JP2006074239A - Image processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processor for executing processing corresponding to the secret level of stored image data. <P>SOLUTION: In receiving an image data reading request (S11), the input of a user code and a password is requested (S12), and when the user code and the password are inputted (YES in S13), a user's secret level is compared with the secret level of read image data by referring to a user table and a management table for the corresponding processing (S14). In judging that the secret level of the image data is higher than the user's secret level as a result of comparison (YES in S15), set processing for the execution limit of processing is performed (S16) to limit the transmission of the image data to the external, the processing of the image data and printing processing in a prescribed time band. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image processing apparatus that executes processing according to a confidential level of stored image data.

Conventionally, an image processing apparatus having a document filing function is known (see, for example, Patent Document 1). In such an image processing apparatus, image data obtained by optically scanning a document to be copied, image data obtained by developing an external print job, image data obtained by developing external facsimile data Etc. are temporarily stored in a storage medium. Then, after performing user authentication, arbitrary image data is read from the storage medium, and print processing on a recording sheet based on the read image data or transmission processing of image data to the outside can be executed. (For example, refer to Patent Document 2).
Japanese Patent Laid-Open No. 6-178041 JP-A-7-28365

  Conventionally, however, image data read after user authentication can be freely used by the user himself, so that illegal use of image data and leakage of information can occur. Had. For example, there is a case where a recorded matter with altered contents is created by illegally processing the read image data. In addition, there is a case where a recorded matter is created based on illegally accessed image data, and information leakage occurs when the recorded matter goes out to the outside. Furthermore, image data may be transmitted to an unscheduled transmission destination due to a user's own erroneous operation, and information may be leaked. For this reason, there has been a demand for the development of an image processing apparatus that can limit the use according to the confidentiality of image data.

  The present invention has been made in view of such circumstances, and includes a table that defines the level of confidentiality of image data stored in a storage unit, and identifies a user by identification information when reading the image data. By adopting a configuration in which whether or not the identified user can execute the process is determined based on the table, use restriction can be imposed according to the level of confidentiality of the stored image data. It is an object of the present invention to provide an image processing apparatus that can perform such processing.

  Another object of the present invention is to provide a table that defines the level of confidentiality of image data stored in the storage means, and to identify a user by identification information when reading the image data. It is an object of the present invention to provide an image processing apparatus capable of restricting the use according to the level of confidentiality of stored image data by restricting the output processing by the user based on the table. .

  An image processing apparatus according to the present invention includes storage means for storing image data, reads image data from the storage means, and executes processing on the read image data. Image data stored in the storage means is stored in the image processing apparatus. A table that defines the correspondence between the image data and information relating to the level of confidentiality of the image data, means for receiving identification information for identifying a user when reading the image data, and identification based on the received identification information Means for determining whether or not the process can be executed by the user based on the table.

  In the present invention, a table that defines the level of confidentiality of the image data stored in the storage means is provided, and the user is identified by the identification information when the image data is read. By determining whether or not the process can be executed by the user based on the table, for example, it is possible to set a process limit based on the level of confidentiality of the read image data for each user.

  The image processing apparatus according to the present invention is characterized in that the processing is processing for processing image data.

  In the present invention, whether or not to process the image data is determined based on the level of confidentiality of the image data. For example, processing that corrects a part of the image data, image Processing that greatly changes the data is limited.

  An image processing apparatus according to the present invention includes storage means for storing image data, reads image data from the storage means, and executes output processing based on the read image data. The image processing apparatus stores the image data in the storage means. Based on a table that defines correspondence between image data and information relating to the level of confidentiality of the image data, means for receiving identification information for identifying a user when reading the image data, and based on the received identification information And restricting means for restricting output processing by the identified user based on the table.

  In the present invention, a table that defines the level of confidentiality of the image data stored in the storage means is provided, and the user is identified by the identification information when the image data is read. By restricting the output process by the user based on the table, for example, it is possible to set the restriction of the output process based on the confidentiality of the read image data for each user.

