JP2011199337A - Image forming apparatus and image forming method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a composite machine 100 capable of securely printing secret document data associated with a simple password even in issuing the password.SOLUTION: An image forming apparatus includes: a password issuing means 507 for issuing a password for each document data, and storing, in a storing means 509, the password and the document data in association with identification information when receiving the document data; a password notifying means 510 for notifying a transmission destination of the identification information of the password; a user authenticating means 513 for determining whether inputted identification information coincides with the identification information of the storing means; a password receiving means 514 for receiving the input of the password associated with coincident identification information; a password determining means 515 for determining whether the inputted password coincides with the password of the identification information; and a document data outputting means 511 for outputting document data corresponding to the coincident password.

Description

  The present invention relates to an image forming apparatus and an image forming method, and more particularly, to an image forming apparatus and an image forming method capable of safely printing confidential document data associated with the password even if a simple password is issued.

  In recent years, an image forming apparatus such as a printer is generally connected to a network and used. In this usage pattern, the image forming apparatus is shared by a plurality of users. Therefore, when a specific user transmits print data from a computer connected to the network to the image forming apparatus, if the image forming apparatus is installed at a location away from the computer, the user is informed of the other users before the user. There is a problem that a specific user can visit the image forming apparatus and obtain a sheet on which an image is formed by the image forming apparatus. In order to deal with the problem, an image forming apparatus having a confidential print function has recently appeared, and the image forming apparatus issues a password on the image forming apparatus side and is a computer that is a transmission source of print data. The user is notified of the password, and the user inputs the password from the input screen of the image forming apparatus, so that the print (paper) output by the user is not delivered to other users' hands.

  However, in the image forming apparatus, since the image forming apparatus itself is provided with a password issuing unit that issues a random password, and the image forming apparatus issues a password, the user can easily issue the issued password. There is a problem that the password cannot be remembered and the password is forgotten over time.

  On the other hand, when the user instructs printing with a computer, it may be possible for the user to set a password that can be easily remembered. However, even in this case, the problem remains that the user forgets the password. If the password corresponding to the print data is forgotten, there is a problem that an image cannot be formed based on the print data even though the user has transmitted the print data to the image forming apparatus.

  As a technique for solving such a problem, Japanese Patent Application Laid-Open No. 2008-71322 (Patent Document 1) discloses a print data receiving unit that receives a password and print data from a communicably connected computer, and the print data. On the condition that the password associated with the print data matches the password associated with the print data, the association means for associating the print data with the password, the operation accepting means for accepting an input of a user operation, and the password accepted by the operation accepting means An image forming unit that forms an image based on the data, and when the print data is selected by the operation receiving unit, and a predetermined time has passed without the password associated with the selected print data being input Or associate with the selected print data When the password does not match with the password is entered, the image forming apparatus and a password transmission means for transmitting the password to the computer which sent the print data said selected are disclosed. With this configuration, it is possible to form an image of the print data even if the password in the print data with the confidential print function set is forgotten, and notify the password in the print data with the confidential print function set. The print data corresponding to the password forgotten by the user can be reliably formed as an image.

JP 2008-71322 A

  However, even in the technique described in Patent Document 1, it is necessary for the user to remember the password, and when the user forgets the password or enters the wrong password, it is necessary to confirm again with his / her personal computer (PC). There is a problem that it takes time and labor.

  Further, in the technique described in Patent Document 1, for example, when the image forming apparatus is redesigned so as to issue a password that is easy for a user to remember, the password is a password that is easy for other users to remember. However, there is a risk that print data may be imaged by a password that is accidentally entered, and the password cannot be easily configured.

  By the way, the temporary password issued for each document data in the above-described confidential print function is a function for authenticating the document data and a function for authenticating the user even though the password is only temporarily used. There is a reality that it is complicated (long culture) so that it can be secured.

  On the other hand, in recent years, image forming apparatuses having a user authentication function have been established, and each time the image forming apparatus is used, an input of a user ID for authenticating a user and a password corresponding to the user ID are set. The image forming apparatus can be used only when an input is requested and a permitted user ID or password is input.

  Therefore, even if a simple password that can guarantee only the document data authentication function is sufficiently secure if the user authentication function that the password for the confidential print function has taken place can be replaced with the user authentication function provided in the image forming apparatus. There is a possibility of fulfilling the print function, and there is a possibility that the security of the confidential print function and the simplification (short culture) of the password can be mutually realized. If the password is simplified (short culture), the user can naturally save the trouble of memorizing the password, and the convenience for the user is improved.

  Accordingly, the present invention has been made to solve the above problem, and provides an image forming apparatus capable of safely printing confidential document data associated with a password even when a simple password is issued. For the purpose.

  In order to solve the above-described problems and achieve the object, the image forming apparatus according to the present invention issues a password for each document data when the document data is received, and the password and the document data are Password issuing means for storing in the storage means in association with the identification information for identifying the transmission destination user, and password notification means for notifying the password to the transmission destination of the identification information. In addition, when the identification information is input by the user, the image forming apparatus includes a user authentication unit that determines whether or not the input identification information matches the identification information of the storage unit, and the input identification information And the identification information of the storage means match, the password accepting means for accepting the input of the password associated with the matching identification information, and when the password is entered by the user, the entered password and the identification information Password determining means for determining whether or not the password matches, and document data output means for outputting document data corresponding to the password when the input password matches the password of the identification information.

  With this configuration, when the user uses the confidential print function of the image forming apparatus, the user who transmitted the document data is authenticated based on the user identification information, and the password of the document data associated with the identification information is received. Therefore, even if the password that is temporarily issued is a simple password that can authenticate the document data, the entire MFP can authenticate the user who sent the document data and the authentication of the document data that the user wants to output It is possible to add functions. Therefore, it is possible to maintain the security of the confidential print function even if a sufficiently simple password is issued compared to the password issued by the conventional confidential print function, and simplify the password. Thus, it becomes possible to reduce the difficulty of remembering the password (easy to forget) for the user. As a result, it is possible to improve user convenience in the confidential print function.

