JP4293811B2 - Data processing device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a data processing apparatus capable of temporarily storing and processing data to be processed and protecting the confidentiality of stored data.
[0002]
[Prior art]
In recent years, as copying machines have been digitized, they have been put on the market as multifunction peripherals having various processing capabilities utilizing digital functions such as storage and transmission of image data. The basic configuration of the digital multi-function peripheral includes an image reading unit that reads an image of a document as electronic data, an image processing unit that performs specific processing on digitized image data, an output unit that outputs image data, and the like. It is composed of Here, the output unit includes an image transmission unit that transmits image data to an external device, an image formation unit that forms an image on a sheet, and the like. A storage unit such as an HDD device (Hard Disk Drive) that temporarily stores image data is also installed.
[0003]
The functions installed in such a multifunction machine include a copy function, a print function, a scanner function, a facsimile function, and an electronic filing function. Below, the flow of image data in each function will be briefly described. In the copy function, the image processing unit performs predetermined image processing on the image of the document read by the image reading unit, and then temporarily stores it as a final image in the storage unit. Form. In the print function, when a print job is received from a client device connected via a network, the image processing unit develops the data into data that can be processed by the image processing unit, and then temporarily stores it as a final image in the storage unit The image forming unit forms an image on the paper. The scanner function is a method in which an image of a document read by an image reading unit is subjected to predetermined image processing by an image processing unit, and then temporarily stored as a final image in a storage unit, which is connected via a network. To the client device. In the facsimile function, the image of the document read by the image reading unit is processed in the image processing unit so that it can be processed by the destination facsimile machine, and then temporarily stored as a transmission image in the storage unit. Then, the data is transmitted to a facsimile apparatus of an arbitrary destination connected via the facsimile communication network. In the electronic file function, image data is stored in the storage unit mounted on the multifunction device, and output when an image data selection or processing instruction is issued by an operation from the multifunction device operation panel or client device. The image data is output from the unit.
[0004]
As described above, the multifunction machine is a center machine that processes image data with various functions at the installation site, and has efficiently processed image data input from various fields using a storage device or the like. ing.
[0005]
By the way, there is a case where confidential information such as image data and document data digitized at the installation destination and personal information such as a transmission destination remains in the storage device mounted in such a multifunction peripheral. In such a case, personal information may be leaked when the device is collected due to replacement by purchase or termination of the lease contract, so that the user is uneasy.
Therefore, conventionally, there has been proposed an image processing apparatus that deletes image data stored in a storage device for processing when it becomes unnecessary (see, for example, Patent Document 1).
[0006]
[Patent Document 1]
Japanese Patent Laid-Open No. 9-223061
[0007]
[Problems to be solved by the invention]
However, when invalidating data so that it cannot be reproduced by erasing all the data stored in the storage device as in the prior art, it takes time to invalidate the data. In particular, a relatively large capacity HDD device has recently been installed so that a large amount of document data can be stored. Therefore, when collecting a multifunction device at the time of replacement or at the end of a lease contract, even if the multifunction device is not used in a way that emphasizes confidentiality protection, all data is invalidated. As a result, it takes a long time to invalidate data, and there is a problem that work efficiency at the time of collection is poor.
[0008]
  The present invention has been made in view of such circumstances.BuyWhen collecting devices at the time of replacement, at the end of a lease contract, etc., a data processing device that can protect data according to the usage status up to that time and shorten the time associated with data invalidation processing etc. The purpose is to provide.
[0009]
[Means for Solving the Problems]
  A data processing apparatus according to the present invention comprises: means for receiving data; and data storage means for storing the received data.And execute output processing based on the received dataIn the data processing apparatusA ROM mounting portion in which a security ROM for erasing or encrypting data stored in the data storage means is mounted; means for determining whether or not a security ROM is mounted in the ROM mounting portion; Means for determining at the time of device recovery whether or not a confidential function that starts the output process when the person is authenticated, and when determining at the time of device recovery that a security ROM is mounted on the ROM mounting portion, Or a means for erasing data stored in the data storage means when it is determined at the time of device recovery that the confidential function has been used.It is characterized by that.
