JP2006171828A - Information management system, information management device, image forming apparatus, information management method and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information management system for managing the carrying-away of a print sheet on which confidential information or the like is formed. <P>SOLUTION: This information management system 1 includes a copy device 5 and an information management device 2. At the time of printing a document image on a print sheet 40, the copy device 5 writes a character string included in the document image in an IC chip 3 attached to the print sheet 40. When it is detected that the print sheet 40 has been carried out of a security room, the information management device 2 reads the character string from the IC chip 3, and decides the confidential level of the print sheet 40, and performs a carriage-out management operation corresponding to the decision result. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information management system that manages the location of information.

For example, Patent Document 1 discloses a device use restriction device that issues a warning signal when the transmission side and the reception side of an identification code signal are separated by a certain distance or more.
Japanese Patent Laid-Open No. 11-88499

  The present invention has been made from the above-described background, and an object thereof is to provide an information management system for managing the taking-out of a recording medium on which confidential information or the like is formed.

[Information management system]
In order to achieve the above object, an information management system according to the present invention includes a recording medium on which an image is formed, and whether or not confidential information is included in the image formed on the recording medium. A communication device for transmitting determination information for determining whether or not, an information receiving means for receiving the determination information from a communication device attached to the recording medium, and the recording medium being taken out of a predetermined area The take-out detection means for detecting, and when the take-out detection means detects that the recording medium is taken out of the predetermined area, the take-out of the recording medium is managed based on the determination information received by the information receiving means. Taking-out management means.

  Preferably, the communication device transmits identification information of a character string formed on the recording medium as the determination information, and the information receiving unit receives the identification information of the character string from the communication device, The take-out managing means determines whether or not confidential information is included in the character string formed on the recording medium using the character string identification information received by the information receiving means, and according to the determination result And managing the taking out of the recording medium.

  Preferably, the storage device stores a predetermined character string in association with any one of a plurality of security levels, and the take-out management unit uses the character string identification information received by the information receiving unit, A character string determination unit that determines whether any of the character strings stored in the storage unit exists, and the character string when the character string determination unit determines that any one of the character strings exists Warning means for outputting a warning signal in accordance with the confidentiality level corresponding to.

  Preferably, the storage device stores a predetermined character string in association with any one of a plurality of confidential levels, and the take-out management unit uses the character string identification information received by the information receiving unit, A character string determining means for determining whether any of the character strings stored in the storage means exists, and the recording medium when the character string determining means determines that any of the character strings is present And a history management means for updating the take-out history.

  Preferably, the recording medium further includes a discard detection unit that detects that the recording medium is discarded, and the history management unit detects the recording when the discard detection unit detects discarding of any recording medium. Clear media export history.

[Information management device]
Also, the information management apparatus according to the present invention receives information from a communication device attached to a recording medium for determining information for determining whether confidential information is included in an image formed on the recording medium. A receiving means; a take-out detecting means for detecting that the recording medium is taken out of a predetermined area; and the information receiving means when the take-out detecting means detects that the recording medium is taken out of the predetermined area. And taking out management means for managing taking out of the recording medium on the basis of the determination information received.

[Image forming apparatus]
The image forming apparatus according to the present invention determines an image forming unit that forms an image on a recording medium and whether an image formed by the image forming unit includes a predetermined image element. Element identification information for identifying the image element is provided to the communication device attached to the recording medium when the element determination unit and the element determination unit determine that any one of the image elements is included. And writing means for writing.

  The image forming apparatus according to the present invention determines an image forming unit that forms an image on a recording medium and whether an image formed by the image forming unit includes a predetermined image element. An element determination unit, a level determination unit that determines a security level corresponding to the image element when the element determination unit determines that any one of the image elements is included, and the level determination unit Writing means for writing the identification information of the confidential level to the communication device attached to the recording medium.

[Information management method]
The information management method according to the present invention stores determination information for determining whether or not confidential information is included in an image formed on a recording medium in a communication device attached to the recording medium, When receiving the determination information from the communication device attached to the recording medium, detecting that the recording medium is taken out of the predetermined area, and detecting that the recording medium is taken out of the predetermined area The take-out of the recording medium is managed based on the received determination information.

[program]
In addition, a program according to the present invention is a method for determining whether or not confidential information is included in an image formed on a recording medium from a communication device attached to the recording medium in an information management apparatus including a computer. Based on the received determination information when detecting the determination information, detecting the recording medium being taken out of the predetermined area, and detecting that the recording medium is taken out of the predetermined area. Then, the computer of the information management apparatus is caused to execute the step of managing the taking out of the recording medium.

