JP4775147B2 - Image forming apparatus, job management method, and job management program - Google Patents

Description

  The present invention relates to an image forming apparatus, a job management method, and a job management program, and more particularly to an image forming apparatus that can be used simultaneously by a plurality of users, a job management method and a job management program executed by the image forming apparatus.

  In recent years, with the development of communication technology using a network, it has become possible to remotely operate an image forming apparatus from a PC connected to the network. When the user operates the operation panel to form an image on the image forming apparatus, the user can immediately pick up the paper output by the image forming apparatus, but when the user causes the image forming apparatus to form an image remotely, When another user operates the image forming apparatus with the operation panel, another user can pick up the paper before the user who has formed the image by remote control.

  Japanese Patent Application Laid-Open No. 8-223340 discloses a job execution resource, a job execution control unit that controls execution of a job in the job execution resource, an input unit that inputs a user operation, and an execution permission for an automatically started job. Job execution management means for setting conditions according to a predetermined user operation input from the input means, and the job execution control means has automatic job permission set in the execution permission conditions of the job execution management means. An image processing apparatus is described in which an automatically activated job is executed only in such a case. According to the conventional image processing apparatus, it is possible to prevent the automatic start job from being executed while a user operation is being input.

However, if the execution of a job input to the image forming apparatus by remote operation is prohibited while the user is operating the panel, the waiting time until the remotely operated job is executed becomes long. Further, there is a case where it is not necessary to prohibit execution of all jobs input to the image forming apparatus by remote operation. For example, when the job input to the image forming apparatus by remote operation is a job for storing data in the image forming apparatus or a job for transmitting data stored in the image forming apparatus to another apparatus, the panel is operated. Confidentiality does not leak to existing users. In addition, when a job input to the image forming apparatus by remote operation is a job for forming an image, whether or not the data formed when the job is executed and image formation deserves confidential information is determined by the user operating the panel. Depending on the relationship between the user and the user who remotely operated. For example, this is a case where the user who operates the panel is the supervisor of the user who operates remotely or the same department.
JP-A-8-223340

  The present invention has been made to solve the above-described problems, and one of the objects of the present invention is to provide an image forming apparatus capable of preventing leakage of confidential information and reducing waiting time. That is.

  Another object of the present invention is to provide a job management method capable of preventing leakage of confidential information and reducing waiting time.

  Still another object of the present invention is to provide a job management program capable of preventing leakage of confidential information and reducing waiting time.

In order to achieve the above object, according to one aspect of the present invention, an image forming apparatus accepts a login instruction from an operation panel, and a login permission unit that permits login on the condition that user authentication is successful, and a network A job receiving means for receiving a job instructing image formation from a computer connected via the user, a user identification information receiving means for receiving user identification information for identifying a user instructed to send the job, and a job and a control unit for controlling execution, and control means, if the job Ru is received by the job receiving unit while the login is permitted by login authorization means, the user login is permitted by login authorization means If confidentiality level is less than the sensitivity level of the user who instructed the transmission of the received job, the received Look including a prohibiting means for prohibiting to execute the job, it is executed by the job execution means job received if not prohibited by the prohibiting means.

According to this aspect, when a login instruction is received from the operation panel and a job instructing image formation is received from a computer connected via the network while the login is permitted, a user who is permitted to log in. If the confidentiality level of the user is lower than the confidentiality level of the user who instructed to send the received job, the execution of the job is prohibited, and the confidentiality is leaked to the user who logged in from the operation panel when the job is executed Can be prevented. Also, if the confidentiality level of the user who is permitted to log in is not lower than the confidentiality level of the user who instructed to send the received job, the received job is executed. Time can be lost. As a result, it is possible to provide an image forming apparatus capable of preventing leakage of confidential information and reducing waiting time.

  Preferably, the prohibition unit prohibits execution of the received job until the login permission by the login permission unit is cancelled.

Preferably, when the execution of the job received by the prohibition unit is not prohibited , the message reception unit receives a message from the computer, and the display unit displays the received message.

According to this aspect, when it is not prohibited to execute the received job, a message received from the computer is displayed. Therefore, a message from a user remotely operating from the computer is displayed to the user operating the operation panel. I can inform you.

Preferably, when execution of a job received by the prohibition unit is prohibited , the job is executed on the computer that has transmitted the job in response to execution of the received job by the job execution unit. Job start signal transmission means for transmitting a signal indicating the above.

  According to this aspect, it is possible to notify the user remotely operating from the computer that the execution of the job has started.

