JP6838409B2 - Information processing equipment and its programs - Google Patents

Description

The present invention relates to an information processing device and a program thereof.

In recent years, it has become common to convert a wide variety of information into data and store it in an information processing device such as a PC (Personal Computer) or a server. Confidential information such as personal information or confidential information is included in the information converted into data, and various measures are taken so as not to leak it to anyone other than the persons concerned. In particular, in an office, a large number of users often share data-converted information. Under such conditions, the access authority to the information differs depending on the user's position such as the user's department or job title. Therefore, the data that can be accessed differs depending on the user.

In Patent Document 1, the access authority to the confidential information is set for each record of the database in which the confidential information is stored, and the confidential information described in a predetermined column of the record is set for a user who does not have the access authority. It describes a technique for ensuring confidentiality for users who do not have access authority by hiding and displaying all of the information.

Japanese Unexamined Patent Publication No. 2005-158038

The problem to be solved by the present invention is a technique for ensuring the confidentiality of confidential information in the information processing device when the screen for operating the information processing device is displayed on a device other than the information processing device. To provide.

The first invention is an operation screen for operating the function of the own device, and the first operation screen in which the confidential information including the destination information is not displayed by fixing the screen so that the scroll operation cannot be performed is provided on the own device. It is an operation screen for displaying and operating the function of the own device, and the second operation screen displayed so that the confidential information appears by scrolling is displayed on the terminal, and the confidential information is included in the confidential information. It is an information processing device having a control unit that controls the destination so that the function of the own device is exerted.

The second invention has an authentication unit that authenticates a terminal that has requested authentication of connection by using the authentication information of the terminal in the first invention, and the control unit displays the second operation screen. It is an information processing device that controls to display on an authenticated terminal.

In the third invention, in the first or second invention, the control unit invalidates the instruction given using the first operation screen while the second operation screen is displayed. It is an information processing device that controls.

According to a fourth aspect of the present invention, in any one of the first to third inventions, the control unit controls the display of the first operation screen by substituting at least a part of the confidential information with other information. It is an information processing device.

According to a fifth aspect of the present invention, in any one of the first to fourth inventions, the control unit responds to the selection of a place where confidential information should be displayed on the first operation screen, and causes the terminal to display the confidential information. It is an information processing device that controls to display the second operation screen.

In the sixth invention, the control unit has the first operation screen and the second operation screen so that the operation content of the first operation screen and the operation content of the second operation screen are different. It is an information processing device that controls the display of.

The seventh invention is a program of an information processing device, which is an operation screen for operating the function of the information processing device, and is a destination by fixing the screen so that a scroll operation cannot be performed. The first operation screen on which the confidential information including the information is not displayed is displayed on the information processing device, and is an operation screen for operating the function of the information processing device. The confidential information is displayed so as to appear by a scroll operation. This is a program that displays the second operation screen on the terminal and functions as a control unit that controls the destination included in the confidential information so that the function of the own device is exerted.

According to the invention of claim 1, confidentiality can be maintained in the information processing apparatus.
According to the invention of claim 2, the confidential information can be displayed on the authenticated terminal.
According to the invention of claim 3, malfunction is unlikely to occur.
According to the invention of claim 4, the confidential information is not displayed on the information processing device, and it is difficult for other users to visually recognize the confidential information.
According to the invention of claim 5, when the user needs to display the confidential information, the confidential information can be displayed on the terminal, which enhances the convenience of the user.
According to the invention of claim 6, a large amount of information necessary for the operation can be displayed on the display unit at one time.
According to the invention of claim 7, confidential information can be displayed while maintaining confidentiality.

It is a schematic diagram of the system using the information processing apparatus which concerns on this invention. This is an example of login information. It is a figure for demonstrating an example which does not display confidential information. This is an example of an operation screen displayed on the information processing device. It is a sequence diagram. It is a figure for demonstrating operation of the composite apparatus in 1st Embodiment. This is an example of the transition flow of the operation screen. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen. It is a figure for demonstrating operation of the composite apparatus in 2nd Embodiment. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen. This is an example of the operation screen in the third embodiment. This is another configuration example of the composite device according to the present invention.

The present invention is an operation screen for operating the function of the own device, and is an operation screen for displaying the first operation screen on which the confidential information is not displayed on the own device and operating the function of the own device. , An information processing device having a control unit that controls the display of a second operation screen on which confidential information is displayed on a terminal.

Here, the information processing device may be of any type as long as it is a device that processes information such as a personal computer (PC), a tablet, a multifunction device (Multi-Faction Peripheral: MFP), a copying device, a printer device, and a facsimile. .. The following description is for the case where the information processing device is a composite device.

