JP4853240B2 - Image processing system and program - Google Patents

Description

  The present invention relates to an image processing apparatus that executes transmission job processing for transmitting image data.

  In recent years, a copy of a document can be easily obtained with the spread of copying machines. With this, copying of confidential documents and the like can be easily performed. There is a growing need to prevent leaks and unauthorized use.

  For example, Patent Document 1 discloses a system that authenticates a user before performing a print job based on a print instruction from the user and determines whether to permit execution of the print job.

JP 2005-144803 A

  As described above, in a system that performs user authentication of a job instruction source before job execution, for example, a user who has been authenticated can execute a data transmission job regardless of the destination. However, even if the user is authenticated, it may be preferable to prohibit transmission of transmission target data depending on the destination.

  SUMMARY OF THE INVENTION An object of the present invention is to prevent an information leakage or the like that occurs when a transmission job process is executed in an image processing apparatus that executes a transmission job process that transmits image data.

The image processing system according to the present invention permits output of a transmission permission request indicating transmission request source information and transmission destination information provided from the transmission request source in response to an image data transmission request instruction from the transmission request source. Upon receiving the request and the output of the transmission permission request, the transmission request source is permitted to transmit image data to the transmission destination based on the request source information and the transmission destination information indicated in the transmission permission request. If the transmission request source is permitted to transmit image data to the transmission destination according to the determination by the transmission permission determination unit and the transmission permission determination unit, the image data is transmitted to the transmission destination. viewed contains a job execution section for transmitting, to the transmission when the transmission destination information representing a plurality of destinations, the transmission permission determining unit, the transmission requesting for each of the plurality of destination the image data You The job execution unit transmits the image data only when the transmission permission determination unit determines that transmission of the image data is permitted for all of the plurality of transmission destinations. It transmits to the destination .

  According to one aspect of the present invention, in an image processing apparatus that executes transmission job processing for transmitting image data, it is possible to prevent information leakage that occurs by executing transmission job processing.

  The best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described below with reference to the drawings.

  FIG. 1 is a configuration diagram of an image processing system according to the present embodiment. In the present embodiment, the image processing apparatus 10 that transmits image data obtained by optically reading an image or image data stored in advance to a designated transmission destination, and the image processing apparatus 10 transmits image data. The management server 20 that determines whether or not to perform the operation is connected via the network 30. Here, specifically, the image processing apparatus 10 is an apparatus having a function of transmitting image data, such as a multifunction peripheral or a FAX.

  The image processing apparatus 10 includes a control unit 10a, an image reading unit 10b, an image data storage unit 10c, and a job execution unit 10e. The control unit 10 a controls each unit of the image processing apparatus 10. The image reading unit 10b optically reads an image and generates image data. The image data storage unit 10 c stores image data generated by the image reading unit 10 b and image data provided via the network 30. In response to a transmission request from a user who is a transmission request source, the permission request unit 10d sends a transmission permission request for requesting permission to transmit image data to a transmission destination designated by the user to the management server 20. Output. When receiving a permission notification from the management server 20 as a response to the permission request, the job execution unit 10e transmits the image data selected by the transmission request source to the transmission destination specified by the transmission request source.

  The management server 20 includes a control unit 20a, a permission determination unit 20b, and a transmission permission table storage unit 20c. The control unit 20 a controls each unit of the management server 20. The permission determination unit 20b receives the transmission permission request from the image processing apparatus 10, refers to the transmission permission table storage unit 20c, and determines whether or not the transmission request source may transmit image data to the transmission destination. The transmission permission table storage unit 20c stores a table that associates permitted transmission destination information that permits transmission of image data with transmission request source information that is permitted to be transmitted to the permitted transmission destination. FIG. 2 shows an example of the transmission permission table. In the table shown in FIG. 2, a FAX number is shown as a transmission destination permitted to transmit image data in the permitted transmission destination field 100, and a permitted user field 102 is a user permitted to transmit to the permitted transmission destination. ID is shown. The permission determination unit 20b refers to the table stored in the transmission permission table storage unit 20c based on the transmission destination information and the transmission request source information received when the transmission permission request is received from the image processing apparatus 10, and receives the reception. The transmission destination corresponding to the transmitted transmission destination information is registered in the permitted transmission destination field 100, and the user ID corresponding to the received transmission request source information is registered in the permitted user field 102 corresponding to the registered permitted transmission destination field 100. It is determined whether or not it has been done. If registered as a result of the determination, the management server 20 permits the transmission request source to transmit the image data to the transmission destination, and sends a permission notification to the image processing apparatus 10. On the other hand, if it is not registered, an error notification is sent to the image processing apparatus 10.

