JP2009089162A - Facsimile machine - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent image data, received in confidential communication and stored within a facsimile machine, from being accumulated and left untreated within the facsimile machine, by enabling the image data to be released by a manager. <P>SOLUTION: When there is a connection request from a personal computer of a manager via a network (S60:Y) and a password is OK (S63:Y), by sending a printing command from the personal computer (S65:Y), image data received in confidential communication can be printed (S73). Furthermore, by sending a deleting command from the personal computer (S68:Y), the image data can also be deleted from an HDD of a multi-function machine as a facsimile machine (S75). Through such processes, even if a regular recipient is absent, a storage region of the HDD is opened. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a facsimile apparatus that receives image data transmitted through a public communication line by a facsimile transmission procedure and prints an image based on the image data on a recording medium. The present invention relates to a facsimile apparatus capable of receiving a message.

Conventionally, in a facsimile apparatus that receives image data transmitted through a public communication line by a facsimile transmission procedure and prints an image based on the image data on a recording medium, the image data is based on confidential communication. In some cases, it is stored in a memory without printing. That is, such confidential communication image data is transmitted with a password or the like, and the facsimile machine on the receiving side can print the stored image data when the password is input. Also, it has been proposed that such a facsimile apparatus that handles confidential communication is configured so that the password can be assigned to each original so that only authorized recipients who know the password can print the original. (For example, refer to Patent Document 1).
Japanese Patent Laid-Open No. 11-187242

  However, in this case, if a legitimate receiver is absent for a long time, for example, on a business trip abroad, a large amount of image data that can be printed only by the receiver may be accumulated in the facsimile apparatus, and the memory may be compressed. Therefore, the present invention allows the administrator to release the image data received in confidential communication and stored in the facsimile apparatus, so that the image data can be left as it is stored in the facsimile apparatus. It was made for the purpose of suppression.

  In order to achieve the above object, a facsimile apparatus of the present invention comprises a receiving means for receiving image data transmitted via a public communication line by a facsimile transmission procedure, and a receiver based on the image data received by the receiving means. Printing means for printing an image on a recording medium, recipient authentication means for authenticating the recipient, and storing the image data when the image data received by the receiving means is based on confidential communication, and the image data Storage means that enables printing of the image data, deletion of the image data, or movement of the image data when the recipient is authenticated by the recipient authentication means, and authentication of the administrator An administrator authentication unit to perform, and when the administrator is authenticated by the administrator authentication unit, the print operation of the arbitrary image data stored in the storage unit By printing, and a memory management unit for moving the deleted image data or image data, comprising the.

  In the facsimile apparatus of the present invention configured as described above, the receiving means receives the image data transmitted through the public communication line by the facsimile transmission procedure, and the printing means sends the image to the recording medium based on the image data. Print. Further, when the image data received by the receiving means is based on confidential communication, the storage means stores the image data, and when the recipient of the image data is authenticated by the recipient authenticating means, the printing means The image data can be printed, the image data can be deleted, or the image data can be moved.

  Furthermore, in the facsimile apparatus of the present invention, even when the administrator is authenticated by the administrator authentication means, the storage management means prints any image data stored in the storage means by the printing means, Deletion or movement of the image data (for example, saving to another storage medium) is performed. For this reason, even when there are no authorized recipients, the administrator performs the printing, deleting, or moving to release the image data storage area by confidential communication, and the image data is stored in the apparatus. It can be suppressed from being left as it is.

  The present invention is not limited to the following configuration, but when an administrator is authenticated by the administrator authentication unit, a list display unit that displays a list of image data stored in the storage unit; and Selection means for selecting arbitrary image data from the image data displayed as a list by the list display means based on the operation of the administrator, and the storage management means for the image data selected by the selection means The above printing, deletion, or movement may be performed. In this case, since the image data stored in the storage means is displayed as a list by the list display means, desired image data to be printed, deleted, or moved can be easily selected from the list display via the selection means. Can do.

  In the facsimile apparatus of the present invention, the storage management unit may be capable of moving the image data while maintaining the confidentiality of the image data with respect to the manager. In this case, the confidentiality of the image data received by confidential communication with respect to the manager can be ensured satisfactorily, and the privacy of the legitimate recipient can be further better protected.

  More specifically, for example, the storage unit stores image data with a password received by the receiving unit, and an operation panel capable of inputting a password and the password input from the operation panel. An authorized recipient print control means for printing the image, and the storage management means has a function of writing the image data file encrypted in a recoverable manner by the password to an external storage device. It is good to configure. In this case, since the password for printing by the authorized recipient and the password for decrypting the encrypted file are the same, there is no need to manage the password for each recipient on the facsimile machine side. Therefore, the configuration of the apparatus can be simplified and the user is not forced to perform complicated operations such as password registration. Further, since the password for printing and the password for decryption are the same, the user is not confused.