  The image processing apparatus according to the present invention is characterized in that the limiting means is means for prohibiting the output processing.

  In the present invention, since output processing based on read image data is prohibited, for example, processing for forming an image on a sheet based on read image data is prohibited.

  The image processing apparatus according to the present invention is characterized in that the limiting means is means for prohibiting output processing in a predetermined time zone.

  In the present invention, output processing in a predetermined time zone is prohibited. For example, output processing in a time zone in which the number of users is expected to be small, such as at night or on holidays, is prohibited. .

  In the image processing apparatus according to the present invention, the output process is a process of transmitting the image data to the outside, and the limiting unit is a unit for prohibiting transmission of the image data to a predetermined transmission destination. Features.

  In the present invention, since image data read from the storage means is prohibited from being transmitted to the outside, for example, highly confidential image data is prevented from being transmitted to the outside.

  According to the present invention, a table that defines the level of confidentiality of the image data stored in the storage means is provided, and the user is identified by the identification information when the image data is read. Whether or not the person can execute the process is determined based on the table. Therefore, for example, it is possible to set a process restriction based on the level of confidentiality of the read image data for each user, and the use restriction of the read image data can be implemented according to the user.

  According to the present invention, whether or not to process the image data is determined based on the level of confidentiality of the image data. Therefore, for example, processing that corrects a part of the image data and processing that greatly changes the image data are restricted, and the contents indicated by the image data are prevented from being tampered with. Unauthorized use of stored image data can be prevented.

  According to the present invention, a table that defines the level of confidentiality of the image data stored in the storage means is provided, and the user is identified by the identification information when the image data is read. The output process by the user is limited based on the table. Therefore, for example, it is possible to set a restriction for output processing based on the level of confidentiality of the read image data for each user, and the use restriction of the read image data can be implemented according to the user.

  According to the present invention, output processing based on the read image data is prohibited. Therefore, for example, the process of forming an image on a sheet based on the read image data can be prohibited, and the outflow of information accompanying illegal output of image data can be prevented.

  In the case of the present invention, output processing in a predetermined time zone is prohibited. Therefore, for example, it is possible to prohibit output processing in a time zone in which the number of users is expected to be small, such as at night or on holidays, and it is possible to prevent outflow of information due to illegal output of image data.

  According to the present invention, transmission of image data read from the storage means to the outside is prohibited. Therefore, for example, transmission of highly confidential image data to the outside can be prevented, and information leakage due to unauthorized use can be prevented.

Hereinafter, an embodiment in which an image processing apparatus according to the present invention is applied to a digital multi-function peripheral having a copy function, a facsimile function, and a printer function will be specifically described with reference to the drawings illustrating the embodiments.
FIG. 1 is a schematic diagram for explaining the overall configuration of an image processing system using a digital multi-function peripheral. In the figure, reference numeral 10 denotes a copy function for reading an image of a document and performing print processing on a sheet such as paper or an OHP film, a facsimile function for receiving facsimile data from the outside, and printing on a sheet based on the received print job. An information processing device 50, 50,..., 50 such as a personal computer or a workstation is connected to the digital multifunction device 10 via a communication network N1. A facsimile machine 60 is connected via a public telephone network N2.

  In the information processing apparatus 50, an application program for creating a document, graphics, and the like, a driver program (printer driver) for using the digital multifunction peripheral 10 through the communication network N1, and the like are installed in advance. The printer driver is called from an arbitrary application program, a print job created by the printer driver is transmitted to the digital multi-function peripheral 10, and a document, graphics, or the like is printed out.

  The facsimile apparatus 60 has a function of encoding and decoding image data by a predetermined method, and can transmit and receive facsimile data obtained by encoding via the public telephone line network N2. That is, the facsimile data received via the public telephone network N2 is decoded, and print processing is performed based on the obtained image data, and the image data to be transmitted is encoded and transmitted to the digital multifunction peripheral 10. To do.