  The program according to the present invention includes a step of forming an image on a recording medium in an image forming apparatus including a computer, and whether or not a predetermined image element is included in the image formed by the image forming unit. And a step of determining a security level corresponding to the image element when it is determined that any one of the image elements is included in the image to be formed. Causing the computer of the image forming apparatus to execute the step of writing the identification information of the confidential level in the communication device attached to the recording medium.

  According to the information management system of the present invention, leakage of confidential information or the like can be prevented by managing the taking out of the recording medium on which the confidential information or the like is formed.

[Hardware configuration]
First, the hardware configuration of the information management system 1 in the present embodiment will be described.
FIG. 1 is a diagram illustrating a configuration of an information management system 1 to which an information management method according to the present invention is applied.
As illustrated in FIG. 1, the information management system 1 includes an information management device 2 and a copy device 5. The information management apparatus 2 and the copy apparatus 5 are connected to each other via a network such as a LAN, and synchronize document identification information (document ID), keywords, and the like described later.
The information management system 1 uses a printing paper 40 (recording medium) with an IC chip 3 (described later). The IC chip 3 (communication device) is a semiconductor capable of reading data in a contactless manner using radio waves.

The copying apparatus 5 reads a document image from a document and prints the read document image on the printing paper 40. Further, the copying apparatus 5 writes character string identification information (for example, a character code) for identifying a character string included in the document image on the IC chip 3 attached to the printing paper 40.
The information management apparatus 2 has an IC chip interface (IC chip IF) 28 for communicating with the IC chip 3 attached to the printing paper 40. The IC chip IF 28 communicates with the IC chip 3 so that it can detect that the printing paper 40 is taken out from a predetermined area (in this example, a security room). Installed.

FIG. 2A illustrates the printing paper 40 attached with the IC chip 3, and FIG. 2B illustrates data stored in the IC chip 3.
As illustrated in FIG. 2A, a document image is printed on the surface of the printing paper 40. Here, the document image is an image composed of a character image, a graphic image, a photographic image, or a combination thereof.
An IC chip 3 is attached to the peripheral edge of the printing paper 40.
As illustrated in FIG. 2B, the IC chip 3 attached to the printing paper 40 has a document ID for identifying the printing paper 40 and a character code for identifying the characters printed on the printing paper 40. Is stored.
In addition to the document ID and character code, the IC chip 3 includes the date and time when the document image was printed, the identification information of the copy apparatus 5 that printed the document image, and the user who instructed the printing of the document image. A user ID or the like may be written.

FIG. 3 is a diagram illustrating the hardware configuration of the information management device 2 according to the present invention, centering on the control device 20.
As illustrated in FIG. 3, the information management device 2 includes a control device 20 including a CPU 202 and a memory 204, a communication device 22, a recording device 24 such as an HDD / CD device, an LCD display device or a CRT display device, and a keyboard / touch panel. And the like, and an IC chip IF 28 having an antenna 280.
The IC chip IF 28 and the antenna 280 are disposed at a position where the takeout of the printing paper 40 can be detected. In this example, the IC chip IF 28 and the antenna 280 are installed at the entrance / exit of a security room where handling of confidential information is allowed. In other words, the IC chip IF 28 and the antenna 280 are arranged in the vicinity of the entrance / exit of the security room, and detect whether the printing paper 40 is taken out of the security room.

FIG. 4 is a diagram illustrating the hardware configuration of the copy apparatus 5 with the control apparatus 50 as the center.
As shown in FIG. 4, the copy device 5 includes a control device 50 including a CPU 502 and a memory 504, a copy device main body 51 that performs a copy operation, a communication device 52, a recording device 54 such as an HDD / CD device, an LCD display device, or the like. The UI device 56 includes a CRT display device, a keyboard / touch panel, and the like, and an IC chip IF 58 having an antenna 580.
The copy apparatus main body 51 includes a scanner device that reads an image of a document, a paper tray unit that stores printing paper 40, a print engine that prints a document image using xerography, and the like.
In the copying apparatus main body 51, the IC chip IF 58 and the antenna 580 are disposed in the vicinity of the paper conveyance path of the printing paper 40. That is, the IC chip IF 58 and the antenna 580 are arranged in the vicinity of the conveyance path of the printing paper 40 on which the original image is printed, and write data to the IC chip 3 attached to the printing paper 40.
Note that the control device 50 and the like are actually housed inside the copy apparatus main body 51.