  Further, the data processing apparatus according to the present invention includes a data receiving means, a data storage means for storing the received data, and a data storage means for storing the received data, wherein the data storage means executes an output process based on the received data. A ROM mounting portion in which a security ROM for erasing or encrypting data stored in the ROM is mounted; means for determining whether or not the security ROM is mounted in the ROM mounting portion; and a user authenticating Means for storing the use history of the confidential function for which output processing is started when it is performed, means for determining whether the confidential function has been used a predetermined number of times at the time of device recovery, and the ROM mounting unit When it is determined at the time of device recovery that the security ROM is installed, or when the confidential function is used a predetermined number of times If it is determined, characterized in that it comprises a means for erasing the data stored in the data storage device.
[0010]
  In the present inventionTheAt the time of collectionSecurity ROM or confidential functionIf it is determined that has been used frequently, DeBy erasing data stored in the data storage means, leakage of sensitive data is prevented,Security ROM and confidential functionSince it is possible to prevent the data from being erased when it is determined that the device is not used much, the work efficiency at the time of collecting the apparatus is increased.
[0021]
  The data processing apparatus according to the present inventionAs the output process, a process of transmitting the received data to a specified destination is executed.It is characterized by that.
  In the data processing apparatus according to the present invention, the received data includes image data, and as the output process, a process of forming an image on a sheet is executed based on the image data included in the received data. It is characterized by that.
[0022]
The present invention includes means for executing image processing based on the received image data. Therefore, in an apparatus equipped with image processing means such as a printer apparatus, a facsimile apparatus, a copying machine, and a multifunction machine thereof, it is possible to improve work efficiency when collecting the apparatus and to prevent leakage of confidential image data. The
[0023]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment in which a data processing apparatus of the present invention is applied to a multifunction machine having a copy function, a print function, a scanner function, and a facsimile function will be specifically described with reference to the drawings.
FIG. 1 is a schematic configuration diagram illustrating a connection example of a multifunction peripheral according to the present embodiment. In FIG. 1, reference numeral 1 denotes a multifunction peripheral having a copy function, a print function, a scanner function, and a facsimile function. Are connected to information processing devices 2, 2,..., 2 such as personal computers via a data communication network N1 such as a LAN (Local Area Network), and are connected to an external facsimile device via a facsimile communication network N2. 3 is connected.
[0024]
The multi-function device 1 receives a print job transmitted from the information processing devices 2, 2,..., 2 and a facsimile data transmitted from the facsimile device 3, and a sheet based on the image data developed from the print job and the facsimile data. An image is formed on the image, and the image-formed paper is output. Further, it is possible to form an image on a sheet based on image data obtained by reading a document and to output the image, and to transmit the image data obtained by reading to an arbitrary information processing apparatus 2. Is also possible.
[0025]
FIG. 2 is a block diagram showing an internal configuration of the multifunction machine 1 according to the present embodiment. The multi function device 1 includes a CPU 11. The CPU 11 reads and executes a control program stored in advance in the ROM 13, thereby controlling various hardware connected via the bus 12. The multifunction device 1 is operated as a function. In addition, the ROM 13 has system management information for storing information (configuration information) about the configuration of various installed hardware and information about the internal state of the apparatus, and communicates with each hardware when the power is turned on. Configuration information is acquired and the operating status is periodically monitored to update system management information as needed.
The RAM 14 is composed of a semiconductor memory, and temporarily stores data generated during execution of the control program described above, jobs accepted from the outside, and the like.
[0026]
The operation unit 15 includes various operation keys for accepting operation instructions from the user (see FIG. 4), and setting values for each function such as switching operation of each function, number of prints, copy density, destination of facsimile data, and the like. Accept the input. The display unit 16 includes a liquid crystal display, and displays the operation status of the multifunction machine 1, various setting values input from the operation unit 15, and the like. Further, a part of the display unit 16 includes a software key configured to receive the above-described setting operation.
[0027]
The image reading unit 17 includes a light source for irradiating light on a document, an image sensor such as a charge coupled device (CCD), an AD converter, and the like (not shown), and an image of the document set at a predetermined reading position. Is imaged on the image sensor and converted into an analog electric signal, and the converted analog electric signal is AD converted by an AD converter. The digital signal obtained by AD conversion is generated as digital image data after correcting the light distribution characteristics of the light source at the time of document reading, the sensitivity unevenness of the image sensor, and the like.
