JP2003099328A - Imaging device and imaging system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable secret data to delete or print, even if user forgets a secret ID for decoding the secret data in a memory of an imaging device. SOLUTION: A printer 10 receives data from a computer 1, decides whether the data is secret or not by a data distinction part 11, encrypts the data by an encryption part 16 if the data is secret, and decides whether the encrypted data is decryption data, in order to decrypt an ID of the secret data in a memory device and memory device controller 17. If the encrypted secret data is not decryption data, the encrypted secret data is stored in the memory device. The ID of the secret data is recorded in an ID data memory part 12 and is associated with the secret data. If the encrypted secret data is decryption data, a data comparator part 18 decides whether the decryption data is associated with the secret data in the memory device and decrypts the ID of the secret data, corresponding to the decryption data to delete or output the secret data.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to data designated as confidential (confidential data) on a host device such as a computer.
The present invention relates to various image forming apparatuses such as a printer, a copying machine, a facsimile apparatus capable of protecting an image forming apparatus, or a multifunction peripheral having respective functions thereof, and an image forming system including a host apparatus and an image forming apparatus.

[0002]

2. Description of the Related Art Conventionally, in image forming apparatuses such as printers,
For example, there is a device which is connected to a network, receives data from a host device on the network, stores the data in a memory (a storage device such as a hard disk device or an optical disk device), and prints it out as necessary. In addition, among such image forming apparatuses, there is also an image forming apparatus having a security function that prevents only a specific person from seeing highly confidential data (hereinafter referred to as “confidential data”).

In a host device that transmits confidential data to such an image forming apparatus, an ID that is predetermined identification information (hereinafter also referred to as "secret ID") is requested by a print output request.
Is issued and the confidential ID is added to the confidential data created in advance (for which confidentiality is designated), thereby transmitting the confidential data including the confidential ID to the image forming apparatus. Upon receiving the confidential data, the image forming apparatus encrypts the confidential data and stores it in the memory in association with the confidential ID added to the data. After that, when the confidential ID which is the identification information for decryption for decrypting (or printing out) the confidential data in the memory is input, the confidential ID is compared with the confidential ID corresponding to the confidential data in the memory. It is determined whether the two IDs match, and if the two IDs match, the confidential data in the memory is decrypted and printed out.

[0004]

However, if the user forgets the confidential ID issued by the host device,
To prevent unauthorized printing of confidential data in the memory of the image forming device, contact the system administrator, etc. to cancel the security of the image forming device or cancel the confidential ID corresponding to the confidential data (delete confidential data). It was very inconvenient because it was necessary to request or have the confidential ID checked and to print the confidential data using the confidential ID.

The present invention has been made in view of the above problems, and a confidential ID for decrypting (printing out) the confidential data stored in the memory of the image forming apparatus.
Even if the user forgets, it is possible to delete the confidential data or print out the confidential data to improve convenience.

[0006]

To achieve the above object, the present invention provides the following image forming apparatus and image forming system. The image forming apparatus according to the invention of claim 1 has a memory for storing confidential data, a data type discriminating means for discriminating the type of data received from a host device such as a computer, and the means for receiving data from the host device. When the data is determined to be confidential data, the data encryption means for encrypting the confidential data and the confidential data encrypted by the means are added to the data issued when the data is transmitted. Confidential data storage means for storing in the memory in association with identification information, decryption identification information input means for inputting the decryption identification information for decrypting the confidential data stored in the memory by the means, and the means The identification information for decryption entered by the above is compared with the identification information corresponding to the confidential data stored in the above memory, and both the identification information are matched. A first comparison and determination means for determining whether or not the data, a data decryption means for decrypting the confidential data stored in the memory when the identification information is determined to match by the means, An image forming apparatus having a confidential data output means for printing out the decrypted confidential data, characterized in that it is configured as follows.