[IC chip 3 / IC chip IF28]
FIG. 5 is a diagram showing a configuration of the IC chip 3 shown in FIG.
6 is a diagram showing a configuration of the IC chip IF 28 shown in FIG. 3 (or the IC chip IF 58 shown in FIG. 4). Since the configuration of the IC chip IF 28 provided in the information management apparatus 2 is substantially the same as that of the IC chip IF 58 provided in the copy apparatus 5, the IC chip IF 28 of the information management apparatus 2 will be described below. To do.

As shown in FIG. 5, the IC chip 3 includes an antenna 300, a clock recovery circuit 320, a memory circuit 322, a data transmission / reception circuit 324, and a power supply circuit 326.
If the IC chip 3 of the printing paper 40 is guaranteed to pass very close to the antenna 280, the IC chip 3 that does not have the antenna 300 may be used.

As shown in FIG. 6, the IC chip IF 28 includes a transmission circuit 284, a reception circuit 286, a transmission / reception control circuit 282, a demodulation circuit 288, and a modulation circuit 290.
Information (data) is written in the IC chip 3 in a non-contact manner via the IC chip IF 28 by the operation of each component of the IC chip 3 and the IC chip IF 28 described below, and the information stored in the IC chip 3 is stored in the IC chip 3. Reads without contact.

  In the IC chip 3 (FIG. 5), the power supply circuit 326 rectifies the radio signal supplied via the antenna 300 and supplies the power necessary for the operation to each component of the IC chip 3. .

  The clock recovery circuit 320 recovers a clock signal from a radio wave signal supplied from the IC chip IF 28 via the antenna 300 and outputs the clock signal to the memory circuit 322 and the data transmission / reception circuit 324.

The memory circuit 322 is, for example, a nonvolatile RAM, and stores data indicating information input from the data transmission / reception circuit 324 in synchronization with the clock signal input from the clock recovery circuit 320.
The memory circuit 322 outputs data indicating the stored information to the data transmission / reception circuit 324 in synchronization with the clock signal.

The data transmission / reception circuit 324 demodulates data from the radio wave signal input from the antenna 300 and outputs the data to the memory circuit 322 in synchronization with the clock signal input from the clock recovery circuit 320.
Further, the data transmission / reception circuit 324 changes the reflection intensity of the radio wave signal supplied from the IC chip IF 28 side in synchronization with the clock signal in accordance with the value of the data input from the memory circuit 322.
Thus, the data indicating the information stored in the memory circuit 322 is changed from the IC chip 3 to the IC chip IF 28 by changing the intensity of the reflected signal of the radio wave signal transmitted from the IC chip IF 28 to the IC chip 3. Sent to.

In the IC chip IF 28 (FIG. 6), the transmission / reception control circuit 282 controls the operation of each component of the IC chip IF 28.
Further, the transmission / reception control circuit 282 outputs data input from the control device body 20 to the demodulation circuit 288.
The transmission / reception control circuit 282 outputs the data received by the reception circuit 286 and demodulated by the demodulation circuit 288 to the control device body 20.

  The modulation circuit 290 modulates the radio signal with the data input from the transmission / reception control circuit 282 and outputs the modulated radio signal to the transmission circuit 284.

  The transmission circuit 284 transmits a radio signal including data to be stored in the IC chip 3 and a clock signal to the IC chip 3 via the antenna 280.

  The reception circuit 286 receives the reflected signal from the IC chip 3 side and outputs it to the demodulation circuit 288.

  The demodulation circuit 288 demodulates the data transmitted by the IC chip 3 from the change in the reflected signal input from the reception circuit 286 and outputs the data to the transmission / reception control circuit 282.

[program]
FIG. 7 is a diagram showing a configuration of the first information management program 7 executed by the information management apparatus 2 (FIG. 3).
As shown in FIG. 7, the information management program 7 includes a receiving unit 700, a take-out detection unit 710, a keyword database (keyword DB) 720, a character string determination unit 730, a warning information generation unit 740, and a user interface unit (UI unit) 750. , A history management unit 760, and a history database (history DB) 770.
The information management program 7 is supplied to the control device 20 via, for example, the recording medium 240 (FIG. 3), loaded into the memory 204, and executed.

  In the information management program 7, the receiving unit 700 controls the IC chip IF 28 (FIG. 3) to receive data from the IC chip 3 attached to the printing paper 40. The receiving unit 700 of this example receives a document ID for identifying the print sheet 40 from the IC chip 3 attached to the print sheet 40 and a character code of a character included in the document image printed on the print sheet 40. The received document ID and character code are output to the take-out detection unit 710.