[0028]
The image forming unit 18 is, for example, a charger that charges the photosensitive drum to a predetermined potential, laser writing that emits laser light in accordance with image data received from the outside and generates an electrostatic latent image on the photosensitive drum. An apparatus, a developing device that supplies toner to the electrostatic latent image formed on the surface of the photosensitive drum to make it visible, a transfer device that transfers the toner image formed on the surface of the photosensitive drum onto paper (not shown), etc. The image desired by the user can be formed on the paper by the electrophotographic method.
In this embodiment, the image forming unit 18 is configured to perform image formation by an electrophotographic method using a laser writing unit. However, the image forming unit 18 is configured to perform image formation by an inkjet method, a thermal transfer method, and a sublimation method. Of course, it may be.
[0029]
The communication unit 19 includes a communication interface compliant with the communication standard of the data communication network N1, and jobs for executing various processes from the information processing devices 2, 2,..., 2 connected to the data communication network N1. Receive. Further, when the multifunction device 1 is used as a so-called network scanner, the image data of the document obtained by the image reading unit 17 is transmitted to the desired information processing apparatus 2 through the communication unit 19. The communication unit 19 controls transmission / reception of such various jobs and image data.
[0030]
The facsimile communication unit 20 is a communication interface for connecting to the facsimile communication network N2, a decoding circuit for decoding facsimile data received through the facsimile communication network N2, and generating image data, and an external facsimile apparatus 3 through the facsimile communication network N2. And an encoding circuit (not shown) for encoding image data to be transmitted to the computer.
[0031]
The image memory 21 is composed of a semiconductor memory, image data generated by reading an image of a document by the image reading unit 17, image data developed from a print job received through the communication unit 19, and received through the facsimile communication unit 20. Image data obtained by decrypting the facsimile data, image data read from the HDD device 22, and the like are temporarily stored. The image data temporarily stored in the image memory 21 is sent to the image forming unit 18, the communication unit 19, the facsimile communication unit 20, or the HDD device 22 at a timing instructed by the CPU 11 according to the purpose of use.
[0032]
The HDD device 22 is a storage device having a disk-shaped magnetic recording medium, and has a storage area including a first storage unit 22A and a second storage unit 22B. The first storage unit 22A stores image data output by the image forming unit 18 or the like as processing history data. Then, when it is desired to re-add and output once output image data, for example, when the number of output copies is insufficient, it is connected via the operation unit 15 provided in the multifunction device 1 or the data communication network N1. By giving instructions from the information processing devices 2, 2,..., 2 etc., it is possible to read out the necessary image data from the first storage unit 22A and send it to the image forming unit 18 so that image formation can be performed again. It becomes. In addition, the second storage unit 22B organizes the image data stored in the first storage unit 22A, for example, for each data format (file format), or for each processing mode such as copy, print, scanner, or facsimile. Area to save.
[0033]
The first storage unit 22A is set to have a smaller storage capacity than the second storage unit 22B. If the first storage unit 22A has a small free space, the first storage unit 22A stores the first storage unit 22A in the first storage unit 22A. The image data after a predetermined time has been automatically stored in the second storage unit 22B. On the other hand, the image data stored in the second storage unit 22B is basically organized and stored, and is stored unless an operation instruction such as erasure is performed. When there is no more free space in the second storage unit 22B, a message is displayed on the display unit 16 to inform the user and prompt the user to delete image data that is considered unnecessary, A new free space can be secured by a method such as a change to a large HDD device. The second storage unit 22B has, for example, a plurality of folders divided for each user, and can organize and store them according to the type of image data.
As described above, the multi function device 1 according to the present embodiment has a so-called electronic filing function, and manages the history of image data that has undergone image formation. Further, for necessary image data, target image data is stored. It is possible to select and perform processing such as output and transmission again as necessary.