  In addition, the storage management unit may be capable of printing the image data stored in the storage unit with a cover page representing the name of the recipient together for each recipient. In this case, the image data received by confidential transmission can be collected for each recipient and printed with a cover page representing the recipient name, so that management of the printed document is facilitated.

  Alternatively, the storage management unit may be able to print by combining the image data stored in the storage unit with another image indicating that the communication is based on confidential communication. In this case, since the other image is combined with the image printed by the administrator via the storage management means, it can be confirmed after printing that the image data was important by confidential communication.

  The facsimile apparatus of the present invention may further include management display means for displaying information representing image data that has been printed, deleted, or moved by the storage management means. As described above, according to the storage management means, there is a case where image data is printed, deleted, or moved by the administrator without notifying the authorized recipient. For this reason, when information representing image data that has been printed, deleted, or moved by the storage management means is displayed by the management display means, an authorized recipient can print image data by confidential communication by the administrator. , Deleted or moved easily.

[Overall configuration of MFP]
Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is an external view showing a configuration of a multifunction machine 1 as an example of a facsimile machine to which the present invention is applied. As shown in FIG. 1, the multifunction machine 1 includes a paper feed tray 2 that feeds recording paper (not shown) as an example of a recording medium on which an image is formed, and a recording paper supplied from the paper feed tray 2. A main body 3 that forms an image, and a main body cover 4 that is supported by the main body 3 so as to be openable and closable so as to completely cover the upper surface of the main body 3.

  The main body 3 is an example of a document reading unit 5 (see FIG. 3) that reads an image written on a reading document (not shown) and a printing unit that forms an image on recording paper supplied from the paper feed tray 2. An image forming unit 6 (see FIG. 3) is provided inside. The document reading unit 5 is a document placed on a cover glass (not shown) provided on the upper surface of the main body 3 so as to be opened and closed by the main body cover 4, or a document conveyed by the automatic document feeder 7. These images are well known to be read by an image sensor or the like. The image forming unit 6 is configured as a well-known printer engine that forms an image by an electrophotographic method using toners of yellow, magenta, cyan, and black, and prints each sheet of recording paper supplied from the paper feed tray 2. An image is formed and discharged from the discharge unit 8.

  Further, the multifunction device 1 is connected to a personal computer (hereinafter referred to as a personal computer) 300 via a network W such as a LAN or the Internet, and is also connected to a telephone line (public communication line). The personal computer 300 has a known configuration in which a CRT display 320, a keyboard 330, and a mouse 340 are connected to a main body 310 incorporating a CPU, ROM, RAM, HDD (hard disk device), and the like. The main body 310 is also provided with a connection portion 350 to which the USB memory 105 (see FIG. 3) can be connected. In FIG. 1, only one personal computer 300 is illustrated, but a plurality of personal computers 300 corresponding to managers, receivers, and the like described later can be connected to the network W.

  Furthermore, on the upper surface of the main body 3 of the multifunction device 1, an operation panel 9 is provided that includes a liquid crystal display 9A and various keys, and performs various settings and instructions. FIG. 2 is an explanatory diagram illustrating the configuration of the operation panel 9 in detail. As shown in FIG. 2, the operation panel 9 uses a numeric key 9B for inputting a telephone number, a stop key 9C for stopping various processes, a well-known F code, etc. in addition to the liquid crystal display 9A. A secure key 9D for performing processing related to confidential communication and a transmission key 9E for transmitting various data are provided.

[Explanation about control system]
Next, FIG. 3 is a block diagram showing the configuration of the control system of the multifunction machine 1. As shown in FIG. 3, the multifunction device 1 includes a network interface (network I / F) 108 for connecting to a network W, a facsimile interface (facsimile I / F) 104 for connecting to a telephone line, and a USB. A connection unit 106 (see FIG. 1) to which the memory 105 is attached and detached, a ROM 101 that stores various programs, a RAM 102 that temporarily stores processing results and the like, and an HDD 107 that retains memory even when the power is turned off. And a CPU 103 that executes a program stored in the ROM 101.

  In addition to these configurations, the CPU 103 is connected to the document reading unit 5, the image forming unit 6, the automatic document feeder 7 and the operation panel 9, and a card reader 24 as an example of an administrator authentication unit. Is connected. The card reader 24 authenticates a card owned by an administrator or the like, and may read a magnetic card such as a cash card or may read an IC card, such as a tag reader. The card may be read in a non-contact manner. In the following description, as an example, a case where a card reader 24 that reads an IC card is used will be described.

  FIG. 4 is an explanatory diagram schematically showing the configuration of the program stored in the ROM 101. As shown in FIG. 4, in the ROM 101, an IC card control application 201, a password authentication database 202, a FAX application 203, a printer application 204, mainly an OS (operating system) 200 such as TRON and LINUX (both are trade names). , A scanner application 205, an I / F control application 206, and a network control application 207 are stored. The IC card control application 201 is an application for reading an IC card, and the password recognition database 202 is a database for recognizing a password. The IC card control application 201 may be an application that detects that a predetermined key is inserted instead of the IC card.

