JP2009292085A - Information processor and information processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor capable of enhancing convenience for a user, while securing security for a data. <P>SOLUTION: This information processor determines the presence of log-in (step S1), determines then the presence of an attached USB device (step S2), when the log-in exists, and sets an authentication state of the USB device during authentication (step S3), when the attached USB device exists. A USB device management part 65 determines thereafter whether a job is executed in the USB device or not (step S4). The authentication state of the USB device stored in a USB device management is fixed (step S5) when the job is determined to be executed. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an information processing apparatus and an information processing method, and more particularly, to an information processing apparatus and an information processing method provided with a USB connector to which a USB (Universal Serial Bus) device can be attached.

  In recent years, with the widespread use of USB memories, there are an increasing number of cases in which a user saves document data or the like in a USB memory and always carries it.

  In order to cope with such a case, it is necessary to connect the USB memory to an MFP (Multi Function Peripheral) in order to print a document stored in the USB memory in recent years or to store a scanned document in the USB memory. It has become to.

  On the other hand, from the viewpoint of ensuring data security, various methods have been proposed in which data such as authentication information is held in a USB memory and the use of the USB memory is permitted when the data matches (Patent Document 1). -Patent Document 3).

However, determining whether or not to permit use by storing data such as authentication information in a USB memory is a complicated system and requires authentication for each USB memory, which is not convenient. is there.
JP 2006-229854 A JP 2006-302257 A JP 2001-319195 A

  On the other hand, it is a security problem that anyone can freely access a USB memory attached by another person without any restriction.

  For example, when a user executes a USB memory scan function that stores image data scanned by an MFP in a USB memory for a large number of documents, the user may leave the site before the job is completed. When the USB memory scan function is executed, the image data is converted into a format such as PDF after the scan operation of a large amount of documents is completed, and the image data of a large amount of documents is converted to execute a write operation to the USB memory. This is because the processing of the writing operation may take time.

  In such a situation, another user who wishes to execute the next job may set the next USB memory to the USB connector.

  In such a case, it is a problem that one user can freely access another user's USB memory. Conversely, it is also inconvenient that another user cannot install the USB memory until one user finishes using the MFP.

  The present invention has been made to solve the above-described problems, and provides an information processing apparatus and information processing method capable of improving user convenience while ensuring data security. With the goal.

  An information processing apparatus according to the present invention includes an authentication unit that performs personal authentication processing, a plurality of detachable units that can be equipped with a plurality of detachable devices, and a personal authentication process performed in the authentication unit. For each detachable device attached to and / or attached to the detachable device, a detachable device management unit that is set to an authentication state, and a job for each detachable device that is set to an authentication state by the detachable device management unit And a control unit that executes When the job is executed for each detachable device set in the authentication state by the control unit, the detachable device management unit then attaches the detachable device to at least one of the plurality of detachable units. Do not set authentication status when is installed.

  Preferably, the job corresponds to a data reading process for image data stored in the detachable apparatus or a data writing process for image data to the detachable apparatus.

  Preferably, the detachable device management unit cancels the authentication state for each detachable device set in the authentication state in the detachable device management unit when the personal authentication processing state in the authentication unit ends.

  An information processing method according to the present invention includes a step of executing a personal authentication process, and a step of setting an attached and / or attached detachable device to an authenticated state when in a personal authentication process state; And executing a job on the detachable device set in the authentication state. In the step of setting to the authentication state, when a job is executed for the detachable device set to the authentication state and another detachable device is subsequently mounted, the other detachable device is authenticated. Do not set to state.

  Preferably, the step of executing the job corresponds to a data reading process for image data stored in the detachable apparatus or a data writing process for image data to the detachable apparatus.

  Preferably, the method further includes a step of ending the personal authentication processing state and a step of releasing the authentication state for the detachable device set to the authentication state when the personal authentication processing state ends.

  An information processing apparatus and an information processing method according to the present invention include a control unit that executes a job for a detachable apparatus. In the detachable device management unit, when a job is executed for each detachable device set in the authentication state by the control unit, the detachable device is then attached to at least one of the detachable units. Do not set authentication status when is installed.