  The take-out detection unit 710 controls the IC chip IF 28 (FIG. 3) to communicate with the IC chip 3 attached to the print paper 40, thereby determining whether or not the print paper 40 exists in a predetermined area. (That is, taking out the printing paper 40) is detected. In this example, an antenna 280 is installed so that it can sufficiently communicate with the IC chip 3 in the security room, and the carry-out detection unit 710 monitors the signal level of data input from the reception unit 700, and the signal level is the reference level. When the value is less than the value, it is determined that the printing paper 40 has been taken out.

The keyword DB 720 stores a predetermined character string set by the user in association with management operation definition information that defines a management operation for taking out the printing paper 40. More specifically, the keyword DB 720 stores the character string selected by the user (character string included in the document image) and the security level set by the user (the security level of this document image) in association with each other. Further, the confidential level and the management operation definition information corresponding to the confidential level are stored in association with each other.
In this example, “high”, “medium”, and “low” are defined as the confidentiality levels.

The character string determination unit 730 compares the character code received by the reception unit 700 with the keyword (character string) stored in the keyword DB 720 and determines the security level of the document image printed on the printing paper 40. judge. For example, when it is determined that there is a character string corresponding to the keyword stored in the keyword DB 720 based on the received character code, the character string determination unit 730 sets the security level corresponding to this character string as warning information. The data is output to the generation unit 740 and the history management unit 760. .
In addition, the character string determination unit 730 compares the received character code with the keyword stored in the keyword DB 720, and determines that none of the keywords are included in the document image. It is determined that the paper 40 is not subject to security management.

The warning information generation unit 740 executes a take-out management operation according to the security level determined by the character string determination unit 730 for the print paper 40 whose take-out is detected by the take-out detection unit 710. The warning information generation unit 740 of this example generates warning information (warning sound or warning display, etc.) corresponding to the confidential level by referring to a table in which the confidential level and the management operation regulation information are associated with each other. The warning information is output to the UI unit 750.
The UI unit 750 controls the UI device 26 and outputs the warning information generated by the warning information generation unit 740. The UI unit 750 of this example performs warning sound output or warning display (document ID display) according to the generated warning information.

  When the carry-out detection unit 710 detects take-out, the history management unit 760 writes the carry-out history of the taken-out printing paper 40 into the history DB 770. The history management unit 760 of this example updates the take-out history according to the security level of the taken-out printing paper 40 when the take-out detection unit 710 detects take-out. More specifically, the history management unit 760, when the security level of the taken-out printing paper 40 is “high”, “medium”, or “low”, the document ID of the printing paper 40, the security level, and The take-out time is added to the history DB 770, and the history DB 770 is not updated when the taken-out printing paper 40 is not subject to security management.

FIG. 8 is a diagram illustrating an information management table stored in the keyword DB 720. FIG. 8A illustrates a first information management table 722 that associates a keyword with a confidential level, and FIG. Exemplifies a second information management table 724 that associates the confidential level with the management operation definition information.
As illustrated in FIG. 8A, the keyword DB 720 stores a first information management table 722 in which a character string (keyword) input by the user is associated with a confidential level set by the user. The keyword is preferably a character string (“customer list”, “financial”, “HR”, etc.) highly relevant to confidential information.
For example, if a keyword that is inevitably used in confidential information is registered in the first information management table 722, even if a part of the document image including confidential information is modified, the keyword is added to the modified document image. Can be accurately detected and the take-out of the print paper 40 can be monitored. Further, by making the keyword registered in the first information management table 722 private, a psychological effect for preventing leakage of confidential information can be expected.
In this example, one security level is associated with one character string. However, the present invention is not limited to this. For example, a combination of a plurality of character strings (AND condition or OR condition) ) May be associated with one security level.

  As illustrated in FIG. 8B, the keyword DB 720 stores a second information management table 724 that associates the confidential level set by the user with the management operation definition information. The security levels in this example are “high”, “medium”, and “low”, and the respective security levels are management operation definition information for whether the print paper 40 is taken out (whether a warning sound is generated and the document ID). (Necessity of display). Therefore, when the printing paper 40 with the security level “high” is taken out of the security room, the information management apparatus 2 emits a warning sound and displays the document ID of the printing paper 40 to display the printing paper 40. The owner of the printing paper is notified that it is prohibited to take it out of the security room. Further, when the printing paper 40 with the medium security level is taken out of the security room, the information management apparatus 2 displays the document ID of the printing paper 40, and the printing paper 40 is subject to security management. Notify the owner of the printing paper to that effect. Notify that taking out of the security room is prohibited. When the print sheet 40 with the security level “low” is taken out of the security room, the information management apparatus 2 performs only management of the takeout history without generating the warning sound and the document ID.

