JP2005191980A - Data processor and image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data processor and an image forming apparatus capable of protecting information relevant to data to be treated. <P>SOLUTION: When a print job is received through a communication IF (S31: YES), the received print job is developed to print data (S32). When storage of the print data is instructed by the print job (S33: YES), it is judged whether or not a processing mode of the image forming apparatus is a security mode (S35), image data included in the print data and management information generated from instruction information regarding print processing are encrypted by an encryption circuit and stored in a filing area and a filing data management table, respectively (S36, S37). Then, when execution of the print processing is instructed (S40: YES), the print processing is executed (S41). <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data processing apparatus and an image forming apparatus that can protect information related to handled data.

  Establish a system in which an information processing device such as a personal computer and an image forming device such as a printer or digital multifunction peripheral are connected via a communication network from an environment where an image of an original is copied using an analog copying machine. The shift to an environment in which processing such as printing is performed by transmitting computerized image data from an information processing apparatus is progressing. In such a system, an image of a document can be transmitted by electronic data and printed, and electronic data can be stored and managed in a storage unit of an HDD device (HDD: Hard Disk Drive). There is an advantage that convenience is improved. However, since electronic text information can be easily copied, falsified, transferred, etc., it is desired to enhance the protection of confidentiality in data management.

Therefore, conventionally, an image forming apparatus that encrypts electronic data to be stored in the HDD device and protects the data has been proposed (see, for example, Patent Documents 1 and 2). In such an image forming apparatus, when a print job is received from the outside, the image data obtained by developing the print job is encrypted, and then the image data is stored in the HDD device. Then, the image data is decoded at the stage of actually forming the image, and the image data is formed by transferring it to the printing unit of the image forming apparatus. Therefore, even if a malicious third party takes out the HDD device mounted on the image forming apparatus or illegally accesses it via the communication network, it is stored inside. It is difficult to decipher existing data, and data leakage can be effectively prevented.
JP-A-1-256068 JP-A-2-256343

  However, the data to be protected by the above-described image forming apparatus is image data required at the time of image formation, and information included in the print job together with the image data such as the creator of the data, creation date and time, creation contents, etc. Since this information is leaked, personal information may be leaked. In addition, recent digital multi-function peripherals are positioned on the communication network as server-like devices that efficiently process data input from a plurality of interfaces, so that a plurality of received processing requests can be executed efficiently. Various information is previously set by the device manager and the user. Such information includes information related to the configuration of the communication network of the entire system, transmission destination information when transmitting data to the outside by facsimile communication or Internet communication, transmission source information added to transmission data, and the like. However, there is a problem that personal information and similar information may be leaked when the image forming apparatus storing such information receives unauthorized access.

  The present invention has been made in view of such circumstances, and by reading data stored in the storage means and protecting information to be referred to when executing predetermined processing, only data to be processed is provided. In addition, it is an object of the present invention to provide a data processing apparatus and an image forming apparatus that can protect information accompanying the data.

  Another object of the present invention is to accept not only the data to be processed but also the data to be processed by accepting information related to the data and protecting the accepted information when accepting the data to be stored in the storage means. An object of the present invention is to provide a data processing apparatus and an image forming apparatus capable of protecting information associated with data.

  The data processing apparatus according to the present invention includes a storage unit that stores data received from the outside, and reads the data stored in the storage unit to execute a predetermined process when executing the process. It is characterized by comprising means for storing information to be referred to, and protection means for protecting the information stored in the means.

  In the present invention, only data to be processed is configured by including a means for storing information to be referred to when executing processing and a protection means for protecting information stored in the means. In addition, the information accompanying the data is also protected.

  The data processing apparatus according to the present invention includes means for transmitting data stored in the storage means to the outside, and the protection means is adapted to protect information to be referred to when the data is transmitted. It is characterized by.

  In the present invention, information to be referred to when data is transmitted to the outside is protected. Therefore, not only data to be transmitted but also data regarding a transmission destination, information regarding a transmission source, and the like It is also possible to protect the information required when transmitting.

  The data processing apparatus according to the present invention is characterized in that the information includes information related to a transmission destination of the data.

  In the present invention, since information related to a data transmission destination is protected, leakage of personal information stored in advance in the apparatus is prevented.

  A data processing apparatus according to the present invention comprises storage means for storing data received from the outside, and data to be stored in the storage means in a data processing apparatus that reads data stored in the storage means and executes predetermined processing. When receiving the information, the information processing device includes means for receiving information related to the data, means for storing the information received by the means, and protection means for protecting the information stored in the means.

  In the present invention, when data is received from the outside, the information related to the data is received and the received information is protected. Therefore, not only the data to be processed but also the information associated with the data. Protected.

  The data processing device according to the present invention is characterized in that the information includes at least one of information relating to the content of the data, information relating to a date and time of creation of the data, or information relating to a creator of the data. To do.

  In the present invention, since information related to the contents of data, information related to the date and time of data creation, and information related to the author of the data are protected, personal information is received from the outside. In addition, leakage of the information is prevented.

  The data processing apparatus according to the present invention further includes means for outputting the information.

  In the present invention, since an information to be referred to when data is processed or a means for outputting information related to the received data is provided, an opportunity to confirm information accompanying the data is given.

  In the data processing apparatus according to the present invention, the protection means is means for encrypting the information.

  In the present invention, since it includes means for encrypting information to be referred to when data is processed or information related to the received data, information is illegally extracted by a malicious third party. Even if it exists, it becomes difficult to decipher and confidentiality is maintained.