  Generally, this is used when a certain user executes a job for an attachable / detachable apparatus (USB device) with respect to an information processing apparatus (MFP) equipped with a plurality of attachable / detachable parts (USB connectors). It is normal to attach all possible detachable devices (USB devices) to the detachable unit (USB connector), and after executing the job, change the detachable devices (USB devices) It is difficult to think about running a job.

  Therefore, even if another user who desires to execute the next job sets the next detachable device (USB device) on the detachable unit (USB connector) by this method, for example, Since the user's removable device (USB device) cannot be freely accessed, data security can be guaranteed. Further, another user can safely attach the detachable device (USB device) to the detachable portion (USB connector) after executing the job of a certain user, so that convenience is improved.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts and components are denoted by the same reference numerals. Their names and functions are also the same.

(Overall configuration of MFP)
FIG. 1 is a perspective view showing an MFP as an information processing apparatus according to an embodiment of the present invention.

  Referring to FIG. 1, MFP 1 according to the embodiment of the present invention is a digital multi-function peripheral having a copy function, a scanner function, a printer function, a fax function, and the like.

  The MFP 1 has insertion ports 20 to 25 as connecting means to which a plurality (six in this embodiment) of USB standard external devices can be attached and detached, and the insertion ports 20 to 25 have a USB interface. By connecting an external device, for example, a USB device such as an external storage device such as a USB memory or a USB HDD, data transmission / reception between the external device and the MFP 1 is possible. Hereinafter, the insertion ports 20 to 25 are also referred to as USB insertion ports or USB connectors. In this example, an example in which a USB interface is employed will be described as an example, and a case in which a USB memory is connected to an insertion port will be described. However, the interface is not limited to a USB, and other external devices such as a CF card are used. The same applies to the case of connecting a storage device.

  The MFP 1 includes an operation panel unit 10. The operation panel unit 10 receives a plurality of keys 11a and various instructions by the user's operation on the keys 11a and input of data such as characters and numbers. 11 and an operation display 12 composed of a liquid crystal or the like for displaying an instruction menu for the user and information about the acquired image.

  The MFP 1 includes a scanner unit 13 that optically reads a document to obtain image data, and a printer unit 14 that prints an image on a recording sheet based on the image data.

  Further, a feeder unit 17 that sends a document to the scanner unit 13 is provided on the upper surface of the MFP 1, a paper feeding unit 18 that supplies a recording sheet to the printer unit 14 is printed on the lower side, and an image is printed by the printer unit 14 on the center. A tray 19 for discharging the recorded sheet is provided.

  Further, inside the main body of the MFP 1, a communication unit that executes transmission / reception of image data and the like with an external device, and a storage unit 26 that stores necessary data such as a control program and image data used in each unit for controlling the main body. Etc. are provided. Although not shown, it is assumed that the communication unit is connected to a network via a network interface so that various image data and the like can be transmitted to and received from an external device.

  The operation display 12 displays various modes and other displays, and executes various settings according to the display contents. The operation unit 11 is used for various inputs by the user. These function as the main part of the user interface.

  The scanner unit 13 acquires image data by photoelectrically reading image information such as photographs, characters, and pictures from a document. The acquired image data (density data) is converted into digital data by an image control unit (to be described later), subjected to various known image processing, temporarily stored in a memory, and sent to the printer unit 14 or a USB device. And used for image printing and data storage.

  The printer unit 14 prints an image on a recording sheet based on image data acquired by the scanner unit 13 or image data stored in a USB device or the like.

  The communication unit transmits and receives facsimile data via a public telephone line, and also transmits and receives data to and from external devices connected to the network via a network such as a LAN or the Internet. Execute. Thus, the MFP 1 has not only a function as a facsimile apparatus that performs normal facsimile communication, but also a function as an electronic mail transmission / reception terminal. Therefore, various image data can be transmitted and received as an attached file of an e-mail. Note that communication via the network performed by the MFP 1 may be wired or wireless.