Confidential information is information that is permitted to be viewed (accessed) only by a specific user. The confidential information is, for example, a scanned image temporarily stored in the RAM of the composite device. Further, the confidential information is the contents of the destination information (address book) or the data file stored in the hard disk or the non-volatile memory of the composite device. For example, it is the contents of destination information (address book) or data file stored in a database such as a data server on the network to which the complex device is connected. Of course, it is not limited to these. The confidential information may be information that is not displayed on the display unit of the composite device among the information that is permitted to be viewed only by a specific user. Confidential information may be appropriately set for each table, column, record, and field of the database.

In an environment where the display unit (display, etc.) on which information is displayed can be seen by anyone regardless of whether or not they have access authority, when a user with legitimate access authority displays confidential information on the display unit, the confidential information is concealed. The information is visible to other users who do not have access privileges. That is, eavesdropping due to shoulder hacking occurs. Therefore, it cannot be said that confidentiality is ensured. In particular, when confidential information is displayed on a scanner, copy, printer, facsimile, or a composite device thereof used by a large number of users in an office, it cannot be said that confidentiality is ensured. According to the present invention, the confidentiality of confidential information is ensured.

<First Embodiment>
FIG. 1 is a schematic view of a system using the composite device according to the first embodiment. In FIG. 1, 10 is a user terminal and 20 is a composite device.

The user terminal 10 is a terminal having a wireless function such as a smartphone or a tablet terminal. The user terminal 10 has a wireless network interface 11, a control unit 12, a display unit 13, and an operation unit 14.

The wireless network interface 11 transmits / receives data via a wireless LAN (Local Area Network). When the user terminal 10 connects to the composite device 20, the wireless network interface 11 transmits a connection authentication request to receive terminal authentication. The authentication request includes the terminal identification information as the authentication information, and the wireless network interface 11 has the terminal identification information that uniquely identifies the own terminal. The following example is an example in which a MAC (Media Access Control) address is used as the terminal identification information. However, it is not limited to this. For example, other information may be used as long as the information is unique to the terminal and can uniquely identify the terminal. For example, it may be a UUID (Universally Unique Identifier). In this case, the variant of the UUID does not matter, but for example, a UUID (version 1) using the time and MAC address, and a part of the UUID of the version 1 can be used as a user ID or group of POSIX (Portable Operating System Interface). UUID using some unique name (byte string) such as UUID (version 2) replaced by ID, UUID using MD5 (version 3) or SHA1 (version 5) as a hash function, UUID by random number (Version 4) or the like may be used. Other information used for authentication may be a SIM (Subscriber Identity Module), a card identification number, a terminal telephone number, or the like.

The wireless network interface 11 may be a short-range wireless interface such as Bluetooth®. Communication between the user terminal 10 and the composite device 20 may be performed by wire.

The control unit 12 displays on the display unit 13 of the user terminal 10 based on the display data of the operation screen transmitted from the composite device 20. The operation screen is used when the user operates each function of the multifunction device 20, such as a scanner, a copy, a printer, and a facsimile. The control unit 12 executes various controls as a terminal in addition to displaying the operation screen.

The display unit 13 is a display on which the operation screen is displayed by the control unit 12. For example, LCD (Liquid Crystal Display).

The operation unit 14 is composed of a touch panel. The operation unit 14 is a function unit that receives an instruction input by the user using the operation screen displayed on the display unit 13.

The composite device 20 has a plurality of functions such as a scanner, copying, printing, and facsimile. The composite device 20 transmits / receives data via a network such as a LAN or the Internet. The composite device 20 transmits / receives data (for example, facsimile image data) via a communication network such as a public telephone line network. The composite device 20 has a terminal connection mode and a normal mode. The terminal connection mode is a display method to which the present invention is applied. The normal mode is a mode in which the user terminal 10 is not connected to the composite device 20 and the confidential information is not displayed on the composite device 20. Even in this normal mode, the function of the composite device 20 can be executed. For example, it is possible to execute a copy, a print, a facsimile in which the destination is directly input and transmitted, and the like.

The composite device 20 includes a wireless network interface 21, an operation panel unit 22, a storage unit 23, an authentication unit 24, a control unit 25, a wired network interface 26, and a functional unit 27.

The wireless network interface 21 transmits / receives data to / from the user terminal 10 via the wireless network. The wireless network interface 21 receives the connection authentication transmitted from the user terminal 10. The wireless network interface 21 transmits the display data of the operation screen displayed on the display unit 13 to the user terminal 10.

The operation panel unit 22 is, for example, a touch panel. The operation panel unit 22 has a display unit 221 and an operation unit 222. The display unit 221 is, for example, an LCD. The display unit 221 displays an operation screen for operating each function of the composite device 20. The operation unit 222 receives an instruction to be input by the user using the operation screen displayed on the display unit 221.