  In the data processing apparatus according to the present invention, the protection means is means for restricting output of the information.

  In the present invention, it is possible to restrict the output of information that is referred to when data is processed or information related to received data, so that leakage of information accompanying the data is prevented.

  The data processing apparatus according to the present invention further comprises means for encrypting data stored in the storage means.

  In the present invention, since it has means for encrypting data stored in the storage means, it is difficult to decipher even if the data is illegally taken out by a malicious third party. Sex is preserved.

  An image forming apparatus according to the present invention includes a storage unit that stores image data received from the outside, and reads the image data stored in the storage unit to form an image on a sheet. Means for transmitting stored image data to the outside, means for storing information to be referred to when transmitting the image data to the outside, and means for protecting the information stored in the means. And

  In the present invention, a configuration is provided that includes means for storing information to be referred to when image data stored in the storage means is transmitted to the outside, and means for protecting the information stored in the means. Accordingly, it is possible to protect not only image data to be transmitted but also information necessary for transmitting data such as information related to the transmission destination and information related to the transmission source.

  An image forming apparatus according to the present invention includes a storage unit that stores image data received from the outside, and reads the image data stored in the storage unit to form an image on a sheet. When receiving the image data to be stored, it comprises means for receiving information related to the image data, means for storing the information received by the means, and means for protecting the information stored in the means. And

  In the present invention, when image data is received from the outside, information related to the image data is received and the received information is protected. Therefore, not only the image data that is the object of image formation, Information accompanying the image data can also be protected.

  In the case of the present invention, it is provided with a means for storing information to be referred to when executing the process and a protection means for protecting the information stored in the means, so that not only the data to be processed, Information attached to data can also be protected.

  In the case of the present invention, since information to be referred to when data is transmitted to the outside is protected, not only data to be transmitted but also data regarding a transmission destination, information regarding a transmission source, and the like. Information necessary for transmission can also be protected.

  According to the present invention, since the information related to the data transmission destination is protected, it is possible to prevent leakage of personal information stored in advance in the apparatus.

  According to the present invention, when data is received from outside, information related to the data is received and the received information is protected, so that not only the data to be processed but also the information accompanying the data is protected. can do.

  In the case of the present invention, information related to the contents of data, information related to the date and time of data creation, and information related to the author of the data are protected, so even if personal information is received from the outside , Leakage of the information can be prevented.

  In the case of the present invention, it is possible to confirm information associated with the data because it includes means for outputting information to be referred to when processing the data or information related to the received data.

  According to the present invention, there is a means for encrypting information to be referred to when data is processed or information related to received data, so that information is illegally extracted by a malicious third party. However, it is difficult to decipher and confidentiality can be maintained.

  According to the present invention, it is possible to restrict the output of information that is referred to when data is processed or information related to the received data, so that leakage of information accompanying the data can be prevented.

  In the case of the present invention, since it has means for encrypting the data stored in the storage means, it becomes difficult to decipher even if the data is illegally taken out by a malicious third party, Confidentiality can be maintained.

  In the case of the present invention, the image data to be transmitted is configured to include a means for storing information to be referred to when transmitting the image data to the outside and a means for protecting the information stored in the means. In addition, it is possible to protect information necessary for transmitting data such as information related to the transmission destination and information related to the transmission source.

  In the case of the present invention, when image data is received from outside, information related to the image data is received and the received information is protected. Therefore, not only the image data to be image-formed but also the image data. Information attached to data can also be protected.

Hereinafter, an embodiment in which the data processing apparatus according to the present invention is applied to an image forming apparatus such as a printer apparatus or a digital multifunction peripheral will be specifically described with reference to the drawings.
FIG. 1 is a schematic diagram illustrating the overall configuration of an image forming system constructed by the image forming apparatus according to the present embodiment. In the figure, reference numeral 10 denotes an image forming apparatus having a printer function, a copy function, a scanner function, and a facsimile function. The image forming apparatus 10 includes an information processing apparatus 50 such as a personal computer or a workstation via a communication network N1. , 50,..., 50 are connected, and an external facsimile apparatus 60 is connected via the facsimile communication network N2. The information processing apparatus 50 is preinstalled with a driver program (printer driver) for using the image forming apparatus 10 via the communication network N1, and generates a print job using the printer driver. The print processing can be executed by transmitting the image to the image forming apparatus 10. In addition, the image forming apparatus 10 includes means for encoding and decoding facsimile data transmitted via the facsimile communication network N2, and transmits the encoded facsimile data to the facsimile apparatus 60 and the facsimile apparatus 60. After receiving the facsimile data transmitted from, print processing is executed based on the image data obtained by decoding.

  Further, the image forming apparatus 10 has a document filing function, and stores image data developed from a received print job, image data acquired by an image reading unit (to be described later), etc. in a non-volatile storage unit. Accordingly, the image data can be read from the storage means and output processing can be performed. That is, by accessing the information processing apparatuses 50, 50,..., 50 via the communication network N1, the image forming apparatus 10 can be used as a server apparatus for image data.

  The image forming apparatus 10 according to the present embodiment encrypts and stores image data to be stored using a document filing function, and also encrypts and manages information associated with the image data. In addition, information related to the destination of facsimile data is also encrypted and managed to prevent personal information from leaking outside.