That is, a data judgment is made to judge whether or not the confidential data encrypted by the data encryption means is release data for releasing the identification information corresponding to the confidential data stored in the memory. And means for accumulating the confidential data in the memory by the confidential data accumulating means when it is determined that the confidential data encrypted by the data encryption means by the means is not the release data. The permission means and the confidential data stored in the memory when the confidential data encrypted by the data encryption means by the data determination means is determined to be the unlock data. And a second comparison / determination means for determining whether or not the both data match, and the above-mentioned data is determined by the means. If it is, it is provided with a identification information canceling means for canceling the identification information corresponding to the confidential data stored in the memory.

An image forming apparatus according to a second aspect of the present invention is the image forming apparatus according to the first aspect, wherein the second comparison / determination means is a secret data encrypted by the data encryption means by the data determination means. If it is determined that the data is for release, whether the data in the predetermined area of the release data and the data in the predetermined area of the confidential data stored in the memory are compared to determine whether the two data match. Area determining means for specifying the predetermined area is provided as a means for determining. An image forming apparatus according to a third aspect of the present invention is the image forming apparatus according to the second aspect, wherein the area designating means is area automatic designating means for automatically and randomly designating the predetermined area.

An image forming system according to a fourth aspect of the present invention comprises a host device such as a computer and an image forming device that prints out data from the host device, and the host device creates confidential data. The data creating means, the identification information issuing means for issuing predetermined identification information in response to a print output request, and the identification information issued by the means are added to the confidential data created by the confidential data creating means to display the image. A data transmission unit for transmitting data to a forming apparatus, the image forming apparatus stores a memory for storing confidential data, a data type determination unit for determining the type of data received from the host apparatus, If it is determined that the data received from the host device is confidential data, the data that encrypts the confidential data Encrypting means, confidential data storage means for storing the confidential data encrypted by the means in the memory in association with the identification information added to the data, and the confidential data stored in the memory by the means Decoding identification information input means for inputting the decoding identification information for deciphering, and comparing the decoding identification information input by the means with the identification information corresponding to the confidential data stored in the memory. First comparison / determination means for determining whether or not the two pieces of identification information match, and data decryption for decoding the confidential data stored in the memory when the means determines that the two pieces of identification information match. An image forming apparatus system comprising a means and a confidential data output means for printing and outputting the confidential data decrypted by the means, comprising: And it features.

That is, the host device further includes a canceling password setting means for setting a canceling password for canceling the identification information corresponding to the confidential data created by the confidential data creating means, and the canceling password setting means. The unlocking password adding means for adding the unlocking password thus generated to the confidential data created by the confidential data creating means, and the unlocking password transmitting means for sending the unlocking password to the image forming apparatus are provided, and the image forming is performed. When the data received from the host device is determined to be a release password by the data type determination means, the device further releases the release password and the release data corresponding to the confidential data stored in the memory. Second ratio for comparing passwords to determine if both passwords match When the determination means is provided and the secret data storage means is added to the confidential data encrypted by the data encryption means with the cancellation password, the confidential data is also associated with the cancellation password. Means for accumulating in the memory, wherein the data decrypting means includes means for decrypting the confidential data stored in the memory when the second comparison and determination means determines that the two passwords match. Is.

[0011]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be specifically described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration example of a printer system according to the present invention. This printer system (image forming system) includes a computer 1 and a printer 10, which are connected by a network 2 such as a LAN (local area network).

The computer 1 is a host device, and comprises a device main body having a control section using a microcomputer (CPU), an input device including a keyboard and a mouse (not shown), and a display device. The control unit of the computer 1 realizes the functions of a confidential data creating unit, an identification information issuing unit, a data transmitting unit, a releasing password setting unit, a releasing password adding unit, and a releasing password transmitting unit, and an input device. The data for print output is created on the display device by the operation of, and the created data is transmitted to the printer 10 when the request for print output is made by the operation of the input device.

Further, after the data for print output is created, if a confidentiality designation request is generated by the operation of the input device, the created data is treated as confidential data (the confidential data is created), and printing is performed by the operation of the input device. When an output request is issued, a confidential ID, which is predetermined identification information, is issued and displayed on the display device, and the confidential ID is added to confidential data and transmitted to the printer 10. Further, by operating the input device, the confidential data that has already been sent to the printer 10 can be retransmitted as ID cancellation data described later.