The storage unit 23 is a non-volatile memory such as a flash memory. Alternatively, it is a storage device such as a hard disk drive. Of course, it is not limited to these. User login information is stored in the storage unit 23 (see FIG. 2). This user login information is information in which a user ID, a password, and a terminal identification information are associated with each other. The user ID is identification information that uniquely identifies the user who uses the composite device 20. The password is information for the user to log in to the composite device 20 when using the composite device 20. A user who uses the composite device 20 registers his / her own user ID and password in the storage unit 23 in advance. The terminal identification information is information for uniquely identifying the user terminal 10 used by the user. As described above, the terminal identification information is explained by the MAC address. Of course, it is not limited to this.

The authentication unit 24 performs user authentication and terminal authentication. First, user authentication will be described. The user inputs his / her own user ID and password from the operation panel unit 22. The authentication unit 24 collates the entered user ID and password with the user login information stored in the storage unit 23 (user authentication). In the present embodiment, an example in which the user inputs his / her own user ID will be described. The user may select his / her own user ID from the list of user IDs displayed on the display unit 221 and enter the password.

Next, terminal authentication will be described. The authentication unit 24 receives the connection authentication request from the user terminal 10. The authentication unit 24 collates the MAC address included in the connection authentication request with the user ID entered in the user authentication based on the user login information of the storage unit 23. As a result, the terminal authentication of the user terminal 10 is performed.

The control unit 25 generates display data of an operation screen for operating each function of the composite device 20. The display data of the operation screen generated by the control unit 25 is displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the composite device 20.

Here, the operation screen will be described. The operation screen includes data described in a markup language such as XML (Extension Markup Language) or HTML (Hyperext Markup Language), and a Javascript (registered trademark) or GUI (Graphic) script such as Javascript (registered trademark) or GUI (Graphic). It consists of a script that has been created. The operation screen is displayed on the display unit using a Web browser. As a display method other than the Web browser, display by a dedicated application or the like can be considered. The display unit 13 and the display unit 221 may be displayed by the same application or may be displayed by different applications. In the following, both operation screens are composed of data described in markup language and a script, and are displayed by a Web browser.

As described above, the operation screen is displayed on the display unit 221, and the user inputs an operation instruction using the displayed operation screen. The operation screen corresponds to, for example, a login screen (see FIG. 4 (1)), a menu screen (see FIG. 4 (2)), a setting screen (see FIG. 4 (3)), or the like.

As described above, the operation screen is displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the composite device 20. However, the display of the confidential information is different between the display unit 13 and the display unit 221. The control unit 25 reads out the confidential information associated with the currently logged-in user ID. The control unit 25 controls so that the read confidential information is not displayed on the operation screen (first operation screen) displayed on the display unit 221. On the other hand, the control unit 25 controls so that the read confidential information is displayed on the operation screen (second operation screen) displayed on the display unit 13.

The operation screens displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the composite device 20 will be described. As a method of controlling so that the confidential information is not displayed, there are a method of controlling so that the confidential information itself is not displayed and a method of controlling the confidential information so as not to be displayed by replacing it with other information. In the following, the fax destination information is confidential information, and an example of an operation screen for setting a fax destination will be described.

A method of controlling so that the fax destination information (confidential information) itself is not displayed is explained. The operation screen displayed on the display unit 221 of the composite device 20 is controlled so that the destination information is not displayed. The confidential information is not displayed on the operation screen displayed on the display unit 221 (see the diagram on the composite device side in FIG. 3 (1)). As a method of preventing the destination information from being displayed, there is a method of controlling the destination information itself so that it is not displayed without being read. There is also a method of controlling not to display the destination information by replacing the read destination information with the Null value. Any method may be used. The method is not limited to the above method. The operation screen displayed on the display unit 13 of the user terminal 10 is controlled so that the destination information is displayed (see the figure on the user terminal side in FIG. 3 (1)).

A method of controlling so that confidential information is replaced with other information and not displayed is explained. The operation screen displayed on the display unit 221 of the composite device 20 is controlled so that the destination information is not displayed by replacing the destination information with other information. For example, the destination information is replaced so that it is hidden by the hidden characters. As a result, the destination information is not displayed (see the diagram on the composite device side in FIG. 3 (2)). The destination information is controlled to be displayed on the operation screen displayed on the display unit 13 of the user terminal 10. The destination information is displayed on the operation screen displayed on the display unit 13 (see the figure on the user terminal side in FIG. 3 (2)). On the operation screen displayed on the display unit 221 of the composite device 20, there are cases where all the confidential information is not displayed and cases where a part of the confidential information is not displayed. The fact that part of the confidential information is not displayed means that the content of the confidential information cannot be inferred.

The wired network interface 26 connects to a data server or a storage device on the network via the network. The network is, for example, a LAN, the Internet, or the like. For example, an address book or a file is stored in a data server or storage device on a network in association with a user ID.