  FIG. 3 is a flowchart illustrating a processing procedure when the image processing apparatus 10 receives a transmission request for image data from a transmission requesting user.

  When the image processing apparatus 10 receives a transmission request for image data from a transmission requesting user (S100), the image processing apparatus 10 transmits a transmission request source information (such as a user ID) and transmission destination information (such as a FAX number and an e-mail address) A permission request is output to the management server 20 (S102). After making the transmission permission request, the image processing apparatus 10 suspends the transmission job until receiving a response from the management server 20. Next, the image processing apparatus 10 receives the determination result for the transmission permission request from the management server 20 (S104). When the transmission permission is received (the determination result in step S106 is affirmative “Y”), the transmission request The image data is transmitted to the transmission destination designated by the original user (S108). On the other hand, if the transmission permission is not received (determination result in step S106 is negative “N”), a transmission error is notified to the user (S110).

  As described above, in the present embodiment, when receiving an image data transmission instruction from the user, the image processing apparatus 10 inquires the management server 20 about transmission permission. When receiving a transmission permission notification from the management server 20, the image processing apparatus 10 transmits the image data to a transmission destination designated by the user. According to the present embodiment, even if the user is successfully authenticated, the image data cannot be transmitted unless the destination is permitted by the management server 20. Therefore, it is possible to prevent information leakage that occurs when image data is transmitted.

  When a plurality of transmission destinations are designated by the user, the management server 20 may designate only the transmission destinations permitted for transmission and output a permission notice to the image processing apparatus 10. Alternatively, permission output may be performed to the image processing apparatus 10 only when all transmission destinations designated by the user are permitted.

  Moreover, although the example which memorize | stores the table which shows the transmission destination information which permits transmission in the memory (transmission permission table storage part 20c) with which the management server 20 is provided was demonstrated above, the table which shows the transmission destination information which prohibits transmission is demonstrated. It may be stored in a memory.

  Subsequently, a modification of the present invention will be described with reference to the drawings.

  FIG. 4 is a configuration diagram of an image processing system according to this modification. The image processing apparatus 10 is described in the instruction document after performing preprocessing such as outputting a plurality of images as one image on the image data based on the instruction document described in the XML format or the like. The image data after pre-processing is transmitted to the transmission destination.

  However, when the image processing apparatus 10 executes a series of processes based on the instruction, depending on the processing capability of the image processing apparatus 10, the preprocessing described in the instruction cannot be executed, and the image data is transmitted to the transmission destination. There are cases where it is not possible. That is, depending on the processing capability of the image processing apparatus 10, for example, a plurality of images may not be output as a single image, and a series of processes based on the instruction sheet may not be executed.

  Therefore, in this modification, the image processing apparatus 10 requests the management server 20 to determine whether or not the preprocessing based on the instruction can be executed before executing the series of processes according to the instruction. The management server 20 determines whether or not the image processing apparatus 10 can execute preprocessing based on the instruction, and notifies the image processing apparatus 10 of the result. When the image processing apparatus 10 cannot execute the preprocessing based on the instruction, the management server 20 searches for a proxy image processing apparatus that can execute the preprocessing based on the instruction instead of the image processing apparatus 10. If the search is successful, the proxy image processing apparatus rewrites the instruction so as to execute a series of processes including pre-processing, and then transmits the instruction to the image processing apparatus 10.

  FIG. 4 is a configuration diagram of an image processing system according to this modification.

  The image processing apparatus 10 is different from the image processing apparatus 10 shown in FIG. 1 in that it includes an instruction sheet analysis unit 10f, an execution determination request unit 10g, and a capability information storage unit 10h. The instruction analysis unit 10f analyzes the instruction provided from the transmission requesting user, and causes the job execution unit 10e to execute each process described in the instruction. The execution determination request unit 10g includes the instruction information provided by the transmission request source user and the capability information stored in advance in the capability information storage unit 10h before the job execution unit 10e executes a series of processes based on the instruction document. Is transmitted to the management server 20. Here, the capability information is list information of processes that can be executed by the image processing apparatus 10, and the processes that can be executed by the image processing apparatus 10 can be specified by referring to the capability information.