  The password issuing means issues a password and a document number for each document data, stores the password, the document number, and the document data in the storage means in association with the identification information, and notifies the password notification. The means notifies the transmission destination of the identification information of the password and the document number. The password accepting means accepts an input of a password associated with the matching identification information for each document number when the input identification information matches the identification information of the storage means, and the password determination means When the password for the predetermined document number is input by the user, it is determined whether the input password matches the password of the identification information corresponding to the document number, and the document data output means When the input password matches the password of the identification information, the document data corresponding to the password can be output.

  With this configuration, the password and document number are issued for each document data, and the user is prompted to enter the password for each document data based on the document number, so that the correspondence between the document number and the document data is transmitted. Therefore, even if a third party attempts to use the confidential print function by pretending to be the sender of the document data, there is a relationship between the document number and the document data. Since it is unknown, the correct password corresponding to the document data cannot be input. As a result, it is possible to enhance the security of the confidential print function.

  The document data output means can be configured to delete the document data corresponding to the password when the input password does not match the password of the identification information.

  With this configuration, even if another user succeeds in authentication for some reason, the document data is deleted if the password entered by the other user is different from the password of the identification information. Therefore, highly confidential document data Can be prevented from leaking outside. Even if a legitimate user accidentally inputs a password different from the password of the identification information and the document data is deleted, the user is the sender of the document data. It is sufficient to transmit it to the image forming apparatus.

  In addition, this invention can be provided as a program distribute | circulated separately via a telecommunication line etc. In this case, a central processing unit (CPU) not shown implements a control operation in cooperation with each circuit other than the CPU according to the program of the present invention. However, each means realized using the program and the CPU can be configured using dedicated hardware.

  The program may be distributed in a state where it is recorded on a computer-readable recording medium such as a CD-ROM. Furthermore, it is possible to provide the steps executed by each means as a menu display method.

  According to the image forming apparatus of the present invention, it is possible to safely print confidential document data associated with a password even if a simple password is issued.

1 is a conceptual diagram illustrating an overall configuration inside a multifunction peripheral according to the present invention. It is an enlarged view of the image reading part which concerns on this invention. It is a conceptual diagram which shows an example of the external appearance of the operation part which concerns on this invention. 1 is a diagram illustrating a configuration of control system hardware of a multifunction peripheral according to the present invention and a personal computer connected to the multifunction peripheral via a network. FIG. FIG. 2 is a functional block diagram of a multifunction machine and a personal computer according to the present invention. It is a flowchart for showing a password issuance and notification execution procedure according to an embodiment of the present invention. 6 is a flowchart for illustrating an execution procedure of outputting document data according to the embodiment of the present invention. FIG. 8A shows an example of a print instruction screen displayed on the display according to the embodiment of the present invention (FIG. 8A), and FIG. 8B shows a first example of the document data-password table according to the embodiment of the present invention. is there. FIG. 9C shows an example of a password confirmation screen displayed on the display screen of the embodiment of the present invention (FIG. 9C), and FIG. 9D shows an example of an initial copy screen displayed on the touch panel of the embodiment of the present invention. ). FIG. 10E shows an example of a user authentication screen displayed on the touch panel according to the embodiment of the present invention (FIG. 10E), and FIG. 10F shows an example of the document data-password table according to the embodiment of the present invention. is there. A first diagram (FIG. 11G) showing an example of a password reception screen displayed on the touch panel of the embodiment of the present invention, and a second diagram showing an example of the password reception screen displayed on the touch panel of the embodiment of the present invention. FIG. 11H is a diagram (FIG. 11H).

  Hereinafter, an image forming apparatus according to an embodiment of the present invention will be described with reference to the accompanying drawings for understanding of the present invention. In addition, the following embodiment is an example which actualized this invention, Comprising: The thing of the character which limits the technical scope of this invention is not. In addition, the alphabet “S” added in front of the numbers in the flowcharts means steps.

<Image forming apparatus>
In the following, the image forming apparatus according to the present invention corresponds to, for example, a printer, a single scanner, or a multifunction machine including a printer, a copy, a scanner, a fax machine, and the like.

  FIG. 1 is a conceptual diagram showing an overall internal configuration of a multifunction peripheral 100 according to the present invention. However, details of each part not directly related to the present invention are omitted. As an example, the operation of the multifunction device 100 when the multifunction device 100 is used to provide a document facsimile function will be briefly described.

  For example, when the user performs facsimile transmission of the document P using the multifunction device 100, the document P is placed on the document table 101 or the table 102 shown in FIG. 1, and the operation unit 103 provided near the document table 101 is placed on the operation unit 103. A print instruction is issued to the user. The user inputs, for example, a destination telephone number or the like specifying a printing apparatus (facsimile apparatus) as a facsimile transmission destination to the multifunction peripheral 100 via the operation unit 103. When the destination telephone number and the facsimile transmission instruction are received via the operation unit 103, the following units (drive units) operate to perform facsimile transmission.

  That is, as shown in FIG. 1, the multifunction peripheral 100 according to the present embodiment includes a main body 104 and a platen cover 105 attached above the main body 104. A document table 101 is provided on the upper surface of the main body 104, and the document table 101 is opened and closed by a platen cover 105. The platen cover 105 is provided with an automatic document feeder 106, a placement table 102, and a sheet discharge table 107.

  The automatic document feeder 106 includes a document conveyance path 108 formed in the platen cover 105, a pickup roller 109 and conveyance rollers 110A and 110B provided in the platen cover 105, and the like. The document conveyance path 108 is a document conveyance path that leads from the mounting table 102 to the paper discharge table 107 via a reading position X where reading is performed by the image reading unit 111 provided in the main body 104.

  The automatic document feeder 106 pulls out documents one by one from a plurality of documents placed on the table 102 to the inside of the conveyance path 108 by a pickup roller 109, and passes the document drawn by the conveyance rollers etc. through the reading position X. Then, the paper is discharged onto the paper discharge tray 107 by the transport roller 110B. When the document passes through the reading position X, the document is read by the image reading unit 111.