[0034]
Furthermore, the multi function device 1 according to the present embodiment includes a ROM mounting portion 23 for mounting a security ROM 30 for adding a data protection function. When the security ROM 30 is mounted on the ROM mounting unit 23, the first and second storage units control the image data output from the image forming unit 18 and the like so that part or all of the electronic filing function described above does not function. The data is not stored in 22A and 22B. Then, the confidentiality of the image data is protected by immediately erasing the image data for which output processing has been completed or by encrypting and temporarily storing the image data so that it is difficult to decipher. Information regarding whether or not the security ROM 30 is attached is managed by system management information in the ROM 13 and is updated when the multifunction device 1 is powered on.
In this embodiment, the security ROM 30 is retrofitted to the ROM mounting unit 23. However, by default, the security ROM 30 is previously mounted on the ROM mounting unit 23 in a state where the data protection function is not activated, and the operation unit The data protection function may be activated by releasing the default state by a predetermined key operation from 15 or the like.
[0035]
In the following, the operation of each part of the hardware when using each function of the multifunction machine 1 will be described.
When using the copy function of the multifunction device 1, first, the image reading unit 17 reads an image of a document to acquire image data. The read image data is transferred as an output image onto the image memory 21 and temporarily stored in the HDD device 22. When there are a plurality of documents, the image reading process and the storing operation in the HDD device 22 are repeated. Thereafter, according to the processing content instructed by the user from the operation unit 15, the image data stored in the HDD device 22 is sequentially read out at an appropriate timing and sent to the image memory 21. Then, image data is transferred from the image memory 21 to the image forming unit 18 in accordance with the writing timing of the laser writing device in the image forming unit 18, and image formation (printing) is performed on the paper.
Similarly, when there are a plurality of read image data, the output image is similarly stored in the HDD device 22 in units of pages, and is sent from the HDD device 22 to the image memory 21 according to the processing content instructed from the operation unit 15. In accordance with the writing timing of the laser writing device, it is repeatedly transferred to the image forming unit 18 by the number of output sheets.
[0036]
When the scanner function of the multifunction device 1 is used and used as a so-called network scanner, image data obtained by reading an original with the image reading unit 17 is transmitted to the information processing apparatus 2 through the communication unit 19. Also in this case, the image data acquired by the image reading unit 17 is completed as an output image on the image memory 21 in units of pages, and then temporarily stored in the HDD device 22. When the image data is transmitted to the information processing device 2, the stored image data is sent again from the HDD device 22 to the image memory 21, and communication is established after establishing communication with the transmission destination instructed via the operation unit 15. The data is transmitted from the unit 19 to the information processing apparatus 2 that is the transmission destination.
[0037]
When the printer function of the multifunction machine 1 is used, a print job is received from the information processing apparatus 2 through the communication unit 19. The image data included in the received print job is transferred to the image memory 21 in units of pages as image data output from the image forming unit 18 and temporarily stored in the HDD device 22. When an image is formed, the image data is sent again from the HDD device 22 to the image memory 21 and transferred to the image forming unit 18 in the same manner as when the copy function is used, and the image is formed on the paper.
[0038]
When the facsimile function of the multifunction machine 1 is used, the image data of the document obtained by the image reading unit 17 is temporarily stored in the HDD device 22 via the image memory 21 and transmitted as facsimile data in the same manner as described above. In this case, the data is read from the HDD device 22 again. When facsimile data is transmitted from the facsimile communication unit 20 to the destination facsimile apparatus 3, the image data is binarized by the facsimile communication unit 20 and then encoded by an encoding circuit to generate facsimile data. Is done.
Further, when receiving facsimile data from the outside, it is decoded by a decoding circuit of the facsimile communication unit 20 to generate image data. The generated image data is temporarily stored in the HDD device 22 via the image memory 21, and is read from the HDD device 22 again when an image is formed on a sheet by the image forming unit 18.
[0039]
Also, confidential processing can be performed in the print function and the facsimile function. In confidential processing, when a print job or facsimile data is received, an image is not immediately formed and output on a sheet, but is waited until a specific user inputs a predetermined password (authentication information) from the operation unit 15. When the entered password is authenticated as a specific user, image formation is started and the image-formed paper is output.
The confidential function usage history is stored in the HDD device 22 as a confidential function usage history list. FIG. 3 is a conceptual diagram showing an example of the confidential function use history list, and manages the time when confidential processing is executed for each of the print function and the facsimile function as a history.