Further, by operating the input device, I for canceling the confidential ID corresponding to the created confidential data
Set a password for D cancellation arbitrarily and add the password for ID cancellation to the created confidential data.
It is also possible to send the D cancellation password as it is to the printer 10. Here, as the ID releasing password, for example, the system administrator uses the ID releasing password assigned to each user and assigned to each user individually.

The printer 10 has a security function, and includes a data determination unit 11 and an ID data storage unit 1.
2, ID data input unit 13, ID identification unit 14, operation / display unit 15, encryption unit 16, storage device & storage device control unit 1
7, a data comparison unit 18, a decryption unit 19, and a data output unit 20. Although not shown, a microcomputer that controls the entire printer 10 is provided. The data determination unit 11 has a function as a data type determination unit and a function as a data determination unit, and determines the type of data received from the computer 1. That is, it is determined (determined) whether or not the received data is confidential data or the ID cancellation password. The confidential data encrypted by the encryption unit 16 is ID release data for releasing the confidential ID corresponding to the confidential data stored in the storage device (memory) of the storage device & storage device control unit 17. Determine if there is.

The ID data storage unit 12 stores and manages the ID of confidential data (a confidential ID corresponding to the confidential data) stored in the storage device (memory) of the storage device & storage device control unit 17. The ID data input unit 13 is a decryption identification information input unit, and inputs a confidential ID which is decryption identification information for decrypting the confidential data stored in the storage device of the storage device & storage device control unit 17. be able to. The ID identification unit 14 is a first comparison / determination unit, and I
The confidential ID input by the D data input unit 13 and the confidential ID corresponding to the confidential data accumulated in the storage device of the storage device & storage device control unit 17 are compared to determine whether or not both IDs match. (Identify)

The operation / display unit 15 comprises an operation unit for inputting various information and a display unit for displaying various information. The encryption unit 16 is a data encryption unit and encrypts the confidential data when the data determination unit 11 determines that the received data is confidential data. The storage device & storage device control unit 17 comprises a storage device (memory) for accumulating data to be printed out, and a storage device control unit for performing control according to the present invention including writing and reading of data to and from the memory.

The storage device control unit comprises a confidential data storage means,
It functions as a storage permission unit, an identification information canceling unit, and a region designating unit (region automatic designating unit), and the confidential data encrypted by the encryption unit 16 is used as a confidential ID added to the data. Correlate and store in the storage device. At this time, when the data determination unit 11 determines that the confidential data encrypted by the encryption unit 16 is not the ID release data, the storage of the confidential data in the storage device is permitted. In addition, when the data comparison unit 18 determines that both pieces of data described later match each other,
Confidential I corresponding to the confidential data stored in the storage device
It is also possible to cancel D and delete or print out the confidential data. If the confidential data encrypted by the encryption unit 16 has a password for ID cancellation added in addition to the confidential ID, the confidential data is associated with the confidential ID and the password for ID cancellation and stored in the storage device. Accumulate in.

The data comparison unit 18 is a second comparison / determination unit, and the data determination unit 11 stores the confidential data encrypted by the encryption unit 16 in the storage device of the storage device & storage device control unit 17. If it is determined that the data is ID release data for releasing the confidential ID corresponding to the confidential data, the ID release data and the secret stored in the storage device of the storage device & storage device control unit 17 It is compared with the data to determine whether the two data match.
Furthermore, when the data determination unit 11 determines that the data received from the computer 1 is the ID release password, the ID release password and the secret stored in the storage device of the storage device & storage device control unit 17 are stored. The ID cancellation password corresponding to the data is compared to determine whether the two passwords match.

The deciphering unit 19 is a data deciphering unit, and when the data comparing unit 18 determines that the two confidential IDs match, the storage device & storage device control unit 17
Decrypt confidential data (encrypted data) stored in the storage device. Further, when the data judging unit 11 judges that the both passwords match, the confidential data stored in the storage device of the storage device & storage device control unit 17 can be decrypted. The data output unit 20 is
It has a function as a confidential data output means, and prints out the confidential data decrypted by the decryption unit 19 (forms an image on a sheet based on the confidential data).

