JP2012065254A - Image processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image processor capable of keeping confidentiality of important data without deterioration in utilization efficiency in a manner simpler than a conventional manner.SOLUTION: The image processor is provided with: input means 16 and 17 for receiving input of image data; recording means 13 for recording the image data input from the input means 16 and 17; a determination means 14 for determining whether the image data recorded in the recording means 13 is confidential or not; and an authentication means 15 for authentication of a user. The authentication means 15 is activated when at least one of the pieces of the image data recorded in the recording means 13 is determined to be confidential, but inactivated when none of the pieces of the image data recorded in the recording means 13 is determined to be confidential. This makes it possible to inactivate the authentication function in normal time when no confidential data is recorded and to activate the authentication function when confidential data is recorded.

Description

  The present invention relates to an image processing apparatus, and more particularly to an image data processing apparatus such as a digital multifunction peripheral (MFP).

In recent years, digital multifunction peripherals (hereinafter also referred to as MFPs) equipped with a plurality of functions such as facsimiles (hereinafter referred to as FAX), printers, and scanners have become widespread. The MFP is equipped with various functions, and usually includes the following functions.
(1) "Data storage function" to store various data permanently or temporarily
(2) “User authentication function” that keeps the confidentiality of the data stored in (1) by limiting users

  Regarding the user authentication function, the following patent document 1 discloses that a copying machine performs authentication for use permission using an IC card in which authentication data is stored, and the copying machine can be used when the authentication is passed (copying is possible). ) Is disclosed. Further, in Patent Document 2 below, the input of an authentication number is set as a start condition among a plurality of operation modes mounted on the device, and the authentication result of the authentication number input at the time of selecting a predetermined operation mode is used. A technique for permitting operation in the operation mode is disclosed. Patent Document 3 below discloses a technique for setting on / off of an authentication function that requires authentication when using an apparatus.

JP-A 61-227976 Japanese Patent Laid-Open No. 4-19756 JP 2005-167957 A JP 2010-64257 A

Since the “data storage function” and “user authentication function” described above are independent functions, the following problems are assumed.
(A) When priority is given to the secrecy of data over operability, the user authentication function must be enabled regardless of the presence or absence of stored data. That is, even though there is no data to be protected in the MFP, the user is forced to perform an authentication operation, resulting in a decrease in user operability.
(B) If the user operability is prioritized over the confidentiality of the data, the user authentication function must be disabled regardless of the presence or absence of stored data. In this case, since the authentication operation is unnecessary, the operability can be prevented from being lowered, but the confidentiality of the data to be protected is lowered.
(C) Although the administrator can manually switch between enabling / disabling the user authentication function, the data storage status (presence / absence of stored data) changes dynamically, so the administrator can change the user authentication function according to the status. It is actually difficult to switch between.

  None of the above-mentioned patent documents 1 to 3 can solve the problems (a) to (c). That is, in Patent Document 1, it is necessary to always hold the IC card over the authentication, and there is a problem that the operation efficiency is lowered by giving priority to the authentication. Further, in Patent Document 2, since use authentication is performed only when a predetermined mode is used, a mode that does not require authentication can be used freely, and there is a problem that data confidentiality cannot be maintained. Furthermore, Patent Document 3 is in a state where authentication is always performed or a state where it can be used without authentication.

  As described above, in the conventional apparatus, it is basic to perform user authentication before using the apparatus. In other cases, authentication is required to access specific data. Therefore, although effective in terms of security, authentication is required under any circumstances, leading to a reduction in the processing capability and convenience of the apparatus.

  As an example of performing authentication when trying to access specific data, Patent Document 4 discloses a confidential print function. In this function, the user sets a password for print data from a computer connected to the network, sends a print instruction to a printer connected to the network, and inputs the password from the operation panel of the specified printer. Printout starts. As described above, if the MFP has a function for setting a password for each image data to be kept secret, the confidentiality for the predetermined image data is maintained without deteriorating the operability for the image data that does not need to be kept secret. can do. However, this function is complicated in that it is necessary to set a password for each piece of image data to be kept secret. In addition, there is a problem that the confidentiality on the receiving side cannot be maintained when data transmitted by FAX cannot be set on the transmitting side or the password is not set.