[Operation]
FIG. 9 is a flowchart for explaining the operation of the take-out management process (S10) by the information management apparatus 2.
In step 100 (S100), the IC chip IF 28 (FIG. 3) provided in the information management apparatus 2 transmits a signal and waits for a response signal from the IC chip 3. When the IC chip 3 (attached to the printing paper 40) exists within the communicable range of the IC chip IF 28 (in the security room in this example), the IC chip 3 receives the signal from the IC chip IF 28. In response, a response signal is returned to the IC chip IF 28.
When receiving the response signal from the IC chip 3 via the IC chip IF 28, the receiving unit 700 of the information management program 7 (FIG. 7) proceeds to the process of S105, and until receiving the response signal in other cases. Wait for a response.

  In step 105 (S105), the receiving unit 700 receives the document ID and the character code from the IC chip 3 via the IC chip IF 28. The document ID is identification information of the printing paper 40 to which the IC chip 3 is attached, and the character code is identification information of a character group printed on the printing paper 40.

In step 110 (S110), the character string determination unit 730 compares the character code received by the reception unit 700 with the keyword stored in the keyword DB 720, and the character string corresponding to the keyword is a document image (printing). It is determined whether or not it is included in an image printed on the paper 40.
When the registered keyword exists in the document image printed on the printing paper 40, the information management program 7 proceeds to the processing of S115, and when the registered keyword does not exist, the printing paper 40 Is not subject to confidentiality management, and the take-out management process (S10) for the printing paper 40 is terminated.

  In step 115 (S115), the character string determination unit 730 refers to the first information management table 722 (FIG. 8) stored in the keyword DB 720 and refers to the security level of the printing paper 40 (that is, the printing paper 40). And the determination result is output to the warning information generation unit 740 and the history management unit 760.

  In step 120 (S120), the take-out detection unit 710 determines whether or not the print sheet 40 has been taken out of the security room based on the level of the signal received by the receiving unit 700 (the signal level transmitted from the IC 3). If it is taken out of the security room, the process proceeds to S125. In other cases, monitoring of the signal level is continued.

  In step 125 (S125), the warning information generation unit 740 confirms the security level determined by the character string determination unit 730. If it is determined that the security level is “high”, the process proceeds to S130. If it is determined that the security level is “medium”, the process proceeds to S135. If it is determined that the security level is “low”, the process proceeds to S140.

In step 130 (S130), the warning information generation unit 740 refers to the second information management table 724 (FIG. 8), and the management operation defining information corresponding to the confidential level “high” (that is, the occurrence of the warning sound). “Required” and “required” for displaying the document ID) are specified, and according to the specified management operation definition information, the generation instruction data of the warning sound and the display instruction data of the document ID are generated, and the UI Output to the unit 750.
The UI unit 750 causes the UI device 26 to output a warning sound and display the document ID according to the warning sound generation instruction data and the document ID display instruction data input from the warning information generation unit 740.

In step 135 (S135), the warning information generation unit 740 refers to the second information management table 724, and the management operation definition information corresponding to the confidential level “medium” (that is, “unnecessary” for generation of warning sound, The document ID display “required”) is specified, and document ID display instruction data is generated according to the specified management operation definition information, and is output to the UI unit 750.
The UI unit 750 displays the document ID on the UI device 26 according to the document ID display instruction data input from the warning information generation unit 740.

  In step 140 (S140), the history management unit 760 adds the document ID, security level, and take-out time of the printing paper 40 to the history DB 770.

FIG. 10 is a sequence diagram of the overall operation (S1) of the information management system 1.
As shown in FIG. 10, in step 200 (S200), the copying apparatus 5 reads a document image from a document according to a user operation, identifies characters included in the read document image, and is identified. Generate character codes for characters.
In step 205 (S205), the copying apparatus 5 prints the document image read from the document on the printing paper 40 to which the IC chip 3 is attached.
In step 210 (S210), the copying apparatus 5 assigns a document ID to the printing paper 40 on which the document image is printed, and the document ID assigned to the IC chip 3 of the printing paper 40 is generated. Write character code.

In step 300 (S300), the IC chip 3 of the printing paper 40 stores the document ID and character code written by the copying apparatus 5.
In step 305 (S305), the IC chip 3 starts communication with the information management apparatus 2 in response to the intermittent communication request signal of the information management apparatus 2, and the stored document ID and character code are stored in the information management apparatus 2. Send to.

