JP4246643B2 - Image processing device - Google Patents

Description

  The present invention relates to an image processing apparatus, and more particularly to a technique for ensuring security of handled information.

In an image forming apparatus (an example of an image processing apparatus), as shown in Patent Document 1, for a plurality of applications executed at the time of image forming processing, applications that can be used for each person who uses the image forming apparatus are limited. However, there is one that strengthens the security of the image forming apparatus by preventing a third party from using the function of the image forming apparatus without permission.
Japanese Patent Publication No. 2003-229978

  Today, image forming apparatuses have a function of storing acquired document data in a built-in storage unit, or a function of being able to connect to other devices via a LAN (local area network) or the Internet. However, once document data is stored in the storage means, there is a risk that the document data stored in the storage means will be leaked to a third party. There is also a risk that document data stored in the storage means will be leaked to other computers or the outside through the network. However, since the image forming apparatus described above merely enhances security by preventing a third party from using the image forming apparatus without permission, leakage of information such as document data stored in the image forming apparatus. However, security has not been enhanced.

  SUMMARY An advantage of some aspects of the invention is that it provides an image processing apparatus with enhanced security against leakage of information to be handled.

The invention according to claim 1 of the present invention is an operation instruction receiving means for receiving an operation instruction input and an arbitrary security level input by a user operation ,
Display means for displaying various messages;
Security level detection means for detecting a security level indicating a protection strength against leakage of information, which is defined for processing executed based on an operation instruction received by the operation instruction reception means;
Control means for displaying the security level detected by the security level detection means on the display means ;
It is determined whether or not the process executed based on the operation instruction received by the operation instruction accepting unit can be executed by changing to a process of the same type with the security level accepted by the operation instruction accepting unit. Discriminating means for
The determination that the process executed based on the operation instruction received by the operation instruction receiving unit can be executed by changing to a process of the same type in which the security level received by the operation instruction receiving unit is determined. If the control means determines that the security level received by the operation instruction receiving means is the same as the process executed based on the operation instruction received by the operation instruction receiving means This is an image processing apparatus that is changed to and executed .

  In this configuration, when the security level of the process executed based on the operation instruction received by the operation instruction receiving unit is detected by the security level detecting unit, the control unit displays the detected security level on the display unit. Therefore, it is possible to make the user who operates the apparatus recognize the security level of the process executed based on the operation instruction received by the operation instruction receiving unit.

Further , according to this configuration, the process executed based on the operation instruction received by the operation instruction receiving unit is changed to the same type of process in which the security level received by the operation instruction receiving unit is determined by the determining unit. When it is determined that the change can be executed, the security level received by the operation instruction receiving unit is determined by the control unit based on the operation instruction received by the operation instruction receiving unit. Since it is changed to the same type of processing and executed, it is possible to execute the processing after changing to the user's desired security level, while restricting the freedom of changing the security level by the user and setting a certain security level. It becomes possible to secure.

Further, according to the invention according to claim 2, an image processing apparatus according to 請 Motomeko 1, is set to the operation instruction receiving section processing performed based on the received operation instruction, the information A protection content detection means for detecting the content of protection against leakage of
Wherein the control means, together with the security level detected by the security level detecting means, in which the protection content detected by the protection content detecting means Ru is displayed on the display means.

  According to this configuration, the protection content detection unit detects the content of protection against information leakage, which is set in the process executed based on the operation instruction received by the operation instruction reception unit, and the control unit Since the protection content is displayed on the display means, the user of the device is made aware of the content of protection against information leakage, which is defined in the processing executed based on the operation instruction received by the operation instruction reception means. Can do.

The invention of claim 3 is the image processing apparatus according to 請 Motomeko 1 or claim 2, wherein the operation instruction accepting unit accepts the input of the user ID by a user operation,
A process detecting means for detecting a process permitted for the user ID accepted by the operation instruction accepting means;
Wherein, the content of the processing is detected by the processing detection means, in which Ru is displayed on the display means.

  According to this configuration, the process detection unit detects a process permitted for the user ID received by the operation instruction reception unit, and the control unit displays the detected process on the display unit. By inputting the user ID of the user into the operation instruction receiving means, it is possible to confirm the processing that is permitted to be executed by the user.