  The image reading unit 111 is provided below the document table 101, and its details are shown in FIG. The image reading unit 111 includes a first light source 112 that illuminates the document table 102 in the scanning direction, a slit 113 that selectively allows light from the document table, and a mirror 114 that guides light from the document table. The movable carriage 115, the second movable carriage 117 including mirrors 116A and 116B that reflect the reflected light from the first movable carriage 115 again, and the lens group 118 that optically corrects the light guided by the mirror, An image sensor 119 that receives light corrected by the lens group 118, and an image data generator 120 that converts the light received by the image sensor 119 into an electrical signal and performs correction processing, image quality processing, compression processing, and the like as necessary. It consists of and.

  When reading a document on the automatic document feeder 106, the light source 112 moves to a position where the reading position X can be irradiated and emits light. Light from the light source 112 is reflected by a document that passes through the document table 101 and passes through the reading position X, and is guided to the image sensor 119 by the slit 113, mirrors 114, 116A, and 116B, and the lens group 118. The image sensor 119 converts the received light into an electrical signal and transmits it to the image data generation unit 120. The light received by the image sensor 119 is input to the image data generation unit 120 as analog electrical signals of R (red), G (green), and B (blue), where analog-digital conversion is performed. Digitized. Further, the image data generation unit 120 generates digital image data composed of a plurality of unit data by using the sequentially converted digital signal as unit data (density value) and performing correction processing, image quality processing, compression processing, and the like on the unit data. To do.

  Further, the image reading unit 111 can read not only a document conveyed by the automatic document feeder 106 but also a document placed on the document table 101. When reading the document placed on the document table 101, the first carriage 114 moves in the sub-scanning direction while emitting the light source 112, so that the optical path length from the light source 112 to the image sensor 119 is constant. The second moving carriage 117 moves in the direction of the image sensor 119 at a half speed of the first moving carriage 115.

  The image sensor 119 electrically outputs the light from the document placed on the document table 101 based on the light guided to the mirrors 114, 116 A, and 116 B, as in the case of the document conveyed to the automatic document feeder 106. Based on this, the image data generation unit 120 generates image data (document data) and stores it in the storage unit 120B.

  Below the storage unit 120B of the main body 104, there is provided a communication unit 120D that receives image data from a personal computer (PC) 120C as a predetermined transmission destination and transmits a password to be described later to the PC 120C. The communication unit 120D receives image data from the transmission destination PC 120C connected to the network 120F via the network interface 120E, and transmits a password. The PC 120C that has received the password via the network 120F displays the password on the display (described later).

  In addition, the multifunction peripheral 100 according to the present invention further includes an image forming unit 121 that executes a copy function process. The image forming unit 121 is provided below the image reading unit 111 of the main body 104, and prints (outputs) image data stored in the storage unit 120B. Image data that can be printed by the image forming unit 121 is generated by the image data generating unit 120 as described above, or from other terminals such as the PC 120C connected to the image forming apparatus 100 and the network via the network 120F. It has been received.

  As a printing method performed by the image forming unit 121, an electrophotographic method is used. That is, the photosensitive drum 122 is uniformly charged by the charger 123, and then a latent image is formed on the photosensitive drum 122 by irradiating the photosensitive drum 122 with a laser 124, and toner is attached to the latent image by the developing device 125. In this method, a visual image is formed and the visible image is transferred to a transfer medium by a transfer roller.

  Note that in the image forming apparatus corresponding to the full-color image, the developing device (rotary developing device) 125 is rotated in the circumferential direction around the rotation axis configured in the direction perpendicular to the paper surface of FIG. A developing unit storing color toner is disposed at a position opposite to the photosensitive drum 122. In this state, the latent image on the photosensitive drum 122 is developed with toner stored in the developing device 125 and transferred to the intermediate transfer belt 126A. The developing unit 125 includes four developing units 125 (Y), (C), (M), and yellow (Y), cyan (C), magenta (M), and black (K), respectively. (K). By repeating the transfer to the intermediate transfer belt 126A for each color, a full-color image is formed on the intermediate transfer belt 126A. A transfer medium on which a visible image is printed, that is, a sheet, is placed on a sheet feeding tray such as a sheet feeding cassette 132, 133, or 134.

  When the image forming unit 121 performs printing, one transfer medium is pulled out from any one of the paper feed trays by using the pickup roller 135, and the transferred transfer medium is intermediate transfer belt by the transport roller 136 or the registration roller 137. It is fed between 126A and the transfer roller 126B. When the visible image on the intermediate transfer belt 126A is transferred to the transfer medium fed between the intermediate transfer belt 126A and the transfer roller 126B, the image forming unit 121 uses the conveyance belt 127 to fix the visible image. The transfer medium is sent to the fixing unit 128 (fixing device). The fixing unit 128 includes a heating roller 129 with a built-in heater and a pressure roller 130 pressed against the heating roller 129 with a predetermined pressure. When the transfer medium passes between the heating roller 129 and the pressure roller 130, the visible image is fixed to the transfer medium by heat and a pressing force to the transfer medium. The fixed transfer medium is discharged to a discharge tray 131.

  With this procedure, the copy function of the multifunction device 100 is processed.

  FIG. 3 is a conceptual diagram showing an example of the appearance of the operation unit 103 according to the present invention. Using the operation unit 103, the user inputs setting conditions relating to the copy function as described above, for example, the paper size, sets a confidential print function to be described later, and inputs a predetermined user ID and password. Or confirm the input setting conditions, user ID, password, and the like. When the setting condition or the like is input, a touch panel 301, a touch pen 302, and an operation key 303 provided in the operation unit 103 are used.

  The touch panel 301 has a function of inputting setting conditions and the like and a function of displaying the setting conditions and the like. For example, when a key in a setting screen displayed on the touch panel 301 is pressed (selected), a setting condition associated with the key is input to the multifunction device 100. Since the background color of the pressed key or the like is changed from white to gray in conjunction with the pressing, it is visually recognized whether the key or the like is being pressed by the background color of the key or the like. The same applies to predetermined user ID input and password input.