  The digital multi-function peripheral 10 has a document filing function. The image data acquired during the copy process, the image data read during the facsimile transmission process, and the print job received during the print process are expanded and acquired. Data and the like can be stored inside the digital multi-function peripheral 10. Then, user authentication is performed when reading image data or the like, and output processing is restricted based on information (user code and password) input at that time and a confidential level set for the image data. It is configured as follows.

  FIG. 2 is a block diagram showing the configuration of the control system of the digital multifunction machine 10. The digital multifunction machine 10 includes a CPU 11. The CPU 11 reads and executes a control program stored in advance in the ROM 13 to control various hardware connected via the bus 12. The image processing apparatus is configured to operate.

  The management unit 14 is configured by a rewritable nonvolatile memory, and a part of the storage area is a user table 14a for storing information about users, and a copy processing management table 14b for managing history regarding copy processing. It is used as a facsimile transmission process management table 14c for managing a history of facsimile transmission processes and a print process management table 14d for managing a history of receiving print jobs. The details of the tables 14a to 14d will be described later.

  The operation panel 15 includes an operation unit 15a including various hardware keys and a display unit 15b including a liquid crystal display. The operation panel 15 receives user instructions such as switching operations of various functions and an instruction to start reading a document. Information to be notified to the user is displayed.

  The image reading unit 16 includes a light source that irradiates light to a reading document, an image sensor such as a CCD element, an AD converter, and the like (not shown), and displays an image of the document set at a predetermined reading position. An image is formed on the image sensor and converted into an analog electric signal, and the converted analog signal is AD converted by an AD converter. Then, the image reading unit 16 corrects the light distribution characteristics of the light source at the time of reading the document, sensitivity variations of the image sensor, and the like on the digital signal obtained by AD conversion, thereby converting the digital image data. Generate.

  The image forming unit 17 is, for example, a charger that charges the photosensitive drum to a predetermined potential, laser writing that emits a laser beam according to image data received from the outside and generates an electrostatic latent image on the photosensitive drum. An apparatus, a developing device that supplies toner to the electrostatic latent image formed on the surface of the photosensitive drum to make it visible, a transfer device that transfers the toner image formed on the surface of the photosensitive drum onto paper (not shown), etc. And an image desired by the user is formed on a sheet by electrophotography. In the present embodiment, the image forming unit 17 is configured to perform image formation by an electrophotographic method using a laser writing device. However, the image forming unit 17 is configured to perform image formation by an inkjet method, a thermal transfer method, or a sublimation method. Of course, it may be.

  The image processing unit 18 performs image processing on the image data acquired by the image reading unit 16. Image processing performed by the image processing unit 18 includes processing for processing image data in accordance with setting values such as scale and density at the time of printing set through the operation panel 15, printing processing and transmission processing in accordance with security levels. For example, a process of synthesizing an additional image may be used.

  The image memory 19 is composed of a semiconductor memory, and temporarily holds image data acquired by the image reading unit 16, image data developed from a print job, image data read from the HDD 22, and the like. The image data temporarily stored in the image memory 19 is transferred to a transfer destination according to the purpose of use in accordance with an instruction from the CPU 11. That is, when print processing is performed by the print function, the image data is transferred to the image forming unit 17, and when image data is transmitted, the image data is transferred to the communication interface 20 or the facsimile modem 21, and the image data is stored by the document filing function. Is transferred to the HDD 22.

  The communication interface 20 includes a line termination circuit that complies with the communication standard of the communication network N1, receives print jobs from the information processing devices 50, 50,..., 50 connected to the communication network N1, and transmits the information. Information to be notified is transmitted to the processing devices 50, 50,. The communication interface 20 controls such transmission / reception of various data.