According to another aspect of the present invention, the job management method, the control panel accepts the login instruction, the steps of permitting the log on the condition that the user authentication is successful, the image from a computer connected via a network receiving a job that instructs the formation, receiving receiving a user identification information for identifying a user who instructed the transmission of the job, the job while the login is permitted in the step of permitting a login If the job in step is received, confidentiality level of a user who is allowed to log in at step to allow login is lower than the sensitivity level of the user who instructed the transmission of the received job, with the received a step of prohibiting to execute the job, received in the step of prohibiting If for executing the job has not been prohibited, and executing the received job, the.

According to this aspect, it is possible to provide a job management method capable of preventing leakage of confidential information and reducing waiting time.
Preferably, the method further includes receiving a message from the computer and displaying the received message if it is not prohibited to execute the received job in the prohibiting step.
Preferably, when execution of the received job is prohibited in the prohibiting step, the job is executed to the computer that has transmitted the job in response to execution of the received job. The method further includes transmitting a signal.

According to another aspect of the present invention, the job management program accepts a login instruction from the operation panel, permits the login on the condition that the user authentication is successful, and prints an image from a computer connected via the network . receiving receiving a job that instructs the formation, receiving a user identification information for identifying a user who instructed the transmission of the job, the job while the step Oite login to allow login is permitted If a job in the step of is received, confidentiality level of a user who is allowed to log in at step to allow login is lower than the sensitivity level of the user who instructed the transmission of the received job is the received a step of prohibiting job to perform the, in the step of prohibiting If for executing signal job is not prohibited, and performing a received job, it is executed by a computer for controlling an image forming apparatus.

According to this aspect, it is possible to provide a job management program capable of preventing leakage of confidential information and reducing waiting time.
Preferably, when it is not prohibited to execute the received job in the prohibiting step, a step of receiving a message from the computer and a step of displaying the received message are further executed on the computer that controls the image forming apparatus. Let
Preferably, when execution of the received job is prohibited in the prohibiting step, the job is executed to the computer that has transmitted the job in response to execution of the received job. The step of transmitting the signal is further executed by a computer that controls the image forming apparatus.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts are denoted by the same reference numerals. Their names and functions are also the same. Therefore, detailed description thereof will not be repeated.

  FIG. 1 is a diagram showing an overall outline of an image forming system according to one embodiment of the present invention. Referring to FIG. 1, image forming system 1 includes MFPs (Multi Function Peripherals) 100, 101, and 102 and personal computers (hereinafter referred to as “PCs”) 105, each connected to a network 2.

  The network 2 is a local area network (LAN), and the connection form may be wired or wireless. Further, the network 2 is not limited to a LAN, and may be a network using a public switched telephone network (Public Switched Telephone Networks). Furthermore, the network 2 is connected to a wide area network (WAN) such as the Internet.

  The PC 105 is a general computer, and a printer driver program for controlling the MFPs 100, 101, 102 is installed. If the types of MFPs 100, 101, and 102 are different, three types of printer driver programs for controlling MFPs 100, 101, and 102 are installed in PC 105, respectively.

  Each of MFPs 100, 101, and 102 includes a scanner device for reading a document, an image forming device for forming an image on a recording medium such as paper based on image data, and a facsimile device. It has a transmission / reception function. In the present embodiment, MFPs 100, 101, and 102 will be described as an example, but instead of MFPs 100, 101, and 102, any apparatus having a function of forming an image may be used, for example, a printer, a facsimile machine, or the like. There may be. Further, since the MFPs 100, 101, and 102 have the same function, the MFP 100 will be described as an example in the following description unless otherwise specified.

  FIG. 2 is a perspective view showing the appearance of the MFP. FIG. 3 is a functional block diagram showing an outline of the functions of the MFP. 2 and 3, MFP 100 includes a main circuit 110, a document reading unit 130 for reading a document, an automatic document transport device 120 for transporting a document to document reading unit 130, and a document reading unit. An image forming unit 140 for forming an image on a sheet or the like based on image data output by reading a document by the document 130, a sheet feeding unit 150 for supplying the image forming unit 140 with a sheet, and an operation panel as a user interface 160.