[0040]
In the present embodiment, when the multifunction device 1 is collected, the security of the data to be processed by the multifunction device 1 is emphasized by determining whether the security ROM 30 is installed and whether the confidential function is used or not. If confidentiality is important, the image data stored in the image memory 21 and the HDD device 22, data related to the facsimile transmission destination, and personal information related to the user are determined. Information is erased.
[0041]
Hereinafter, key operations performed when the multifunction machine 1 is collected will be described. When collecting the multifunction device 1, an instruction is given using the operation unit 15 and the display unit 16, and confidential data such as image data and various history data stored in the HDD device 22 according to the usage status up to that point. Erase.
FIG. 4 is a schematic diagram illustrating an example of the operation unit 15 and the display unit 16. The multifunction device 1 includes an operation panel including an operation unit 15 and a display unit 16 at a position where the user can easily operate. The operation panel shown in FIG. 4 has a display unit 16 on the left side and an operation unit 15 including various key groups on the right side. A transparent tablet is provided on the surface of the display unit 16 to display guidance information and operation keys. When the user presses the operation key portion while checking the displayed information, an operation instruction to the multifunction device 1 is displayed. Will be performed from a transparent tablet.
The operation unit 15 includes a function switching key 15a, a job confirmation key 15b, a user setting key 15c, a numeric keypad 15d, a clear key 15e, an all clear key 15f, and a start key 15g. The function switching key 15a accepts switching of the printer function, facsimile function, and copy function. The function switching key 15a has an LED lamp for notifying that the function switching has been accepted, and further has an LED lamp for indicating the communication status with the external device such as the information processing apparatus 2 or the facsimile apparatus 3. Have. Further, below the function switching key 15a, a job confirmation key 15b for confirming the status of the job that the MFP 1 is executing and the status of the job (reserved job) that is received is provided.
A user setting key 15c provided on the right side of the job confirmation key 15b accepts various settings according to the installation environment of the multifunction machine 1 and various settings by a specific administrator. The details of the setting contents received when the user setting key 15c is pressed will be described in detail later.
The numeric keypad 15d accepts the number of copies, the destination number of facsimile data, the clear key 15e accepts correction of input information, the all clear key 15f accepts initialization of a set mode, and the start key 15g is a multifunction device. 1 operation start instruction is received.
[0042]
FIG. 5 is a schematic diagram showing a display example on the display unit 16. The display example shown in FIG. 5 is a setting screen 100 when the copy function is used. The appearance of the multifunction device 1 is schematically displayed near the center of the setting screen 100, and a plurality of paper cassettes included in the multifunction device 1 are displayed. By pointing one of them with an arrow, the type of paper that can be used at the present time is indicated. Also, on the right end side of the setting screen 100, a copy density adjustment key 101 for adjusting the copy density, a paper selection key 102 for selecting a paper to be used, and an image magnification for forming an image on the paper are set. A magnification setting key 103 is provided. Further, on the left end side of the setting screen 100, a special function key 104 for setting special functions such as a sort function and a stapler function, a double-sided copy key 105 for setting double-sided copying, and the electronic filing function described above are provided. There is provided a filing key 106 for using and storing the data stored in the first storage unit 22A in the second storage unit 22B.
[0043]
Hereinafter, an operation at the time of machine collection will be described based on a display example of the display unit 16. The machine collection instruction can be set from an administrator program screen that allows a specific administrator to activate and display the administrator program from a user setting screen described later.
6 and 7 are schematic diagrams illustrating examples of the user setting screen, which are displayed on the display unit 16 when the user setting key 15c of the operation unit 15 is pressed. In the user setting screen 200 shown in FIG. 6, an operation key group 201 for performing screen contrast setting, date and time setting, paper feed tray setting, facsimile data transmission destination registration, etc. An administrator program key 202 for starting the administrator program and an end key 210 for ending the user setting.