  The facsimile modem 21 includes a line termination circuit for connecting the facsimile apparatus 60, and transmits / receives facsimile data via the public telephone line network N2. For this reason, the facsimile modem 21 is provided with a decoding circuit for decoding the received facsimile data, and the image data obtained by the decoding is transferred to the image forming unit 17 via the image memory 19 for printing processing. Let it run. The facsimile modem 21 is provided with an encoding circuit for encoding facsimile data to be transmitted, and transmits the facsimile data encoded by the encoding circuit to the target facsimile apparatus 60. The facsimile modem 21 executes such facsimile data transmission / reception and facsimile data encoding / decoding processing.

  The HDD 22 includes a disk-shaped magnetic recording medium, and a part of the storage area is used as a data area for storing image data and the like. When a request is received through the operation panel 15 or when a request from the information processing apparatus 50 is received via the communication interface 20, the image data stored in the data area is read out. Therefore, when it is necessary to re-execute the print process due to a failure of the print process or an insufficient number of output copies, it is possible to arbitrarily read the image data stored in the data area and execute the print process.

  3 and 4 are conceptual diagrams illustrating examples of various tables included in the management unit 14. FIG. 3A shows an example of the user table 14a. In the user table 14a, the user code and password of each user are stored in association with each other, and the security level for each user is defined. For example, the user “Mr. A” is given a user code “User A”, and the password for user authentication is set to “AAA”. Further, the security level of data (image data, print job, etc.) handled by the user “Mr. A” is “rank A”. The same applies to other users. In this embodiment, the security level is divided into four levels from the highest “rank A” to the lowest “rank D”, but it is not always necessary to have four levels. Good.

  FIG. 3B shows an example of the copy processing management table 14b. In the copy processing management table 14b, the date / time, size, number of copies, number of copies, etc. received of the copy processing request are stored in association with each other as basic information. The digital multi-function peripheral 10 requests the input of a user code when accepting a copy processing request, and stores the user code input through the operation panel 15 together with the basic information described above. Further, in the present embodiment, image data prepared in advance by the digital multi-function peripheral 10 can be added to image data read from a document, and information on the presence / absence of an additional image and the type of additional image is described above. The basic information is stored in association with the basic information. Further, the image data obtained by reading the image of the document is stored in the HDD 22, but the user can set the reusability of the image data. The setting contents are stored in association with the basic information described above. With regard to reusability, the user himself / herself can perform three types of settings through the operation panel 15 when permitting reuse, when not permitting reuse, and when permitting reuse after performing user authentication. I am doing so.

  Further, the digital multifunction peripheral 10 uses the user code input when receiving the request for the copy process, and the image data used in the copy process (that is, the image reading unit 16) based on the contents of the setting related to the additional image and the reuse. Is defined and registered in the copy processing management table 14b. The security level for image data is set based on the security level assigned to each user, and is used when additional images are set, when reuse is not permitted, or when reused. When requesting person authentication, the rank is raised from the confidentiality level of the standard.

  For example, since the copy process corresponding to the record number “1” is a process request from a user to whom the user code “user A” is assigned, the security level is set to “rank” by referring to the user table 14a. A ”. The same applies to the copy processing corresponding to the record number “2” and the record number “3”. Since the processing requests are “user B” and “user C”, respectively, the security level is “rank B”, “rank C ”. On the other hand, since the processing request for the record number “4” is a processing request for “user C”, the security level is originally “rank C”, but since an additional image is set, the rank is changed. It is set up to “Rank B” by one. In addition, since the processing request for the record number “5” is a processing request for “user C”, the security level is originally “rank C”, but an additional image is set, and Since user authentication is required for use, the rank is increased by two and set to “rank A”.

  FIG. 4C shows an example of the facsimile transmission processing management table 14c. In the facsimile transmission process management table 14c, the date and time when the facsimile data transmission process was accepted, the facsimile number of the transmission destination (transmission destination number), the transmission destination name, etc. are stored in association with each other as basic information. In addition, the digital multi-function peripheral 10 requests input of a user code when accepting a facsimile transmission process, and stores the user code input through the operation panel 15 together with the basic information described above. Furthermore, in this embodiment, “normal mode” and “confidential mode” can be set as modes for transmitting facsimile data, and the set mode type is associated with the basic information described above. I remember it.