The functional unit 27 is a set unit of functions. For example, scanners, copies, prints, facsimiles, etc.

Subsequently, the operation of the present embodiment will be described. FIG. 5 is a sequence diagram of the present embodiment.

The control unit 25 displays the operation screen (login screen) on the display unit 221 (see step 501: FIG. 4 (1)). The user inputs the user ID and password assigned to him / her (step 502). The authentication unit 24 verifies whether the entered user ID and password are associated and stored in the user login information. As a result, user authentication is performed (step 503). If the matches match, login is permitted, and if they do not match, login is denied.

After the login is permitted, the connection authentication request sent from the user terminal 10 is received (step 504).

The authentication unit 24 receives the connection authentication request from the user terminal 10 from the wireless network interface 21, and is the MAC address included in the connection authentication associated with the logged-in user ID and stored in the user login information? Match. As a result, terminal authentication is performed (step 505). If the user ID and MAC address are associated and stored, the connection is permitted, and if the user ID and MAC address are not associated and stored, the connection is rejected.

The authentication unit 24 transmits the authentication result to the user terminal 10 via the wireless network interface 21 (step 506).

When the connection is permitted in step 505, the control unit 25 displays, for example, a menu screen (see FIG. 4 (2)). According to the function selected by the user on this menu screen, the operation screen controlled so that the confidential information is not displayed is displayed on the display unit 221 (step 507). The figures on the composite device side of FIGS. 3 (1) and 3 (2) are examples of operation screens when fax selection is performed. The control unit 25 transmits the display data of the operation screen controlled so that the confidential information is displayed to the user terminal 10 (step 508). The figures on the user terminal side of FIGS. 3 (1) and 3 (2) are examples of operation screens at the time of fax selection.

The control unit 12 of the user terminal 10 displays the operation screen on the display unit 13 of the own terminal based on the display data of the operation screen received by the wireless network interface 11 (step 509).

The operation unit 14 receives an instruction input by the user using the operation screen displayed on the display unit 13 of the user terminal 10 (step 510). The received instruction is transmitted to the composite device 20 via the wireless network interface 11 (step 511).

The functional unit 27 executes a function according to an instruction from the user terminal 10 received by the wireless network interface 21 (step 512).

Subsequently, the operation of the composite device 20 will be described. FIG. 6 is a flow chart for explaining the operation of the composite device 20.

The control unit 25 displays an operation screen (login screen: see FIG. 3 (1)) on the display unit 221 and waits for input from the user (step 601).

The user inputs a user ID and a password using the operation unit 222. The authentication unit 24 verifies whether the user login information of the storage unit 23 is stored in association with the user ID and the password (step 602). If the collation result is OK, the authentication unit 23 permits login (step 602: Yes). If the collation result is NG, the authentication unit 23 rejects the login (step 602: No). If the login is refused, the user cannot use the composite device 20 and terminates.

When login is permitted (step 602: Yes), the wireless network interface 21 receives a connection authentication request from the user terminal 10 (step 603).

The authentication unit 24 collates whether the logged-in user ID and the MAC address included in the received connection authentication request are associated and stored in the user login information (step 604). If the collation result is OK, the authentication unit 24 permits the connection (step 604: Yes). If the collation result is NG, the connection is rejected (step 604: No). In the case of connection refusal (step 604: No), the wireless network interface 21 receives the connection refusal authentication result from the authentication unit 24 and transmits it to the user terminal 10 (step 605). The operation screen of the normal mode is displayed on the display unit 221. The functional unit 27 executes the function in the normal mode (step 610).

In the case of connection permission (step 604: Yes), the control unit 25 displays the operation screen on the display unit 221 of the composite device 20 (step 606). For example, a menu screen (see FIG. 4 (2)) and a setting screen (see FIG. 4 (3)) corresponding to a function selected by the user in the menu are displayed.

The control unit 25 reads out the confidential information associated with the logged-in user ID. The display data of the operation screen controlled so that the read confidential information is displayed is transmitted to the user terminal 10 via the wireless network interface 21 (step 607). The operation screen on which the confidential information is displayed is displayed on the display unit 13 of the user terminal 10.

The operation unit 14 receives the content instructed by the user using the operation screen displayed on the display unit 13 of the user terminal 10. The received instruction content is transmitted to the composite device 20 via the wireless network interface 11 (step 608).

The functional unit 27 executes a function according to the instruction content received via the wireless network interface 21 (step 609).

The normal mode described above is a case where the confidential information is not displayed on the display unit 221 of the composite device 20. However, in this normal mode, each user may set the type and confidentiality level of the confidential information in advance, and display the confidential information according to the set conditions.

Although the example described above is an example in which user authentication is always performed, user authentication may be omitted. In this case, the MAC address used for terminal authentication is used instead of the user ID.