  A FAX application 203 is an application for transmitting and receiving facsimile data, a printer application 204 is an application for controlling the image forming unit 6, and a scanner application 205 controls the document reading unit 5 and the automatic document feeder 7. It is an application for. Further, the I / F control application 206 is an application that controls various interfaces, and the network control application 207 is an application that controls communication via the network W. The network control application 207 supports a hypertext transfer protocol (HTTP), a file transfer protocol (FTP), a secure shell (SSH), and the like.

[Control in control system (transmission and reception processing)]
Next, various processes executed by the CPU 103 based on the program stored in the ROM 101 will be described. FIG. 5 is a flowchart showing a transmission process executed when image data is transmitted as facsimile data. This process is started when the transmission key 9E is pressed after a document is set on the automatic document feeder 7 and a transmission destination is designated via the numeric key 9B or the like.

  As shown in FIG. 5, in this process, first, in S1 (S represents a step: the same applies hereinafter), the document is read by driving the automatic document feeder 7 and the document reading unit 5. In subsequent S <b> 2, it is determined whether or not the secure flag for instructing confidential communication is turned on in accordance with the operation of the operation panel 9. If the secure flag is OFF (S2: N), the process proceeds to S3. After the image data read in S1 is stored in the normal area of the HDD 107, the line between the destination and the transmission destination in S4 Are connected by a normal facsimile transmission procedure. In subsequent S5, the image data is transmitted to the transmission destination via the facsimile interface 104, and the process proceeds to S6.

  On the other hand, if the secure flag is ON (S2: Y), the process proceeds to S7, and the image data read in S1 is stored in the protection area I of the HDD 107. In subsequent S8, the line with the transmission destination is connected with the addition of secure information indicating confidential communication. In the subsequent S9, the image data to which the password known only by the authorized recipient is added as an extension number is transmitted, and the process proceeds to S6.

  In S6, it is determined whether or not the transmission is successful. If the transmission is successful (S6: Y), the process proceeds to S11. In S11, the image data stored in S3 or S7 is deleted, and in S12, report data representing the communication result is stored. In subsequent S13, it is determined whether or not image data remains in the protection area I and the normal area of the HDD 107 (S13: Y). If no data is left in S14, “no data” is displayed on the liquid crystal display 9A in S14. After the display, if it remains, the process is temporarily terminated as it is (S13: N).

  If it is determined in S6 that the transmission has failed (S6: N), the process proceeds to S17. In S17, “data present” is displayed on the liquid crystal display 9A, and in subsequent S18, it is determined whether or not the number of retries in the transmission process (S5, S9) is less than a predetermined number N set in advance. . If the number of retries is less than N (S18: Y), the process waits for a predetermined time in S19, and then proceeds to S5 described above. If the secure flag is ON (S2: Y), the password is once added in S9. Therefore, the password is similarly added when the process of S5 is executed after waiting in S19.

  If the transmission is not successful (S6: N) and the number of retries is N or more (S18: N), the process proceeds to S21, and it is determined whether or not the secure flag is ON. When the secure flag is OFF (S21: N), a well-known error report is printed via the image forming unit 6 in S22, and the error report is stored in a predetermined area of the HDD 107 in S23, and then in S24. Then, the image data is deleted, and the process proceeds to S13 described above. On the other hand, if the secure flag is ON (S21: Y), the process proceeds to the above-described S23 after the error report is not printed and the notification is made in a predetermined method such as e-mail in S25.

  Next, FIG. 6 is a flowchart showing a reception process executed when facsimile data is received. As shown in FIG. 6, in this process, first, in S31, it is determined whether or not the received facsimile data is based on confidential communication in which an extension number is camouflaged and a password is added. If no password is added (S31: N), the process proceeds to S32, and image data as facsimile data is received by a normal facsimile transmission procedure, and the image data is printed via the image forming unit 6. The process ends once.

  On the other hand, if a password is added to the received facsimile data (S31: Y), the process proceeds to S33, and the image data sent as the facsimile data is stored in the protection area II of the HDD 107 (an example of a storage unit). Equivalent). In the subsequent S34, “data present” is displayed on the liquid crystal display 9A, and the process is temporarily terminated.

  By the above control, “when transmission data cannot be transmitted and timeout has not occurred” and “when reception data is confidential communication” are displayed on the panel as having data. Among these, data (non-confidential transmission data) stored in the normal area of the HDD 107 can be printed and deleted by the user's panel operation. At that time, the operator is not authenticated, and anyone can perform the operation. Since this process is known and general, it will not be described in detail.