  Therefore, an object of the present invention is to provide an image processing apparatus that can maintain the confidentiality of data to be concealed more easily and without reducing the use efficiency of the user.

  The above object can be achieved by the following.

  That is, the image processing apparatus according to the present invention includes an input unit that receives input of image data, a recording unit that records image data input from the input unit, and whether or not the image data recorded in the recording unit is confidential. A determination means for determining the user and an authentication means for authenticating the user. If it is determined that at least one image data recorded in the recording means is confidential, the authentication means is validated.

  The image processing apparatus described above can invalidate the authentication unit when all the image data recorded in the recording unit is not confidential.

  In addition, when the input unit accepts input of image data and the input image data is recorded in the recording unit, the determination unit determines whether the recorded image data is confidential, and the image data is confidential. If it is determined that the authentication means is included, the authentication means can be validated.

  The image processing apparatus further includes an operation unit, and the type of image data having confidentiality can be designated via the operation unit.

  The type of confidential image data is at least one data selected from the group consisting of general document filing data, confidential document filing data, address book, FAX reception hold data, and print hold data. Can be.

  Further, the determination unit can periodically determine whether or not the image data recorded in the recording unit is confidential.

  Further, the image processing apparatus can form an image based on the image data input from the input unit.

  The image processing apparatus can transmit image data input from the input unit to the outside.

  According to the image processing apparatus of the present invention, the authentication function is invalidated during normal times when the data to be concealed is not stored, and the authentication function is activated when the data to be concealed is stored. It is possible to maintain the confidentiality of data that should be kept secret while suppressing a decrease in the user's usage efficiency.

  Immediately after receiving the image data, the confidentiality of the received image data is judged, and the authentication function is enabled according to the judgment result, thereby minimizing the time that the data to be kept secret is unprotected. Can do.

  In addition, the image data to be concealed can be arbitrarily set, for example, according to the type of the image data, so that data according to the usage status of the image processing apparatus such as the frequency of use of various modes in the image processing apparatus. Can provide confidentiality.

  In addition, since it is possible to automatically determine whether or not there is data to be kept secret, and to automatically enable or disable the authentication function according to the determination result, setting work by the administrator is unnecessary.

  In addition, the confidentiality of data received by FAX can be maintained, and it is effective for data received from FAX that cannot set a password for transmission data. Even a FAX that can set a password for transmission data may be transmitted without setting a password for important data, and the present invention is also effective in that case.

1 is a block diagram illustrating a schematic configuration of an image processing apparatus according to an embodiment of the present invention. It is a flowchart which shows the process at the time of the data input which the image processing apparatus which concerns on embodiment of this invention performs. It is a figure which shows an example of the setting screen of the image processing apparatus which concerns on embodiment of this invention. It is a flowchart which shows the regular process which the image processing apparatus which concerns on embodiment of this invention performs.

Hereinafter, embodiments of the present invention will be specifically described with reference to the accompanying drawings.
FIG. 1 is a block diagram showing a schematic configuration of an image processing apparatus according to an embodiment of the present invention. The image processing apparatus 1 includes a control unit 11, a memory unit 12, a recording unit 13, a determination unit 14, an authentication unit 15, a communication unit 16, a control unit 11, an image input unit 17, an image output unit 18, an operation unit 19, and a bus. 20 is provided.