In step 100 (S100) and step 105 (S105), the information management device 2 starts communication with the IC chip 3 and receives the document ID and the character code. At this stage, the information management apparatus 2 creates an entry for this document ID in the history DB 770.
In step 120 (S120), the information management apparatus 2 intermittently transmits a signal to the IC chip 3 to determine whether or not the IC chip 3 (that is, the printing paper 40) exists in the security room. To do.
When the signal received from the IC chip 3 falls below the reference level, the information management apparatus 2 determines that communication with the IC chip 3 has been disconnected (S310), and the printing paper 40 is out of the security room. Judge that it was taken out.
In step 125 (S125) to step 140 (S140), the information management apparatus 2 carries out take-out management such as output of a warning sound, output of a document ID, and update of take-out history in accordance with the security level of the printing paper 40. Perform the action.

As described above, the information management system 1 in the present embodiment stores character string identification information (character code) for identifying a character string in the IC chip 3 attached to the printing paper 40, and the character string identification information is stored in the character string identification information. Based on this, the security level of the printing paper 40 is determined, and when this printing paper 40 is taken out of the security room, a take-out management operation corresponding to the determined security level is performed.
Accordingly, it is possible to prevent leakage of confidential information by taking out the printing paper 40 on which confidential information is printed.
In addition, the information management system 1 can track the takeout of the print paper 40 by managing the takeout history of the print paper 40 at a certain security level. Thereby, information leakage due to loss of the printing paper 40 or the like can be prevented.

[Modification]
In the above embodiment, character string identification information (character code) is written in the IC chip 3 as determination information for determining whether or not confidential information is included in the document image. The character string identification information is read from the IC chip 3 to determine whether or not confidential information is printed on the printing paper 40, but the determination information is not limited to the character string identification information.
For example, the information management system 1 uses, as determination information, an image element (a form including a predetermined mark, ruled line, etc.), accompanying information (a flag indicating a confidential level, etc.), an image attribute (character density, etc.), or these Combinations may be used. Further, the character string identification information is not limited to the character code, and may be, for example, a character string image itself (bitmap pattern or the like) or a character string ID (word ID or the like) for identifying the character string. Good.

Therefore, a mode in which the security level of the printing paper 40 is used as determination information will be described below as a modified example. That is, when the copy apparatus 5 prints a document image on the printing paper 40, the security level of the document image is determined and the determined security level is written on the IC chip 3 of the printing paper 40. In this case, the information management apparatus 2 reads out the security level from the IC chip 3 attached to the printing paper 40, and performs take-out management according to the read security level.

FIG. 11 is a diagram illustrating a configuration of the information addition program 8 installed in the copy apparatus 5.
As illustrated in FIG. 11, the information addition program 8 includes a character identification unit 800, a security level database (security level DB) 810, a level determination unit 820, and a data writing unit 830.
The information addition program 8 is installed in the copy apparatus 5 (FIGS. 1 and 4) to realize each function.

In the information addition program 8, the character identification unit 800 identifies a character string included in a document image read by a scanner device (not shown). For example, the character identification unit 800 performs OCR processing on the read document image (raster data) to identify a character string included in the document image.
When the copy device 5 is replaced with a printer device, the character identification unit 800 acquires a character code included in the image data from a decomposer that interprets the image data (PDL file), and converts it into a document image. You may identify the character string contained.

  The confidential level DB 810 stores a character string (keyword) designated by the user and a confidential level in association with each other. That is, the confidential level DB 810 stores the first information management table 722 illustrated in FIG.

The level determination unit 820 compares the character string identified by the character identification unit 800 with the keyword stored in the confidential level DB 810, and prints the document image requested to be printed (that is, the document image is printed). The security level of the printing paper 40) is determined.
Further, when the keyword stored in the keyword DB 810 cannot be found in the document image, the level determination unit 820 determines that the printing paper 40 on which the document image is printed is not subject to security management.

The data writing unit 830 writes the security level determined for each print sheet 40 by the level determination unit 820 to the IC chip 3 attached to the print sheet 40.
Further, the data writing unit 830 generates a document ID for identifying the printing paper 40 when the level determination unit 820 determines the security level (that is, when it is determined that the level is not subject to security management). The generated document ID is written in the IC chip 3 attached to the printing paper 40.

FIG. 12 is a diagram illustrating a configuration of the second information management program 72 in the present modification. It should be noted that among the components shown in this figure, the same reference numerals are given to the components substantially the same as those shown in FIG.
As illustrated in FIG. 12, the second information management program 72 has a configuration in which the character string determination unit 730 is excluded from the first information management program 7 and a discard detection unit 780 is added.