When the printer 10 receives normal data (data other than confidential data) from the computer 1, the data output section 20 can print the data as it is.

Next, the processing according to the first aspect of the invention in the printer 10 will be specifically described with reference to FIGS. 2 and 3. FIG. 2 shows a process of accumulating confidential data in the printer 10 and a confidential I corresponding to the confidential data.
9 is a flowchart showing an example of processing for canceling D (ID of confidential data).

The printer 10 periodically starts the processing routine shown in FIG. 2, first checks in step S1 whether data is received from the computer 1, and if data is received from the computer 1, the data is determined in step S2. The unit 11 determines whether the received data is confidential data (whether it is normal data). If it is determined that the received data is normal data, the process proceeds to step S9 and the data is left as it is. The data output unit 20 prints out. When it is determined that the received data is confidential data, the confidential data is encrypted by the encryption unit 16 in step S3.

Subsequently, in step S4, the data determination unit 11
An ID for canceling the confidential ID corresponding to the confidential data stored in the storage device of the storage device & storage device control unit 17 in which the confidential data encrypted by the encryption unit 16 by
When it is determined whether the confidential data is the data for release and the encrypted confidential data is not the data for ID release, the confidential data is stored in the storage device & storage device controller 17 at step S10. The confidential ID stored in the storage device by the control unit and added to the confidential data in step S11 is stored in the ID data storage unit 12 by the storage device control unit of the storage device & storage device control unit 17, and the confidential ID Corresponds (associates) with the storage area address of the confidential data. At this time, information indicating the storage area address of the confidential data (address information) is also stored in the ID data storage unit 12.

When it is determined that the confidential data encrypted by the encryption unit 16 is the ID release data, the data comparison unit 18 controls the ID release data and the storage device / storage device control in steps S5 and S6. The confidential data stored in the storage device of the unit 17 is compared to determine whether the two data match (same). If it is determined that the two data do not match, the confidential data is obtained in step S12. I
When it is recognized that the D cannot be released, for example, information indicating that is transmitted to the computer 1 and displayed on the display device.

If it is determined that the above two data match, it corresponds to the confidential data stored in the storage device of the storage device & storage device control unit 17 that matches the encrypted ID releasing data (confidential data). The confidential ID to be released is released, and it is determined in step S7 whether the confidential data is deleted or printed out. Here, the instruction to delete the confidential data or the printout is given by the operation of the input device by the user when transmitting the ID release data from the computer 1, and the information indicating the instruction content is added to the ID release data. To be done.

When it is determined that the confidential data stored in the storage device of the storage device & storage device control unit 17 that matches the ID release data encrypted by the encryption unit 16 is to be deleted, the process proceeds to step S13. The storage device control unit deletes the confidential data and the confidential ID in the ID data storage unit 12 corresponding to the confidential data. When it is determined that the confidential data stored in the storage device of the storage device & storage device control unit 17 that matches the confidential data encrypted by the encryption unit 16 is to be printed out, the data output process is performed in step S8. .

That is, the confidential data (encrypted data) is read from the storage device by the storage device control unit of the storage device & storage device control unit 17. At this time, in order to read the confidential data, the address information indicating the address of the storage area in which the confidential data is stored is acquired from the ID data storage unit 12. The read confidential data is decrypted by the decryption unit 19, and the decrypted confidential data is printed out by the data output unit 20.

By the above processing, even if the user forgets the confidential ID for decrypting the confidential data stored in the storage device of the storage device & storage device control unit 17, the confidential data is deleted from the computer 1 as the ID release data. By transmitting the confidential ID as the confidential data, the confidential ID corresponding to the confidential data in the storage device of the storage device & storage device control unit 17 that matches the ID releasing data can be released and the confidential data can be deleted or printed out. it can.