The image processing apparatus 1 is a digital multi-function peripheral, in which a FAX mode for reading a document as an image and transmitting it as image data, a scanner mode for recording the read document as image data,
A copy mode for printing the read original on recording paper and a printer mode for printing data received from the information terminal device (not shown; hereinafter also referred to as a computer) via the network 21 onto the recording paper are selectively used. (Copying and printing are also referred to as image formation). Therefore, the image processing apparatus 1 includes components (components and the like) necessary for realizing these functions, but is omitted in FIG. In addition, since these modes are well-known, in the following, the contents necessary for understanding the present invention will be mainly described, and the description of other modes will be omitted. Further, in this specification, “image data” means the whole data constituting one image, and is used in the same meaning as “file”. The image data is not limited to data in a format for directly recording pixel values such as bitmap data, but data for forming an image (various image file formats, page description language PDL (Page Description Language) Including the print data format described in the above.

  The operation unit 19 is a means for setting the operation mode (FAX mode, scanner mode, printer mode, etc.) of the image processing apparatus 1 and the operation conditions in each operation mode. Here, it is assumed that the operation unit 19 has a display function and can present character information and graphic information to the user. The operation unit 19 is, for example, a liquid crystal touch panel.

  The control unit 11 is means for controlling each unit in accordance with conditions set via the operation unit 19 and is an arithmetic processing unit such as a CPU. The control unit 11 controls each unit and exchanges data (including control data) between the units via the bus 20.

  The memory unit 12 is means for temporarily storing data, and is a RAM, for example. The recording unit 13 is means for constantly recording data even when the power is turned off, and is a hard disk drive, for example, and also records programs for realizing each function. The control unit 11 reads a program and data to be executed as appropriate from the recording unit 13 to the memory unit 12 and performs processing using a part of the memory unit 12 as a work area. Is appropriately recorded in the recording unit 13.

  The image input unit 17 is means for directly inputting image data from the outside, and is, for example, a scanner. The image data input by the image input unit 17 can be stored in the memory according to the processing mode and recorded in the recording unit 13.

  The image output unit 18 is a unit that outputs an image, for example, a printing unit. The image output unit 18 prints image data stored in the memory or image data recorded in the recording unit 13.

  The communication unit 16 is an interface unit for performing data communication via the network 21 or FAX communication via the telephone line 22. The communication unit 16 transmits the image data stored in the memory unit 12 or the recording unit 13, and when the image data is received from the outside, the communication unit 16 stores the image data in the memory unit 12 and records it in the recording unit 13 as necessary. To do. Therefore, the communication unit 16 is also an image data output unit and input unit.

  The authentication unit 15 is a means for authenticating the user. The input of the password input request to the user and the input of the password by the user are performed via the operation unit 19.

  The determination unit 14 determines whether or not the authentication function should be enabled in the image processing apparatus 1. As will be described later, the authentication unit 15 enables or disables the authentication function according to the determination result by the determination unit 14.

  The image processing apparatus 1 configured as described above switches the function of the authentication unit 15, that is, the validity / invalidity of the authentication function, according to the recording state of the image data in the recording unit 13. The characteristic operation of the image processing apparatus 1 will be specifically described with reference to FIGS.

  FIG. 2 is a flowchart showing processing when the image processing apparatus 1 receives image data. The series of processing shown in FIG. 2 is executed by a program that is activated when reception of image data from the outside is detected by, for example, interrupt processing. Before the procedure of FIG. 2 is executed, a condition for enabling the authentication function needs to be set. FIG. 3 shows an example of a screen (for example, a part of the operation unit 19) for setting a condition for enabling the authentication function.

  In FIG. 3, a radio button corresponding to “Enable user authentication function while saving important data” is selected from the three displayed options, and “FAX reception hold data” is selected from the five options of target data. The check box corresponding to “” is selected. “FAX reception hold data” means the FAX data received in the state of the FAX reception hold mode. In this mode, the data received by FAX is not printed immediately, but is temporarily recorded in the recording unit 13 and is used by the user. Is output (printed) to the image output unit 18 in response to the operation of the operation unit 19. The output FAX reception hold data is deleted.

  Note that when the radio button corresponding to “disable user authentication function” is selected, the authentication function is always disabled. Further, when the radio button corresponding to “Enable user authentication function” is selected, the authentication function is always disabled.