  FIG. 2 is a block diagram illustrating the configuration of the control system of the image forming apparatus 10. The image forming apparatus 10 includes a CPU 11. The CPU 11 reads and executes a control program stored in advance in the ROM 13, thereby controlling various hardware connected via the bus 12, as described above. The image forming apparatus 10 is operated to execute processing. The management unit 14 includes a semiconductor memory, and a part of the storage area is used as a filing data management table 14a and a transmission destination information management table 14b. In the filing data management table 14a, when a received print job is stored by the document filing function, the storage destination of the image data developed from the print job, information on the print instruction contents, and the like are registered. In the transmission destination information management table 14b, a transmission destination address of data (for example, electronic mail) transmitted through the communication network N1, a facsimile number for transmitting facsimile data through the facsimile communication network N2, and the like are registered. Details of the management tables 14a and 14b will be described later.

  The operation panel 15 includes an operation unit that receives a user's operation instruction and a display unit that displays information to be notified to the user. The operation unit is provided with various operation keys for accepting operation instructions from the user, setting values for each function such as the number of printed sheets, copy density, destination of facsimile data, switching operation of each function, output start instruction Accept user's instructions. The display unit includes a liquid crystal display, and displays the operation status of the image forming apparatus 10, various setting values input through the operation unit, information to be notified to the user, and the like. In addition, a part of the display unit includes a touch panel type software key configured to accept various selection operations.

  The image reading unit 16 includes a light source for irradiating a reading document with light, an image sensor such as a CCD (Charge Coupled Device), an AD converter, and the like (not shown), and is set at a predetermined reading position. An image of the original is imaged on the image sensor and converted into an analog electric signal, and the obtained analog electric signal is AD converted by an AD converter. Then, digital image data is generated by correcting the light distribution characteristics of the light source at the time of document reading, sensitivity variations of the image sensor, and the like on the digital signal obtained by AD conversion.

The image forming unit 17 is, for example, a charger that charges the photosensitive drum to a predetermined potential, laser writing that emits a laser beam according to image data received from the outside and generates an electrostatic latent image on the photosensitive drum. Device, developer that supplies toner to the electrostatic latent image formed on the surface of the photoconductive drum to visualize it, and transfer that transfers the toner image formed on the surface of the photoconductive drum onto a sheet such as paper or an OHP film A device or the like (not shown) is provided, and an image desired by a user can be formed on a sheet by electrophotography.
In the present embodiment, the image forming unit 17 is configured to perform image formation by an electrophotographic method using a laser writing device. However, the image forming unit 17 is configured to perform image formation by an inkjet method, a thermal transfer method, or a sublimation method. Of course, it may be.

  The communication IF 18 includes an interface conforming to the communication standard of the communication network N1, receives print jobs from the information processing apparatuses 50, 50,..., 50 connected to the communication network N1, and also processes the information processing apparatus. 50, 50, ..., 50, information to be notified is transmitted. When the image forming apparatus 10 is used as a so-called network scanner, the image data of the original obtained by the image reading unit 16 is transmitted to a desired information processing apparatus 50 through the communication IF 18. The communication IF 18 controls such transmission / reception of various data.

  The facsimile communication IF 19 includes a line termination circuit for connecting the facsimile apparatus 60, and receives facsimile data addressed to the image forming apparatus 10 transmitted via the facsimile communication network N2. The facsimile communication IF 19 includes a decoding circuit for decoding received facsimile data, and transfers image data obtained by decoding to the image memory 20. The facsimile communication IF 19 includes an encoding circuit for encoding facsimile data to be transmitted, and transmits the facsimile data encoded by the encoding circuit to the target facsimile apparatus 60. The facsimile communication IF 19 executes such facsimile data transmission / reception and facsimile data encoding / decoding processing.

  The image memory 20 is constituted by a semiconductor memory, image data generated by reading an image of a document by the image reading unit 16, image data developed from a print job received through the communication IF 18, and facsimile received through the facsimile communication IF 19. The image data developed from the data is temporarily stored. The image data temporarily stored in the image memory 20 is transferred to a transfer destination according to the purpose of use according to an instruction from the CPU 11. That is, when an image is formed on paper, it is transferred to the image forming unit 17, when it is transmitted as scanner data to the information processing apparatus 50, it is transferred to the communication IF 18, and when it is transmitted as facsimile data, the facsimile communication IF 19 is transmitted. When the image data is stored using the document filing function, it is transferred to the HDD device 21.

  The HDD device 21 includes a disk-shaped magnetic recording medium, and a part of the storage area is used as a data storage area for storing image data received from the outside. When a request is received through the operation panel 15 or when a request transmitted from the information processing apparatus 50 is received via the communication IF 18, the image data stored in the data storage area is read out. Therefore, when it is necessary to re-execute the print process due to a failure of the print process or an insufficient number of output copies, it is possible to arbitrarily read the image data stored in the data storage area and execute the print process. . This data storage area is divided into a work area 21a and a filing area 21b, and the capacity of the work area 21a is set smaller than that of the filing area 21b. For this reason, the work area 21a is mainly used as an area for temporarily storing data during work. When the free space of the work area 21a decreases, data that has been stored for a certain period of time after being stored in the work area 21a is used. It is automatically stored in the filing area 21b. On the other hand, the filing area 21b is an area for storing data organized by data file format, processing mode such as printer function, scanner function, copy function, facsimile function, or folder created by the user. As long as no operation instruction such as erasure is made, the state is saved.