  On the other hand, the data stored in the protection areas I and II can be printed only by authorized recipients (confidential communication partners, users who know passwords) and specific users (administrators) by the method described below. Can be deleted.

[Control in the control system (processing related to authorized recipients)]
FIG. 7 is a flowchart showing secure print processing from a panel as an example of regular recipient print control means executed when printing of image data received by confidential communication is instructed via the operation panel 9. is there. As shown in FIG. 7, in this process, first, in S41, it is determined whether or not image data is stored in the protection area II. If not stored (S41: N), the process is temporarily terminated as it is, and if stored (S41: Y), the process proceeds to S42. In S42, a received data selection display screen is displayed on the liquid crystal display 9A, and the process waits until it is selected. On this received data selection display screen, a list of the names and date and time of regular recipients of image data received by confidential communication are displayed in a list, and after the cursor is moved, the process waits until a decision is made.

  When data is selected in S42, a password input screen for authenticating an authorized recipient is displayed on the liquid crystal display 9A in the subsequent S43, and the process waits until the password is input via the numeric key 9B or the like. To do. When the password is input, the process proceeds to S44 as an example of a recipient authentication unit, and it is determined whether or not the password is OK. If the password is not OK, the process ends as it is (S44: N). On the other hand, if the password is OK (S44: Y), the process proceeds to S45, the image data selected in S42 is printed, and in S46, the image data is deleted together with the bibliographic items such as the destination. In subsequent S47, it is determined whether or not data still remains in the protection areas I and II. If not (S47: N), “no data” is displayed on the liquid crystal display 9A in S48. Thereafter, if it remains, the process is temporarily terminated as it is (S47: Y). With the above processing, the authorized recipient can print the image data received by confidential communication via the operation panel 9.

  FIG. 8 is a flowchart showing processing executed when a connection request is received from the personal computer 300 such as an authorized recipient via the network W. As shown in FIG. 8, in this process, it is first determined whether or not network authentication has been performed in S50. If network authentication has not been performed (S50: N), the connection with the personal computer 300 is disconnected in S51. After being struck, the process is temporarily terminated. On the other hand, if network authentication is performed (S50: Y), the process proceeds to S52, and it is determined whether or not image data is stored in the protected area II. If not stored (S52: N), the process proceeds to S51 described above, and if stored (S52: Y), the process proceeds to S53.

  In S53, the process waits until a password for authenticating an authorized recipient is entered from the personal computer 300 (PC). If entered, the password is OK in S54 as an example of a subsequent recipient authentication means. It is determined whether or not. If not OK (S54: N), the process proceeds to the above-described S51. If OK (S54: Y), the data designated by the connection request is transmitted to the personal computer 300 in S55. In the subsequent S56, the image data is deleted together with the bibliographic items and the like, and in a further subsequent S57, it is determined whether or not data still remains in the protected areas I and II. If it does not remain (S57: N), “No data” is displayed on the liquid crystal display 9A in S58, and if it remains (S57: Y), the process proceeds to S51 described above. Transition. By the above processing, the authorized receiver can move the image data received by confidential communication to his / her personal computer 300.

[Control in the control system (processing related to the administrator)]
Next, processing that can be instructed by an administrator (so-called administrator) will be described. FIG. 9 is a flowchart showing processing executed when a connection request is received from the personal computer 300 such as an administrator via the network W. In this embodiment, the administrator can perform the following management process only from the personal computer 300 having a specific IP address registered in advance.

  As shown in FIG. 9, in this process, first, in S60, it is determined whether or not the request is from a designated IP set in the administrator's personal computer 300. If the request is not from the designated IP (S60: N). ) After the connection with the personal computer 300 is disconnected in S61, the process is temporarily terminated. On the other hand, in the case of a request from a designated IP specified in advance (S61: Y), the process proceeds to S62. In S62, the process waits until a password for authenticating the administrator is received from the personal computer 300 (PC). When the password is received, in S63 as an example of the subsequent administrator authentication means, whether or not the password is OK. Is judged. If not OK (S63: N), the process proceeds to the above-described S61. If OK (S63: Y), the process is transmitted from the personal computer 300 using a secure shell (SSH) or the like in S64. A command is received.

  When a command from the personal computer 300 is received in S64, in S65 to S70, whether the command is a print command (S65), a read command (S66), or an enumeration command (S67). Whether it is a delete command (S68), an all print all delete command (S69), or an end command (S70) is sequentially determined. If it is not any of the above commands (S65 to S70: N), the command is ignored as an invalid command, and the process returns to S64 and waits until the next command is received.

  On the other hand, when the command received in S64 is an enumeration command (S67: Y), the process proceeds to S71, and the image data stored in the protection area II is enumerated with an ID, and the process is performed. The process proceeds to S64 described above. If the command received at 64 is a print command (S65: Y), the process proceeds to S72 to determine whether the ID specified in the command is the ID of the received data. . That is, since the print command is transmitted by designating the ID of the image data to be printed, it is determined in S72 whether or not the image data designated by the ID has been received as facsimile data. is there. If it is not received data (S72: N), the process proceeds to S64 as it is, and if it is received data (S72: Y), the data of the designated ID is in S73 as an example of storage management means. After printing, the process proceeds to S64.