  Further, a touch pen 302 is provided in the vicinity of the touch panel 301. When the user brings the tip of the touch pen 302 into contact with the touch panel 301, a sensor provided under the touch panel detects the touch destination. Since the tip of the touch pen is almost close to a point, the sensor detects, for example, the contact point in dot units (minimum unit). Therefore, for example, compared with the case where the position in the touch panel 301 is designated with a finger, the position designated with the touch pen 302 can be designated more accurately. The user can select a key or the like displayed on the touch panel 301 with the touch pen 302 instead of the fingertip.

  Further, a predetermined number of operation hard keys 303 are provided near the touch panel 301. For example, a numeric keypad 304, a start key 305, a clear key 306, a stop key 307, a reset key 308, a power key 309, an up hard key 310, and a down key. A hard key 311 is provided.

  Next, the configuration of the control system hardware of the multifunction machine 100 will be described with reference to FIG. FIG. 4 is a diagram showing the configuration of the control system hardware of the multifunction peripheral 100 according to the present invention and a personal computer connected to the multifunction peripheral via the network. However, details of each part not directly related to the present invention are omitted.

  The control circuit of the multifunction peripheral 100 includes a CPU (Central Processing Unit) 401, a ROM (Read Only Memory) 402, a RAM (Random Access Memory) 403, an HDD (Hard Disk Drive) 404, a driver 405 corresponding to each drive unit, and a communication. An interface 407 is connected by an internal bus 406. The CPU 401 uses, for example, the RAM 403 as a work area, executes a program stored in the ROM 402, the HDD 404, and the like, and receives data and instructions from the driver 405 and the operation unit 103 (not shown) based on the execution result. The operation of each drive unit shown in FIG. 1 is controlled. Further, each means (shown in FIG. 5) other than the driving unit described later is realized by the CPU 401 executing the program. The ROM 402, the HDD 404, and the like store programs and data for realizing each means described below. The communication interface 407 is connected to a personal computer (PC) 120C, which is another device, via a network 120F (a communication cable connected to the network 120F). The CPU 401 exchanges data with the PC 120C and the like via the communication interface 407. The control circuit of the PC 120C is the same as the control circuit of the multifunction machine 100 described above.

<Embodiment of the present invention>
Next, with reference to FIG. 5 to FIG. 7, a description will be given of a procedure in which the multifunction peripheral 100 according to the embodiment of the present invention securely prints confidential document data associated with a password even when a simple password is issued. FIG. 5 is a functional block diagram of the MFP 100 according to the embodiment of the present invention. FIG. 6 is a flowchart for showing a password issuance and notification execution procedure according to the embodiment of the present invention. FIG. 7 is a flowchart for illustrating an execution procedure of outputting document data according to the embodiment of the present invention.

<Issuance and notification of password>
First, the user turns on the power of the PC 120C connected to the multifunction peripheral 100 via the network, and uses the input unit 501 such as a mouse and a keyboard to identify the user ID (identification information for identifying the user, for example, “N0001”). ) Is received, the user authentication unit 502 (first user authentication unit) of the PC receives the user ID “N0001” (FIG. 6: S101), and stores the input user ID and the authentication information storage unit 503 in advance. The use permission ID (for example, “N0001”) is compared to determine whether or not they match (FIG. 6: S102).

  As a result of the determination, if both match (FIG. 6: S102 YES), the first user authentication means 502 permits the user to use the PC, displays an initial screen (not shown) of the PC, and displays the initial Various instructions from the user are accepted via the screen. On the other hand, if the two do not match (FIG. 6: S102 NO), the first user authentication means 502 again accepts an input of the correct user ID from the user (FIG. 6: S101).

  When the first user authentication unit 502 displays the initial screen, the user uses the input unit 501 while viewing the initial screen to input a print instruction for document data stored in the PC 120C. Upon receiving the print instruction, the first user authentication unit 502 refers to the document data storage unit 504 that stores the document data, and also communicates with other devices other than the PC 120C (first communication unit 505). ) To output destination identification information (for example, IP address) of the image forming apparatus that can communicate at this time. Then, the first user authentication unit 502 displays a print instruction screen on which the document data and the output destination corresponding to the output destination identification information are displayed on the display of the PC 120C (FIG. 6: S103).

  FIG. 8A is a diagram illustrating an example of a print instruction screen displayed on the display according to the embodiment of this invention.

  As shown in FIG. 8A, on the print instruction screen 800, the user ID “N0001” 801 of the user currently using the PC 120C and a message “Prompt document data to prompt the user to select document data to be output” are displayed. "Specify." 802, a document name key 803 corresponding to the document data, and a message "Specify document data transmission destination" prompting the user to select a transmission destination (output destination) desired to output the document data. 804, an output destination key 805 corresponding to the output destination, a “secret print” key 806 for causing the output destination image forming apparatus to execute a confidential print function, and a selected output destination. A “send” key 807 and a “cancel” key 808 are displayed for sending the received document data.

  The user moves the pointer corresponding to the input unit 501 while looking at the print instruction screen 800, and a predetermined number of document name keys 803 (for example, “minutes” key, “details” key, “address book” key). When a predetermined output destination key 805 (for example, “MFP M001” key) and a “confidential print” key 806 are selected and a “send” key 807 is selected, the first user authentication unit 502 uses the confidential print function. The fact that the predetermined document data is transmitted to the predetermined output destination is accepted (FIG. 6: S104), and the document data (“minutes”, “details”, “address book”) corresponding to the accepted document name key is documented. Receiving the document data read from the data storage unit 504 and information indicating the confidential print (referred to as confidential print information) via the first notification unit 505. It was transmitted to the destination ( "MFP M001") of the MFP communication unit 506 (second communication means) (Figure 6: S105).

  When the second communication means 506 receives the document data and the confidential print information, it notifies the password issuing means 507 to that effect, and the password issuing means 507 that has received the notification prints the confidential print information together with the received document data. Is determined (FIG. 6: S106).

  As a result of the determination, if the confidential print information exists (FIG. 6: S106 YES), the password issuing means 507 issues a password for each document data (FIG. 6: S107).