  The encryption circuit 22 includes an input buffer for inputting data for performing encryption processing, an arithmetic unit for performing arithmetic processing consisting of a predetermined encryption algorithm on the data set in the input buffer, and calculation by the arithmetic unit It is composed of an output buffer or the like that holds the result. The data to be encrypted is input to the input buffer, the input data set in the input buffer is extracted, the arithmetic unit performs arithmetic processing, and when the arithmetic processing is completed, the arithmetic result is written to the output buffer. The CPU 11 of the image forming apparatus 10 acquires the data encrypted by the encryption circuit 22 by taking out the data for which the calculation has been completed from the output buffer.

The configuration of the decryption circuit 23 is basically the same as that of the encryption circuit 22, and an input buffer for inputting data for performing decryption processing, and predetermined decryption for the data set in the input buffer An arithmetic unit that performs arithmetic processing including an algorithm, an output buffer that holds an arithmetic result of the arithmetic unit, and the like are provided. The data to be decoded is input to the input buffer, the input data set in the input buffer is taken out, the arithmetic unit performs arithmetic processing, and the arithmetic result is written in the output buffer when the arithmetic processing is completed. The CPU 11 of the image forming apparatus 10 acquires the data decoded by the decoding circuit 23 by taking out the data for which the calculation has been completed from the output buffer.
In this embodiment, data encryption and decryption are performed according to the hardware configuration. However, a computer program for performing encryption processing and a computer program for performing decryption processing are stored in the ROM 13 in advance. It may be configured to store and execute these computer programs to perform encryption and decryption by software processing.

  Furthermore, the image forming apparatus 10 according to the present embodiment includes a ROM mounting unit 24 for mounting a ROM 25 (hereinafter referred to as a security kit 25) in which a computer program for adding a data protection function is stored. . When the security kit 25 is mounted on the ROM mounting unit 24 and the image forming apparatus 10 is turned on, the CPU 11 detects that the security kit 25 is mounted by communicating with the ROM mounting unit 24, and the security kit. The computer program stored in 25 is requested to be read. The CPU 11 loads and executes the computer program to protect data handled inside the image forming apparatus 10. That is, when the security kit 25 is mounted on the ROM mounting unit 24, the CPU 11 is configured to control the flow of data in order to encrypt data handled internally by the encryption circuit 22.

  In the present embodiment, the data protection function is added to the image forming apparatus 10 by mounting the security kit 25 in the ROM mounting unit 24. However, a computer program for adding the data protection function is stored in the apparatus. The computer program is stored in advance in an internal storage unit (for example, the ROM 13), and the computer program is activated only when a predetermined operation is performed by a specific user such as an administrator to add a data protection function. There may be.

FIG. 3 is a conceptual diagram illustrating an example of the management tables 14a and 14b provided in the management unit 14. As described above, when image data developed from a print job using the document filing function is stored in the filing area 21b of the HDD device 21, information for managing the image data is registered in the filing data management table 14a. Like to do. Information registered in the filing data management table 14a includes information on the storage destination folder of the image data, information on the size and number of prints, information on the contents of the image data, information on the creator of the image data, information on the image data This is information relating to the creation date and time and is stored in association with each other for each image data stored in the filing area 21b. On the other hand, information to be referred to when data is transmitted to the outside through the communication IF 18 and the facsimile communication IF 19 is registered in the transmission destination information management table 14b. Information registered in the transmission destination information management table 14b is information such as the name of the transmission partner, the transmission mode, and the address of the transmission destination. The transmission mode includes a facsimile mode (FAX mode) for transmitting facsimile data via the facsimile communication network N2, and an Internet facsimile mode (i-FAX mode) for transmitting facsimile data via the communication network N1. Yes. Note that the transmission destination address when transmitting in the facsimile mode is a facsimile number, and the transmission destination address when transmitting in the Internet facsimile mode is an e-mail address.
Hereinafter, information registered in the filing data management table 14a is collectively referred to as management information, and information registered in the transmission destination information management table 14b is collectively referred to as transmission destination information.

  Since the filing data management table 14a and the transmission destination information management table 14b include personal information such as information relating to the creator of the image data and the name and address of the transmission partner, the image forming apparatus according to the present embodiment. 10, when the information is registered, the information is encrypted by the encryption circuit 22 and registered in the management tables 14 a and 14 b to protect the data.

  Further, detailed settings relating to security of the image forming apparatus 10 and setting of data transmission destinations can be performed through the operation panel 15. FIG. 4 is a schematic diagram showing the appearance of the operation panel 15. The operation panel 15 includes a display unit 100 including a liquid crystal display device and an operation unit 200 including various hardware keys. A hardware key provided in the operation unit 200 includes a function switching key 201 for switching each function such as a printer function and a transmission function, a user setting key 202 for performing user settings regarding various processes, and a numerical input key. A numeric keypad 203, a clear key 204 for clearing various input set values, an all cancel key 205 for canceling all input various set values, a start key 206 for instructing start of copying, and the like. In addition, a part of the display unit 100 constitutes a touch panel type software key, and displays setting values input through the operation unit 200, information to be notified to the user, and the like, and various setting contents. The selection operation is accepted through the software key.

  Hereinafter, an operation accepted when setting the data transmission destination and the detailed setting related to security will be described using an example of a screen displayed on the display unit 100 of the operation panel 15. 5 to 8 are schematic diagrams showing examples of screens displayed on the display unit 100 of the operation panel 15. When the user setting key 202 is pressed on the operation panel 15, a user setting screen 110 as shown in FIG. 5A is displayed on the display unit 100 of the operation panel 15. On this user setting screen 110, by operating various setting buttons arranged as software keys, display of the total number of sheets printed by the image forming apparatus 10, setting of screen contrast, acceptance of print output of various data lists, date -Time settings, paper feed tray settings, destination registration when sending data, etc. can be performed.