When the administrator program key 202 is pressed, the user setting screen 200 changes as shown in FIG. 7 and prompts the administrator code to be input. Here, the administrator code is a code composed of a 4-digit numerical value set to identify the administrator of the multifunction device 1 and is set such that inconvenience occurs when a general user freely sets it. It is set in advance as a code for starting an administrator program that allows the item to be changed. When a code is input to the administrator code entry field 203 using the numeric keypad 15d of the operation unit 15, it is determined whether or not the code matches an administrator code stored in advance in the multifunction device 1, If they match, the administrator program is activated to display the administrator program screen on the display unit 16.
[0044]
8 to 10 are schematic diagrams showing examples of the administrator program screen. The administrator program screen 300 shown in FIG. 8 includes setting keys 301 to 306 for setting the usage environment of the multifunction device 1, a code change key 307 for changing the administrator code, the image memory 21, and the HDD device 22. An all-erase key 308 for erasing all the various stored data, a machine recovery key 309 for instructing the recovery of the multifunction device 1, and an end key 330 for ending the administrator program are provided.
In the setting of the usage environment performed by the setting keys 301 to 306, network management (department management), energy saving settings, key operation settings, system management settings, settings when using the copy function, settings for facsimile transmission, etc. I do.
[0045]
When the all-erase key 308 is pressed, the administrator program screen 300 transitions as shown in FIG. 9 and displays a confirmation window 310 for confirming whether all data can be erased. In the confirmation window 310, an execution key 310a for accepting selection when erasing and a cancel key 310b for accepting selection when not erasing are arranged. In addition, the confirmation window 310 displays a warning that the multifunction device 1 (machine) does not operate after erasure.
When the execution key 310a is pressed in the confirmation window 310, the administrator program screen transitions as shown in FIG. 10 and displays a reconfirmation window 320 for reconfirming whether all data can be erased. Similar to the confirmation window 310, the reconfirmation window 320 is provided with an execution key 320a that accepts selection when deleting and a cancel key 320b that accepts selection when not deleting. When the execution key 320a is pressed in the reconfirmation window 320, the deletion of all data stored in the image memory 21 and the HDD device 22 is actually started.
[0046]
FIG. 11 to FIG. 13 are flowcharts for explaining the procedure of processing executed by the multifunction machine 1 when the machine is collected. First, the CPU 11 of the multifunction machine 1 determines whether or not the user setting key 15c in the operation unit 15 is pressed and turned on (step S1). If it is determined that the user setting key 15c is not turned on (S1: NO), it waits until it is turned on.
When it is determined that the user setting key 15c is turned on (S1: YES), the user setting screen 200 as shown in FIG. 6 is displayed on the display unit 16 (step S2). Then, the CPU 11 determines whether or not the administrator program key 202 is pressed and turned on (step S3). If it is determined that the administrator program key 202 is not turned on (S3: NO), the CPU 11 displays other settings on the user setting screen 200. It is determined that the mode has been selected, and the processing of the selected other mode is executed (step S4). When the processing of the selected other mode is finished, the processing according to this flowchart is finished. Further, the process may be returned to the step (S2) for displaying the user setting screen 200 without ending the process, and the setting process may be continued.
[0047]
When it is determined that the administrator program key 202 is pressed and turned on (S3: YES), the user setting screen 200 as shown in FIG. 7 is displayed on the display unit 16 to request the input of the administrator code. (Step S5). Next, the CPU 11 determines whether or not the administrator code has been entered (step S6). If it is determined that the administrator code has not been input (S6: NO), it is determined whether the end key 210 is pressed and turned on (step S7). If it is determined that it is not turned on (S7: NO), the process returns to step S6. If it is determined that it is turned on (S7: YES), the process according to this flowchart is terminated. Alternatively, the process may be returned to the step (S2) for displaying the user setting screen without ending the process, and the setting process may be continued.
[0048]
If it is determined in step S6 that the administrator code has been entered (S6: YES), the administrator code is inquired (step S8), and whether or not authentication is possible is determined (step S9). If it is determined that authentication is not possible (S9: NO), an error process is performed with a display indicating that the user is not registered as an administrator (step S10), and the process according to this flowchart is terminated. If it is determined that authentication is possible (S9: YES), an administrator program screen 300 as shown in FIG. 8 is displayed on the display unit 16 (step S11).