In the information management program 72, when the discard detection unit 780 detects that the print paper 40 has been discarded by a shredder or the like, the discard detection unit 780 acquires the document ID of the discarded print paper 40, and the take-out history corresponding to the acquired document ID Is deleted from the history management unit 760. For example, the discard detection unit 780 receives a discarded document ID from a shredder that can communicate with the IC chip 3.
When the discard detection unit 780 detects that the print sheet 40 is discarded, the history management unit 760 of this example deletes the carry-out history corresponding to the document ID of the print sheet 40 from the history DB 770.

In addition, the receiving unit 700 of this example receives the confidential level and document ID of the printing paper 40 from the IC chip 3 attached to the printing paper 40.
In addition, the keyword DB 722 in this example stores the second information management table 724 illustrated in FIG.

FIG. 13 is a sequence diagram of the overall operation (S2) of the information management system 1 in the present modification.
As shown in FIG. 13, in step 200 (S200), the copying apparatus 5 reads a document image from a document in accordance with a user operation. Subsequently, the copy apparatus 5 (character identification unit 800) identifies a character included in the read document image.
In step 202 (S202), the copying apparatus 5 (level determination unit 820) compares the identified character with the keyword stored in the security level DB 810 to determine the security level of the printing paper 40.
In step 205 (S205), the copying apparatus 5 prints the document image read from the document on the printing paper 40 to which the IC chip 3 is attached.
In step 212 (S212), the copying apparatus 5 (data writing unit 830) assigns a document ID to the printing paper 40 on which the document image is printed, and the document attached to the IC chip 3 of the printing paper 40. Write the ID and the determined security level.

In step 302 (S302), the IC chip 3 of the printing paper 40 stores the document ID and the security level written by the copy device 5.
In step 307 (S307), the IC chip 3 starts communication with the information management apparatus 2 in response to the intermittent communication request signal from the information management apparatus 2, and the stored document ID and confidential level are set to the information management apparatus 2. Send to.

In step 102 (S102), the information management apparatus 2 starts communication with the IC chip 3 and receives the document ID and the confidential level.
In step 120 (S120), the information management apparatus 2 intermittently transmits a signal to the IC chip 3 to determine whether the IC chip 3 (that is, the printing paper 40) exists in the security room. To do.
When the signal received from the IC chip 3 falls below the reference level, the information management apparatus 2 determines that communication with the IC chip 3 has been disconnected (S310), and the printing paper 40 is out of the security room. Judge that it was taken out.
In step 125 (S125) to step 140 (S140), the information management apparatus 2 carries out take-out management such as output of a warning sound, output of a document ID, and update of take-out history in accordance with the security level of the printing paper 40. Perform the action.

As described above, the information management system 1 according to the present modification suppresses the amount of data to be stored in the IC chip 3 by writing the confidential level in the IC chip 3, and between the IC chip 3 and the information management device 2. The amount of data transmitted and received can be reduced.
Further, this modification example is suitable for a case where there is no margin in processing capability of the information management apparatus 2 because it is not necessary to determine the security level in the information management apparatus 2.

  In this modification, the copying apparatus 5 determines the confidential level of the document image (that is, the printing paper 40) based on the character string, but the image element (form including a predetermined mark, ruled line, etc.) and accompanying information. (Flag, tag (identification information of application software used for document creation, identification information of document creator, etc.), information embedded in a non-output layer), image attribute (character density, etc.), or a combination thereof Based on this, the confidential level may be determined.

It is a figure which illustrates the structure of the information management system 1 with which the information management method concerning this invention is applied. (A) illustrates the printing paper 40 attached with the IC chip 3, and (B) illustrates the data stored in the IC chip 3. It is a figure which illustrates the hardware constitutions of the information management apparatus 2 concerning this invention centering on the control apparatus 20. FIG. FIG. 2 is a diagram illustrating a hardware configuration of a copy apparatus 5 centering on a control apparatus 50. It is a figure which shows the structure of IC chip 3 shown in FIG. It is a figure which shows the structure of IC chip IF28 (or IC chip IF58 shown in FIG. 4) shown in FIG. It is a figure which shows the structure of the 1st information management program 7 performed by the information management apparatus 2 (FIG. 3). It is a figure which illustrates the information management table memorize | stored in keyword DB720, (A) illustrates the 1st information management table 722 which matches a keyword and a confidential level, (B) is a confidential level and management operation | movement regulation. The 2nd information management table 724 which matches information is illustrated. It is a flowchart explaining operation | movement of the taking-out management process (S10) by the information management apparatus 2. FIG. It is a sequence diagram of the whole operation | movement (S1) of the information management system 1. 3 is a diagram illustrating a configuration of an information addition program 8 installed in the copy apparatus 5. FIG. It is a figure which illustrates the structure of the 2nd information management program 72 in a modification. It is a sequence diagram of the whole operation | movement (S2) of the information management system 1 in a modification.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Information management system 2 ... Information management apparatus 28 ... IC chip interface 3 ... IC chip 40 ... Printing paper 5 ... Copy apparatus 58 ... IC chip interface 7 ... Information management program 700 ... receiving unit 710 ... take-out detection unit 720 ... keyword database 730 ... character string determination unit 740 ... warning information generation unit 750 ... user interface unit 760 ... history Management unit 770 ... History database 780 ... Discard detection unit 8 ... Information addition program 800 ... Character identification unit 810 ... Confidential level database 820 ... Level determination unit 830 ... Data writing unit