The example of the above description is an example in which the operation unit 222 accepts the operation even if the user operates using the operation screen displayed on the display unit 221 of the composite device 20 even after the terminal authentication. However, after the terminal authentication, the operation using the operation screen displayed on the display unit 221 may not be accepted. In this case, when the terminal authentication is completed, the authentication unit 24 notifies the control unit 25 that the terminal authentication is completed. The control unit 25 controls to invalidate the operation instruction using the operation screen displayed on the display unit 221. That is, the operation unit 222 is controlled so as not to accept the operation instruction. After this notification, the operation unit 222 does not accept the operation instruction using the operation screen displayed on the display unit 221. While the terminal 10 is connected, the functional operation of the composite device 20 is performed using the operation screen displayed on the display unit 13 of the terminal 10.

<Specific example 1>
A specific operation example will be described below. This specific example is an example in which the user can operate using the operation screen displayed on the display unit 221 of the composite device 20 even after the terminal authentication. FIG. 7 is a diagram for explaining a screen transition when the copy function is selected.

The login screen (see FIG. 7 (1)) is displayed on the display unit 221. The user inputs the user ID and password assigned to him / her. It is assumed that the user ID "AAA" and the password "FX001" are entered.

The authentication unit 24 collates whether or not the user ID "AAA" and the password "FX001" are associated with the user login information and stored. With reference to the login information in FIG. 2, since the user ID "AAA" and the password "FX001" are associated with each other, login is permitted.

When login is permitted, the user terminal 10 sends a connection authentication request. It is assumed that the connection authentication request is transmitted with "12-34-56-78-90-11" included as the MAC address.

The authentication unit 24 verifies whether or not the MAC address "12-34-56-78-90-11" is associated with the user ID "AAA" of the logged-in user and stored in the user login information. Authenticate by. Here, referring to the login information of FIG. 2, since the MAC address "12-34-56-78-90-11" is associated with the user ID "AAA", the connection is permitted. This authentication result is transmitted to the user terminal 10. At this time, the authentication result is displayed on the display unit 13 of the user terminal 11 (see the user terminal side in FIG. 7 (2)).

After transmitting the authentication result, the operation screen (menu screen: see FIG. 7 (2)) is displayed on the display unit 221. Here, for example, the document to be copied is set in the composite device, and the copy function is selected.

The operation screen (copy setting screen: refer to the composite device side in FIG. 7 (3)) is displayed on the display unit 221. The scan function unit of the function unit 27 associates the scanned image with the logged-in user ID and temporarily stores the scanned image in the RAM. The control unit 25 transmits the display data of the operation screen controlled so that the scanned image is displayed to the user terminal 10. The control unit 12 of the user terminal 10 displays the operation screen on the display unit 13 based on the received display data. The figure on the user terminal side of FIG. 7 (3) is an example in which a scanned image is displayed on the display unit 13 of the user terminal 10.

Here, the user confirms the scanned image on the operation screen displayed on the display unit 13. Depending on the confirmation result, instructions for operating the functions of the composite device 20 are selected using the operation screen. The selected instruction content is transmitted to the composite device 20.

In the composite device 20, an operation according to the instruction content is executed.

As described above, in the present embodiment, the confidential information is not displayed on the display unit 221 of the composite device 20, but is displayed only on the display unit 13 of the user terminal 10 whose terminal is authenticated by the composite device 20. This enhances confidentiality.

<Specific example 2>
This specific example is an example in which an operation instruction using the operation screen displayed on the display unit 221 of the composite device 20 is not accepted after the terminal authentication. An example in which the fax function is selected is explained. 8 to 10 are examples of operation screens in this specific example. It is assumed that the address book used in the fax function is associated and stored for each user ID in the data server on the LAN.

The operation screen (login screen: see the figure on the side of the composite device in FIG. 8) is displayed on the display unit 221 of the composite device 20. The user inputs the user ID and password assigned to him / her. Here, it is assumed that the user ID "AAA" and the password "FX001" are entered.

The authentication unit 24 verifies whether or not the input user ID "AAA" and the password "FX001" are associated with each other and stored in the user login information of the storage unit 23. In the login information of FIG. 2, the user ID "AAA" and the password "FX001" are associated and stored. Therefore, login is permitted.

When login is permitted, the user terminal 10 sends a connection authentication request. Here, it is assumed that "12-34-56-78-90-11" is included in the authentication request as the MAC address.

The authentication unit 24 verifies whether or not the MAC address "12-34-56-78-90-11" is associated with the logged-in user ID "AAA" and stored in the user login information. In FIG. 2, it can be seen that the MAC address “12-34-56-78-90-11” and the user ID “AAA” are associated with each other. The authentication result indicating that the connection of the terminal 10 is permitted is transmitted to the user terminal 10. The authentication result indicating that the connection is permitted is displayed on the display unit 13 of the user terminal 11 (see the figure on the terminal side of FIG. 8).