  When the destination registration button 111 on the user setting screen 110 is pressed, a screen for receiving information to be registered in the transmission destination information management table 14b is displayed, and the transmission destination name, transmission mode, and transmission destination of the facsimile data are displayed. The address can be registered. When information to be registered is input, the information is encrypted by the encryption circuit 22 and then registered in the transmission destination information management table 14b. When the data list print button 112 on the user setting screen 110 is pressed, a list selection screen 120 as shown in FIG. 5B is displayed on the display unit 100 of the operation panel 15 and displayed on the user setting screen 110. The set items can be displayed and printed. That is, when the all setting list button 121 is pressed, all items set on the user setting screen 110 are displayed so that the entire setting list can be printed. The printer test page button 122 can print a test pattern, and the partner registration list button 123 can display and print information registered in the transmission destination information management table 14b as a list. Yes. In the present embodiment, when the security kit 25 is mounted on the ROM mounting unit 24 and the security function is added, the display and printing of the transmission destination information is restricted, and a security setting screen (to be described later) Unless the setting is changed in (see FIG. 8), the destination information cannot be displayed and printed. Specifically, when the destination registration list button 123 is pressed when the security function is added, the list selection screen 120 displays that the display and printing of the transmission destination information is restricted. .

  When the key operator program button 113 arranged in the lower area of the user setting screen 110 is pressed, a code for accepting input of a key operator code (for example, an 8-digit numerical value) as shown in FIG. A reception screen 130 is displayed on the display unit 100 of the operation panel 15. A code input field 131 is arranged near the center of the code reception screen 130. When a code is input to the code input field 131 using the numeric keypad 203, the input code and a preset key operator are entered. It is determined whether or not the code matches.

  When it is determined that the code input in the code input field 131 matches the preset key operator code, the key operator program screen 140 as shown in FIG. 6B is displayed on the display unit 100 of the operation panel 15. Is displayed. Various setting buttons are arranged on the key operator program screen 140 so that department management settings, energy saving settings, operation settings, device settings, system management settings, settings when using the copy function, and the like can be performed. . When the list / report print button 141 is pressed on the key operator program screen 140, a list / report print screen 150 as shown in FIG. 6C is displayed and set on the key operator program screen 140. Information about the sender such as a list of items and facsimile data can be displayed and printed.

  When the device setting button 142 is pressed on the key operator program screen 140, a device setting screen 160 a or 160 b as shown in FIG. 7 is displayed on the display unit 100 of the operation panel 15. In the image forming apparatus 10, the device setting screen 160a shown in FIG. 7A is displayed when the security kit 25 is not installed, and when the security kit 25 is installed, the device setting screen 160a is displayed. The device setting screen 160b shown in FIG. In the device setting screen 160a, in addition to setting the document detection device, it is possible to set whether to use the duplex function, whether to use the mail bin stacker, whether to use the document feeder, and whether to use the paper feed desk. Yes. When the security kit 25 is installed, a security setting button 161 is arranged in the lower area of the device setting screen 160b, so that detailed settings related to security can be performed in addition to the above-described settings. .

  When the security setting button 161 is pressed on the device setting screen 160b, a series of security setting screens 170a to 170c as shown in FIG. 8 are displayed. In each security setting screen 170a to 170c, page switching buttons 175u and 175d are arranged so that the screens can be switched with each other. On the security setting screen 170a, the deletion setting of the work area 21a in the HDD device 21, the setting of the number of deletions, and the automatic deletion setting at power-on can be performed. On the security setting screen 170b, it is possible to set the number of automatic erasures when the power is turned on, set the number of automatic erasures after completion of each job, and prohibit the document filing function. On the security setting screen 170c, check boxes 171 to 174 are used for setting prohibition of printing of the destination registration list, prohibition of print jobs other than hold, prohibition of printing of the data list, and prohibition of printing of the list / report. You can use it. In this embodiment, all the check boxes 171 to 174 are checked in the default state, and display and printing of the destination registration list from the list selection screen 120 shown in FIG. 5B is prohibited. ing. Each setting can be canceled by unchecking the check boxes 171 to 174. For example, when the check box 171 is unchecked, the destination registration list can be displayed and printed from the list selection screen 120. I can do it.

  On the other hand, each user generates a print job using a printer driver installed in the information processing apparatus 50, and transmits the generated print job to the image forming apparatus 10, thereby printing a desired document and graphics. Can be output. FIG. 9 is a schematic diagram illustrating an example of a print setting screen generated by the printer driver. The print setting screen 500 includes a printer selection field 501 for selecting an output destination printer apparatus, a print range setting field 502 for setting a print range, a print number setting field 503 for setting the number of copies, and a job management field 504 for setting job management. When the execution button 506 is pressed, a print job is generated according to the contents set in the setting fields 502 to 504, and the print job is transmitted to the printer device selected in the printer selection field 501. . If the cancel button 505 is pressed, the process is returned to the application program that called the print setting screen 500 without generating a print job.

  When the radio button 504a is selected in the job management field 504, the print job to be transmitted is transmitted as a normal job. When the radio buttons 504b and 504c are selected in the job management column 504, a password input column 504d for inputting a password necessary for user authentication is displayed. When a password is input, it should be transmitted. A print job can be sent as a hold job with a password.