FIG. 3 is a flow chart showing an example of processing for printing out confidential data by inputting a confidential ID in the printer 10. The printer 10 periodically starts the processing routine of FIG. 3, first checks in step S21 whether there is a confidential data output request from the ID data input unit 13, and if confidential data output is requested,
In step S22, the names (all other information) of all confidential data stored in the storage device of the storage device & storage device control unit 17 are displayed as a list on the operation / display unit 15.

Thereafter, in step S23, the operation / display unit 1
It is determined that any of the names of all confidential data on the item 5 is selected by the operation on the operation / display unit 15, and further, in step S24, the confidential data having the selected name is decrypted (printed out). When it is determined that the confidential ID is input from the ID data input unit 13, the confidential ID in the ID data storage unit 12 corresponding to the confidential data of the name selected by the ID identification unit 14 in step S25 and the input confidential ID. And are compared to determine whether the two IDs match.

If it is determined that the two IDs do not match, it is recognized that the data cannot be output in step S29, and, for example, information indicating this is transmitted to the computer 1 and displayed on the display device. If it is determined that the IDs match, the confidential data (encrypted data) corresponding to the confidential ID is read from the storage device by the storage device control unit of the storage device & storage device control unit 17 in step S26. At this time, in order to read the confidential data, the address information indicating the address of the storage area in which the confidential data is stored is acquired from the ID data storage unit 12.
The read confidential data is decrypted by the decryption unit 1 in step S27.
The decrypted confidential data is printed out by the data output unit 20 in step S28.

Next, the second and third aspects of the printer 10 will be described.
4, 5 and 7 for the processing according to the invention of FIG.
It will be specifically described with reference to. FIG. 4 is a flowchart showing an example of a process of accumulating confidential data and a process of registering an ID cancellation area in the printer 10.

The printer 10 periodically starts the processing routine shown in FIG. 4, first checks in step S31 whether or not data is received from the computer 1, and if data is received from the computer 1, the data is determined in step S32. The unit 11 determines whether the received data is confidential data (whether it is normal data), and if it is determined that the received data is normal data, step S36.
Then, the data output section 20 prints out the data as it is. When it is determined that the received data is confidential data, the processing including encryption of the confidential data in steps S33 to S35 and the ID in steps S37 and S38
Registration processing of the cancellation area (predetermined area) is performed in parallel.

In step S33, the received data (confidential data) is encrypted by the encryption unit 16. Step S
At 34, the confidential data encrypted by the encryption unit 16 is stored in the storage device by the storage device control unit of the storage device & storage device control unit 17. In step S25, the confidential ID added to the confidential data is stored in the ID data storage unit 12 by the storage device control unit of the storage device & storage device control unit 17, and the confidential ID and the storage area address of the confidential data are stored. Correspond to.

Here, the ID release area is the data of the entire area of the received ID release data and the storage device & storage device control unit 17 as in the process according to the invention of claim 1 described with reference to FIG. The received I data is not compared with the data in all areas of each confidential data stored in the storage device.
This is for comparing the partial data of the D cancellation data with the partial data of each confidential data stored in the storage device of the storage device & storage device control unit 17. Information indicating the position of the ID cancellation area (area position information)
Is input by the operation of the input device by the user when the confidential data is transmitted from the computer 1, and is added to the confidential data to be transmitted.

Therefore, in step S37, the position information indicating the position of the ID releasing area of the confidential data is registered from the area position information added to the received confidential data (received data determined to be confidential data) (ID Specify the area for release). The position information indicating the position of the ID cancellation area may be automatically generated and registered automatically (the ID cancellation area may be automatically specified at random).
In step S38, of the received confidential data, data is extracted from the ID cancellation area at the position indicated by the position information registered in step S37 by the storage device control unit of the storage device & storage device control unit 17, and the encryption unit 16 Encrypted by and stored in the storage device.

Here, as shown in FIG. 7, for example, a number (No) of a plurality of confidential data stored in the storage device of the storage device & storage device control section 17, a confidential ID for each confidential data, Information indicating the storage area address of each confidential data and position information indicating the position of the ID releasing area (ID releasing address) for each confidential data are stored in the ID data storage unit 12.