  Further, the digital multi-function peripheral 10 determines the confidential level of the image data for facsimile transmission based on the user code input at the time of accepting the facsimile transmission processing request and the set mode type, and performs facsimile transmission processing. The information is registered in the management table 14c. The security level for image data used in facsimile transmission processing (that is, image data input through the image reading unit 16) is set based on the security level assigned to each user as a mode for transmission. When “confidential mode” is set, the rank is raised by one from the standard confidentiality level.

  FIG. 4D shows an example of the print processing management table 14d. In the print processing management table 14d, the date and time when the print job is received, the communication address (transmission source address) of the transmission source of the print job, and the like are stored in association with each other as basic information. In the present embodiment, when a print job is created and transmitted by the information processing apparatus 50, a mode related to print processing is any one of “normal mode”, “confidential mode”, and “hold mode”. When the digital multifunction peripheral 10 receives a print job, it registers the mode setting contents in the print processing management table 14d. Similarly, when the information processing apparatus 50 creates and transmits a print job, the information processing apparatus 50 can set the necessity of the additional image, the type of the additional image, and the like. When a print job is received, information related to additional image settings is registered in the print processing management table 14d.

  Further, the digital multifunction peripheral 10 determines the security level of the image data developed from the received print job based on the transmission source address of the print job, the type of the set mode, and the setting content related to the additional image, and print processing management It is registered in the table 14d. The security level for image data is set in advance for each source address, and when a mode other than “normal mode” is set, or when an additional image is set, the security level rank I try to raise.

  Image data stored in the HDD 22 at the time of executing copy processing, facsimile transmission processing, and print processing can be read through the operation panel 15. FIG. 5 is a schematic diagram illustrating an example of an operation screen displayed on the display unit 15b of the operation panel 15 when image data is read. In the operation screen shown in FIG. 5, the basic information of the image data accumulated in each process can be displayed by switching the tags 150a to 150c arranged at the top of the screen. Each record displaying basic information is composed of touch-panel push buttons, and selection is accepted by a user's pressing operation. In addition, screen switching buttons 151u and 151d are arranged in the upper right part of the operation screen to display records that are not displayed on the screen, and the selection operation by the user is canceled in the lower right part of the operation screen. A cancel button 153 for performing the selection and a confirmation button 154 for confirming the selection operation by the user are arranged.

  Hereinafter, processing at the time of reading image data will be described. FIG. 6 is a flowchart for explaining a procedure of processing executed by the digital multi-function peripheral 10 when reading image data. The following processing is executed by the CPU 11 of the digital multi-function peripheral 10 in accordance with a control program stored in the ROM 13. When the CPU 11 of the digital multi-function peripheral 10 receives a request for reading image data from the above-described operation screen (step S11), the CPU 11 requests the user to input a user code and password (step S12). Specifically, a screen for prompting the user code and password to be input is displayed on the display unit 15b of the operation panel 15. Then, the CPU 11 determines whether or not a user code and a password have been input (step S13). If it is determined that the user code and password have not been input (S13: NO), the CPU 11 returns the process to step S12.

  If it is determined that the user code and password have been input (S13: YES), the CPU 11 reads the image data designated in step S11 and temporarily stores the read image data in the image memory 19. Then, the CPU 11 refers to the user table 14a and the corresponding management table 14b (or 14c, 14d) to thereby make the user's security level (= A) and image data security level (= B). ) Is compared (step S14).

  Next, the CPU 11 determines whether or not A <B, that is, if the confidential level assigned to the user who has read the image data is compared with the confidential level of the image data to be read, the confidential level of the image data. It is determined whether or not is higher (step S15). When it is determined that the confidential level of the image data is higher (S15: YES), the CPU 11 performs an execution restriction setting process (to be described later) (step S16), and the processing content to be executed based on the read image data Is selected (step S17). If it is determined that the confidential level of the image data is lower (S15: NO), the selection of the processing content is accepted without performing the execution restriction setting process (S17).