The invention according to claim 4 is the image processing apparatus according to any one of claims 1 to 3 , wherein the control means is based on an operation instruction received by the operation instruction receiving means. When the process to be executed is completed, a message indicating that the process has been completed is displayed on the display unit together with the security level detected by the security level detection unit.

  According to this configuration, when the process executed based on the operation instruction received by the operation instruction receiving unit is completed, a message to that effect is displayed on the display unit together with the security level detected by the security level detection unit. By displaying it, the user is made aware of the fact that the above processing has been completed.

  According to the first aspect of the present invention, since the user can recognize the security level of the process executed by the operation instruction received by the operation instruction receiving unit, the process can be executed. Security against leakage of information handled by the device can be enhanced.

Further, according to the invention described in claim 1, while allowing to perform processing on changing the user's desired security level, certain security over restrictions on freedom of security level change by the user It becomes possible to secure the level.

According to the second aspect of the present invention, it is possible to make the user of the apparatus recognize the content of protection for countermeasures against information leakage set in the process accepted by the operation instruction accepting unit.

According to the third aspect of the present invention, it is possible to make each user recognize a process permitted to be executed by the user.

According to the invention described in claim 4 , regarding the process executed based on the operation instruction received by the operation instruction receiving means, the user can recognize at what security level the process is executed. it can.

(First embodiment)
Embodiments according to the present invention will be described below with reference to the drawings. FIG. 1 is a side view schematically showing an internal configuration of a multifunction peripheral as an example of an image processing apparatus according to an embodiment of the present invention. The image processing apparatus according to the present invention generally refers to an apparatus that performs processing for storing document data in a storage device (regardless of name), and includes image forming apparatuses such as a copy, a printer, and a facsimile apparatus, A multi-function machine which is an example of a forming apparatus is also included. The multifunction device 1 has functions such as a copy function, a printer function, a scanner function, and a facsimile function. The multi-function device 1 includes a main body 2, a stack tray 3 disposed on the left side of the main body 2, a document reading unit 5 disposed on the top of the main body 2, and an upper side of the document reading unit 5. And a document feeding unit 6 disposed.

  An operation unit 47 is provided at the front part of the multifunction machine 1. The operation unit 47 displays a start key 471 for a user to input a print execution instruction, a ten key 472 for inputting the number of copies to be printed, operation guide information for various copying operations, and the like. Display unit (display unit) 473 including a liquid crystal display having a touch panel function, a reset key 474 for resetting setting contents set in the display unit 473, and a printing (image forming) operation being executed are stopped. A stop key 475 for switching, and a function switching key 477 for switching between a copy function, a printer function, a scanner function, and a facsimile function.

  The document reading unit 5 includes a scanner unit 51 including a CCD (Charge Coupled Device) sensor and an exposure lamp, and a document table 52 and a document reading slit 53 made of a transparent member such as glass. The scanner unit 51 is configured to be movable by a drive unit (not shown). When reading a document placed on the document table 52, the scanner unit 51 is moved along the document surface at a position facing the document table 52, and the document image is scanned. The image data acquired while scanning is output to the control unit 100 (FIG. 2). Further, when reading a document fed by the document feeding unit 6, the document is moved to a position facing the document reading slit 53 and synchronized with the document feeding operation by the document feeding unit 6 via the document reading slit 53. The image of the original is acquired and the image data is output to the control unit 100.

  The document feeding unit 6 includes a document placing unit 61 for placing a document, a document discharge unit 62 for discharging a document whose image has been read, and a document placed on the document placing unit 61. A document transport mechanism 63 including a paper feed roller (not shown), a transport roller (not shown) and the like for feeding the paper one by one to a position facing the document reading slit 53 and discharging it to the document discharge section 62 is provided. The document conveyance mechanism 63 further includes a sheet reversing mechanism (not shown) that reverses the document and reversely conveys the document to a position facing the document reading slit 53, and scans both sides of the document through the document reading slit 53. 51 can be read.