FIG. 5 is a flowchart showing another example of the process of accumulating confidential data and the process of releasing the confidential ID corresponding to the confidential data in the printer 10. The printer 10 periodically starts the processing routine of FIG.
First, in step S41, the presence or absence of data reception from the computer 1 is checked, and if data is received from the computer 1, in step S42 the data determination unit 11 determines whether the received data is confidential data (normal data If the received data is normal data, the process proceeds to step S49, and the data output unit 20 prints out the data as it is.

When it is determined that the received data is confidential data, the confidential data (the confidential data encrypted by the encryption unit 16) is determined by the data determination unit 11 in step 43 as the storage device & storage device control unit 17. It is determined whether or not the confidential data corresponding to the confidential data stored in the storage device is ID releasing data for releasing the confidential ID, and if the confidential data is not the ID releasing data, step S50. Go to and encrypt the confidential data 1
6 and the confidential ID added to the confidential data is stored in the storage device by the storage device control unit of the storage device & storage device control unit 17 and stored by the storage device control unit of the storage device & storage device control unit 17. ID data storage unit 1
2 and associates the confidential ID with the storage area address of the confidential data.

When it is determined that the confidential data is ID release data, the process proceeds to step S44, and the ID
Of the cancellation data, the data of each ID cancellation area obtained from the position information indicating the position of each ID cancellation area stored in the ID data storage unit 12 is encrypted by the encryption unit 16, and in step S45. The data comparison unit 18 compares the confidential data stored in the storage device of the storage device & storage device control unit 17 with the data in each ID cancellation area to determine whether the two data match, and When it is determined that the two data do not match, it is recognized in step S51 that the confidential ID cannot be released (data mismatch), and information indicating that is transmitted to the computer 1 and displayed on the display device.

If it is determined that the two data match, the storage device & storage device control unit 17 in which the ID release data (confidential data) encrypted by the encryption unit 16 and the data in the ID release area match each other. The confidential ID corresponding to the confidential data in the storage device is released, and it is determined in step S47 whether the confidential data should be deleted or printed out. When it is determined to delete the confidential data in the storage device of the storage device & storage device control unit 17 in which the ID release data encrypted by the encryption unit 16 and the data in the ID release area match, in step S52. The confidential data and the confidential I in the ID data storage unit 12 corresponding to the confidential data
D is deleted by the storage device controller. If it is determined to print out the confidential data in the storage device of the storage device & storage device control unit 17 in which the ID release data encrypted by the encryption unit 16 and the data in the ID release area match, step S48 (Same as step S8 in FIG. 2)
Perform data output processing with.

By the above processing, even if the user forgets the confidential ID for decrypting the confidential data stored in the storage device of the storage device & storage device control section 17, the confidential data is deleted from the computer 1 as the ID release data. By sending as the ID release data, the confidential ID corresponding to the confidential data in the storage device of the storage device & storage device control unit 17 in which the ID release data matches the data in the ID release area is released and the confidential data is deleted or printed. Output can be done. Further, a part of the received ID cancellation data (data in the ID cancellation area) is compared with a part of the confidential data stored in the storage device of the storage device & storage device control unit 17, and both data match. Since it is determined whether or not to perform, it is possible to shorten the entire processing time.

Next, the processing relating to the invention of claim 4 in the printer 10 will be specifically described with reference to FIGS. 6 and 8. FIG. 6 is a flowchart showing an example of processing for canceling the confidential ID corresponding to confidential data by receiving the ID cancellation password in the printer 10. The printer 10 periodically starts the processing routine of FIG. 6, and first, in step S61, the ID from the computer 1 is sent.
Check whether the cancellation password has been received. Actually, the presence or absence of data reception from the computer 1 is checked, and when the data is received from the computer 1, the data determination unit 11 determines whether or not the received data is an ID cancellation password.