  The main circuit 110 includes a CPU 111, a communication interface (I / F) unit 112, a ROM (Read Only Memory) 113, a RAM (Random Access Memory) 114, an EEPROM (Electronically Erasable and Programmable ROM) 115, and a large capacity. A hard disk drive (HDD) 116 as a storage device, a facsimile unit 117, and a card interface (I / F) 118 to which a flash memory 118A is attached are included. CPU 111 is connected to automatic document feeder 120, document reading unit 130, image forming unit 140, sheet feeding unit 150, and operation panel 160, and controls the entire MFP 100.

  The ROM 113 stores a program executed by the CPU 111 or data necessary for executing the program. The RAM 114 is used as a work area when the CPU 111 executes a program. The RAM 114 temporarily stores read data (image data) continuously sent from the document reading unit 130.

  Operation panel 160 is provided on the upper surface of MFP 100 and includes a display unit 160A and an operation unit 160B. The display unit 160A is a display device such as a liquid crystal display (LCD) or an organic ELD (Electro Luminescence Display), and displays an instruction menu for the user, information about acquired image data, and the like. The operation unit 160B includes a plurality of keys, and accepts input of various instructions, data such as characters and numbers by user operations corresponding to the keys. Operation unit 160B further includes a touch panel provided on display unit 160A.

  Communication I / F unit 112 is an interface for connecting MFP 100 to network 2. The CPU 111 communicates with the MFPs 101 and 102 or the PC 105 via the communication I / F unit 112 to transmit and receive data. The communication I / F unit 112 can communicate with a computer connected to the Internet via the network 2. Further, the communication I / F unit 112 transmits / receives an electronic mail to / from the electronic mail server.

  The facsimile unit 117 is connected to a public switched telephone network (PSTN) and transmits facsimile data to the PSTN or receives facsimile data from the PSTN. The facsimile unit 117 stores the received facsimile data in the HDD 116 or outputs it to the image forming unit 140. The image forming unit 140 prints the facsimile data received by the facsimile unit 117 on a sheet. Further, the facsimile unit 117 converts the data stored in the HDD 116 into facsimile data, and transmits the facsimile data to a facsimile apparatus connected to the PSTN.

  The card I / F 118 is mounted with a flash memory 118A. The CPU 111 can access the flash memory 118A via the card I / F 118. The CPU 111 loads the job management program recorded in the flash memory 118A attached to the card I / F 118 onto the RAM 114 and executes it. The program executed by the CPU 111 is not limited to the job management program recorded in the flash memory 118A, and the job management program stored in the HDD 116 may be loaded into the RAM 114 and executed. In this case, another computer connected to the network 2 may rewrite the job management program stored in the HDD 116 of the MFP 100 or may write a new job management program. Further, MFP 100 may download a job management program from another computer connected to network 2 and store the job management program in HDD 116. The program here includes not only a program directly executable by the CPU 111 but also a source program, a compressed program, an encrypted program, and the like.

  MFP 100 in the present embodiment is remotely operated by PC 105. Here, a user who operates the operation unit 160B is referred to as a direct operation user, and an operation by the direct operation user input to the operation unit 160B is referred to as a direct operation. A user who operates the PC 105 is called a remote operation user, and an operation received from the PC 105 is called a remote operation.

  FIG. 4 is a functional block diagram showing an outline of the functions of the CPU 111 provided in the MFP. Referring to FIG. 4, CPU 111 includes an operation receiving unit 10 that receives a direct operation, a remote operation receiving unit 20 that receives a remote operation, and a login user management unit 30 for managing a user who has performed the direct operation or the remote operation. A job control unit 40 for controlling execution of a job determined by direct operation or remote operation, a job status notification unit 50 for notifying the status of a job to be executed, and a message receiving unit 60 for receiving a message from the outside A message display unit 70 for displaying the received message.

  The operation reception unit 10 receives a direct operation input by the direct operation user to the operation unit 160B, and outputs the direct operation to the login user management unit 30 or the job control unit 40. The direct operation includes a login instruction, a logoff instruction, and a job execution instruction. When the received direct operation is a login instruction, the operation reception unit 10 displays a login screen on the display unit 160A, and receives user identification information and a password input by the user to the operation unit 160B. The operation reception unit 10 outputs the user identification information and the password to the login user management unit 30. The operation accepting unit 10 accepts a login instruction, and accepts a job execution instruction on the condition that the user authentication of the directly operating user is successful in the login user management unit 30. When the received direct operation is a logoff instruction, the operation reception unit 10 outputs a logoff instruction to the login user management unit 30. The logoff instruction includes user identification information. When the received direct operation is a job execution instruction, the operation reception unit 10 outputs the job execution instruction to the login user management unit 30 and the job control unit 40 if the user authentication of the direct operation user is successful. If the user authentication of the operating user is not successful, the accepted job execution instruction is ignored. In this case, the operation receiving unit 10 may display an error message on the display unit 160A.