  The document feeding unit 6 is provided so as to be rotatable with respect to the main body unit 2 so that the front side thereof can move upward. By moving the front side of the document feeder 6 upward to open the upper surface of the document table 52, the operator can place a read document, for example, a book in a spread state, on the upper surface of the document table 52. It has become.

  The main body 2 includes a plurality of paper feed cassettes 461, a paper feed roller 462 that feeds the recording paper from the paper feed cassette 461 one by one and transports it to the recording unit 40, and a recording paper transported from the paper feed cassette 461. And a recording unit 40 for forming an image.

  The recording unit 40 outputs an optical beam or the like based on the image data acquired by the scanner unit 51 to expose the photosensitive drum 43, and a developing unit 44 that forms a toner image on the photosensitive drum 43. A transfer unit 41 for transferring the toner image on the photosensitive drum 43 to the recording paper, a fixing unit 45 for fixing the toner image to the recording paper by heating the recording paper to which the toner image has been transferred, Conveying rollers 463 and 464 that are provided in the sheet conveying path and convey the recording sheet to the stack tray 3 or the discharge tray 48 are provided.

  When forming images on both sides of the recording paper, the recording unit 40 forms an image on one side of the recording paper, and then the recording paper is nipped by the conveyance roller 463 on the discharge tray 48 side. . In this state, the conveyance roller 463 is reversed to switch back the recording paper, and the recording paper is sent to the paper conveyance path L and conveyed again to the upstream area of the recording unit 40, and an image is formed on the other surface by the recording unit 40. Thereafter, the recording paper is discharged to the stack tray 3 or the discharge tray 48.

  FIG. 2 is a functional block diagram showing a schematic configuration of the multifunction machine 1. The multifunction device 1 includes a control unit (control means) 100 that controls operation of the entire apparatus. The control unit 100 includes a scanner unit 51 that can read an original image including an exposure lamp 512, a CCD 512, and the like, and a recording unit 40 that includes a paper transport device 131, an image forming unit 132, a transfer unit 41, a fixing unit 45, and the like. And are connected. The control unit 100 also includes an image memory 140 that temporarily stores document data read by the scanner unit 51, and a large-capacity HDD (storage unit) having a storage capacity capable of storing a large amount of data. 150 is connected.

  The image processing unit 160 converts an analog image signal output from the scanner unit 51 into a digital image when image reading is performed by the scanner unit 51, performs image processing for improving image quality, and then converts the image into a compressed image. This compressed image is written into the image memory 140. The control unit 100 stores the compressed image written in the image memory 140 in the HDD 150 as data constituting a file to be document managed. When the registered document is printed out, the data (compressed image) of the file to be printed out is written out from the HDD 150 or each computer on the network (not shown) to the image memory 140, and the image processing unit 160 For example, in the case of laser exposure, a laser signal (a laser beam emitted from the exposure apparatus) is applied to the image data in accordance with the output state (eg, laser exposure or LED exposure). The signal for control is analog-modulated. The recording unit 40 (image forming unit 132) prints out based on the analog-modulated signal.

  The control unit 100 includes a scanner controller 101, a facsimile controller 102, a printer controller 103, a copy controller 104, and a network controller 105 that control each function that can be executed by the multifunction device 1.

  The scanner controller 101 controls the operation of each unit necessary for the operation of the scanner unit. The facsimile controller 102 controls the operation of each unit necessary for the facsimile operation, and controls the facsimile communication unit 170 that adjusts data necessary for facsimile communication. The facsimile communication unit 170 is provided with an NCU (Network Control Unit) that controls connection of a telephone line with a destination facsimile that is a data transmission / reception partner. The copy controller 104 controls the operation of each unit necessary for the copy operation.

  The printer controller 103 performs operation control of each unit necessary for printer operation. The printer controller 103 includes a parallel I / F unit 181 that is connected to an external device by parallel transmission that transmits several bits at a time using a plurality of signal lines, and one bit at a time using a single signal line. A serial I / F unit 182 connected to an external device by serial transmission for sending data is connected.

  The network controller 105 controls data transmission / reception performed between the multifunction machine 1 and a computer on the network, as well as a site on the Internet. The network controller 105 transmits / receives data to / from the outside via the network I / F unit 210.