[0049]
Next, in the administrator program screen 300, it is determined whether or not the all data deletion key 308 has been pressed and turned on (step S12). If it is determined that the all data deletion key 308 is turned on (S12: YES), the confirmation window 310 is overwritten and displayed on the administrator program screen 300 as shown in FIG. 9 (step S13). At this time, the user is warned by displaying that all image data (image data) and all user data are to be erased, and that the machine (multifunction device 1) is not operating when erased. Then, it is determined whether or not the execution key 310a is pressed and turned on (step S14). If it is determined that the execution key 310a is not turned on (S14: NO), the cancel key 310b is pressed and turned on. It is determined whether or not (step S15). If it is determined that the cancel key 310b is not turned on (S15: NO), the process returns to step S14. If it is determined that the cancel key 310b is turned on (S15: YES), the process according to this flowchart is terminated.
[0050]
If it is determined in step S14 that the execution key 310a is turned on (S14: YES), the reconfirmation window 320 is overwritten on the administrator program screen 300 as shown in FIG. 10 (step S16). At this time, if it is deleted, a message indicating that the machine (multifunction device 1) cannot be used is displayed to alert the user. Then, it is determined whether or not the execution key 320a is pressed and turned on (step S17). When it is determined that the execution key 320a is not turned on (S17: NO), the cancel key 320b is pressed and turned on. It is determined whether or not (step S18). If it is determined that the cancel key 320b is not turned on (S18: NO), the process returns to step S17. If it is determined that the cancel key 320b is turned on (S18: YES), the process according to this flowchart is terminated.
[0051]
If it is determined in step S17 that the execution key 320a has been turned on (S17: YES), the image data stored in the image memory 21 and various data stored in the HDD device 22 are deleted (step S17). S19). Next, the CPU 11 determines whether or not the data erasure is completed (step S20). If the erasure is not completed (S20: NO), the process waits until the erasure is completed. If the erasure is completed (S20: YES), a display indicating that all the data has been erased is displayed. It performs to the part 16 (step S21).
[0052]
If it is determined in step S12 that the all data erasure key 308 is not turned on (S12: NO), it is determined whether or not the machine collection key 309 is turned on by being pressed (step S22). If it is determined that the machine recovery key 309 is not turned on (S22: NO), it is determined that another mode has been selected, the processing of that mode is executed (step S23), and the processing according to this flowchart ends. .
[0053]
If it is determined that the machine recovery key 309 is turned on (S22: YES), it is determined whether or not the security ROM 30 is installed in the ROM installation unit 23 by referring to the system management information described above (step S24). When it is determined that the security ROM 30 is installed (S24: YES), it is determined that the security awareness of the data is high, and the image data stored in the image memory 21 and various types of data stored in the HDD device 22 are determined. Data is erased (step S25). Then, the CPU 11 determines whether or not erasure of all data is completed (step S26). When it is determined that the erasure is not completed (S26: NO), the CPU 11 waits until the erasure is completed. When it is determined that the erasure has been completed (S26: YES), a display to the effect that the erasure of all data has been completed is displayed on the display unit 16 (step S27), and the processing according to this flowchart is terminated.
If it is determined in step S24 that the security ROM 30 is not installed (S24: NO), it is determined whether or not the confidential function is used by referring to the confidential function usage history list (step S28). If it is determined that the confidential function has been used (S28: YES), it is determined that the security awareness of the data is high, and the processing from step S25 to step S27 described above is executed, and the image memory 21 and HDD device 22 are processed. Erase all stored data. If it is determined that the confidential function is not used (S28: NO), the display unit 16 displays that there is no data to be deleted (step S29), and the process of this flowchart is terminated.
[0054]
In the present embodiment, it is determined whether or not to delete the data stored in the image memory 21 and the HDD device 22 based on whether or not the confidential function is used. Since the use history of the confidential function is managed, it may be determined whether to delete the data based on the frequency of use of the confidential function. For example, data stored in the image memory 21 and the HDD 22 may be erased when the confidential function is used a predetermined number of times during a predetermined period retroactive from the time when the machine is collected.