  The remote operation receiving unit 20 receives a remote operation received from the computer 105 by the communication I / F unit 112 and outputs the remote operation to the login user management unit 30 or the job control unit 40. The remote operation includes a login instruction, a logoff instruction, and a job execution instruction. The job execution instruction includes a print job for forming an image. The remote operation reception unit 20 receives user identification information and a password from the communication I / F unit 112 when the received remote operation is a login instruction. The remote operation reception unit 20 outputs the user identification information and the password to the login user management unit 30. The remote operation accepting unit 20 accepts a login instruction and accepts a job execution instruction other than a print job on condition that the login user management unit 30 succeeds in user authentication of the remote operation user. When the received remote operation is a logoff instruction, the remote operation reception unit 20 outputs a logoff instruction to the login user management unit 30.

  If the received remote operation is a job execution instruction including a job other than a print job, the remote operation reception unit 20 outputs the job execution instruction to the login user management unit 30 and the job control if the user authentication of the remote operation user is successful. If the user authentication of the remote operation user is not successful, the received job execution instruction is ignored. In this case, the remote operation reception unit 20 may return an error message to the PC that has transmitted the job execution instruction. When the received remote operation is a job execution instruction for a print job, the remote operation reception unit 20 receives the job execution instruction even if the user authentication of the remote operation user is not successful, and the job execution instruction is received by the login user management unit 30 and Output to the job control unit 40. In this case, the job execution instruction includes user identification information for identifying the remote operation user. Definition data defining the association between the user identification information and the device identification information for identifying the PC 105 is stored in the HDD 116 in advance, and the device identification of the device that has transmitted the job execution instruction using the definition data. The user identification information of the remote operation user may be specified from the information. In this case, it is not necessary to receive user identification information from the PC 105.

  Login user management unit 30 manages users logged in to MFP 100. The login user management unit 30 includes a user authentication unit 31. When user identification information and a password are input from the operation reception unit 10 or the remote operation reception unit 20, the user authentication unit 31 performs authentication using user data stored in advance in the HDD 116. Here, user data will be described.

  FIG. 5 is a diagram illustrating an example of a format of user data. Referring to FIG. 5, the user data defines associations between user identification information, passwords, and user attributes. The user attribute indicates the level of confidentiality of the user. Here, an example will be described in which a level “1” is given to managers and a level “2” is given to employees who are not managers as user attributes. The user attribute may be group identification information for identifying a group of a plurality of users who share information. For example, the same group identification information is assigned to each group of users belonging to a department or each group of users belonging to a section. Further, the user attribute may be a combination of the level of confidentiality and group identification information.

  Returning to FIG. 4, if user data including user identification information and a password input from the operation reception unit 10 or the remote operation reception unit 20 is stored in the HDD 116, the user authentication unit 31 uses the user identification information. Authenticate the identified user. The login user management unit 30 permits the login of the user authenticated by the user authentication unit 31, but if such user data is not stored, without authenticating the user identified by the user identification information, Do not allow login. When the log-off instruction is input from the operation reception unit 10 or the remote operation reception unit 20, the login user management unit 30 cancels the log-in permission for the user identified by the user identification information included in the log-off instruction and logs off. .

  When the user authentication unit 31 permits login, the operation reception unit 10 outputs user identification information for which login is permitted to the job control unit 40 and receives a job execution instruction input to the operation unit 116B thereafter. . When login is permitted by the user authentication unit 31, the remote operation reception unit 20 outputs the user identification information permitted to log in to the job control unit 40, and the print received by the communication I / F unit 112 thereafter. Accept job execution instructions including jobs other than jobs.

  The login user management unit 30 is user identification information input from the operation reception unit 10 and is based on user identification information permitted to be logged in by the user authentication unit 31 and a job execution instruction input from the operation reception unit 10. The job is associated with each other and output to the job control unit 40. In addition, when the remote operation reception unit 20 includes a job other than a print job, the login user management unit 30 associates the user identification information included in the job execution instruction with a job other than the print job, and associates them with the job control unit 40. Output. The job execution instruction input from the remote operation reception unit 20 is a job execution instruction transmitted from the PC 105 that has transmitted the login instruction received by the communication I / F unit 112. In addition, when the remote operation reception unit 20 includes a print job, the login user management unit 30 associates the user identification information included in the job execution instruction with the print job, and outputs them to the job control unit 40.