  FIG. 2 is a functional block diagram of MFP 1 which is the information processing apparatus according to the embodiment of the present invention.

  Referring to FIG. 2, MFP 1 according to the embodiment of the present invention includes a scanner unit 13 that converts a material such as a paper medium into electronic data, a storage unit 26 that includes, for example, a hard disk (HDD), and print processing. A printer unit 14 to be executed, USB connectors 20 to 25 for mounting USB devices, a USB device connection unit 5 for controlling connection between the USB connectors 20 to 25 and the USB device, and an operation panel including an operation display And a control unit 30 for controlling the entire MFP.

  When the USB device is attached to the USB connectors 20 to 25, the USB device connection unit 5 detects the attachment and outputs attachment detection information regarding the attached device to the USB device management unit 65. In addition, when the USB device is extracted from the USB connectors 20 to 25, the USB device connection unit 5 detects the extraction and outputs non-mounting detection information regarding the extracted device to the USB device management unit 65.

  The control unit 30 responds to an instruction from the job control unit 50, a scanner control unit 35 for controlling the scanner unit 13, an image control unit 40 for executing image processing, and a printer control for controlling the printer unit 14. Unit 45, USB control unit 60 that executes access to the USB device via USB device connection unit 5, USB device management unit 65 that manages the mounted state of the USB device, etc., and an image whose format is converted to image data A conversion unit 55, a panel control unit 70 for controlling display contents displayed on the operation panel unit 10 and outputting an instruction for an operation input from the operation panel unit 10 to the job control unit 50, and job control for controlling a job of the MFP 1 Section 50 and login / logout management section 27. Note that a control program or the like for executing the function of each unit of the control unit 30 is stored in the storage unit 26, and a predetermined function is executed by reading the control program stored in the storage unit 26.

  The image control unit 40 receives input of image data that is electronic data scanned by the scanner unit 13 via the scanner control unit 35, and after image processing, temporarily stores the image data in the internal memory 42, and the job control unit In response to the instruction 50, the data is output to the printer control unit 45 or output to the image conversion unit 55. Further, the image control unit 40 temporarily stores the image data input from the image conversion unit 55 in accordance with an instruction from the job control unit 50 in the internal memory 42 and outputs the image data to the printer control unit 45.

  The printer control unit 45 receives input of image data from the image control unit 40 and instructs the printer unit 14 to print. The printer unit 14 executes print processing for image data instructed to be printed by the printer control unit 45.

  In response to an instruction from the job control unit 50, the image conversion unit 55 converts the image data input from the image control unit 40 into a predetermined format and outputs it to the USB control unit 60. Alternatively, the image data from the USB device input via the USB control unit 60 is converted into a predetermined format and output to the image control unit 40.

  In response to an instruction from the job control unit 50, the USB control unit 60 sends the image data whose format has been converted from the image conversion unit 55 via a USB device whose connection is controlled by the USB device connection unit 5 (for example, a USB device). Output to the memory) and execute a data writing process for the USB device (for example, USB memory). In response to an instruction from the job control unit 50, the USB control unit 60 performs image data read processing from a USB device (for example, a USB memory) via the USB connector whose connection is controlled by the USB device connection unit 5. Execute.

  The USB device management unit 65 receives the mounting detection information regarding the USB device (device) mounted from the USB device connection unit 5, and stores the type and mounting state of the USB device in the USB device management table 67. In addition, the USB device management unit 65 stores the authentication status of the mounted USB device in the USB device management table 67 based on the user authentication processing status and the like.

  The panel control unit 70 outputs display contents to be displayed on the operation display on the operation panel unit 10 and outputs an instruction for an operation input from the operation panel unit 10 to the job control unit 50.

  The job control unit 50 outputs an operation instruction to each control unit or the like in order to execute various functions (jobs) of the MFP 1 in accordance with an instruction for an operation input from the operation panel unit 10 via the panel control unit 70. When accessing the USB device, the job control unit 50 refers to the USB device management table 67 of the USB device management unit 65 and confirms the authentication state of the USB device that is the access target. It is assumed that only the USB device is accessed. When the job control unit 50 executes a job for the USB device, information indicating that the job has been executed is output to the USB device management unit 65.