  Here, the password issued by the password issuing unit 507 may be a password having any configuration as long as it is a password different from the document data (a password that can identify (authenticate) the document data). In the embodiment of the present invention, the password issuing means 507 sets the number of characters constituting the password to 4 characters, randomly selects one alphabet (for example, “X”) from the alphabet, and selects the selected one character. Four consecutive character strings (for example, “XXXX”) are issued to one document data as a password.

  In the embodiment of the present invention, when the password issuing unit 507 issues one password for one document data, the document number (indicating the order of receiving the document data for the document data ( For example, “D001”) is issued. Since three pieces of document data have been received, the password issuing unit 507 has three different passwords (for example, for example, “minutes”, “details”, and “address book”) (for example, "XXXX", "YYYY", "ZZZZZ") and three document numbers (for example, "D001", "D002", "D003") indicating the order of reception for each document data. Issue.

  When the password issuing unit 507 issues the password and the document number, it notifies the identification information acquiring unit 508 to that effect. Upon receiving the notification, the identification information acquisition unit 508 acquires identification information (user ID “N0001”) for identifying the transmission destination user who transmitted the document data (FIG. 6: S108). In the acquisition method, for example, the identification information acquisition unit 508 performs the first user authentication unit 502 or authentication of the PC 120C based on the transmission destination identification information (for example, IP address) of the transmission destination via the second communication unit 506. The user ID input by the user may be acquired from the information storage unit 503. When the first user authentication unit 502 transmits the document data, the user ID is given to the document data. The acquisition unit 508 may acquire the user ID assigned to the received document data. The first user authentication unit 502 may simply be configured to transmit the user ID together with the document data.

  When the identification information acquisition unit 508 acquires the user ID (“N0001”), the user ID is notified to the password issuing unit 507, and the password issuing unit 507 that has received the notification includes the received document data and the received user ID. Then, the password issued for the document data and the document number are associated with each other and stored in the document data-password storage unit 509 as a document data-password table (FIG. 6: S109).

  FIG. 8B is a first diagram illustrating an example of a document data-password table according to the embodiment of this invention.

  As shown in FIG. 8B, document data-password table 809 stores document data 811 corresponding to user ID “N0001” 810, document number 812, and password 813 in association with each other.

  When the password issuing unit 507 completes the storage in the document data-password storage unit 509, it notifies the password notification unit 510 to that effect. Upon receiving the notification, the password notifying unit 510 refers to the stored document data-password table 809, and transmits the document number 812 belonging to the user ID “N0001” 810 and the password 813 via the second communication unit 506. The first user authentication unit 502 that is the transmission destination of the document data is notified (FIG. 6: S110). Upon receiving the notification, the first user authentication unit 502 displays a password confirmation screen in which the document number 812 and the password 813 are associated with the transmitted document data on the display screen of the PC 120C, and the issued document number 812 is issued. And the password 813 are notified to the user (FIG. 6: S111).

  FIG. 9C is a diagram illustrating an example of a password confirmation screen displayed on the display screen according to the embodiment of this invention.

  As shown in FIG. 9C, on the password confirmation screen 900, a message “Document data has been sent” 901 indicating that the transmission of document data has been completed to the user, and a message indicating that a password has been issued for each document data. “A password has been issued by the confidential print function.” 902, a table 903 indicating the correspondence between the transmitted document data, the document number, and the password, and the user remembering the issued password for each document data Message “Remember the document number and password corresponding to the document data” 904 and an “OK” key 905 for closing the password confirmation screen 900 are displayed. As a result, the user remembers the document number and the password associated with each other for each document data transmitted by the user. The table 903 is created by associating, for example, the order in which the first user authentication unit 502 transmits the document data with the received document number 812.

  When the user who has learned the document number and password for each document data selects the “OK” key 905 using the pointer corresponding to the input unit 501, the first user authentication unit 502 deletes the password confirmation screen 900. . This completes the password issuance and notification procedures.

  In S106, if the password issuing unit 507 determines whether or not there is confidential print information, as a result of the determination that the confidential print information does not exist (FIG. 6: S106 NO), the password issuing unit 507 does not issue the password and the document data. The output means 511 is notified that the document data is to be output. Upon receiving the notification, the document data output unit 511 executes image formation based on the document data (FIG. 6: S112). This is a normal document data output procedure.

<Output of document data>
A user who sees the password confirmation screen 900 and learns a password for each document data (document number) moves from his / her PC to the front of the destination MFP 100 (“MFP M001”). When a finger is brought into contact with the touch panel 301 of 100, the display receiving unit 512 displays a copy initial screen for setting copy conditions on the touch panel 301 (FIG. 7: S201).

  FIG. 9D is a diagram illustrating an example of an initial copy screen displayed on the touch panel according to the embodiment of this invention.

  As shown in FIG. 9D, the copy initial screen 906 displays a “confidential print” key 908 for shifting to the confidential print mode in addition to the normal setting item key 907 for setting the copy condition. The

  Therefore, when the user presses (selects) the “confidential print” key 908, the display accepting unit 512 accepts the press of the “confidential print” key 908 (setting of the confidential print function) (FIG. 7: S202 YES). The user authentication unit 513 (second user authentication unit) of the machine 100 is notified. Upon receiving the notification, the second user authentication unit 513 displays a user authentication screen on the touch panel 301 and accepts an input of a user ID corresponding to the transmission destination to which the document data is transmitted from the user (user authentication) ( FIG. 7: S203).

  FIG. 10E is a diagram showing an example of a user authentication screen displayed on the touch panel according to the embodiment of the present invention.

  As shown in FIG. 10E, on the user authentication screen 1000, a message “Please enter the password corresponding to the document number.” 1001 prompting the user to input his / her user ID can be entered. A user ID input field 1002, a keyboard key 1003 for inputting a user ID, and an “OK” key 1004 are displayed.

  When the user inputs his / her user ID “N0001” into the user ID input field 1002 using the keyboard key 1003 and presses the “OK” key 1004 while looking at the user authentication screen 1000, the second user authentication means 513 is displayed. The input user ID (input user ID) is received (FIG. 7: S204), and the document is referred to by referring to the document data-password table of the document data-password storage means 509 at the time when the user ID is input. It is determined whether or not the user ID (comparison user ID) stored in the data-password table matches the input user ID (FIG. 7: S205).