  The job control unit 40 includes an execution availability determination unit 41 and an execution prohibition unit 42. Executability determination unit 41 determines whether to execute a job based on a job execution instruction input from operation reception unit 10 or remote operation reception unit 20. When a job execution instruction is input from the operation reception unit 10, the execution propriety determination unit 41 permits execution of a job based on the job execution instruction. When a job execution instruction is input from the remote operation accepting unit 20, the execution permission determination unit 41 permits the execution of a job based on the job execution instruction if there is no direct operation user permitted to log in. Further, when a job execution instruction is input from the remote operation accepting unit 20, if there is a direct operation user who is permitted to log in, the execution permission determination unit 41 executes a job based on the job execution instruction. However, it is not permitted if the predetermined condition is not satisfied. The job control unit 40 executes the job that is permitted to be executed by the execution determination unit 41.

  The predetermined conditions are (1) the job execution instruction includes a job other than a print job, (2) the job execution instruction includes a print job, and the print data does not include confidential information, or (3) the job The execution instruction includes a print job, and the user attribute of the user identification information associated with the job execution instruction is equal to or less than the user attribute of the directly operating user.

  The execution prohibition unit 42 prohibits execution of a job when the execution determination unit 41 does not permit execution of the job. The execution prohibition unit 42 determines that the predetermined condition is (3) when the job execution instruction includes a print job and the user attribute of the user identification information associated with the job execution instruction is not less than or equal to the user attribute of the directly operating user. Until the directly operating user logs out, the execution of the print job included in the job execution instruction is prohibited.

  The job control unit 40 outputs the job status to the job status notification unit 50. The job status notification unit 50 transmits a message including the job status to the PC 105 that has transmitted the job execution instruction. The job state includes a standby state in which execution is prohibited, a start state in which execution has started, and an end state in which execution has ended. Further, the message may include, for example, that there is a direct operation user who is permitted to log in, and further includes the name of the direct operation user.

  When the message receiving unit 60 receives a message from the PC 105 from which the communication I / F unit 112 has transmitted a job execution instruction, the message receiving unit 60 receives the message and outputs it to the message display unit 70. The message display unit 70 displays a message on the display unit 160A. The message includes, for example, text data that the remote operation user conveys directly to the operation user.

  FIG. 6 is a flowchart illustrating an example of the flow of the direct operation job execution process. The direct operation job execution process is a process executed by the CPU 111 when the CPU 111 executes a job management program. Referring to FIG. 6, CPU 111 authenticates the direct operation user who operates operation unit 160B (step S01). Specifically, when a login instruction is input to operation unit 160B, a login screen is displayed on display unit 160A, and user identification information and a password input by the user are received in operation unit 160B. If user data including the received user identification information and password is stored in HDD 116, the direct operation user is authenticated, otherwise the direct operation user is not authenticated. If the authentication has succeeded, the process proceeds to step S02. If the authentication has failed, the process ends.

  In the next step S02, login of a directly operated user who has succeeded in authentication is permitted, and a job execution instruction can be input. It is then determined whether a direct operation job has been accepted (step S03). The direct operation job is a job execution instruction input to the operation unit 160B. If a direct operation job is accepted, the process proceeds to step S04; otherwise, step S04 is skipped and the process proceeds to step S05. In step S04, a direct operation job is executed, and the process proceeds to step S05. In step S05, it is determined whether a logoff instruction has been accepted. If a logoff instruction is accepted, the process proceeds to step S06; otherwise, the process returns to step S03. In step S06, the direct operation user permitted to log in in step S02 is logged off, and the process ends. Specifically, the login permission in step S02 is cancelled.

  FIG. 7 is a flowchart illustrating an example of the flow of remote operation job execution processing. The remote operation job execution process is a process executed by the CPU 111 when the CPU 111 executes a job management program. The CPU 111 can execute the remote operation job execution process in parallel with the direct operation job execution process described above. Therefore, the CPU 111 can execute a remote operation job execution process while authenticating a direct operation user who operates the operation unit 160B and permitting login.

  Referring to FIG. 7, CPU 111 determines whether a remote operation of a login instruction has been accepted. Specifically, the communication I / F unit 112 determines whether a login instruction has been received from the PC 105. If a login instruction is accepted, the process proceeds to step S12; otherwise, the process proceeds to step S14. In step S12, user authentication is performed using the user identification information and password included in the login instruction. If the user authentication is successful, the process proceeds to step S13. If the user authentication fails, the process ends. In step S13, login of the remote operation user is permitted, and the process proceeds to step S14.