  In addition, the login / logout management unit 27 executes user authentication processing according to an operation input of the operation panel unit 10 via the panel control unit 70 (login). When the user authentication process is executed and the authentication process is successful, the user is logged in, that is, enters the user authentication process state. Then, the user authentication processing state is terminated by a predetermined operation (logout). At the end of the user authentication processing state, the login / logout management unit 27 outputs information indicating that logout is set to the job control unit 50 via the panel control unit 70. Further, the login / logout management unit 27 executes automatic logout when it is detected that the user's no-operation state on the operation panel unit 10 continues for a certain period after login. The login / logout management unit 27 outputs information indicating that the user has logged in to the USB device management unit 65 and information indicating that the user has been logged out.

  FIG. 3 is a diagram illustrating a configuration of operation panel unit 10 in MFP 1 according to the embodiment of the present invention.

  Referring to FIG. 3, a start key 201 is used to start an operation such as copying / scanning. The numeric keypad 202 is used for inputting numerical values such as the number of copies. The clear key 203 is used for clearing an input numerical value and discarding the stored image data in the image storage unit.

  A stop key 204 is used to instruct to stop the copy / scan operation. A panel reset key 205 is used to discard the set mode and job. Further, when the stop key 204 is pressed during the data writing process or data printing for the USB device, the data writing operation or the data printing operation for the USB device is stopped.

  The operation display 12 displays various modes and other displays, and a touch panel 206 is attached to the surface.

  With this touch panel 206, the user can perform various settings according to the display contents in the operation display 12. For example, when a user ID setting screen that is user identification information is displayed on the operation display 12, the user uses a variety of keys of the operation unit 11, touch buttons displayed on the operation display 12, and the like. Set. When the MFP 1 is operated, for example, a login screen is displayed by pressing the login / logout button 212, and the user authentication is performed in the above-described login / logout management unit 27 by inputting a registered user ID or the like. Processing is executed (login). On the other hand, when the login / logout button 212 is pressed again in the login state (user authentication processing state), a logout screen is displayed. For example, when the logout execution is input, the login / logout management unit 27 described above performs user authentication. The processing state ends (logout). As an example, it is assumed that the set user ID and the like are registered in the login / logout management unit 27.

  In the setting screen area 207 on the touch panel 206, buttons for basic / applied settings that are normally performed when a copy operation or a scan operation is executed are arranged. When each button is pressed, a hierarchical screen for performing detailed setting is displayed.

  The job information screen area 208 of the touch panel 206 displays job information that has been input to the MFP 1 at that time. The display is arranged in the order of jobs to be executed. When performing an operation such as deletion or change for a specific job, after selecting the job operation button 209, the user presses the job number button to be operated. With these operations, a job operation screen is displayed, and an operation for a specific job can be performed.

  A copy (Copy) key 210 and a scan (Scan) key 211 are selection keys for setting the copy / scanner mode of the MFP 1.

  When the copy key 210 is pressed, the MFP 1 can be used as a copier. In this state, the scanner operation cannot be executed.

  At this time, in the setting screen area 207 of the touch panel 206, a display for performing various settings for the copy operation is performed. After completing the various settings, the copy operation is started by setting the document and pressing the start key 201.

  When the scan key 211 is pressed, the MFP 1 becomes a scanner. In this state, the copy operation cannot be executed.

  At this time, in the setting screen area 207 of the touch panel 206, a display for performing various settings for the scanning operation is performed. After completing the various settings, the original is set and the start key 201 is pressed to start the scanning operation.

  Note that the copy key 210 and the scan key 211 are exclusive operations, and when one is selected, the other is automatically unselected.

FIG. 4 is a diagram illustrating the USB device management table.
Referring to FIG. 4, here, the USB device management unit 65 receives the mounting detection information regarding the USB device from the USB device connection unit 5, and manages the device information, the mounting state, the authentication state, and the like of the device by USB device management. An example diagram when stored in the table 67 is shown.