  FIG. 10 is a flowchart showing in detail the process of S73. As shown in FIG. 10, in this process, first, in S731, the destination, destination, and reception date / time information of the data is acquired, and in S732, a cover page describing the information is obtained by the image forming unit 6. Printed. Further, in the subsequent S733, an image corresponding to the data is printed by the image forming unit 6 with a “confidential” watermark (so-called watermark) as an example of another image, and the process proceeds to S64 described above. Transition (see FIG. 9). Although the insertion of the watermark character in S733 may be omitted, when a watermark character is inserted, it can be confirmed after printing that the image data is important image data by confidential communication.

  Returning to FIG. 9, when the command received in S64 is a read command (S66: Y), the process proceeds to S74 as an example of the storage management means, and is designated by the read command. The image data of the ID is transmitted (moved) to the administrator's personal computer 300, and the process proceeds to S64 described above. Furthermore, when the command received in S64 is a delete command (S68: Y), the process proceeds to S75, and the image data of the ID specified by the delete command is deleted along with the bibliographic items and the like. In S76, it is determined whether or not data remains in the protection areas I and II. If it does not remain (S76: Y), “No data” is displayed on the liquid crystal display 9A in S77, and if it remains (S76: N), the process proceeds to S64 described above. Transition. Note that, unlike the print command, these read command and delete command can also target data being retried (see S7) stored in the protection area I.

  Furthermore, when the command received in S64 is the all print all delete command (S69: Y), the process proceeds to S78 as an example of the storage management means, and the following all print all delete processing is performed. Is executed, the process proceeds to S64 described above.

  FIG. 11 is a flowchart showing in detail the all print all deletion process. As shown in FIG. 11, in this process, first, in S780, the image data (received data) stored in the protected area II is sorted for each address (that is, a legitimate recipient). In subsequent S781, the received data is further sorted by date for each address, and one address is extracted in S782. In subsequent S783, a cover page describing the address is printed by the image forming unit 6, and in S784, it is determined whether or not there are a plurality of JOBs (that is, a group of received data).

  If there are a plurality of JOBs with that address (S784: Y), after the JOB cover page is printed by the image forming unit 6 at S785, if there is only one JOB with that address (S784: N). The process proceeds to S786. In S786, the received data is printed, and in S787, the printed data is deleted together with bibliographic items. Further, in subsequent S788, it is determined whether printing (S786) and deletion (S787) for all JOBs of the target address have been completed. If not yet (S788: N), the process proceeds to S784 described above. . Thus, when the printing and deletion of all the JOBs of the target address are completed while the processes of S784 to S788 are repeated (S788: Y), the process proceeds to S789, and for all the addresses sorted in S780. It is determined whether or not the above process has been completed.

  If not completed (S789: N), the process proceeds to S782 described above, and one of the remaining addresses is taken out and the same process as described above is executed. Thus, when the above process is completed for all addresses (S789: Y), the process proceeds to S64 described above. Through the above processing, the administrator can release the storage area of the HDD 107 by printing, deleting, or moving the image data stored in the protection area II by transmitting a command from the personal computer 300.

  Next, FIG. 12 is a flowchart showing processing executed when an administrator's IC card is inserted into the card reader 24 or when the predetermined key is detected. As shown in FIG. 12, in this process, first, in S81, it is determined whether or not there is data in the protected area II. If there is no data (S81: N), the process is terminated as it is. If there is data (S81: Y), the process proceeds to S82 as an example of a list display unit.

  In S82, the received data stored in the protection area II is displayed as a list on the liquid crystal display 9A as a received data selection screen, and is processed until one received data is selected by operating the numeric key 9B as an example of the selection means. Wait. Further, during the reception data selection screen display, the display can be forcibly terminated by pressing the stop key 9C. Therefore, in S83 following S82, it is determined whether or not the stop key 9C has been pressed. If pressed, the process is temporarily terminated (S83: Y). If not pressed, that is, the received data is selected. If so (S83: N), the process proceeds to S84 as an example of a storage management unit.

  In S84, the data of the selected ID is printed by the same process as in S73 described above. In the subsequent S85, the printed data is deleted together with the bibliographic items and the process proceeds to S86. In S86, it is determined whether data still remains in the protection area II. If it remains (S86: Y), the process proceeds to the above-described S82 and the next received data can be selected. If it does not remain (S86: N), the liquid crystal display 9A is displayed in S87. After “no data” is displayed, the process is temporarily terminated. Also by the above processing, the administrator can print and delete the image data stored in the protection area II via the operation panel 9 to release the storage area of the HDD 107.