When the ID release password is received from the computer 1 (when the data determination unit 11 determines that the data from the computer 1 is the ID release password), the ID release password is used in step S62. The release password corresponding to the confidential data stored in the storage device of the storage device & storage device control unit 17 is compared to determine whether the two passwords match. Here, as shown in FIG. 8, for example, the numbers (No) of a plurality of confidential data stored in the storage device of the storage device & storage device control unit 17, and the confidential I for each confidential data
D, information indicating the storage area address of each confidential data,
And the ID release password for each confidential data is I
It is assumed that it is stored in the D data storage unit 12.

In this case, in the processing of FIG. 2, if the confidential data received from the computer 1 is added with the confidential ID and the password for ID cancellation, the confidential data received from the computer 1 in step S10 of FIG. & The storage device control unit of the storage device & storage device control unit 17 stores the confidential ID and the ID cancellation password which are stored in the storage device by the storage device control unit of the storage device control unit 17 and added to the confidential data in step S11. Stored in the ID data storage unit 12 according to
It is assumed that the D cancel password and the storage area address of the confidential data are associated with each other.

If it is determined in step S62 that the received ID release password matches any one of the release passwords corresponding to the confidential data stored in the storage device of the storage device & storage device control unit 17, that is, the reception Confidential data (corresponding confidential data) corresponding to the ID unlocking password is stored in the storage device & storage device control unit 1
If it is stored in the storage device of step 7, step S6
In step 3, the names of the relevant confidential data are displayed as a list on the operation / display unit 15.

Then, in step S64, the operation / display unit 1
When it is determined that one of the names of the relevant confidential data on 5 (target data) is selected by the operation on the operation / display unit 15, the confidential ID corresponding to the confidential data of the selected name is released. In step S65, it is determined whether the confidential data should be deleted or printed out. If it is determined that the confidential data should be deleted, the confidential data and the confidential ID in the ID data storage unit 12 corresponding to the data are stored in the storage device in step S66. Deleted by the control unit. If it is determined that the confidential data of the selected name is printed out, step S68 (same as step S8 in FIG. 2).
Perform data output processing with.

By the above processing, even if the user forgets the confidential ID for decrypting the confidential data stored in the storage device of the storage device & storage device control unit 17, the ID for canceling the ID assigned to himself from the computer 1 is deleted. By transmitting the password, the confidential ID in the storage device of the storage device & storage device control unit 17 corresponding to the ID cancellation password
Then, the confidential data can be deleted or the print output can be performed. The embodiments in which the present invention is applied to a printer and a printer system have been described above. However, the present invention is not limited to this, and various image forming apparatuses such as a digital copying machine and a facsimile apparatus and the image forming apparatus and the host apparatus can be used. It can be applied to the image forming system.

[0050]

As described above, according to the image forming apparatus of the present invention, even if the user forgets the confidential ID for decrypting the confidential data stored in the memory, the confidential data is deleted or printed. Since output can be performed, convenience is improved.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration example of a printer system according to the present invention.

2 is a flowchart showing an example of a process of accumulating confidential data and a process of canceling a confidential ID (ID of confidential data) corresponding to the confidential data in the printer 10 of FIG.

FIG. 3 is a flowchart showing an example of processing for printing out confidential data by inputting a confidential ID in the printer 10 of FIG.

4 is a flowchart showing an example of a process of accumulating confidential data and a process of registering a confidential ID releasing area in the printer 10 of FIG.

5 is a flowchart showing another example of a process of accumulating confidential data and a process of releasing a confidential ID corresponding to the confidential data in the printer 10 of FIG.

FIG. 6 is a flowchart showing an example of processing for canceling a confidential ID corresponding to confidential data by receiving an ID cancellation password in the printer 10 of FIG.

7 is a view for explaining management information in the ID data storage unit 12 of FIG. 1 for canceling a corresponding confidential ID by a part of the confidential data (data for ID cancellation) (corresponding to the processing of FIG. 5). FIG.

[FIG. 8] Confidentiality I corresponding by the password for ID cancellation
I of FIG. 1 for canceling D (corresponding to the processing of FIG. 6)
5 is a diagram for explaining management information in a D data storage unit 12. FIG.