Claims (11)

A recording medium on which an image is formed;
A communication device that transmits determination information for determining whether or not confidential information is included in an image that is attached to the recording medium and formed on the recording medium;
Information receiving means for receiving the determination information from a communication device attached to the recording medium;
Carry-out detection means for detecting that the recording medium is taken out of a predetermined area;
A take-out managing means for managing take-out of the recording medium based on the determination information received by the information receiving means when the take-out detecting means detects that the recording medium is taken out of a predetermined area; Information management system. The communication device transmits identification information of a character string formed on the recording medium as the determination information,
The information receiving means receives character string identification information from the communication device,
The take-out managing means determines whether or not confidential information is included in the character string formed on the recording medium using the character string identification information received by the information receiving means, and according to the determination result The information management system according to claim 1, wherein carry-out of the recording medium is managed. Storage means for storing a predetermined character string in association with one of a plurality of security levels;
The take-out management means includes
A character string determination unit that determines whether any of the character strings stored in the storage unit exists using the character string identification information received by the information reception unit;
The information management according to claim 2, further comprising: a warning unit that outputs a warning signal according to a confidential level corresponding to the character string when the character string determination unit determines that any one of the character strings exists. system. Storage means for storing a predetermined character string in association with one of a plurality of security levels;
The take-out management means includes
A character string determination unit that determines whether any of the character strings stored in the storage unit exists using the character string identification information received by the information reception unit;
The information management system according to claim 2, further comprising: a history management unit that updates a takeout history of the recording medium when the character string determination unit determines that any one of the character strings exists. A waste detection means for detecting that the recording medium is discarded;
5. The information management system according to claim 4, wherein the history management unit deletes the carry-out history of the recording medium when the discard detection unit detects the discard of any recording medium. Information receiving means for receiving determination information for determining whether confidential information is included in an image formed on the recording medium from a communication device attached to the recording medium;
Carry-out detection means for detecting that the recording medium is taken out of a predetermined area;
A take-out managing means for managing take-out of the recording medium based on the determination information received by the information receiving means when the take-out detecting means detects that the recording medium is taken out of a predetermined area; Information management device. Image forming means for forming an image on a recording medium;
Element determining means for determining whether or not a predetermined image element is included in the image formed by the image forming means;
Writing means for writing element identification information for identifying the image element to the communication device attached to the recording medium when the element determination means determines that any of the image elements is included; An image forming apparatus. Image forming means for forming an image on a recording medium;
Element determining means for determining whether or not a predetermined image element is included in the image formed by the image forming means;
A level determination unit that determines a security level corresponding to the image element when the element determination unit determines that any one of the image elements is included;
An image forming apparatus comprising: writing means for writing identification information of a confidential level determined by the level determining means to a communication device attached to the recording medium. In the communication device attached to the recording medium, determination information for determining whether or not confidential information is included in the image formed on the recording medium is stored,
Receiving the determination information from a communication device attached to the recording medium;
Detecting that the recording medium is taken out of a predetermined area;
An information management method for managing taking out of a recording medium based on received determination information when it is detected that the recording medium is taken out of a predetermined area. In an information management device including a computer,
Receiving determination information for determining whether or not confidential information is included in an image formed on the recording medium from a communication device attached to the recording medium;
Detecting that the recording medium is taken out of a predetermined area;
A program that, when it is detected that the recording medium is taken out of a predetermined area, manages the taking-out of the recording medium based on the received determination information. In an image forming apparatus including a computer,
Forming an image on a recording medium;
Determining whether a predetermined image element is included in the image formed by the image forming means;
When it is determined that any of the image elements is included in an image to be formed, determining a security level corresponding to the image element;
A program for causing the computer of the image forming apparatus to execute the step of writing the determined confidential level identification information in a communication device attached to the recording medium.

Images