  FIG. 10F is a second diagram illustrating an example of the document data-password table according to the embodiment of this invention. In FIG. 10F, for example, after a user with a user ID “N0001” transmits document data, a user with a user ID “N0002” other than the user ID “N0001” is further sent from his / her PC together with confidential print information. A document data-password table 1005 when the document data is transmitted to the multi-function peripheral 100 is shown.

  If the input user ID matches the comparison user ID as a result of the determination (FIG. 7: S205 YES), the second user authentication unit 513 notifies the password reception unit 514 that the user authentication has been successful. Upon receiving the notification, the password accepting unit 514 receives the document number 1007 (“D001”, “D002”, “D003”) corresponding to the matched comparison user ID “N0001” 1006 as shown in FIG. A password reception screen acquired from the password table 1005 and displaying the document number 1007 is displayed on the touch panel 301 (FIG. 7: S206), and an input of a password corresponding to the document number 1007 is received from the user (FIG. 7: S207). Thereby, only the user who transmitted the document data is authenticated, and only the user can use the confidential print function. Also, since the user ID used for user authentication is regularly used by the user, the user is less likely to forget, and the user who sent the document data can easily perform the confidential print function. There is also an advantage that it can be used.

  On the other hand, if the input user ID does not match the comparison user ID as a result of the determination by the second user authentication means 513 (FIG. 7: S205 NO), the second user authentication means 513 deletes the input user ID, The user authentication screen 1000 is displayed again so as to input a new user ID to the user (FIG. 7: S203). This avoids a situation where a third party (a person other than the person who sent the document data) easily uses the confidential print function.

  When the password acceptance unit 514 displays the password acceptance screen (FIG. 7: S206) and accepts the input of the password (FIG. 7: S207), the procedure is as follows.

  FIG. 11G is a first diagram illustrating an example of a password reception screen displayed on the touch panel according to the embodiment of this invention.

  As shown in FIG. 11G, on the password reception screen 1100, a message “Please enter the password corresponding to the document number.” 1101 and the user ID “N0001” prompting the user to input the password corresponding to the document number. ”Corresponding to the document number 1102, a password input field 1103 prepared for each document number 1102, a keyboard key 1104 for inputting a password, a“ printout ”key 1105, and a“ cancel ”key 1106. Is displayed.

  The user who has seen the password acceptance screen 1100 selects a password input field 1103a of a predetermined document number 1102a (for example, “D001”), and a password (for example, “XXXX”) corresponding to the document number “D001” 1102a. When the “printout” key 1105 is pressed, the password accepting means 514 accepts the entered password (input password) (FIG. 7: S207 YES) and notifies the password determining means 515. Upon receiving the notification, the password determination unit 515 acquires the password 1008a (to be referred to as a comparison password) corresponding to the document number “D001” 1102a (1007a) selected by the user from the document data-password table 1005, and compares it with the input password. It is determined whether or not the password matches (FIG. 7: S208).

  As a result of the determination, when the input password matches the comparison password (FIG. 7: S208 YES), the password determination unit 515 notifies the document data output unit 511 to that effect. Upon receiving the notification, the document data output unit 511 reads the document data 1009a (“minutes”) associated with the matched password 1008a (“XXXX”) from the document data-password table 1005, and stores the document data 1009a in the document data 1009a. Based on this, image formation is executed (FIG. 7: S209). As a result, the document data of the document number corresponding to the password remembered by the user can be subjected to image forming processing, and the confidential print function is exhibited.

  When the document data output unit 511 completes the image forming process based on the document data, the password reception unit 514 is notified of the completion. Upon receiving the notification, the password receiving unit 514 deletes the document data “minutes” 1009a, the password “XXXX” 1008a, and the document number “D001” 1007a that have been output from the document data-password table 1005 (FIG. 7). : S210). Then, the password receiving unit 514 determines whether or not the document number 1007 belonging to the user ID “N0001” exists in the deleted document data-password table (FIG. 7: S211), and the document number 1007 exists. (FIG. 7: S211 YES), the password acceptance screen is redisplayed on the touch panel based on the document data-password table (FIG. 7: S206), and the input of the password of the document number 1007 for which output has not been completed yet is accepted. (FIG. 7: S207).

  FIG. 11H is a second diagram illustrating an example of a password acceptance screen displayed on the touch panel according to the embodiment of this invention.

  As shown in FIG. 11H, in the re-displayed password reception screen 1107, the document number “D001” 1102a (1007a) that has been output is deleted, and the document number 1102 that has not yet been output and corresponds to the document number 1102 A password input field 1103 is continuously displayed. Thus, since the document number that has been output is deleted from the password reception screen every time document data is output, the user who sees the password reception screen at first glances the document number for which the password must be input immediately. It is possible to confirm the password, and it is possible to input all of the document numbers stored in the PC without leaving a password.

  By the way, as a result of the determination by the password determination unit 515, if the input password and the comparison password do not match (FIG. 7: S208 NO), the password reception unit 514 is notified to that effect, and the password reception unit 514 erases the input password. Then, the password acceptance screen 1100 is displayed again (FIG. 7: S206), and the correct password input from the user is accepted (FIG. 7: S207). As a result, the document data for which the user has forgotten the password is not subjected to image formation processing, so that the confidentiality of the document data is ensured.

  If the input password and the comparison password do not match (FIG. 7: S208 NO), the password determination unit 515 notifies the document data output unit 511 to that effect, and the document data output unit 511 that has received the notification compares the password. The document data corresponding to the password (document data of the document number corresponding to the comparison password) may be deleted (erased) from the document data-password table. With this configuration, even if another user succeeds in authentication for some reason, the document data is deleted if the password entered by the other user is different from the password of the identification information. Therefore, highly confidential document data Can be prevented from leaking outside. Even if a legitimate user accidentally inputs a password different from the password of the identification information and the document data is deleted, the user is the sender of the document data. It suffices to transmit it to the multifunction device 100.

  When the user inputs a password for all the document numbers 1102 on the password reception screen 1100 and image forming processing is performed on the document data corresponding to all the document numbers 1102, for example, the procedure is as follows.