  The data acquisition unit 118 acquires print data from a document, or via a facsimile line, a network, or the like, and includes a scanner unit 51, a scanner controller 101, a facsimile controller 102, a network controller 105, a facsimile communication unit 170, and a network I / F 210. Is included. Note that the data acquisition unit 118 does not necessarily have all of the scanner function, the facsimile function, and the network communication function, and may have any one function.

Furthermore, the control unit 100 detects a security level (indicating the strength of protection against information leakage) applied to processing executed based on the operation instruction received by the operation unit 47. (Security level detection means, protection content detection means) 106 is provided. For example, the correspondence between each process executed in the multifunction device 1 and the security level set for each process is stored in the HDD 150 as a data table 1501 (FIG. 4). The security detection unit 106 is set to a process executed based on the operation instruction received by the operation unit 47, the contents of the protection against leakage of information (e.g., encryption processing is performed on document data Whether the document data is compressed, the type of the network line (LAN, fax, Internet, etc.) for transmitting the document data is also detected.

  Further, the control unit 100 determines whether or not the process in which the input from the user is received by the operation unit 47 can be executed by changing the process to the same type of process in which the security level received by the operation unit 47 is determined. When an input of a user ID is accepted by the operation unit 47 by a user's operation and a determination unit (determination means) 107 that makes a determination by referring to the data table 1502 (see FIG. 9), the input user ID is A process detection unit (process detection unit) 108 that detects each process for which permission is permitted with reference to the data table 1503 (FIG. 12).

  The control unit 100 displays the security level detected by the security detection unit 106 on the display unit 473. When the processing is performed at this security level and the processing is completed, a message indicating that the processing has been completed. Is displayed on the display unit 473. In addition, the control unit 100 performs processing such as causing the display unit 473 to display the content of each process that is detected by the processing detection unit 108 and that is permitted for the user ID that is accepted by the operation unit 47. .

  The control unit 100 causes the document management program stored in the HDD 150 to operate the CPU and the like, so that the scanner controller 101, the facsimile controller 102, the printer controller 103, the copy controller 104, the network controller 105, and the security detection unit 106 described above. The specific processing performed by the determination unit 107 and the processing detection unit 108 may be realized.

  The operation unit (operation instruction receiving means) 47 is used for inputting various instructions (such as a document reading instruction by the scanner unit 51) necessary for the operation of the multifunction machine 1 from an operator (user). The operation unit 47 is composed of an LCD (liquid crystal display) or the like, and is input with a display unit 473 for displaying various operation messages necessary for the operation of the multifunction device 1, a printout execution instruction, the number of printouts of a document, and the like. And an operation key unit 470 including a numeric keypad. Note that the display unit 473 preferably includes a touch panel function and has a configuration in which an operator can input a necessary instruction by touching the touch panel. An operation instruction such as a document reading instruction is input from the operation unit 47 by the operator. The operation unit 47 is configured to input a user ID given to each user in advance by a user operation, or to perform the desired security in the case where the process is executed by the multifunction device 1 after the user has changed to a desired security level. Accept level input.

  Next, a process performed by the multifunction device 1 when an operation instruction input is accepted by the operation unit 47 will be described. FIG. 3 is a flowchart showing processing performed by the multifunction device 1 when an input of an operation instruction is accepted by the operation unit 47. FIG. 4 shows each processing executed by the multifunction device 1 and a security level defined for each processing. FIG. 5A to FIG. 5C are diagrams illustrating an example of a display screen that displays the processing contents to be executed and their security levels, and FIG. 6 is an indication that the processing has been completed. It is a figure which shows an example of the display screen of this message.

  As shown in FIG. 3, when an operation instruction is input to the operation unit 47 by the operation of the operation unit 47 by the operator (YES in S1), the security detection unit 106 executes in response to the operation instruction. A security level preset for a process to be performed is detected with reference to the data table 1501 (FIG. 4), and information leakage that is preset for a process to be executed in response to the operation instruction is detected. The content of protection against is detected (S2).