  In step S14, it is determined whether or not a logoff instruction remote operation has been accepted. Specifically, it is determined whether communication I / F unit 112 has accepted a logoff instruction from PC 105. If a logoff instruction is accepted, the process proceeds to step S15; otherwise, the process proceeds to step S16. In step S16, the remote operation user permitted to log in in step S13 is logged off, and the process ends. Specifically, the login permission in step S13 is cancelled.

  In step S16, it is determined whether or not a remote operation for job execution instruction (hereinafter referred to as “remote operation job”) has been received. Specifically, the communication I / F unit 112 determines whether a job execution instruction has been received from the PC 105. If a job execution instruction is received from PC 105, the process proceeds to step S17, and if not, the process ends. That is, the remote operation job execution process is a process executed when a remote operation (login instruction, logoff instruction or job execution instruction) is received from the PC 105.

  In step S17, it is determined whether the remote operation job includes a print job. If the remote operation job includes a print job, the process proceeds to step S18; otherwise, the process proceeds to step S20. In step S18, execution determination processing is executed to determine whether the remote operation job can be executed. Although the execution possibility determination process will be described later, the process proceeds to step S17 when it is determined that the remote operation job can be executed. In step S19, the print job included in the remote operation job is executed, and the process ends.

  On the other hand, in step S20, the remote operation user who has transmitted the remote operation job determines whether or not the login user is permitted to log in. If so, the process proceeds to step S21; otherwise, the process ends. Specifically, it is determined whether or not the PC 105 that has transmitted the remote operation job is the same as the PC that has transmitted the login instruction remote operation in step S11. In step S21, the remote operation job accepted in step S16 is executed, and the process ends.

  FIG. 8 is a flowchart illustrating an example of the flow of execution feasibility determination processing. Executability determination processing is processing executed in step S16 of FIG. Referring to FIG. 8, it is determined whether the print data included in the print job is confidential information (step S31). If the print data is confidential information, the process proceeds to step S32. If not, the process proceeds to step S32. Specifically, if a signal indicating that the print data includes confidential information is included in the print job, it is determined that the print data is confidential information, and if such a signal is not included in the print job. The print data is determined not to be confidential information. If the print data is not confidential information, the process ends. In this case, the print data is immediately executed (step S17 in FIG. 7). This is because, if the print job and the print data are not confidential information, the confidential information is not printed on the paper to be printed out, so there is no risk of leakage of confidential information.

  In step S32, the user attribute of the remote operation user is compared with the user attribute of the direct operation user. In step S33, if the result of the comparison in step S32 is that the user attribute of the directly operated user is greater than or equal to the user attribute of the remote operated user, the process proceeds to step S34, and if not, the process proceeds to step S37. The user attribute indicates the level of confidentiality of the user. Here, the level “1” is given to the manager and the level “2” is given to the employee who is not the manager. This is because if the user attribute of the direct operation user is higher than that of the remote operation user, there is no risk of confidentiality leaking. When the user attribute is group identification information for identifying a group of a plurality of users sharing information, the process is performed when the user attribute of the directly operated user and the user attribute of the remote operated user are the same (step S34). If it is different, the process may be advanced to step S37. This is because if both users are in the same group, there is no risk of leaking confidential information.

  In step S34, the remote operation user is directly notified of the operation user information. Specifically, the communication I / F unit 112 is controlled to transmit the user identification information of the directly operating user to the PC 105 operated by the remote operating user. In the PC 105, a message including the received user identification information is generated and displayed. Alternatively, MFP 100 may generate a message that includes the user identification information of the directly operating user and indicates that the user is logged in, and transmit the message to PC 105 operated by the remote operating user.

  FIG. 9 is a first diagram illustrating an example of a message display screen displayed on a PC operated by a remote operation user. When the PC 105 receives the user identification information of the operation user directly from the MFP 100, the PC 105 generates a message and displays a message screen. Referring to FIG. 9, the message display screen includes a message “SAITO is logged in from the operation panel”. Thereby, the remote operation user (TANAKA) can determine who the direct operation user (SAITO) is.