  After accepting the selection of the processing content, the CPU 11 determines whether or not the processing is restricted based on the setting content in step S16 (step S18). When determining that the process is not limited (S18: NO), the CPU 11 executes the process selected in step S17 (step S19). If it is determined that the process is restricted (S18: YES), the user is notified that the process is restricted, for example, by displaying it on the display unit 15b of the operation panel 15 (step S20). .

  FIG. 7 is a flowchart for explaining the procedure of the execution restriction setting process. In this flowchart, a restriction is set for processing to be executed based on image data read from the HDD 22. First, the CPU 11 sets that the transmission processing to the outside is restricted (step S21). That is, when it is determined that the confidential level of the read image data is higher than the confidential level assigned to the user who read the image data, information leakage is prevented by limiting the transmission process. Note that this transmission processing restriction may be configured to restrict transmission of image data to all transmission destinations, or may be configured to restrict transmission of image data to predetermined transmission destinations. Good.

  Next, the CPU 11 sets that the processing is restricted (step S22). In the restriction of processing, for example, partial correction of image data is restricted so that the amount of an estimate, the date of a contract, etc. cannot be changed.

  Next, the CPU 11 determines whether or not it is a predetermined time zone by referring to a clock output not shown in the drawing (step S23). If it is determined that it is the predetermined time zone (S23: YES), a setting is made to limit the print processing (step S24). For example, by setting time zones such as nighttime and holidays as the predetermined time zone, print output in these time zones is limited, so that the effect of preventing information leakage is enhanced. If it is determined that it is not the predetermined time zone (S23: NO), the processing by this routine is terminated, and the CPU 11 returns the processing to the routine shown in FIG.

1 is a schematic diagram illustrating an overall configuration of an image processing system using a digital multifunction peripheral. It is a block diagram which shows the structure of the control system of a digital multifunctional device. It is a conceptual diagram which shows an example of the various tables which a management part has. It is a conceptual diagram which shows an example of the various tables which a management part has. It is a schematic diagram which shows an example of the operation screen displayed on the display part of an operation panel at the time of reading of image data. 6 is a flowchart illustrating a procedure of processing executed by the digital multi-function peripheral when reading image data. It is a flowchart explaining the procedure of an execution restriction setting process.

Explanation of symbols

10 Digital MFP 11 CPU
12 bus 13 ROM
DESCRIPTION OF SYMBOLS 14 Management part 15 Operation panel 16 Image reading part 17 Image formation part 18 Image processing part 19 Image memory 20 Communication interface 21 Facsimile modem 22 HDD
50 Information processing device 60 Facsimile device N1 Communication network N2 Public telephone network

Claims (6)

In an image processing apparatus that includes storage means for storing image data, reads image data from the storage means, and executes processing on the read image data.
A table that defines correspondence between image data stored in the storage means and information relating to the level of confidentiality of the image data, means for receiving identification information for identifying a user when reading the image data, An image processing apparatus comprising: means for determining, based on the table, whether the process identified by the user identified based on the received identification information is executable.   The image processing apparatus according to claim 1, wherein the process is a process of processing image data. In an image processing apparatus that includes storage means for storing image data, reads image data from the storage means, and executes output processing based on the read image data.
A table that defines correspondence between image data stored in the storage means and information relating to the level of confidentiality of the image data, means for receiving identification information for identifying a user when reading the image data, An image processing apparatus comprising: a restriction unit that restricts output processing by a user identified based on received identification information based on the table.   The image processing apparatus according to claim 3, wherein the limiting unit is a unit that prohibits the output processing.   The image processing apparatus according to claim 3, wherein the limiting unit is a unit that prohibits output processing in a predetermined time zone.   4. The output process according to claim 3, wherein the output process is a process of transmitting the image data to the outside, and the restriction unit is a unit for prohibiting transmission of the image data to a predetermined transmission destination. Image processing device.

Images