  For example, if the instructed process is a fax transmission process to a specific destination (for example, a transmission destination registered in advance in the multifunction device 1), the security detection unit 106 sets the processing content to “fax transmission”. (Specific destination) "and the data table 1501 is referenced to detect the security level defined in the fax transmission process to this specific destination. Furthermore, the security detection unit 106 detects the content of protection against information leakage set in the instructed process. Then, on the display screen 473A as shown in FIG. 5A, the control unit 100 causes the display unit 473 to display the detected security level and the content of protection against information leakage (S3).

  In FIG. 5A, the security level set for each process is determined from the lowest security level (lowest (level 1) → low (level 2) → middle (level 3) → high (level 4) → The case where five levels are set in the order of highest (level 5) is shown. In the display screen of FIG. 5A, the security level set for the fax transmission process to the specific destination is the third security level counted from the least secure side. “Protected Level” and “Level 3” are displayed.

  Further, in FIG. 5A, a security level display 4733 indicating the security level is displayed so that the user who has visually recognized the display unit 473 can intuitively understand the security level, and “ The middle part is displayed in a different color from the other security level parts.

  Further, for example, the process executed by the operation instruction received by the operation unit 47 is a process of transmitting document data to the outside, and the security detection unit 106 displays the content of protection against information leakage as a transmission target. When it is detected that there is no encryption processing of the document data, as shown in the display screen 473B of FIG. 5B, the processing content is displayed as “document data is not sent to the outside via email transmission”. The security detection unit 106 detects a security level corresponding to this processing with reference to the data table 1501, and the control unit 100 causes the display unit 473 to display the detection result. FIG. 5B shows a state where “document data protection level low” and “level 2” are displayed when the detection result by the security detection unit 106 is a low security level. In this case, the security level display 4733 is displayed by changing the color of the “low” part.

  Further, for example, the process indicated by the operation instruction received by the operation unit 47 is a process for storing the document data in the built-in HDD 150, and the security detection unit 106 saves the content of protection against information leakage. When it is detected that the document data is encrypted, the processing content is displayed as “save document data to built-in hardware and execute encryption” as shown in the display screen 473C of FIG. The security detection unit 106 detects a security level corresponding to this processing with reference to the data table 1501, and the control unit 100 causes the display unit 473 to display the detection result. FIG. 5C shows a state in which “highest security level” and “level 5” are displayed as the security level that is the detection result by the security detection unit 106. In this case, the security level display 4733 displays the “highest” portion with a different color.

  Here, for example, the fact that the “OK” button 4731 displayed in the display screen shown in any of FIGS. 5A to 5C is pressed is recognized by the touch panel function of the display unit 473 or the like. In this case (YES in S4), the control unit 100 executes a process that is executed based on the operation instruction received by the operation unit 47 in S1 (S5). Then, after executing the process, the control unit 100 displays, for example, a message indicating that the process is completed, a security level applied to the process, and the process on a display screen 473D as illustrated in FIG. A display screen 473D showing the protection content against information leakage applied to is displayed on the display unit 473 (S6). FIG. 6 shows a case where the executed process is “fax transmission”.

  If the operator does not press the “OK” button 4731 and the “cancel” button 4732 is pressed in the process of S4 (NO in S4), the process accepted by the operation unit 47 and the end of the process are completed. The process is terminated without performing any of the processes of displaying the display screen 473D on which the message indicating this is displayed on the display unit 473.

  By performing such a process, the operator recognizes the security level of the process to be executed based on the operation instruction input to the operation unit 47 and then executes the process or cancels the execution of the process. Therefore, the security of information handled by the multifunction device 1 can be enhanced.

(Second Embodiment)
Next, a description will be given of a second embodiment of a process performed by the multifunction machine 1 when an operation instruction is input to the operation unit 47. FIG. 7 is a flowchart showing a second embodiment of processing performed by the multifunction device 1 when an operation instruction is received by the operation unit 47, and FIG. 8 displays a message prompting the operator to select a new security level. FIG. 9 is a diagram showing a data table indicating the relationship between each process and the security level permitted for each process, and FIG. 10 is a diagram for operating a change in the process to be executed or a change in the document data protection level. It is a figure which shows an example of the screen which displays the message prompting a person. The configuration of the multifunction device 1 is the same as that of the multifunction device 1 according to the first embodiment, and the same processes as those in the first embodiment (FIG. 3) are denoted by the same reference numerals and description thereof is omitted.