  As described above, in the present embodiment, even when there is no authorized recipient, an image received by confidential transmission is opened by the administrator releasing the protected area II by performing the above printing, deleting, or moving. Data can be prevented from being left as it is stored in the protection area II. In addition, in the process of FIG. 12, received data by confidential communication is displayed in a list on the liquid crystal display 9A, so that received data to be printed can be easily selected.

[Other Embodiments of the Invention]
In addition, this invention is not limited to the said embodiment at all, It can implement with a various form in the range which does not deviate from the summary of this invention. For example, an administrator administrative button may be provided on a hidden console covered with a lockable cover, and processing similar to that in FIG. 12 may be executed when the button is pressed.

  FIG. 13 is a flowchart showing processing that is started when the administration button is pressed. Since this process is mostly configured in the same way as the process in FIG. 12, only the differences will be described below, and parts configured in the same way as the process in FIG. The description is omitted.

  As shown in FIG. 13, in this process, first, in S180, a request is displayed on the liquid crystal display 9A to input an administrator password as a password for authenticating the administrator, and the process waits until it is input. . When input is made, the process proceeds to S181, and it is determined whether or not the administrator password is OK and the administrator is authenticated. If the authentication has not been performed (S181: N), the process is temporarily terminated as it is. If the authentication has been performed (S181: Y), the process proceeds to S81 similar to FIG. 12, and is described below with reference to FIG. Processing is executed. Also in this case, the same operation and effect as the above-described embodiment are produced. Further, the authentication of the administrator or the recipient is not limited to a card or a password, and authentication may be performed using biometric information such as a fingerprint.

  Further, the processing executed when a connection request is received from the personal computer 300 such as an administrator via the network W may be changed as shown in FIG. FIG. 14 is a flowchart showing only the changed part of the process of FIG. In this process, when the print command is received in S64 described above (S65: Y) and the processes in S72 and S73 described above are executed, the process proceeds to S271. In S271, the printed image data in the protected area II is deleted, and bibliographic items such as destination and transmission date and time are left. In subsequent S272, the name of the operator who performed printing is stored in association with the data of the remaining bibliographic items, and in S273, a printed flag is set for the data (that is, turned ON). The process proceeds to S64 described above.

  Also, when a read command is received in S64 (S66: Y), the process proceeds to S276 after the process of S74 is executed as in FIG. In S276, the transmitted image data in the protected area II is deleted, and bibliographic items such as a destination and a transmission date / time are left. In the subsequent S277, the name of the operator who performed the transmission is stored in association with the data of the remaining bibliographic items. Further, in the subsequent S278, a saved flag is set for the data (that is, turned ON). The process proceeds to S64 described above.

  As described above, when the bibliographic item, the operator name, and the flag are stored corresponding to the image data deleted from the protection area II, the following control is possible. FIG. 15 is a flowchart showing a process executed when the secure key 9D of the operation panel 9 is pressed when the process of FIG. 14 is adopted.

  As shown in FIG. 15, in this process, first, in S281, the image on the liquid crystal display 9A is erased. In subsequent S282, one piece of image data stored in the protection area II (there may be only a bibliographic item as described above) is taken out, and in S283, the bibliographic item of the image data is displayed on the liquid crystal display 9A. . In subsequent S284, it is determined whether or not the printed flag of the image data is ON. If not (S284: N), it is determined whether or not the saved flag is ON in S285. If the saved flag is not ON (S285: N), the process proceeds to S286, and it is determined whether or not all the bibliographic items of the image data stored in the protected area II have been displayed on the liquid crystal display 9A.

  If there is undisplayed image data (S286: N), the process proceeds to S282 described above, and one piece of next image data is extracted. In addition, when the printed flag of the image data extracted in S282 is ON (S284: Y), a display of “No Data (line feed) has been printed by XX” is displayed in S283 in S287. The process proceeds to S286 described above. Here, “XX” is the operator name stored in S272.

  Similarly, when the saved flag of the image data extracted in S282 is ON (S285: Y), the display “No Data (line feed) This data has been saved by XX” is displayed in S288. Is added to the bibliographic item displayed at, and the process proceeds to S286 described above. Here, “XX” is the operator name stored in S277.

  When such processing is repeated and all the bibliographic items of the image data stored in the protection area II are displayed on the liquid crystal display 9A (S286: Y), the processing moves to S291. At this time, the display of the liquid crystal display 9A is exemplified in FIG. That is, as illustrated in FIG. 16, bibliographic items of all image data stored in the protection area II are displayed on the liquid crystal display 9A, and the image data deleted upon printing (S73) or transmission (S74). For, the name of the operator (administrator) who printed or transmitted the image data is displayed.