  In the following description, it is assumed that the settings are made in advance as shown in FIG. 3 and the setting contents are stored in the memory unit 12 or the recording unit 13.

  In step S <b> 1, the control unit 11 controls the image input unit 17 or the communication unit 16 to accept input of image data and store it in the memory unit 12.

  In step S <b> 2, the control unit 11 determines the necessity of recording the input image data in the recording unit 13. If the input image data can be processed without being recorded, the process proceeds to step S6, the instructed process is executed, and the image data stored in the memory unit 12 in step S1 is deleted. For example, when the input image data is immediately output from the image output unit 18, if it is output from the image output unit 18 without being recorded in the recording unit 13, the image data in the memory unit 12 is deleted. On the other hand, in the case where the designated process is not immediately executed but is once recorded in the recording unit 13, the process proceeds to step S3 and the input image data is recorded. If the image data input in step S2 is, for example, FAX reception hold data, print hold data, document filing data, etc., it is recorded in the recording unit 13.

  In step S4 following step S3, the determination unit 14 determines whether or not the image data recorded in step S3 is data to be kept secret. That is, the determination unit 14 reads information specifying the target data set in advance from the memory unit 12 or the recording unit 13 and determines whether the image data recorded in the recording unit 13 corresponds to the target data. To do. Here, since it is assumed that the setting is as shown in FIG. 3, it is determined whether or not the FAX reception hold data exists in the recording unit 13. When there is FAX reception hold data, the process proceeds to step S5, and when there is no FAX reception data, the process ends. As the information for specifying the target data, various known information can be used as will be described later.

  In step S5, the determination unit 14 enables the function of the authentication unit 15, that is, the authentication function, and ends. Therefore, if the authentication function is invalid, it is valid, and if the authentication function is already valid, the state is maintained.

  As described above, when the FAX reception hold data is present in the recording unit 13, when a user intends to use the image processing apparatus 1, a message requesting authentication is sent by the function of the authentication unit 15 to the operation unit. The user cannot use the image processing apparatus 1 unless the authentication is passed. Therefore, when the FAX reception hold data is received in a state where the data to be concealed is not recorded and the authentication function is disabled, the authentication function can be immediately enabled and the confidentiality can be ensured. it can.

  In the above description, the case where only FAX reception hold data is designated as target data has been described, but the present invention is not limited to this. “Print hold data”, “Address book”, “Document filing (confidential data)”, or “Document filing data (general data)” may be selected, and a plurality of these are arbitrarily selected. May be. Furthermore, data other than that shown in FIG. 3 may be the target data.

  The “print hold data” means print instruction data received in the print hold mode. In this mode, the print instruction from the computer and the data received by the image processing apparatus 1 are not immediately printed by the image output unit 18 but are once recorded in the recording unit 13 and output in response to the operation of the operation unit 19 ( Printed). The output print hold data is deleted.

  The “address book” is transmission destination information (FAX telephone number, I-FAX mail address, PC transmission address information, etc.) of the image transmission function provided in the image processing apparatus 1. For example, the authentication function can be validated when destination information of important business partners such as an outside line FAX number and an outside mail address is registered.

  “Document filing data” is data captured from an image input unit (scanner or the like) 17 of the image processing apparatus 1. Among them, “confidential data” is data with marks such as confidential, important, and company name logos, and data without these marks is “general data”. Therefore, the authentication function can be validated according to the importance of the document.

  It should be noted that various known methods can be used as the method of recording the conditions for enabling the authentication function set in FIG. 3 and determining whether there is target data using this. . For example, a flag is assigned to each of the target data candidates for enabling the authentication function (five candidates in the case of FIG. 3), and the flag corresponding to the selected candidate is inverted from the initial state (for example, from “0”) “1”). The determination unit 14 determines whether or not there is a file corresponding to a candidate corresponding to the inverted flag (a flag that is “1”). In order to identify a file corresponding to a candidate, for example, when a different extension is given for each data type, the extension is used. When information specifying a data type is recorded in the file, Information can be used as identification information. Therefore, the determination unit 14 may determine whether the file existing in the recording unit 13 has the specified identification information. If a directory to be stored is specified according to the type of data, the directory name is used as identification information, and the determination unit 14 determines whether a file exists in the directory specified by the recording unit 13. Just judge.