The authentication unit 24 notifies the control unit 25 that the connection of the terminal 10 is permitted. Upon receiving this notification, the control unit 25 controls to invalidate the operation instruction using the operation screen displayed on the display unit 221.

After transmitting the authentication result, the operation screen (menu screen: see the figure on the side of the composite device in FIG. 9) is displayed on the display unit 221 of the composite device 20. Even if the fax function is selected on this menu screen, the operation unit 222 does not accept the operation instruction. The operation screen (menu screen: see the figure on the user terminal side in FIG. 9) is displayed on the display unit 13 of the user terminal 10. The user selects a fax function on this menu screen. The selected operation instruction is received by the operation unit 14. The received operation instruction (fax) is transmitted to the composite device 20 via the wireless network interface 11. The control unit 25 receives an operation instruction (fax) via the wireless network interface 21.

While the user terminal 10 is connected to the composite device 20, the operation screen displayed on the display unit 221 does not change (see the figure on the composite device side in FIG. 10). The operation screen (menu screen: see the figure on the user terminal side in FIG. 10) is displayed on the display unit 13 of the user terminal 10. The user selects an address book on this menu screen. The selected operation instruction (address book) is accepted by the operation unit 14. The received operation instruction (address book) is transmitted to the composite device 20 via the wireless network interface 11. The control unit 25 receives an operation instruction (address book) via the wireless network interface 21. The control unit 25 reads the address book associated with the logged-in user ID from the data server on the LAN. The fax function unit of the function unit 27 temporarily stores the scanned image in the RAM in association with the user-authenticated user ID. The control unit 25 controls so that the scanned image and the destination information of the read address book are displayed on the display unit 13. The display data of the operation screen controlled in this way is transmitted to the user terminal 10 via the wireless network interface 21.

The control unit 12 causes the display unit 13 to display the operation screen received via the wireless network interface 11 (see the figure on the user terminal side of FIG. 11). The screen transition is not performed on the display unit 221 of the composite device 20 (see the diagram on the composite device side in FIG. 11). That is, the confidential information is not displayed on the display unit 222 of the composite device 20. In FIG. 11, an operation screen on which the address of the address book is displayed and an operation screen on which the scanned image is displayed are displayed by switching the operation screen. However, these operation screens may be integrated into one operation screen.

The user selects a destination on the operation screen displayed on the display unit 13 of the user terminal 10. The selected operation instruction (destination) is received by the operation unit 14. The user confirms the scanned image. The user selects the operation instruction "OK" for faxing the scanned image by using the operation screen. The selected operation instruction is received by the operation unit 14. The received operation instruction (destination and OK) is transmitted to the composite device 20 via the wireless network interface 11.

The fax function unit of the function unit 27 receives an operation instruction (destination and OK) via the wireless network interface 21. The fax function unit sends the scanned image to the destination according to the operation instruction.

According to the present embodiment, the confidential information is not displayed on the display unit 221 of the composite device 20 which is visible to many users. The confidential information is only displayed on the display unit 13 of the user terminal 10 to which the connection is permitted. Confidential information is difficult for other users to see. Confidential information can be visually recognized by a specific person, but confidentiality is ensured for persons other than the above.

According to the present embodiment, the operation screen is displayed not only on the display unit 221 of the composite device 20 but also on the display unit 13 of the user terminal 10. As a result, by using both display units, the area for displaying information regarding the operation of the composite device 20 becomes large. The operability of the composite device 20 is improved. This is effective for complex devices in which the display area of the display unit is not large.

<Second Embodiment>
In the above embodiment, the composite device 20 is an example of waiting for the connection authentication request from the user terminal 10 to be transmitted. This embodiment is an example in which the composite device 20 requests the user terminal 10 to transmit a connection authentication request. The same configuration as that of the above embodiment will be described using the same numbers, and detailed description thereof will be omitted.

The points different from the above-described embodiment will be described.

The authentication unit 24 receives a notification from the operation unit 222 that there is an instruction to display the confidential information. Upon receiving this notification, the authentication unit 24 transmits a request for transmission of the connection authentication request to the user terminal 10 via the wireless network interface 21. That is, the authentication unit 24 determines whether or not there is an instruction to request the user terminal 10 to transmit the connection authentication request.

When the user performs an operation to display the confidential information using the operation screen displayed on the display unit 221, the operation unit 222 notifies the authentication unit 24 to that effect.

When the wireless network interface 11 receives the request for transmitting the connection authentication request from the composite device 20, the wireless network interface 11 transmits the connection authentication request.

Subsequently, the operation of the composite device 20 will be described. FIG. 12 is a flow chart illustrating the operation of the composite device 20.