  That is, the document data output unit 511 completes the image forming process based on the last remaining document data (for example, “address book”) (FIG. 7: S209), and the password reception unit 514 outputs the document data after the output is completed. Is deleted from the document data-password table (FIG. 7: S210), all document numbers 1007 and the like corresponding to the user ID “N0001” 1006 are deleted from the document data-password table 1005. Upon confirming that all the document numbers 1007 and the like corresponding to the user ID “N0001” 1006 have been erased (the absence of the document number 1007) (FIG. 7: S211 NO), the password receiving unit 514 displays that fact. The display accepting means 512 that has received the notice switches the display on the touch panel 301 from the password acceptance screen to the copy initial screen 906 (FIG. 9D) (FIG. 7: S212). Thereby, the confidential print function is automatically terminated.

  On the other hand, if there is a document number 1007 that is not erased even in part among the document numbers 1007 corresponding to the user ID “N0001” 1006 in the document data-password table 1005, in other words, the user can set a password for a predetermined document number. For example, the following procedure is used when the correct password cannot be entered.

  That is, when the user gives up the input of the password corresponding to the document number in a state where the document number for which the password has not been entered is left in the password acceptance screen 1100 and presses the “cancel” key 1106 (FIG. 7: S207 NO), In response to pressing of the “Cancel” key 1106, the password accepting unit 514 accepts the end of password input, and documents the document number 1007, password 1008, and document data 1009 associated with the user ID “N0001” 1006. All data is deleted from the data-password table 1005 (FIG. 7: S213). As a result, even if a storage medium (for example, HDD) for storing the document data-password table is stolen by another user, a situation in which highly confidential document data is leaked to the outside is avoided, and security is enhanced. Is possible. It should be noted that when the password receiving unit 514 deletes all the document data from the document data-password table 1005, the password is received a predetermined number of times even when the user once switches to the password receiving screen 1100 and presses the “Cancel” key 1106. It may be at the time when the “cancel” key 1106 is pressed after shifting to the screen 1100.

  Subsequently, the password receiving unit 514 notifies the display receiving unit 512 that the document data 1009 and the like have been deleted from the document data-password table 1005, and the display receiving unit 512 that has received the notification copies from the password receiving screen 1100. The display on the touch panel 301 is switched to the initial screen 906 (FIG. 9D) (FIG. 7: S212). As a result, the confidential print function ends.

  It should be noted that unoutputted document data may be output by, for example, returning the user's own PC to the MFP again and transmitting only the unoutputted document data to the multifunction peripheral and repeating the above-described procedure.

  As described above, when receiving the document data, the MFP 100 according to the present invention issues a password for each document data, and the document data and the password are used as identification information for identifying a transmission destination user who has transmitted the document data. The password issuing unit 506 stores the document data and password storage unit 508 in association with each other, and the password notification unit 509 notifies the transmission destination of the identification information of the password. Further, when the identification information is input by the user, the MFP 100 determines whether or not the input identification information matches the identification information of the document data-password storage unit 508. When means 513 matches the input identification information and the identification information of the storage means, password accepting means 514 accepts the input of the password associated with the matching identification information, and the user inputs the password The password determination means 515 for determining whether or not the input password and the password of the identification information match; and if the input password and the password of the identification information match, the document data corresponding to the password Document data output means 511 for outputting.

  With this configuration, when the user uses the confidential print function of the multifunction peripheral 100, the user who transmitted the document data is authenticated based on the user identification information, and the password of the document data associated with the identification information is received. Therefore, even if the password that is temporarily issued is a simple password that can authenticate the document data, the entire MFP can authenticate the user who sent the document data and the authentication of the document data that the user wants to output It is possible to add functions. Therefore, it is possible to maintain the security of the confidential print function even if a sufficiently simple password is issued compared to the password issued by the conventional confidential print function, and simplify the password. Thus, it becomes possible to reduce the difficulty of remembering the password (easy to forget) for the user. As a result, it is possible to improve user convenience in the confidential print function.

  In the embodiment of the present invention, the password issuing unit 507 issues the document number together with the password, and the password receiving unit 514 receives the password for each document number. There may be no password acceptance configuration. That is, if the second user authentication unit 513 authenticates the user, the password issuing unit 507 issues a password for each document data at the time of reception, and the password receiving unit 514 sequentially receives a password from the user instead of each document data. You may comprise so that the input of may be received. Even in this configuration, since the user authentication function and the document data authentication function are added to the entire MFP, the security of the confidential print function is maintained.

  Further, in the embodiment of the present invention, the password issuing unit 507 is configured to issue a character string in which four alphabetic characters are continuously arranged as a password. However, it is possible to authenticate (identify) document data. Any other configuration may be used as long as it is a password. For example, characters such as numbers, symbols, and alphabets may be combined, or the number of characters constituting the password may be increased or decreased (eg, 2 characters, 3 characters, 5 characters, etc.). Absent. Here, the password capable of authenticating the document data means that the same password may be issued for different user IDs as long as the document data belonging to each user ID can be authenticated. Meaning. Therefore, also in the embodiment of the present invention, the password issuing unit 507 issues a password for each document data and associates the issued password with the user ID. Even when the password issuing unit 507 receives the user ID from the identification information acquiring unit 508 first, the password issuing unit 507 issues a password for the document data and associates the password with the user ID.

  With this configuration, for example, as shown in FIG. 10F, the password “XXXX” corresponding to the user ID “N0001” and the password “XXXX” corresponding to the user ID “N0002” may be the same. Even in such a case, since the second user authentication unit 513 authenticates the user who sent the document data, the confidential print function that executes printing while maintaining confidentiality is appropriately exhibited. It is possible. In the secret print function in the prior art, a password having both a user authentication function and a document data authentication function, for example, eight characters, each consisting of eight alphabets randomly selected for each character. A string of characters “ABFKISRM” arranged continuously was issued. It is understood that the password of the present invention is dramatically shortened (simplified) and is easy to remember for the user as compared with the password of the prior art.