  Specifically, as an example, connector numbers CN1 to CN6 are provided corresponding to the USB connectors 20 to 25, respectively, and device information, mounting state, and authentication state of the USB device are stored corresponding to each connector number. . As an example, a case where a USB memory is attached to the USB connector 20 with the connector number CN1 and the authentication state is being authenticated is shown.

  On the other hand, here, a USB memory is attached to the USB connector 21 with the connector number CN2, but the authentication state is unauthenticated. As another example, the USB connectors 24 and 25 with connector numbers CN5 and CN6 are respectively attached with USB memories, and the authentication status is shown as being authenticated.

  FIG. 5 is a flowchart illustrating USB device management in USB device management unit 65 according to the embodiment of the present invention.

  Referring to FIG. 5, first, it is determined whether or not there is a login (step S1). Specifically, it is determined whether or not the user authentication process in the login / logout management unit 27 has been executed. When the user authentication process in the login / logout management unit 27 is executed, information indicating that the user has logged in is output from the login / logout management unit 27 to the USB device management unit 65 as described above.

  If it is determined in step S1 that the login has been made, the USB device management unit 65 next determines whether or not the USB device is attached (step S2).

  If the USB device is attached in step S2, the authentication state of the USB device is set to being authenticated (step S3). Here, for example, when a USB device is attached to the USB connector before login, which is not in the user authentication processing state, the authentication state of the corresponding USB device in the USB management table 67 is assumed to be unauthenticated.

  Therefore, the unauthenticated USB device is set to the authenticated state in response to the login. Even when a USB device is attached to the USB connector during login, the authentication status of the corresponding USB device in the USB management table 67 is set to “authenticating”.

  Next, the USB device management unit 65 determines whether or not a job has been executed for the USB device (step S4).

  Specifically, the USB device management unit 65 determines whether a job has been executed for the USB device based on information indicating that the job has been executed from the job control unit 50 as described above. Here, the job means a data reading process for image data stored in a USB device or a data writing process for image data to a USB device.

  When determining that the job has been executed, the USB device management unit 65 fixes the authentication state of the USB device stored in the USB device management table 67 (step S5).

  As a result, once a job has been executed for a USB device, even if another USB device is attached thereafter, the other USB device is not set during authentication and is not authenticated. It shall be set.

  Therefore, even if another USB device is attached, the job control unit 50 cannot access because the authentication state is unauthenticated.

  With this method, when a job is executed once, the attached USB device is not set during authentication even if the USB device is attached thereafter.

  Therefore, for example, when a user executes a USB memory scan function that stores image data scanned by the MFP in a USB memory for a large number of documents, the user may leave the site before the job is completed. Even if another user who wants to execute a job sets the next USB memory to the USB connector, the user cannot freely access the other user's USB memory, thus ensuring data security. be able to. In addition, after another user's job is executed, another user can safely attach the USB memory to the USB connector, which improves convenience.

  Next, it is determined whether or not there is a logout (step S6). Specifically, it is determined whether or not the user authentication processing state in the login / logout management unit 27 has ended. When the user authentication processing state in the login / logout management unit 27 is completed, information indicating that the user has been logged out is output from the login / logout management unit 27 to the USB device management unit 65 as described above.

  In step S6, when it is determined that there is logout, the USB device management unit 65 cancels the authentication state of the fixed USB device stored in the USB device management table. Specifically, all authentication states are set to unauthenticated.

Then, the process ends (END).
Generally, when a user executes a job for a USB device on an MFP equipped with a plurality of USB connectors, all USB devices that may be used are mounted on the USB connector. However, it is difficult to think of executing another job for a newly mounted USB device after executing the job. If the user executes another job for the newly installed USB device after the user has executed the job, log out once and log in again to the newly installed USB device. It is possible to execute a job.

  In this example, an MFP having six connectors as a USB connector has been described. However, the present invention is not limited to this, and the number is not particularly limited.