  The message display screen includes a check box for instructing “execution of printing” and a check box for instructing “execution of printing by sending a message to the operation panel”. Any one of these two check boxes can be designated. When a check box for instructing print execution is instructed, a print execution instruction is transmitted to MFP 100 without transmitting a message. When a check box for instructing “Send message to operation panel and execute printing” is instructed, a fixed message and a free word can be selected. Here, the fixed form message is “Please bring the printed matter you are currently printing”. The free word can be a message freely determined by the remote operation user, and is accepted by the PC 105 by inputting the free word in the input area. PC 105 transmits a fixed message or free word to MFP 100.

  Returning to FIG. 8, in step S35, it is determined whether or not a message is received from the PC 105 operated by the remote operation user. If the message is received, the process proceeds to step S36; otherwise, the process returns to the remote operation job execution process. In step S36, the received message is displayed on display unit 160A, and the process returns to the remote operation job execution process. Thereby, the fixed message or free word designated by the remote operation user can be directly transmitted to the operation user.

  FIG. 10 is a first diagram of a message display screen displayed on the MFP. Referring to FIG. 10, the message display screen displayed on the MFP includes “message from TANAKA to SAITO” and “please bring back the printed matter that is currently being printed”. As a result, the remote operation user (Mr. TANAKA) can directly transmit a message to the operation user (Mr. SAITO).

  On the other hand, in step S37, the remote operation user is notified of print job execution standby. Specifically, the communication I / F unit 112 is controlled to transmit job status information indicating that the execution of the print job is in a standby state to the PC 105 operated by the remote operation user. In the PC 105, based on the received job status information, a message explaining the status of the remote operation job instructed by the remote operation user is generated and displayed. Further, MFP 100 may generate a message explaining the status of the remote operation job instructed by the remote operation user based on the job status information, and transmit the message to PC 105 operated by the remote operation user.

  FIG. 11 is a second diagram illustrating an example of a message display screen displayed on the PC operated by the remote operation user. When PC 105 receives job status information from MFP 100, it generates a message and displays a message screen on the display. Referring to FIG. 11, the message display screen includes a message “A lower security level is logged in from the operation panel.” And “Print job execution is delayed until logout.” Accordingly, the remote operation user can know that the instructed remote operation job is not yet executed and is in a standby state.

  Returning to FIG. 8, in step S38, it is determined whether or not the directly operating user has logged out. The process waits until the directly operated user logs out (NO in step S38). When the directly operated user logs out, the process proceeds to step S39. When the print data is confidential information, the print data is not printed while the operation user is directly logged in. Therefore, it is possible to prevent the confidential information from leaking to the operation user.

  In step S39, the remote operation user is notified of the start of print job execution. Specifically, the communication I / F unit 112 is controlled to transmit job status information indicating that the execution of the print job is started to the PC 105 operated by the remote operation user. In the PC 105, based on the received job status information, a message explaining the status of the remote operation job instructed by the remote operation user is generated and displayed. Further, MFP 100 may generate a message explaining the status of the remote operation job instructed by the remote operation user based on the job status information, and transmit the message to PC 105 operated by the remote operation user.

  FIG. 12 is a third diagram illustrating an example of a message display screen displayed on the PC operated by the remote operation user. When PC 105 receives job status information from MFP 100, it generates a message and displays a message screen on the display. Referring to FIG. 12, the message display screen includes messages “The person who was logged in from the operation panel has been logged out.” And “Print job execution will start.” Thereby, the remote operation user can know that the execution of the instructed remote operation job is started. Furthermore, if the remote operation user moves to pick up the printed material printed on MFP 100 after seeing the message, the printed material printed on MFP 100 can be picked up before it reaches another person's hand.

  As described above, MFP 100 according to the present embodiment receives a login instruction from the operation panel, and receives a job execution instruction from a computer connected via a network while login of a direct operation user is permitted. If the job execution instruction is a predetermined job, the job is executed. The predetermined job includes (1) a job other than a print job, (2) a print job and print data does not include confidential information, or (3) a print job and job execution. The user attribute of the user identification information associated with the instruction is less than or equal to the user attribute of the directly operating user. For this reason, the waiting time until the job is executed can be eliminated. If the received job is not a predetermined job, execution of the print job is prohibited. For this reason, it is possible to prevent the confidential information from leaking to the direct operation user who has logged in from the operation panel after the job is executed.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