  Hereinafter, the operation of the image forming apparatus 10 will be described with reference to flowcharts. FIG. 10 is a flowchart illustrating a procedure of processing executed by the image forming apparatus 10 when the power is turned on. When the power is turned on to supply power to each hardware part constituting the image forming apparatus 10, the CPU 11 of the image forming apparatus 10 performs a system check (step S11). Specifically, the CPU 11 communicates with each part of the hardware, acquires information about the installed hardware, and detects their operating state. As a result of the system check, it is determined whether there is an abnormality in the installed hardware, that is, whether a system error has been detected (step S12). If it is determined that a system error has been detected (S12: YES), an error message indicating that an abnormality has been detected is displayed on the display unit 100 on the operation panel 15 to perform error processing (step S13).

  If no system error is detected as a result of the system check (S12: NO), warm-up is started (step S14). The CPU 11 monitors the state of each part of the hardware being warmed up and determines whether an error has been detected (step S15). If it is determined that an error has been detected (S15: YES), an error message indicating that a hardware abnormality has been detected is displayed and error processing is performed (step S16). When no error is detected (S15: NO), the CPU 11 determines whether or not the warm-up is completed (step S17), and when it is determined that the warm-up is not completed (S17: NO), the process To step S15.

  If it is determined that the warm-up has been completed (S17: YES), the destination information registered in the destination information management table 14b in an encrypted state is transferred to the decryption circuit 23 and transmitted by the decryption circuit 23. The previous information is decrypted (step S18). The decrypted transmission destination information is stored in the transmission destination information management table 14b in the management unit 14 as information that can be used when facsimile data is transmitted. The transmission destination information management table 14b holds the transmission destination information that is the source of decryption in an encrypted state, and erases the decrypted transmission destination information when the image forming apparatus 10 is powered off. Thus, the destination information is not left in the management unit 14 in a state where it can be decoded.

  Next, the CPU 11 determines whether or not the security kit 25 is mounted on the ROM mounting unit 24 based on the information acquired by the system check (step S19). If it is determined that the security kit 25 is not installed (S19: NO), the normal mode is set (step S20), and a standby state for waiting for an external print job is set (step S25). Here, the normal mode is a mode in which image data developed from an accepted print job and information to be registered in the management tables 14a and 14b are registered without encryption.

  On the other hand, when it is determined that the security kit 25 is mounted on the ROM mounting section 24 (S19: YES), the security mode is set (step S21). Here, the security mode is a mode in which image data developed from an accepted print job and information to be registered in each of the management tables 14a and 14b are registered after being encrypted by the encryption circuit 22. Next, it is determined whether or not the erasure setting is performed when the power is turned on (step S22). When it is determined that the erasure setting is not performed when the power is turned on (S22: NO), the printer waits for an external print job. The state is set (S25).

  If it is determined that the erasure setting is made when the power is turned on (S22: YES), the data stored in the work area 21a of the HDD device 21 is erased (step S23). Data erasure may be configured to erase the FAT (File Allocation Table) that manages the data storage destination information, and is configured to overwrite the data storage destination with zero or random data. There may be. These settings are performed on the security setting screens 170a and 170b described above. Next, the CPU 11 determines whether or not the erasure of data is completed (step S24). When it is determined that the erasure is not completed (S24: NO), the CPU 11 waits until the erasure is completed. If it is determined that the data erasure has been completed (S24: YES), a standby state for waiting for an external print job is set (S25).

  FIG. 11 is a flowchart for explaining a procedure of processing executed by the image forming apparatus 10 when a print job is received. First, the CPU 11 of the image forming apparatus 10 determines whether or not an external print job has been received through the communication IF 18 (step S31). If it is determined that a print job has not been received (S31: NO), it waits until a print job is received. If it is determined that a print job has been received through the communication IF 18 (S31: YES), the received print job is expanded into print data (step S32). The print data includes image data for printing and instruction information for executing print processing.

  Next, the CPU 11 determines whether or not print data storage is instructed by the received print job (step S33). If it is determined that print data storage is not instructed (S33: NO), the image data for printing is transferred to the image forming unit 17 via the image memory 20, and the image forming unit 17 executes print processing. (Step S34). If it is determined that print data storage is instructed (S33: YES), it is determined whether or not the mode relating to the processing of the received print job is the security mode (step S35).

  When it is determined that the security kit 25 is mounted on the ROM mounting unit 24 and the mode related to processing of the received print job is the security mode (S35: YES), the image data included in the print data is sent to the encryption circuit 22. The encrypted image data is encrypted by the transfer, and the encrypted image data is stored in the filing area 21b of the HDD device 21 (step S36). Also, management information is generated based on the instruction information when executing the print processing, and the generated management information is encrypted by the encryption circuit 22 and then registered in the filing data management table 14a (step S37).

  On the other hand, when the security kit 25 is not mounted on the ROM mounting unit 24 and it is determined that the mode related to the processing of the received print job is not the security mode (S35: NO), the image data included in the print data is transferred to the HDD device 21. And stored in the filing area 21b (step S38). Also, management information is generated based on the instruction information for executing the printing process, and the generated management information is registered in the filing data management table 14a (step S39).

  Next, it is determined whether or not execution of print processing is instructed by the print job received in step S31 (step S40). If it is determined that execution of print processing is instructed (S40: YES), the target The image data is transferred to the image forming unit 17 to execute print processing (step S41). At this time, if the image data to be transferred is encrypted, the image data is transferred to the image forming unit 17 after being decoded by the decoding circuit 23. If it is determined that the execution of the print process is not instructed (S40: NO), the process by this routine is terminated without executing the print process.