  In the second embodiment, when the security level of the process executed by the operation instruction received by the operation unit 47 is detected and displayed on the display unit 473 (S2, S3), the “OK” button 4731 is pressed. If the “Cancel” button 4732 is pressed instead (NO in S4), the control unit 100 displays a message prompting the operator to select a new security level on the display unit 473. 473E (see FIG. 8) is displayed (S11).

  On the security level selection screen 473E, for example, as shown in FIG. 8, a desired security level can be selected by pressing an arrow key 4734 or 4735. When the security level is selected by the operation of the arrow keys 4734 and 4735, the portion of the security level display 4733 that displays the selected security level is changed in color from the portion that displays the other security levels. Is displayed. In this way, the security level is selected by operating the arrow keys 4734 and 4735, and the “OK” button 4731 is displayed in a state where the portion of the security level display 4733 that displays the selected security level is displayed in a different color. When is pressed, the operation unit 47 accepts selection of a new security level (YES in S12). If “Cancel” button 4732 is pressed (NO in S12), control unit 100 ends the process.

  If the “OK” button 4731 is pressed (YES in S4), the control unit 100 executes a process that is executed based on the operation instruction received in the operation unit 47 in S1 (S15). The display unit 473 displays a display screen 473D (FIG. 6) showing a message indicating that the processing has been completed, the security level applied to the processing, and the protection content against the information leakage applied to the processing. (S6).

  As described above, when the selection of a new security level is accepted by the operation unit 47 (YES in S12), the determination unit 107 performs the process accepted by the operation unit 47 in S1 on the operation unit 47 in S12. It is determined whether or not the received security level can be changed to the same type of processing that has been determined (S13).

  The process of S13 will be described by taking as an example a case where the process indicated by the operation instruction received by the operation unit 47 is a process of transmitting mail without encrypting the document data. The relationship between each process (fax transmission process, document data mail transmission process to the outside, document data storage process to the built-in HDD, etc.) performed in the MFP 1 and the security level defined for each process is in the HDD 150. It is shown in the stored data table 1502 (FIG. 9), and the determination unit 107 performs the determination of S13 by referring to the data table 1502 or the like.

  The determining unit 107 refers to the data table 1502 (FIG. 9) to determine whether or not the security level newly selected in S12 is equal to or higher than the security level permitted for mail transmission. In the data table 1502, since the security level permitted for mail transmission is “high”, when the security level newly selected in S12 is “medium”, “low”, or “minimum”, the determination unit 107 determines that the mail transmission process accepted by the operation unit 47 in S1 is not permitted to be executed at the selected security level, and accepts it in the operation unit 47 in S1 when this determination is made. It is determined that the process cannot be executed by changing the processed process to the same type of process in which the security level received by the operation unit 47 is determined in S12.

  When the security level newly selected in S12 is “high” or “highest”, the determination unit 107 performs the mail transmission process accepted by the operation unit 47 in S1 on the selected security level. It is determined that execution after changing to this process is permitted. Subsequently, the determination unit 107 refers to the data table 1501 and is the same type of process as the process accepted in S1, that is, a process for mail transmission, and the security level becomes “high” or “highest”. It is determined whether or not there is a process.

  Since the data table 1501 in FIG. 4 has a security level “high” process (email transmission after encrypting document data), the security level newly selected in S12 is “high”. It is determined that there is a process that can be changed, and at this point, the process accepted by the operation unit 47 in S1 is changed to the same type of process in which the security level accepted by the operation unit 47 is determined in S12. Is determined to be executable.

  If the security level newly selected in S12 is “highest”, the data table 1501 is processing for mail transmission, and there is no security level “highest” processing. When this determination is made, the process accepted by the operation unit 47 in S1 is changed to the same type of process in which the security level accepted by the operation unit 47 is determined in S12. It cannot be executed. It should be noted that determinations such as fax transmission processing and document data storage processing to the HDD 150 are performed in the same manner.