  The information processing apparatus according to the present invention is not limited to the MFP, and may be a printer, a facsimile machine, or the like as long as it is an information processing apparatus. Note that it is also possible to provide a program that causes a computer to function as a controller that controls the information processing apparatus and executes control as described in the above flow. Such a program is stored in a computer-readable recording medium such as a flexible disk attached to the computer, a CD-ROM (Compact Disk-Read Only Memory), a ROM (Read Only Memory), a RAM (Random Access Memory), and a memory card. And can be provided as a program product. Alternatively, the program can be provided by being recorded on a recording medium such as a hard disk built in the computer. A program can also be provided by downloading via a network.

  The program according to the present invention is a program module that is provided as a part of a computer operating system (OS) and calls necessary modules in a predetermined arrangement at a predetermined timing to execute processing. Also good. In that case, the program itself does not include the module, and the process is executed in cooperation with the OS. A program that does not include such a module can also be included in the program according to the present invention.

  The program according to the present invention may be provided by being incorporated in a part of another program. Even in this case, the program itself does not include the module included in the other program, and the process is executed in cooperation with the other program. Such a program incorporated in another program can also be included in the program according to the present invention.

  The provided program product is installed in a program storage unit such as a hard disk and executed. The program product includes the program itself and a recording medium on which the program is recorded.

  In this example, the USB memory has been described as an example of the USB device. However, the present invention is not limited to the USB memory, and can be similarly applied to other auxiliary storage devices such as a CF card or an SD card.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

1 is a perspective view showing an MFP as an information processing apparatus according to an embodiment of the present invention. It is a functional block diagram of MFP1 which is the information processing apparatus according to the embodiment of the present invention. It is a diagram illustrating a configuration of operation panel unit 10 in MFP 1 according to the embodiment of the present invention. It is a figure explaining a USB device management table. It is a flowchart explaining the management of the USB device in the USB device management unit 65 according to the embodiment of the present invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 MFP, 5 USB device connection part, 10 Operation panel part, 13 Scanner part, 14 Printer part, 20-25 USB connector, 26 Storage part, 27 Login / logout management part, 30 Control part, 35 Scanner control part, 40 Image Control unit, 42 Memory, 45 Printer control unit, 50 Job control unit, 55 Image conversion unit, 60 USB control unit, 65 USB device management unit, 67 USB device management table, 70 Panel control unit

Claims (6)

An authentication unit for executing personal authentication processing;
A plurality of detachable parts to which a plurality of detachable devices can be mounted;
A detachable device management unit that sets an authentication state for each of the detachable devices attached to and / or attached to each of the detachable units when a personal authentication process is performed in the authentication unit;
A control unit that executes a job for each of the detachable devices set in the authentication state in the detachable device management unit,
When the job is executed for each of the detachable devices set in the authentication state by the control unit, the detachable device management unit thereafter attaches / detaches at least one of the plurality of detachable units. An information processing device that is not set to an authentication state when a detachable device is attached to the unit.   The information processing apparatus according to claim 1, wherein the job corresponds to a data reading process for image data stored in the detachable apparatus or a data writing process for image data to the detachable apparatus.   The detachable device management unit, when the personal authentication processing state in the authentication unit ends, cancels the authentication state for each detachable device set in the authentication state in the detachable device management unit. 3. The information processing apparatus according to 1 or 2. Performing a personal authentication process;
When in the personal authentication process state, setting the authentication state for the attached and / or attached removable device;
Executing a job on the detachable device set in the authentication state,
In the step of setting to the authentication state, when a job is executed with respect to the detachable device set to the authentication state, when another detachable device is subsequently mounted, the other detachable device is set. Is an information processing method that does not set authentication status.   The information processing method according to claim 4, wherein the step of executing the job corresponds to a data reading process for image data stored in the detachable apparatus or a data writing process for image data to the detachable apparatus. Ending the personal authentication processing state;
The information processing method according to claim 4, further comprising a step of releasing the authentication state for the detachable device set to the authentication state when the personal authentication processing state is ended.

Images