart which shows an example of the flow of the process performed in an operation terminal and a home terminal. It is a flowchart which shows an example of the content of a panel display process. 6 is a diagram illustrating an example of a screen displayed on the display unit 12 for setting a transmission destination in a state where the user is logged in to the virtual network 501. FIG. FIG. 6 is a diagram illustrating an example of a transmission destination setting screen when logging into an MFP alone. It is a figure which shows an example of the display mode of the display part 12 at the time of making it display on the display part 12 the button which jumps to the login screen to a virtual subnetwork.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 Operation part 12 Display part 121 Image file list display area 122 Transmission destination list display area 13 Scanner part 14 Printer part 16 Communication interface 17 Document feeder 18 Paper feeder 19 Tray 20 CPU
21 ROM
22 RAM
23 Hard Disk Drive (HDD)
24 FAX processing unit 100 to 100C MFP
210 Virtual subnetwork login designation button 220 Login designation button for MFP alone 250A User identifier input box 260A Password input box 300 Destination information input box 340 Virtual subnetwork login switching instruction button 500 Network (LAN)
501 Virtual subnetwork

Claims (11)

An image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network,
Subnetwork configuration means for exchanging predetermined information with the other image processing apparatus in advance by communication and configuring a virtual subnetwork in which each image processing apparatus and a user identifier are associated with each other,
First login accepting means for accepting login to the virtual sub-network;
A second login accepting means for accepting a login to a usage mode that does not access the virtual sub-network,
The mode of providing the same type of service is switched between a first case of logging in through the first login receiving unit and a second case of logging in through the second login receiving unit. Image processing device. The service is image data transmission processing,
The image processing apparatus according to claim 1, wherein a transmission destination setting method is switched between the first case and the second case. In the first case, a user identifier associated with another image processing apparatus acquired by the predetermined information exchange is set as a transmission destination,
The image processing apparatus according to claim 2, wherein, in the second case, the destination setting method is switched so as to set the destination identifier as the destination. The service is a process of presenting image data stored in a storage unit provided in the image processing apparatus,
The image processing apparatus according to claim 1, wherein the image data presentation method is switched between the first case and the second case. In the first case, the image data stored in another image processing device constituting the virtual sub-network is presented,
The image processing apparatus according to claim 4, wherein in the second case, the image data presentation method is switched so as not to present image data stored in another image processing apparatus. The service is a user authentication process at the time of login,
The image processing apparatus according to claim 1, wherein a user authentication method is switched between the first case and the second case. The image processing apparatus according to claim 6, wherein user authentication information is different between the first case and the second case. In the first case, when the user authentication cannot be performed only with the user authentication information stored in the own device, the user authentication is performed with reference to the user authentication information stored in another device connected via the network. Done
The image processing according to claim 6 or 7, wherein, in the second case, the user authentication method is switched so that the user authentication is performed by referring only to the user authentication information stored in the own device. apparatus. In the first case, when the user authentication cannot be performed only with the user authentication information registered by the own device, the user authentication is performed with reference to the user authentication information registered by another device connected via the network. Done
The image processing according to claim 6 or 7, wherein in the second case, the user authentication method is switched so that the user authentication is performed by referring only to the user authentication information registered by the own device. apparatus. The first login accepting means includes:
The user who logs in via the second login receiving means can always receive an input for switching to the virtual subnetwork when the user can log in to the virtual subnetwork. An image processing apparatus according to claim 1. A program that is connectable to a network and that operates in an image processing apparatus that can communicate with at least one other image processing apparatus connected to the network,
Subnetwork configuration processing for exchanging predetermined information with the other image processing apparatus in advance by communication and configuring a virtual subnetwork in which each image processing apparatus and a user identifier are associated with each other,
A first login acceptance process for accepting a login to the virtual sub-network;
A second login acceptance process for accepting a login to a usage mode that does not access the virtual sub-network;
A service providing process for providing a service,
In the service providing process, the same type of service is provided in the first case of logging in through the first login acceptance process and in the second case of logging in through the second login acceptance process. A program characterized by switching.

Images