  Therefore, a legitimate recipient can easily know that image data by confidential communication has been printed or transmitted (saved) to the administrator's personal computer 300 by the administrator. In the present embodiment, the operation panel 9 is provided with a print key 9F and a delete key 9G in addition to the stop key 9C, secure key 9D, and transmission key 9E. For this reason, when such a display is made on the liquid crystal display 9A, the authorized recipient moves the cursor to the bibliographic item of the desired image data and presses one of the processing buttons from the stop key 9C to the delete key 9G. Thus, a desired process can be instructed.

  Returning to FIG. 15, when the FAX data list is displayed as shown in FIG. 16 by a series of processes of S <b> 281 to S <b> 287, one of the processes of the stop key 9 </ b> C to the delete key 9 </ b> G after the cursor movement operation is performed in S <b> 290. Wait until the button is pressed. When the process button is pressed, the process proceeds to S291, and it is determined whether or not the process button is the stop key 9C. If it is the stop key 9C (S291: Y), the process is temporarily terminated. If it is not the stop key 9C (S291: N), the process proceeds to S292. In S292, the process waits until a password for authenticating the authorized recipient is input. When the password is input, it is determined in S293 whether or not the authentication is OK. If the authentication is not OK (S293: N), the process proceeds to S290 described above, and if the authentication is OK (S293: Y), the process proceeds to S294.

  In S294, it is determined whether or not the processing button pressed during standby in S290 is the print key 9F. If it is the print key 9F (S294: Y), the image data has been deleted in S295. It is determined whether or not. If the image data has been deleted (S295: Y), the process proceeds to the above-described S290. If the image data has not been deleted (S295: N), after the image data is printed in S296, the process is described above. The process proceeds to S290.

  If the pressed process button is not the print key 9F (S294: N), the process proceeds to S297, and it is determined whether or not the process button is the delete key 9G. If the pressed processing button is the delete key 9G (S297: Y), after the image data including bibliographic items is deleted in S298, the process proceeds to S290 described above. On the other hand, if the pressed process button is not the delete key 9G (S297: N), the operation of the process button is invalidated and the process proceeds to S290 described above.

  Through the above processing, the authorized recipient can print or delete the image data received by confidential communication. In the above processing, the processing of S282, S287, and S288 corresponds to the management display means.

  In each of the above embodiments, the administrator can print and view arbitrary image data received by confidential communication, but the confidentiality of the image data to the administrator is ensured as follows. The image data may be movable. In this case, the process of FIG. 9 is changed as shown in FIG. Since this processing is mostly configured in the same manner as the processing in FIG. 9, only the differences will be described below, and the same reference numerals as those in FIG. The description is omitted. In this embodiment, the process shown in FIG. 12 or 13 is not executed.

  As shown in FIG. 17, in this process, when a command is received from the administrator's personal computer 300 (S64), whether the command is a USB write command (S365) or a lock read command (S366), Whether it is an enumeration command (S67), a deletion command (S68), or an end command (S70) is sequentially determined. That is, in the present embodiment, the above-described print command, read command, and all print all delete command are invalidated, and the USB write command and lock read command can be used instead.

  In this process, the processes for the enumeration command, the delete command, and the end command are the same as those in FIG. In this embodiment, when the command received in S64 is a USB write command (S365: Y), the process proceeds to S371. In S371, it is determined whether or not the USB memory 105 as an example of the external storage device is connected to the connection unit 106 via the connection detection unit 106A. If not connected (S371: N), the process is as described above. The process proceeds to S64. At this time, an error message may be appropriately output.

  On the other hand, if the USB memory 105 is connected (S371: Y), the process proceeds to S372, and the password with which the image data of the designated ID is known only to the authorized receiver (ie, the composite on the transmission side). The password is encrypted with the password added in the process of S9 in the machine 1 or the password when the input is also a necessary condition in the receiving multifunction machine 1 in association with the password. In subsequent S373, the encrypted data is stored in the USB memory 105 in a compressed format in which the file name is “recipient name-date-time.zip”, and the process proceeds to S64 described above. By this processing, the image data in the protected area II is stored in the USB memory 105 in a form that only a legitimate recipient can decrypt, and the image data can be deleted from the protected area II.

  If the command received in S64 is a lock read command (S366: Y), the process proceeds to S374. In S374, the image data of the specified ID is encrypted with a read password known only by a legitimate recipient, and in the subsequent S373, the file name is converted to a compressed format in which “recipient name-date-time.zip” is set. The encrypted data is converted. In further S376, the converted file is transferred to the administrator's personal computer 300 as an example of the external storage device, and the process proceeds to S64 described above.

  As a result of the above processing, the image data in the protected area II is transferred to the administrator's personal computer 300 in a form that only a legitimate recipient can decrypt, and the image data can be deleted from the protected area II. In the above processing, the processing of S74, S75, S372 to S376 corresponds to the storage management means.