[Explanation of symbols] 1: Computer 2: Network 10: Printer 11: Data determination unit 12: ID data storage unit 13: ID data input unit 14: ID identification section 15: Operation / display section 16: Encryption unit 17: Storage device & storage device control unit 18: Data comparison unit 19: Decryption unit 20: Data output section

Claims (4)

[Claims] 1. A memory for storing confidential data,
Data type determination means for determining the type of data received from a host device such as a computer, and data for encrypting the confidential data when the data received from the host device is determined to be confidential data by the means Encryption means, confidential data storage means for storing the confidential data encrypted by the means in the memory in association with the identification information issued at the time of transmitting the data, which is added to the data; Corresponding to the decryption identification information input means for inputting the decryption identification information for decrypting the confidential data stored in the memory, the decryption identification information input by the means, and the confidential data stored in the memory A first comparison / determination means for comparing the identification information with each other to determine whether or not the two identification information match, and the means for comparing the identification information with each other. An image forming apparatus having a data decryption unit for decrypting the confidential data stored in the memory and a confidential data output unit for printing out the confidential data decrypted by the unit when it is determined that Data determining means for determining whether or not the confidential data encrypted by the data encrypting means is unlocking data for unlocking the identification information corresponding to the confidential data stored in the memory; Storage permission means for permitting storage of the confidential data in the memory by the confidential data storage means when it is determined that the confidential data encrypted by the data encryption means is not the release data. It is determined that the confidential data encrypted by the data encryption unit by the data determination unit is the release data. In the case of the above, the second comparison / determination means for comparing the cancellation data with the confidential data stored in the memory to determine whether or not the two data match, and the data are matched by the means. An image forming apparatus, comprising: an identification information releasing unit for releasing the identification information corresponding to the confidential data stored in the memory when the determination is made. 2. The image forming apparatus according to claim 1, wherein the second comparison determination unit determines that the confidential data encrypted by the data encryption unit by the data determination unit is the release data. And a means for comparing the data in the predetermined area of the cancellation data with the data in the predetermined area of the confidential data stored in the memory to determine whether or not the two data match, An image forming apparatus comprising an area designating unit for designating a predetermined area. 3. The image forming apparatus according to claim 2, wherein the area specifying unit is an automatic area specifying unit that automatically and randomly specifies the predetermined area. 4. A host device such as a computer, and an image forming device for printing out data from the host device, wherein the host device creates confidential data, confidential data creating means, and a printout request. An identification information issuing means for issuing predetermined identification information, and a data transmission means for adding the identification information issued by the means to the confidential data created by the confidential data creating means and sending it to the image forming apparatus. The image forming apparatus includes a memory for storing confidential data, a data type determining unit that determines the type of data received from the host apparatus, and the data received from the host apparatus by the unit is confidential data. If it is determined that the confidential data is encrypted, the data encryption means for encrypting the confidential data and the encryption means Confidential data accumulating means for accumulating the confidential data in the memory in association with the identification information added to the confidential data and decryption identification information for deciphering the confidential data accumulated in the memory by the means Decoding identification information inputting means for comparing the deciphering identification information input by the means with the identification information corresponding to the confidential data stored in the memory to determine whether or not the two identification information match. First comparing and determining means, a data decrypting means for decrypting the confidential data stored in the memory when the both identifying information is determined by the means, and the confidential data decrypted by the means. An image forming system comprising: a confidential data output unit that prints out the Release password setting means for setting a release password for releasing the identification information corresponding to the confidential data created, and the release password set by the means is added to the confidential data created by the confidential data creating means. And a release password transmitting unit for transmitting the release password to the image forming apparatus. The image forming apparatus further includes the data received from the host device by the data type determining unit. When it is determined that the password is for release, the release password is compared with the release password corresponding to the confidential data stored in the memory to determine whether the two passwords match. The confidential data storage means is encrypted by the data encryption means. When the release password is added to the confidential data, the confidential data is stored in the memory in association with the release password, and the data decrypting unit is the second comparison / determination unit. An image forming system having means for decrypting confidential data stored in the memory when it is determined that the two passwords match.