The operations of steps 601 and 602 are the same as those of the first embodiment.

When login is permitted (step 602: Yes), the operation screen of the normal mode is displayed on the display unit 221. The functional unit 27 executes the function in the normal mode (step 610).

The authentication unit 24 determines whether or not the user terminal 10 is instructed to request the transmission of the connection authentication request (step 902). If it is determined that there is no instruction to request the transmission of the authentication request (step 902: No), the process returns to step 610. When it is determined that there is an instruction to request the transmission of the authentication request (step 902: Yes), the authentication unit 24 requests the user terminal 10 to transmit the authentication request via the wireless network interface 21 (step 903). In response to this request, the user terminal 10 receives the authentication request transmitted via the wireless network interface 11 (step 603).

The operation after receiving the connection authentication request is performed from step 604 to step 610 as in the first embodiment.

<Specific example 3>
Next, in the second embodiment, a specific operation when the fax function is selected by the user will be described.

The operation screen (login screen: see FIG. 13) is displayed on the display unit 221 of the composite device 20. The user inputs the user ID and password assigned to him / her. Here, it is assumed that the user ID "AAA" and the password "FX001" are entered.

The authentication unit 24 verifies whether or not the input user ID "AAA" and the password "FX001" are associated with each other and stored in the user login information of the storage unit 23. In the login information of FIG. 2, the user ID "AAA" and the password "FX001" are associated and stored. Therefore, login is permitted.

When login is permitted, the operation screen of the normal mode (menu screen: see FIG. 14) is displayed on the display unit 221. The functional unit 27 executes the function in the normal mode. When the user selects a fax on the menu screen, an operation screen (setting screen: see FIG. 15) is displayed on the display unit 221. Here, it is assumed that the destination is selected.

The control unit 25 reads the address book associated with the logged-in user ID from the data server on the LAN. The fax function unit of the function unit 27 temporarily stores the scanned image in the RAM in association with the logged-in user ID.

Since the execution is in the normal mode, the operation screen controlled so that the confidential information is not displayed is displayed on the display unit 221 (see FIG. 16). FIG. 16 (1) is an example of an operation screen controlled so that the confidential information itself is not displayed. FIG. 16 (2) is an example of an operation screen in which confidential information is replaced with other information.

The user selects a place where the confidential information should be displayed (for example, a place surrounded by a dotted line in FIGS. 16 (1) and 16 (2)). The operation unit 222 recognizes this. The operation unit 222 notifies the authentication unit 24 that the operation for displaying the confidential information has been performed by the user. The authentication unit 24 requests the user terminal 10 to transmit the connection authentication request via the wireless network interface 21. In response to this request, the user terminal 10 transmits a connection authentication request via the wireless network interface 11. Here, it is assumed that the connection authentication request includes "12-34-56-78-90-11" as the MAC address.

The authentication unit 24 receives the connection authentication request via the wireless network interface 21. The MAC address "12-34-56-78-90-11" is associated with the logged-in user ID "AAA", and it is collated whether or not it is stored in the user login information. In the user login information of FIG. 2, the MAC address "12-34-56-78-90-11" and the user ID "AAA" are associated with each other. The authentication unit 24 transmits the authentication result of the connection permission to the user terminal 10 via the wireless network interface 21.

The control unit 25 transmits the display data of the operation screen controlled so that the scanned image and the destination information of the read address book are displayed to the user terminal 10. The control unit 12 displays the operation screen on the display unit 13 based on the display data transmitted from the composite device 20 (see the figure on the user terminal side of FIG. 17). In FIG. 17, an operation screen on which the address of the address book is displayed and an operation screen on which the scanned image is displayed are displayed by switching the operation screen. However, these operation screens may be integrated into one operation screen.

The display unit 221 of the composite device 20 only displays an operation screen (see the figure on the composite device side of FIG. 17) controlled so that the destination of the address book and the scanned image are not displayed. That is, the confidential information is not displayed.

The user selects a destination on the operation screen displayed on the display unit 13 of the user terminal 10. The selected operation instruction (destination) is received by the operation unit 14. The user confirms the scanned image. The user selects the operation instruction "OK" for faxing the scanned image by using the operation screen. The selected operation instruction is received by the operation unit 14. The received operation instruction (destination and OK) is transmitted to the composite device 20 via the wireless network interface 11. The fax function unit of the function unit 27 receives an operation instruction (destination and OK) via the wireless network interface 21. The fax function unit sends the scanned image to the destination according to the operation instruction.

According to the present embodiment, the confidential information is displayed on the user terminal 10 when the user needs to display the confidential information. Therefore, the convenience of the user is high.