1 is a diagram showing an overall outline of an image forming system in one embodiment of the present invention. 1 is a perspective view showing an appearance of an MFP. 2 is a functional block diagram showing an outline of functions of an MFP. FIG. 2 is a functional block diagram illustrating an outline of functions of a CPU 111 provided in the MFP. FIG. It is a figure which shows an example of the format of user data. It is a flowchart which shows an example of the flow of a direct operation job execution process. It is a flowchart which shows an example of the flow of a remote operation job execution process. It is a flowchart which shows an example of the flow of a feasibility determination process. It is a 1st figure which shows an example of the message display screen displayed with PC which a remote control user operates. FIG. 10 is a first diagram of a message display screen displayed on the MFP. It is a 2nd figure which shows an example of the message display screen displayed with PC which a remote control user operates. It is a 3rd figure which shows an example of the message display screen displayed with PC which a remote control user operates.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Image forming system, 2 Network, 10 Operation reception part, 20 Remote operation reception part, 30 Login user management part, 31 User authentication part, 40 Job control part, 41 Executability judgment part, 42 Execution prohibition part, 50 Job status notification Part, 60 message receiving part, 70 message display part, 105 computer, 110 main circuit, 111 CPU, 112 communication I / F part, 113 ROM, 114 RAM, 115 EEPROM, 116 HDD, 117 facsimile part, 118 card I / F , 118A flash memory, 120 automatic document feeder, 130 document reading unit, 140 image forming unit, 150 sheet feeding unit, 160 operation panel, 160A display unit, 160B operation unit.

Claims (10)

Login permission means for accepting a login instruction from the operation panel and permitting login on the condition that user authentication is successful;
Job receiving means for receiving a job instructing image formation from a computer connected via a network;
User identification information receiving means for receiving user identification information for identifying a user who has instructed transmission of the job;
Control means for controlling job execution,
Wherein, when the job Ru is received by the job receiving means between the login by the login authorization means is permitted, confidentiality level of the user login is permitted by the login authorization means, the receiving If less than the user of the confidentiality levels instructing the transmission of a job, see contains a prohibition means for prohibiting to execute the job with the received, the job if not prohibited that said received by said prohibiting means the An image forming apparatus to be executed by job execution means .   The image forming apparatus according to claim 1, wherein the prohibition unit prohibits execution of the received job until the login permission by the login permission unit is canceled. A message receiving means for receiving a message from the computer if the prohibiting means does not prohibit the execution of the received job ;
The image forming apparatus according to claim 1 or 2 and the display unit, further comprising a display a message to the received. When the execution of the received job is prohibited by the prohibition unit, the job is executed on the computer that has transmitted the job in response to the job execution unit executing the received job. The image forming apparatus according to claim 1, further comprising a job start signal transmitting unit that transmits a signal indicating that the above is true . Accepting a login instruction from the operation panel and permitting login on the condition that user authentication is successful;
Receiving a job instructing image formation from a computer connected via a network;
Receiving user identification information for identifying a user who has instructed transmission of the job;
If a job is received in the step of receiving the job while login is permitted in the step of permitting login, the confidentiality level of the user permitted to log in in the step of allowing login is Prohibiting execution of the received job if it is lower than the confidentiality level of the user who directed the transmission of the received job ;
And executing the received job when it is not prohibited to execute the received job in the prohibiting step . Receiving the message from the computer if the prohibiting step does not prohibit the execution of the received job;
The job management method according to claim 5, further comprising: displaying the received message. If execution of the received job is prohibited in the prohibiting step, it indicates that the job has been executed to a computer that has transmitted the job in response to execution of the received job. The job management method according to claim 5, further comprising a step of transmitting a signal. Accepting a login instruction from the operation panel and permitting login on the condition that user authentication is successful;
Receiving a job instructing image formation from a computer connected via a network;
Receiving user identification information for identifying a user who has instructed transmission of the job;
When said job in the step of receiving a job is received, the user of the confidentiality level login is permitted in the step of permitting the log while Oite Log in to allow the pre-Symbol login is permitted but lower than sensitivity level of the user who instructed the transmission of said received job, a step of prohibiting to execute the received job,
A job management program that causes a computer that controls the image forming apparatus to execute the received job when the prohibiting step does not prohibit the execution of the received job. Receiving the message from the computer if the prohibiting step does not prohibit the execution of the received job;
The job management program according to claim 8, further comprising: causing the computer that controls the image forming apparatus to execute the step of displaying the received message. If execution of the received job is prohibited in the prohibiting step, it indicates that the job has been executed to a computer that has transmitted the job in response to execution of the received job. The job management program according to claim 8 or 9, further causing the computer that controls the image forming apparatus to execute the step of transmitting a signal.

Images