  If the determination unit 107 determines that the process can be executed by changing to the same type of process in which the newly selected security level is determined in S12 (YES in S13), the control unit 100 is accepted in S1. The processing is changed to the same type of processing in which the newly selected security level is defined (S14).

  In this way, after the process to be executed is changed to a process in which the new security level selected in S12 is determined, the control unit 100 executes the process after the change (S15). When the execution of the process after the change is completed, the control unit 100 displays on the display unit 473 that the process has been completed (S6).

  When the determination unit 107 determines that the process accepted in S1 cannot be executed at the newly selected security level (NO in S13), the control unit 100 changes or executes the security level. A security level change screen 473F (FIG. 10) for displaying a message prompting the change of processing is displayed on the display unit 473 (S16).

  When the “process change” button 4738 is pressed on this security level change screen 473F (“process change” in S17), the control unit 100 changes the state of the operation unit 47 (display unit 473) and inputs an operation instruction. Return to the accepted state (S1).

  When the “document data protection level change” button 4739 is pressed on the security level change screen 473F (“security level change” in S17), the control unit 100 causes the display unit 473 to display the security level selection screen 473E ( S11), S12 and S13 are repeated. Note that the control unit 100 may end the process when the “cancel” button 4731 is pressed on the security level change screen 473F.

  As a result, the operator can change and execute the processing content indicated by the instruction input to the operation unit 47 at a desired security level newly input to the operation unit 47. If the security level newly selected by the operator is lower than the security level shown in the data table 1502, the execution of the processing at this security level is not permitted, so the security level desired by the operator is set. While making it possible to execute each process after changing it, it is possible to limit the degree of freedom of change of the security level by the operator and to ensure a certain security level for each process.

(Third embodiment)
Next, a description will be given of a third embodiment of processing performed by the multifunction machine 1 when an operation instruction input is received by the operation unit 47. FIG. 11 is a flowchart showing a third embodiment of processing by the multifunction device 1 when an input of an operation instruction is accepted by the operation unit 47, and FIG. 12 shows a relationship between the user ID and the processing permitted for the user ID. FIG. 13 is a diagram illustrating a data table, and FIG. 13 is a diagram illustrating an example of a display screen that displays a list of processes permitted for the user ID accepted by the operation unit 47. The configuration of the multifunction machine 1 is the same as that of the multifunction machine 1 according to the first embodiment, and the same processes as those in the first and second embodiments (FIGS. 3 and 6) are denoted by the same reference numerals. Is omitted.

  The process according to the third embodiment detects each process permitted for the user ID based on the user ID input to the operation unit 47 and displays a list of processes permitted for the user ID. After being displayed on the screen 473, an input of an operation instruction is received from the operator by the operation unit 47.

  First, when an input of a user ID (information for identifying each operator) is received by the operation unit 47 by the operation of the operator (YES in S21), the process detection unit 108 receives the information received by the operation unit 47. A process permitted for the user ID is detected (S22). For this detection, for example, a data table 1503 (FIG. 12) indicating the relationship between each user ID and a processing group permitted for each user ID is stored in the HDD 150, and the process detection unit 108 stores the data table. This is performed with reference to 1503.

  When the detection by the process detection unit 108 ends, the control unit 100 displays the detected process group on the display unit 473, for example, on a display screen 473G as shown in FIG. 13 (S23). This display screen 473G shows a state in which “copy”, “fax transmission”, “document data reading and saving”, and “print out” processing are permitted for the user ID “yamada1250”. When pressing of the “confirm” button 4740 on the display screen 473G is received by the operation unit 47, the control unit 100 executes the processing of S1 to S17 as in the second embodiment.

  Thereby, the operator can confirm the process permitted to be executed by himself / herself by inputting his / her user ID to the operation unit 47. Then, the operator confirms the process permitted to be executed by himself / herself and inputs the process desired to be executed to the operation unit 47 of the multifunction machine 1, so that the process not permitted by the operator is performed. It is possible to prevent erroneous operations that are input.