  In the embodiment of the present invention, the second user authentication unit 513 accepts the input of the user ID via the user authentication screen, but other configurations, for example, a card reader that reads the user ID from an ID card, You may comprise so that the user ID of the transmission destination which transmitted document data may be received using the fingerprint authentication means etc. which acquire user ID by fingerprint authentication. The card reader, the fingerprint authentication means, and the like are the same as the first user authentication means 502 of the PC.

  In the embodiment of the present invention, the first user authentication unit 502 is configured to attach one piece of confidential print information to a plurality of document data and transmit it to the password issuing unit 507. You may comprise so that confidential print information can be provided as needed by the user. In the case of this configuration, the password issuing unit 507 issues a password only for document data to which confidential print information is assigned.

  In the embodiment of the present invention, the password issuing unit 507 determines whether or not to issue a password based on the presence or absence of confidential print information. However, even if there is no confidential print information, the password issuing unit 507 determines the password for each received document data. May be configured to issue.

  In the embodiment of the present invention, the first user authentication unit 502 is provided so that the user is authenticated when the user transmits the document data from the PC to the multifunction peripheral. However, the user authentication is not necessarily required. When the document data is transmitted from the PC to the password issuing unit of the MFP, the identification information acquisition unit 508 is configured to acquire the user ID of the user who transmitted the document data. It may be a form.

  In the embodiment of the present invention, the MFP 100 is configured to include each unit. However, a program that realizes each unit may be stored in a storage medium and the storage medium may be provided. In this configuration, the program is read by the image forming apparatus, and the image forming apparatus implements the respective units. In that case, the program itself read from the recording medium exhibits the effects of the present invention. Furthermore, it is also possible to provide a storage method for storing the steps executed by each means in a hard disk.

  That is, when the document data is received, a password is issued for each document data, and the password and the document data are stored in the storage unit in association with identification information for identifying a transmission destination user who has transmitted the document data. Whether a password issuance step, a password notification step for notifying the password to the transmission destination of the identification information, and the identification information input by the user match the identification information in the storage means A user authentication step for determining whether the input identification information matches the identification information of the storage means, a password reception step for accepting an input of a password associated with the matching identification information, and a password by the user When entered, it is determined whether or not the entered password matches the password of the identification information. And password determination step of, if the inputted password and the password of the identification information matches, may be provided as an image forming method and a document data output step of outputting the document data corresponding to the password. The image forming method also requires the above-described effects.

  As described above, the document number is adopted, and the password issuing step issues a password and a document number for each document data, and the password, the document number, and the document data are used as the identification information. The password notification step notifies the password and the document number to the transmission destination of the identification information, and the password reception step identifies the input identification information and the identification of the storage means. If the information matches, the input of the password associated with the matching identification information is accepted for each document number, and the password determination step receives the input password when the password for the predetermined document number is input by the user. And whether the password of the identification information corresponding to the document number matches, the document Over data outputting step, when the input password and the password of the identification information matches, may be configured to output the document data corresponding to the password.

  As described above, the image forming apparatus and the image forming method according to the present invention are useful not only for multifunction peripherals but also for copiers, printers, and the like. Even when a simple password is issued, confidential document data associated with the password is stored. It is effective as an image forming apparatus and an image forming method capable of printing safely.

DESCRIPTION OF SYMBOLS 100 MFP 501 Input means 502 First user authentication means 503 Authentication information storage means 504 Document data storage means 505 First communication means 506 Second communication means 507 Password issuing means 508 Identification information acquisition means 509 Document data-password storage Means 510 Password notification means 511 Document data output means 512 Display acceptance means 513 Second user authentication means 514 Password acceptance means 515 Password determination means

Claims (5)

When the document data is received, a password is issued for each document data, and the password and the document data are stored in the storage unit in association with identification information for identifying a transmission destination user who has transmitted the document data. Means,
Password notifying means for notifying the transmission destination of the identification information of the password;
When the identification information is input by the user, user authentication means for determining whether or not the input identification information matches the identification information of the storage means;
A password receiving unit that receives an input of a password associated with the matching identification information when the input identification information matches the identification information of the storage unit;
When a password is input by the user, password determination means for determining whether or not the input password matches the password of the identification information;
A document data output means for outputting document data corresponding to the password if the input password matches the password of the identification information;
An image forming apparatus comprising: The password issuing unit issues a password and a document number for each document data, stores the password, the document number, and the document data in the storage unit in association with the identification information,
The password notification means notifies the password and the document number to the transmission destination of the identification information,
The password accepting means accepts input of a password associated with the matching identification information for each document number when the input identification information matches the identification information of the storage means,
The password determination unit determines whether or not the input password matches the password of the identification information corresponding to the document number when a password for the predetermined document number is input by the user;
The image forming apparatus according to claim 1, wherein the document data output unit outputs the document data corresponding to the password when the input password matches the password of the identification information. The image forming apparatus according to claim 1, wherein the document data output unit deletes the document data corresponding to the password when the input password does not match the password of the identification information. When the document data is received, a password is issued for each document data, and the password and the document data are stored in the storage unit in association with identification information for identifying a transmission destination user who has transmitted the document data. Steps,
A password notification step of notifying the password of the identification information to a transmission destination;
When the identification information is input by the user, a user authentication step of determining whether or not the input identification information matches the identification information of the storage unit;
A password receiving step for accepting an input of a password associated with the matching identification information when the input identification information and the identification information of the storage means match;
A password determination step for determining whether or not the input password and the password of the identification information match when the password is input by the user;
A document data output step for outputting document data corresponding to the password if the input password matches the password of the identification information;
An image forming method comprising: The password issuing step issues a password and a document number for each document data, stores the password, the document number, and the document data in the storage unit in association with the identification information,
The password notification step notifies the transmission destination of the identification information of the password and the document number,
The password receiving step receives, for each document number, an input of a password associated with the matching identification information when the input identification information matches the identification information of the storage means,
In the password determination step, when a password for a predetermined document number is input by the user, it is determined whether or not the input password matches the password of the identification information corresponding to the document number;
The image forming method according to claim 4, wherein the document data output step outputs document data corresponding to the password when the input password matches the password of the identification information.

Images