  FIG. 12 is a flowchart illustrating a procedure of processing executed by the image forming apparatus 10 when registering transmission destination information in the transmission destination information management table 14b. In the present embodiment, transmission destination information to be registered in the transmission destination information management table 14b can be input through a screen displayed when the partner registration button 111 on the user setting screen 110 is pressed. The CPU 11 of the image forming apparatus 10 determines whether information to be registered in the transmission destination information management table 14b is received through the screen (step S51). When it is determined that the destination information is not received (S51: NO), the process waits until the destination information is received.

  If it is determined that the destination information is received through the screen (S51: YES), it is determined whether the mode of the image forming apparatus 10 is the security mode (step S52). When it is determined that the security kit 25 is mounted on the ROM mounting unit 24 and the mode of the image forming apparatus 10 is the security mode (S52: YES), the received transmission destination information is encrypted by the encryption circuit 22. Above (step S53), it is registered in the transmission destination information management table 14b (step S54). If it is determined that the security kit 25 is not mounted on the ROM mounting unit 24 and the mode of the image forming apparatus 10 is not the security mode (S52: NO), the transmission destination information is managed without encryption. Register in the table 14b (S54). Then, the transmission destination information encrypted and registered is decrypted by the decryption circuit 23 (step S55), and the decrypted transmission destination information is transmitted to the transmission destination in the management unit 14 as information that can be used when facsimile data is transmitted. The information is stored in the information management table 14b. At this time, the destination information that is the source of the decryption is held in the destination information management table 14b in an encrypted state. Further, when the image forming apparatus 10 is powered off, the decrypted destination information is deleted from the destination information management table 14b.

  In this flowchart and the flowchart shown in FIG. 10, when the encrypted destination information is decrypted, the destination information that is the source of the decryption is held in the destination information management table 14b. However, it may be configured to be erased when the decryption process is completed. In this case, when the image forming apparatus 10 is powered off, the transmission destination information may be encrypted again and registered in the transmission destination information management table 14b, and the transmission destination information that is the source of encryption may be deleted.

  FIG. 13 is a flowchart for explaining a procedure of processing executed by the image forming apparatus 10 at the time of data transmission, and FIG. 14 is a schematic diagram showing an example of a screen displayed on the display unit of the operation panel. First, the CPU 11 of the image forming apparatus 10 determines whether or not a transmission key, which is one of the function switching keys 201, has been pressed (step S61). If it is determined that the transmission key is not pressed (S61: NO), the process waits until the transmission key is pressed. If it is determined that the transmission key is pressed (S61: YES), a transmission mode setting screen 180 as shown in FIG. 14A is displayed on the display unit 100 of the operation panel 15 (step S62).

  On the transmission mode setting screen 180, mode selection buttons 181 to 183 are arranged so that the transmission mode can be set, and the transmission mode can be selected from the FAX mode, the i-FAX mode, and the speed dial mode. The FAX mode set by the mode selection button 181 is a mode in which facsimile data is transmitted to a desired transmission destination through the facsimile communication IF 19, and the transmission destination facsimile number is received by the numeric keypad 203. The i-FAX mode set by the mode selection button 182 is a mode in which facsimile data is transmitted through the communication IF 18, and is accepted by a transmission destination input screen (not shown) that displays the transmission destination e-mail address on the display unit 100. I have to. Note that these transmission modes are modes in which a facsimile number and an e-mail address are directly input through the operation panel 15, and are therefore referred to as a direct transmission mode. On the other hand, the abbreviated dial mode set by the mode selection button 183 is a mode in which a transmission destination can be called through a software key assigned to each transmission destination of facsimile data. It is not necessary to input directly, and provides a convenient environment for the user.

  After displaying the transmission mode setting screen 180 on the display unit 100 of the operation panel 15, the CPU 11 determines whether or not the transmission mode is selected (step S63). When the transmission mode is not selected (S63: NO), the process waits until the transmission mode is selected. When it is determined that the transmission mode has been selected (S63: YES), it is determined whether or not the selected transmission mode is the direct transmission mode (step S64). If it is determined that the mode is the direct transmission mode (S64: YES), a transmission destination input screen (not shown) is displayed on the display unit 100 of the operation panel 15 (step S65). That is, in the FAX mode, a screen that prompts the user to input a facsimile number is displayed. In the i-FAX mode, a screen on which alphabetic keys composed of software keys are arranged is displayed to prompt input of an e-mail address.

  Next, the CPU 11 determines whether or not a transmission destination is input on the transmission destination input screen (step S66), and when determining that no transmission destination is input (S66: NO), until the transmission destination is input. stand by. If it is determined that the transmission destination has been input (S66: YES), transmission processing is executed (step S67). That is, when the selected transmission mode is the FAX mode, the facsimile data is transmitted through the facsimile communication IF 19, and when the selected transmission mode is the i-FAX mode, the facsimile data is transmitted through the communication IF 18.

  On the other hand, when it is determined in step S64 that the mode is not the direct transmission mode (S64: NO), a user authentication screen 185 as shown in FIG. 14B is displayed on the display unit 100 of the operation panel 15 (step S68). . Near the center of the user authentication screen 185, a user code input field 186 for inputting a user code (for example, a 4-digit numerical value) preset for each user is arranged. When a user code is input to the user code input field 186 using the numeric keypad 203, user authentication is performed by comparing the input user code with a preset user code. Based on the user authentication, it is determined whether or not the input user code can be authenticated (step S69). If it is determined that the user code cannot be authenticated (S69: NO), the process returns to step S68 and the user code is restored. Prompt for input.