  Next, a method for disabling the authentication function will be described. FIG. 4 is a flowchart showing processing for invalidating the authentication function once enabled by the processing shown in FIG. The process shown in FIG. 4 is periodically executed according to a predetermined time interval or a predetermined schedule, for example, when the authentication function is enabled.

  In step S <b> 20, the determination unit 14 determines whether target data for which the authentication function is to be valid exists in the recording unit 13. If there is no target data (FAX reception hold data in the example of FIG. 3), the process proceeds to step S21, and the determination unit 14 disables the function (authentication function) of the authentication unit 15 and ends. If the target data exists, nothing is done (while the authentication function is kept valid) and the process is terminated.

  As a result, the authentication function once enabled can be automatically disabled. Therefore, it is possible to prevent the user from requesting unnecessary authentication even though the data to be concealed is not stored, and it is possible to suppress a decrease in utilization efficiency.

  In the above, every time image data is input, it is determined whether or not the input image data is target data for enabling the authentication function. Although described, it is not limited to this. Instead of determining each time image data is input, it may be determined periodically whether or not data for enabling the authentication function is recorded, as in FIG. For example, the processing shown in FIG. 4 may be changed. That is, when it is determined in step S20 that the target data for which the authentication function is to be enabled exists in the recording unit 13, the authentication function is enabled and the process is terminated. The program may be executed at short time intervals regardless of whether the authentication function is enabled or disabled.

  Further, in the above description, the case where the operation unit 19 is displayed as illustrated in FIG. 3 and the condition for enabling the authentication function is set by operating the operation unit 19 is described, but the present invention is not limited to this. The conditions for enabling the authentication function can be set from an external computer connected to the network.

  In FIG. 1, the determination unit and the authentication unit are provided separately from the control unit. However, the control unit may execute one of these functions, or execute both functions. You may do it.

  The present invention has been described above by describing the embodiment. However, the above-described embodiment is an exemplification, and the present invention is not limited to the above-described embodiment, and is implemented with various modifications. be able to.

DESCRIPTION OF SYMBOLS 1 Image processing apparatus 11 Control part 12 Memory part 13 Recording part 14 Judgment part 15 Authentication part 16 Communication part 17 Image input part 18 Image output part 19 Operation part 20 Bus 21 Network 22 Telephone line

Claims (8)

Input means for receiving input of image data;
Recording means for recording image data input from the input means;
Determining means for determining whether or not the image data recorded in the recording means is confidential;
An authentication means for authenticating the user,
An image processing apparatus that validates the authentication unit when it is determined that at least one image data recorded in the recording unit has confidentiality.   The image processing apparatus according to claim 1, wherein when all image data recorded in the recording unit does not have confidentiality, the authentication unit is invalidated.   When the input unit accepts input of image data and the input image data is recorded in the recording unit, the determination unit determines whether the recorded image data is confidential, and the image data 3. The image processing apparatus according to claim 1, wherein the authentication unit is validated when it is determined that the password is confidential. Further comprising an operation means,
4. The image processing apparatus according to claim 1, wherein a type of the confidential image data is designated via the operation unit. 5.   The specified type is at least one selected from the group consisting of general document filing data, confidential document filing data, address book, FAX reception hold data, and print hold data. The image processing apparatus according to claim 4.   The image processing apparatus according to claim 1, wherein the determination unit periodically determines whether or not the image data recorded in the recording unit is confidential.   The image processing apparatus according to claim 1, wherein an image is formed based on image data input from the input unit.   The image processing apparatus according to claim 1, wherein the image data input from the input unit is transmitted to the outside.

Images