  The management server 20 is different from the management server 20 shown in FIG. 1 in that it includes an execution determination unit 20d, a capability information storage unit 20e, and an instruction sheet update unit f. The execution determination unit 20d determines whether the image processing apparatus 10 can execute a series of processes based on the instruction based on the instruction and capability information provided from the image processing apparatus 10. More specifically, the execution determination unit 20d analyzes the instruction, specifies each process described in the instruction, and determines whether each specified process is registered in the capability information of the image processing apparatus 10. It is determined whether or not the image processing apparatus 10 can execute a series of processes based on the instructions.

  The capability information storage unit 20e uniquely identifies the capability information of each image processing device (not shown) connected to the management server 20 via the network 30, and uniquely identifies each image processing device such as the IP address of each image processing device. And stored in association with the identification information. Each image processing apparatus periodically provides its own capability information to the management server 20. Alternatively, each image processing apparatus provides the changed capability information to the management server 20 when the capability information changes.

  Further, when the execution determination unit 20d determines that the image processing apparatus 10 cannot execute a series of processes based on the instruction as a result of the determination, the execution determination unit 20d executes the series of processes based on the instruction instead of the image processing apparatus 10. Search for possible proxy image processing devices. More specifically, the execution determination unit 20d refers to the capability information storage unit 20e, searches for capability information in which all the processes described in the instructions are registered, and associates them with the searched capability information. The proxy image processing apparatus is searched by specifying the identified identification information. Next, the execution determination unit 20d updates the content of the instruction sheet so that the proxy image processing apparatus executes a series of processes in the instruction sheet update unit 20f, and returns the updated instruction sheet to the image processing apparatus 10.

  FIG. 5 shows a processing procedure when the management server 20 receives an instruction sheet and capability information from the image processing apparatus 10.

  When the management server 20 receives the instruction and the capability information from the image processing apparatus 10 (S200), the management server 20 compares the processing content described in the instruction with the processing content that can be executed by the image processing apparatus 10 indicated in the capability information. Then, it is determined whether or not the image processing apparatus 10 can execute processing based on the instruction (S202). If the determination result is executable (the determination result in step S204 is affirmative “Y”), the management server 20 transmits the instruction sheet received from the image processing apparatus 10 to the image processing apparatus 10 as it is (S206). .

  On the other hand, if the determination result is not executable (the determination result in step S204 is negative “N”), the management server 20 can execute a series of processes based on the instructions instead of the image processing apparatus 10. The proxy image processing apparatus is searched (S208). Next, the management server 20 updates the contents of the instruction sheet so that the proxy image processing apparatus executes a series of processes (S210). Here, the management server 20 updates the processing contents described in the instruction so that the image processing apparatus 10 transfers the instruction to the proxy image processing apparatus. That is, the management server 20 reads identification information corresponding to the proxy image processing apparatus from the capability information storage unit 20e, extracts, for example, an IP address indicated by the identification information, and transfers an instruction to the IP address. Add instructions to the instructions. After the update, the management server 20 transmits the updated instruction sheet to the image processing apparatus 10 (S206). In step S208, if the proxy image processing apparatus cannot be searched, the management server 20 updates the content of the instruction so that the image processing apparatus 10 notifies the user of a processing error, for example. That's fine.

  FIG. 6 is a flowchart showing a processing procedure when the image processing apparatus 10 receives an instruction sheet.

  When the instruction document is provided from the requesting user (S250), the image processing apparatus 10 extracts the capability information of the device itself from the capability information storage unit 10h, and transmits the capability information and the instruction document to the management server 20. Then, an execution determination request is made to the management server 20 (S252). The image processing apparatus 10 suspends processing based on the instruction until it receives a determination result from the management server 20. Thereafter, the image processing apparatus 10 receives an instruction from the management server 20 (S254). The image processing apparatus 10 executes processing based on the instruction provided from the management server 20 instead of the instruction provided from the requesting user (S256).