When it is determined that the input user code can be authenticated (S69: YES), the transmission destination setting screen 190 shown in FIG. 14C is displayed on the display unit 100 of the operation panel 15 (step S70). On the transmission destination setting screen 190, selection buttons 191a to 191c corresponding to each transmission destination and page switching buttons 192u and 192d for displaying selection buttons not displayed on the screen are arranged. Each selection button (selection buttons 191a to 191c, etc.) is linked to the transmission destination information management table 14b, and when a selection button (selection button 191a, etc.) is pressed, the corresponding facsimile number or e-mail address Is configured to be called.
Next, the CPU 11 determines whether or not a transmission destination is selected on the transmission destination setting screen 190 (step S71). If it is determined that the transmission destination is not selected (S71: NO), the CPU 11 waits until it is selected and is selected. If it is determined that the transmission has been completed (S71: YES), transmission processing is executed (step S72). That is, the facsimile data is transmitted through the facsimile communication IF 19 when the selected transmission mode is the FAX mode, and the facsimile data is transmitted through the communication IF 18 when it is in the i-FAX mode.

  As described above, in the present exemplary embodiment, management information and transmission destination information are encrypted and stored when the image forming apparatus 10 is not operating, and output based on user authentication when the image forming apparatus 10 is operating. Due to the restriction, leakage of personal information and similar information is prevented.

  Note that the destination facsimile number and e-mail address entered in the direct transmission mode do not necessarily need to be encrypted. However, for example, when the transmission processing is to be waited for a predetermined time by a function such as transmission reservation, The facsimile number and e-mail address that have been sent may be encrypted and held.

1 is a schematic diagram illustrating an overall configuration of an image forming system constructed by an image forming apparatus according to an embodiment. 2 is a block diagram illustrating a configuration of a control system of the image forming apparatus. FIG. It is a conceptual diagram which shows an example of each management table with which a management part is provided. It is a schematic diagram which shows the external appearance of an operation panel. It is a schematic diagram which shows the example of a screen displayed on the display part of an operation panel. It is a schematic diagram which shows the example of a screen displayed on the display part of an operation panel. It is a schematic diagram which shows the example of a screen displayed on the display part of an operation panel. It is a schematic diagram which shows the example of a screen displayed on the display part of an operation panel. 4 is a schematic diagram illustrating an example of a print setting screen generated by a printer driver. FIG. 6 is a flowchart illustrating a procedure of processing executed by the image forming apparatus when power is turned on. 6 is a flowchart illustrating a procedure of processing executed by the image forming apparatus when a print job is received. 10 is a flowchart illustrating a procedure of processing executed by the image forming apparatus when registering transmission destination information in a transmission destination information management table. 6 is a flowchart illustrating a procedure of processing executed by the image forming apparatus when data is transmitted. It is a schematic diagram which shows the example of a screen displayed on the display part of an operation panel.

Explanation of symbols

10 Image forming apparatus 11 CPU
12 bus 13 ROM
DESCRIPTION OF SYMBOLS 14 Management part 14a Filing data management table 14b Transmission destination information management table 15 Operation panel 16 Image reading part 17 Image forming part 18 Communication IF
19 Facsimile communication IF
20 image memory 21 HDD device 22 encryption circuit 23 decryption circuit 24 ROM mounting unit 25 security kit 50 information processing device 60 facsimile device N1 communication network N2 facsimile communication network

Claims (11)

In a data processing apparatus that includes storage means for storing data received from the outside, reads data stored in the storage means and executes predetermined processing,
A data processing apparatus comprising: means for storing information to be referred to when executing the processing; and protection means for protecting information stored in the means.   2. The apparatus according to claim 1, further comprising means for transmitting data stored in the storage means to the outside, wherein the protection means protects information to be referred to when the data is transmitted. Data processing equipment.   The data processing apparatus according to claim 2, wherein the information includes information related to a transmission destination of the data. In a data processing apparatus that includes storage means for storing data received from the outside, reads data stored in the storage means and executes predetermined processing,
When receiving data to be stored in the storage means, it comprises means for receiving information related to the data, means for storing the information received by the means, and protection means for protecting the information stored in the means. A data processing apparatus.   5. The data processing according to claim 4, wherein the information includes at least one of information relating to a content of the data, information relating to a creation date and time of the data, and information relating to a creator of the data. apparatus.   6. The data processing apparatus according to claim 1, further comprising means for outputting the information.   7. The data processing apparatus according to claim 1, wherein the protection unit is a unit that encrypts the information.   The data processing apparatus according to claim 6, wherein the protection unit is a unit that limits output of the information.   9. The data processing apparatus according to claim 1, further comprising means for encrypting data stored in the storage means. In an image forming apparatus comprising storage means for storing image data received from the outside, and reading the image data stored in the storage means to form an image on a sheet,
Means for transmitting the image data stored in the storage means to the outside, means for storing information to be referred to when transmitting the image data to the outside, and means for protecting the information stored in the means An image forming apparatus comprising the image forming apparatus. In an image forming apparatus comprising storage means for storing image data received from the outside, and reading the image data stored in the storage means to form an image on a sheet,
Means for receiving information related to the image data, means for storing the information received by the means, and means for protecting the information stored in the means when receiving the image data to be stored in the storage means; An image forming apparatus comprising the image forming apparatus.

Images