[0055]
In the present embodiment, the HDD device 22 is provided as a storage means for temporarily storing image data. However, the storage means is not necessarily limited to the HDD device 22, and is a non-volatile device configured to be detachable from the multifunction device 1. Of portable storage memory, memory with backup function, or FD (Flexible Disk), MO disk (MO: Mageto Optical), recordable DVD (Digital Versatile Disk), etc. using an auxiliary storage device Of course, it may be.
[0056]
【The invention's effect】
  As described in detail above, in the present invention,TheAt the time of collectionSecurity ROM or confidential functionIf it is determined that has been used frequently, DeDelete data stored in the data storage means,Security ROM and confidential functionWhen it is determined that the device is not used so much, the data is not erased, so that the work efficiency at the time of collecting the apparatus can be improved and the leakage of data that requires confidentiality can be prevented.
[0062]
Furthermore, the present invention includes means for executing image processing based on received image data. Therefore, in an apparatus equipped with image processing means such as a printer apparatus, a facsimile apparatus, a copier, or a complex machine thereof, it is possible to increase the work efficiency at the time of collecting the apparatus and to prevent leakage of confidential image data. The present invention has an excellent effect.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram illustrating a connection example of a multifunction peripheral according to an embodiment.
FIG. 2 is a block diagram showing an internal configuration of the multifunction peripheral according to the present embodiment.
FIG. 3 is a conceptual diagram showing an example of a confidential function use history list.
FIG. 4 is a schematic diagram illustrating an example of an operation unit and a display unit.
FIG. 5 is a schematic diagram showing a display example on the display unit.
FIG. 6 is a schematic diagram illustrating an example of a user setting screen.
FIG. 7 is a schematic diagram illustrating an example of a user setting screen.
FIG. 8 is a schematic diagram illustrating an example of an administrator program screen.
FIG. 9 is a schematic diagram illustrating an example of an administrator program screen.
FIG. 10 is a schematic diagram illustrating an example of an administrator program screen.
FIG. 11 is a flowchart illustrating a procedure of processing executed by the multifunction machine when collecting machines.
FIG. 12 is a flowchart illustrating a procedure of processing executed by the multi-function peripheral when collecting machines.
FIG. 13 is a flowchart illustrating a procedure of processing executed by the multifunction machine when collecting machines.
[Explanation of symbols]
1 MFP
2 Information processing equipment
3 facsimile machines
11 CPU
12 Bus
13 ROM
14 RAM
15 Operation unit
16 Display section
17 Image reader
18 Image forming unit
19 Communication Department
20 Facsimile communication department
21 Image memory
22 HDD device
23 ROM mounting part
30 Security ROM

Claims (4)

Means for receiving data, and a data storage means for storing the received data, the data processing apparatus that perform output processing based on the received data,
A ROM mounting portion on which a security ROM for erasing or encrypting data stored in the data storage means is mounted; means for determining whether or not a security ROM is mounted on the ROM mounting portion at the time of device recovery; A means for determining whether or not a confidential function that starts output processing when a user is authenticated is used at the time of device collection, and a case in which it is determined at the time of device recovery that a security ROM is installed in the ROM mounting unit , or if the confidential function is determined during device recovered and is utilized, the data processing apparatus according to claim Rukoto and means for erasing the data stored in the data storage device. In a data processing apparatus comprising means for receiving data and data storage means for storing the received data, and executing an output process based on the received data,
A ROM mounting portion on which a security ROM for erasing or encrypting data stored in the data storage means is mounted; means for determining whether or not a security ROM is mounted on the ROM mounting portion at the time of device recovery; Means for storing a use history of a confidential function whose output processing is started when the user is authenticated, means for determining whether the confidential function has been used a predetermined number of times at the time of device recovery, and Data stored in the data storage means when it is determined at the time of device recovery that the security ROM is installed in the ROM mounting portion, or when it is determined at the time of device recovery that the confidential function has been used a predetermined number of times And a data processing apparatus. 3. The data processing apparatus according to claim 1, wherein a process of transmitting the accepted data to a designated transmission destination is executed as the output process. Data accepting includes image data, as the output processing, the received claim 1 or claim, wherein Citea Rukoto such that the process for forming an image on a sheet based on the image data included in the data Item 3. A data processing apparatus according to Item 2 .

Images