<Third embodiment>
This embodiment is an example of control performed in addition to the above-described embodiment. This embodiment is an example of controlling the operation screens displayed on the display unit 13 and the display unit 221 so that different operation instructions can be given in the operation of the same function unit. The same configurations as those in the above embodiment are numbered the same, and detailed description thereof will be omitted.

The control unit 25 controls the operation screen so that the display unit 13 of the user terminal 10 and the display unit 221 of the composite device 20 can give different operation instructions in the operation of the same functional unit. The control unit 25 fixes the operation screen displayed on the display unit 221 so that the transition does not occur. At least one of the different operating instructions is different. Two or more different operation instructions may be used.

(Example 4)
This embodiment will be described. FIG. 18 is an example of an operation screen displayed on the display unit 13 and the display unit 221. Here, it will be described that the user authentication and the terminal authentication have already been completed through the process described in the above embodiment.

The operation screen (menu screen: see FIG. 18 (1)) is displayed on the display unit 221. Here, it is assumed that the user selects the copy function. The operation screen (copy setting screen: see FIG. 18 (2)) is displayed on the display unit 221. The control unit 25 transmits the display data of the operation screen controlled so that the operation instructions that cannot be displayed without scrolling are displayed to the user terminal 10. At this time, the control unit 25 fixes the operation screen displayed on the display unit 221 so that it cannot be scrolled. FIG. 18 (3) is an example of an operation screen displayed on the display unit 221 and an operation screen displayed on the display unit 13. In FIG. 18 (3), the confidential information is not displayed on the user terminal side, and only the operation instructions that can be selected are displayed. However, when the screen transitions by scrolling the operation screen or selecting the operation instruction to become a screen on which the confidential information should be displayed, the confidential information is displayed.

Since the operation screen on which the display unit 221 and the display unit 13 can give different operation instructions is displayed, a large amount of information necessary for operating the functions of the composite device 20 is displayed at one time.

As is clear from the above description, the terminal of the present invention described above can be configured by hardware, but can also be realized by a computer program. In this case, the composite device 20 includes a processor 121, a memory (ROM or RAM) 122, a storage device (hard disk, semiconductor disk, etc.) 123, an input device (keyboard, mouse, touch panel) 124, a display device 125, a communication unit 126, or the like. It can also be realized by a general-purpose computer having hardware resources (see FIG. 19). It is also possible to realize only some functions by a computer program.

The preferred embodiments and examples have been described above. However, the present invention is not necessarily limited to the above-described embodiments and examples, and can be variously modified and implemented within the scope of its technical idea.

Some or all of the above embodiments may also be described, but not limited to:

(Appendix 1)
Have at least one processor and
The processor
The first operation screen, which is an operation screen for operating the functions of the information processing device and does not display confidential information, is displayed on the information processing device.
It is an operation screen for operating the function of the information processing device, and is controlled so that the second operation screen on which the confidential information is displayed is displayed on the terminal.

10 User terminal 11 Wireless network interface 12 Control unit 13 Display unit 20 Composite device 21 Wireless network interface 22 Operation panel unit 221 Display unit 222 Operation unit 23 Storage unit 24 Authentication unit 25 Control unit 26 Wired network interface 27 Functional unit

Claims (7)

It is an operation screen for operating the function of the own device, and the first operation screen in which the confidential information including the destination information is not displayed by fixing the screen so that the scroll operation cannot be performed is displayed on the own device.
A second operation screen, which is an operation screen for operating the function of the own device and is displayed so that the confidential information appears by a scroll operation, is displayed on the terminal.
An information processing device having a control unit that controls the destination included in the confidential information so that the function of the own device is exerted. It has an authentication unit that authenticates the terminal that has requested connection authentication using the terminal authentication information.
The information processing device according to claim 1, wherein the control unit controls the second operation screen to be displayed on an authenticated terminal. The information processing device according to claim 1 or 2, wherein the control unit controls to invalidate an instruction given using the first operation screen while the second operation screen is displayed. .. The information processing device according to any one of claims 1 to 3, wherein the control unit replaces at least a part of the confidential information with other information to control the display of the first operation screen. Claims 1 to claim that the control unit controls the terminal to display the second operation screen in response to the selection of a place where the confidential information should be displayed in the first operation screen. The information processing apparatus according to any one of 4. The control unit controls the display of the first operation screen and the second operation screen so that the operation content of the first operation screen and the operation content of the second operation screen are different. The information processing apparatus according to any one of claims 1 to 5. A program of an information processing device, wherein the information processing device is used.
The first operation screen, which is an operation screen for operating the function of the information processing device and does not display confidential information including destination information by fixing the screen so that scrolling operation cannot be performed, is displayed on the information processing device. ,
An operation screen for operating the function of the information processing device, and a second operation screen displayed so that the confidential information appears by scrolling is displayed on the terminal.
A program that functions as a control unit that controls the destination included in the confidential information so that the function of the own device is exerted.

Images