  Further, when the multi-function device 1 includes an HTTP server, a CGI, an FTP server, etc., it is possible to cause the CPU 103 to execute the following CGI processing. FIG. 18 is a flowchart showing the CGI process. As shown in FIG. 18, in this process, when the user starts a browser on the personal computer 300, first, in S491, a password authentication screen is displayed on the CRT display 320 of the personal computer 300. On the other hand, the administrator inputs a password from the keyboard 330. Therefore, in S492 subsequent to S491, it is determined whether or not the password authentication is OK. If not (S492: N), the process proceeds to S491 described above. On the other hand, if the authentication is OK (S492: Y), the process proceeds to S493, a file display download screen illustrated in FIG. 19 is displayed, and the process is temporarily ended.

  As illustrated in FIG. 19, on the file display download screen, MFC characters indicating that it is the MFP 1 are displayed in the frame, and bibliographic items of each image data stored in the protection area II are displayed. Listed.

  Furthermore, in each of the above embodiments, the storage area of the HDD 107 is released by actively deleting the image data stored in the protection area II. There may be. Further, the present invention is not limited to an apparatus that transmits and receives image data via only a telephone line, and it goes without saying that the present invention can be similarly applied to a so-called IP fax or the like.

1 is an external view illustrating a configuration of a multifunction machine to which the present invention is applied. It is explanatory drawing showing the structure of the operation panel of the multifunctional machine. It is a block diagram showing the structure of the control system of the multifunction machine. It is explanatory drawing which represents typically the structure of the program in the control system. It is a flowchart showing the transmission process by the control system. It is a flowchart showing the reception process by the control system. It is a flowchart showing the secure printing process from the panel by the control system. It is a flowchart showing the process by the said control system when there exists a connection request from a regular receiver etc. via a network. It is a flowchart showing the process by the said control system when there exists a connection request from a manager etc. via a network. It is a flowchart showing the printing process in the process in detail. It is a flowchart showing all the printing all deletion processing in the processing in detail. It is a flowchart showing the process of the said control system at the time of administrator IC card insertion. It is a flowchart showing the modification of the process of FIG. It is a flowchart showing the modification of the process of FIG. It is a flowchart showing the process at the time of the secure key pressing in the case of employ | adopting the process. It is explanatory drawing which illustrates the display state of the liquid crystal display by the process. It is a flowchart showing the other modification of the process of FIG. It is a flowchart showing the CGI process by the said control system. It is explanatory drawing which illustrates the file display download screen by the process.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... MFP 5 ... Document reading part 6 ... Image forming part 7 ... Automatic document feeder 9 ... Operation panel 9A ... Liquid crystal display 24 ... Card reader 104 ... Facsimile interface 101 ... ROM 102 ... RAM
DESCRIPTION OF SYMBOLS 103 ... CPU 105 ... USB memory 106 ... Connection part 106A ... Connection detection part 107 ... HDD 201 ... IC card control application 202 ... Password authentication database 300 ... Personal computer

Claims (7)

Receiving means for receiving image data transmitted via a public communication line by a facsimile transmission procedure;
Printing means for printing an image on a recording medium based on the image data received by the receiving means;
A recipient authentication means for authenticating the recipient;
When the image data received by the receiving means is based on confidential communication, the image data is stored, and when the receiver of the image data is authenticated by the receiver authenticating means, the image data of the image by the printing means is stored. Storage means for enabling printing, deletion of the image data, or movement of the image data;
Administrator authentication means for authenticating the administrator,
A storage management means for printing any image data stored in the storage means by the printing means, deleting the image data, or moving the image data when the administrator is authenticated by the administrator authentication means; ,
A facsimile apparatus comprising: When the administrator is authenticated by the administrator authentication means, a list display means for displaying a list of image data stored in the storage means;
Selection means for selecting arbitrary image data from the image data displayed as a list by the list display means based on the operation of the administrator;
Further comprising
2. The facsimile apparatus according to claim 1, wherein the storage management unit performs the printing, deletion, or movement on the image data selected by the selection unit.   3. The facsimile apparatus according to claim 1, wherein the storage management unit is capable of moving the image data while maintaining confidentiality of the image data with respect to the manager. The storage means stores image data with a password received by the receiving means,
An operation panel that allows you to enter a password,
When the password is input from the operation panel, the authorized recipient print control means for printing the image;
With
4. The facsimile apparatus according to claim 3, wherein the storage management means has a function of writing the image data file encrypted so as to be recoverable by the password to an external storage device.   3. The storage management unit according to claim 1, wherein the storage management unit is capable of printing the image data stored in the storage unit together with a cover page representing the name of the recipient. Facsimile machine.   3. The facsimile apparatus according to claim 1, wherein the storage management unit is capable of printing by combining the image data stored in the storage unit with another image indicating that the communication is based on confidential communication. . Management display means for displaying information representing image data printed, deleted, or moved by the storage management means,
The facsimile apparatus according to claim 1, further comprising:

Images