  Here, if the instruction provided from the management server 20 has been updated so that the proxy image processing apparatus executes a series of processes, the image processing apparatus 10 performs the proxy image processing apparatus according to the instruction. Transfer the instruction and image data. The proxy image processing apparatus that has received the transfer of the instruction executes a series of processes on the image data based on the received instruction. That is, the proxy image processing apparatus performs preprocessing such as outputting a plurality of images as a single image to the image data, and then performing image processing on the transmission destination described in the instruction sheet. Send image data.

  According to the second embodiment, even when the processing capability of the image processing apparatus that has received the instruction is insufficient and the series of processes based on the instruction cannot be executed, the proxy image processing apparatus performs the series of processes based on the instruction. Can be executed.

  Further, according to the second embodiment, the management server 20 collectively manages the capability information of each image processing apparatus, thereby determining whether or not each image processing apparatus can be executed without variation.

  By the way, the image processing apparatus 10 and the management server 20 described above are realized by installing a program that implements various processes shown in FIGS. 3, 5, and 6 in a microcomputer and executing the program. Can do.

  That is, a storage medium that records software program codes for realizing the functions of the image processing apparatus 10 and the management server 20 is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus stores it in the storage medium. The image processing apparatus 10 and the management server 20 can be realized by reading and executing the program code.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiment and the like, and the storage medium storing the program code constitutes the above-described embodiment and modification.

  As a storage medium for supplying the program code, for example, a floppy disk (registered trademark), a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a nonvolatile memory card, a ROM, or the like is used. be able to.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments and modifications are realized, but also an OS (operating system) running on the computer based on the instruction of the program code. Needless to say, a case where the functions of the above-described embodiment, etc. are realized by performing part or all of the actual processing and the processing is included.

  Further, after the program code read from the storage medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

1 is a configuration diagram of an image processing system according to an embodiment. It is a figure which shows an example of a transmission permission table. It is a flowchart which shows the process sequence of the image processing apparatus which concerns on embodiment. It is a block diagram of the image processing system which concerns on a modification. It is a flowchart which shows the process sequence of the image processing apparatus which concerns on a modification. It is a flowchart which shows the process sequence of the management server which concerns on a modification.

Explanation of symbols

  10 image processing apparatus, 10a control unit, 10b image reading unit, 10c image data storage unit, 10d permission request unit, 10e job execution unit, 10f instruction document analysis unit, 10g execution determination request unit, 10h capability information storage unit, 20 management Server, 20a control unit, 20b permission determination unit, 20c transmission permission table storage unit, 20d execution determination unit, 20e capability information storage unit, 20f instruction update unit, 30 network.

Claims (2)

A permission request unit that outputs a transmission permission request indicating transmission request source information and transmission destination information provided from the transmission request source in response to a transmission request instruction of image data from the transmission request source;
Whether to permit the transmission request source to transmit image data to the transmission destination based on the request source information and the transmission destination information indicated in the transmission permission request in response to the output of the transmission permission request A transmission permission determination unit for determining;
A job execution unit that transmits the image data to the transmission destination when the transmission request source is permitted to transmit the image data to the transmission destination by the determination in the transmission permission determination unit;
Only including,
When the transmission destination information represents a plurality of transmission destinations, the transmission permission determination unit determines whether to permit the transmission request source to transmit the image data for each of the plurality of transmission destinations. The job execution unit transmits the image data to the transmission destination only when the transmission permission determination unit determines that transmission of the image data is permitted for all of the plurality of transmission destinations . A program for causing a computer system to function as an image processing system for transmitting image data,
The computer system;
A permission request unit that outputs a transmission permission request indicating transmission request source information and transmission destination information provided from the transmission request source in response to a transmission request instruction of image data from the transmission request source;
Whether to permit the transmission request source to transmit image data to the transmission destination based on the request source information and the transmission destination information indicated in the transmission permission request in response to the output of the transmission permission request A transmission permission determination unit for determining;
A job execution unit that transmits the image data to the transmission destination when the transmission request source is permitted to transmit the image data to the transmission destination by the determination in the transmission permission determination unit;
To function ,
When the transmission destination information represents a plurality of transmission destinations, the transmission permission determination unit determines whether to permit the transmission request source to transmit the image data for each of the plurality of transmission destinations. The job execution unit transmits the image data to the transmission destination only when the transmission permission determination unit determines to permit transmission of the image data for all of the plurality of transmission destinations .

Images