  The present invention is not limited to the configuration of the above embodiment, and various modifications can be made. For example, FIG. 2 illustrates the configuration of the multifunction device 1, but the multifunction device 1 does not necessarily include the security detection unit 106, the determination unit 107, and the processing detection unit 108. If it is not necessary in the processing of the first to third embodiments described with reference to FIGS. 3 to 10, it may not be provided.

  In the above embodiment, the configuration and processing of the multifunction device 1 are shown in FIGS. 1 to 10. However, these configuration and processing are merely examples, and the configuration and processing of the multifunction device 1 according to the present invention are described above. It is not limited to.

  In the above-described embodiment, the image forming apparatus according to the present invention has been described as the multifunction machine 1 having a printer function, a copy function, a fax function, and the like. However, the image forming apparatus according to the present invention has a printer function, The image forming apparatus may have only a copy function or a fax function.

1 is a side view schematically illustrating an internal configuration of a multifunction peripheral that is an example of an image processing apparatus according to an embodiment of the present invention. FIG. 2 is a functional block diagram illustrating a schematic configuration of a multifunction machine. 6 is a flowchart illustrating processing performed by the multifunction machine when an operation instruction is input to the operation unit. FIG. 6 is a diagram illustrating a data table showing a relationship between each process executed by the multifunction peripheral and a security level defined for each process. (A) thru | or (c) is a figure which shows an example of the display screen which displays the content of the process performed, and its security level. It is a figure which shows an example of the display screen of the message that the process was complete | finished. 10 is a flowchart illustrating a second embodiment of processing performed by a multifunction machine when an operation instruction is input to the operation unit. It is a figure which shows an example of the screen which displays the message which prompts the operator to select a new security level. It is a figure which shows the data table which shows the relationship of the security level permitted about each process and each process. It is a figure which shows an example of the screen which displays the message which prompts an operator to change the process to perform or the change of a document data protection level. 10 is a flowchart illustrating a third embodiment of processing performed by the multifunction machine 1 when an operation instruction is input to the operation unit. It is a figure which shows the data table which shows the relationship of the process permitted to a user ID and user ID. It is a figure which shows an example of the display screen which displays the list | wrist of the process permitted with respect to the user ID received by the operation part.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 MFP 100 Control part 106 Security detection part 107 Discriminating part 108 Process detection part 47 Operation part 473 Display part

Claims (4)

An operation instruction accepting means for accepting an operation instruction input and an arbitrary security level input by a user operation ;
Display means for displaying various messages;
Security level detection means for detecting a security level indicating a protection strength against leakage of information, which is defined for processing executed based on an operation instruction received by the operation instruction reception means;
Control means for displaying the security level detected by the security level detection means on the display means ;
It is determined whether or not the process executed based on the operation instruction received by the operation instruction accepting unit can be executed by changing to a process of the same type with the security level accepted by the operation instruction accepting unit. Discriminating means for
The determination that the process executed based on the operation instruction received by the operation instruction receiving unit can be executed by changing to a process of the same type in which the security level received by the operation instruction receiving unit is determined. If the control means determines that the security level received by the operation instruction receiving means is the same as the process executed based on the operation instruction received by the operation instruction receiving means An image processing apparatus which is changed to and executed . A protection content detection unit configured to detect the content of protection against information leakage, which is set in a process executed based on the operation instruction received by the operation instruction reception unit;
Wherein the control means, wherein with the security level detected by the security level detecting means, an image processing apparatus according protected content detected by the protection content detecting means 請 Motomeko 1 Ru is displayed on the display means. The operation instruction receiving means receives an input of a user ID by a user operation,
A process detecting means for detecting a process permitted for the user ID accepted by the operation instruction accepting means;
Said control means, said processing the detected content of the processing by the detection means, the image processing apparatus according to 請 Motomeko 1 or claim 2 Ru is displayed on the display means. When the process executed based on the operation instruction received by the operation instruction receiving unit is completed, the control unit displays a message indicating that the process has ended, as a security detected by the security level detection unit. with levels, the image processing apparatus according to any one of 請 Motomeko 1 to claim 3 Ru is displayed on the display means.

Images