JP2006229652A - Data processor, misoperation reporting method, program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data processor preventing misoperation of a user and wrong transmission or erasure of data or the like due to the misoperation. <P>SOLUTION: A user identification means 11 identifies a user of the data processor 1. An operation reception means 12 receives an operation from the user identified by the user identification means 11. A history storage means comprising an operation history DB 13 or the like stores an operation history by each user identified by the user identification means 11. An operation discrimination means 14 determines whether the operation received by the operation reception means 12 differs from operations in the past operation history. A report means 15 regards the operation received by the operation reception means 12 as a wrong operation and reports the fact to the user when a result of the discrimination by the operation discrimination means 14 indicates that the operation received by the operation reception means 12 differs from operations in the past operation history. A data processing means 16 executes data processing on the basis of the operation by the user when the operation is not mistaken. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a data processing apparatus, an erroneous operation notification method in the apparatus, an erroneous operation notification program to be incorporated in the apparatus, and a computer-readable recording medium on which the program is recorded.

  In recent years, multifunction devices that combine a copy function, a facsimile function, and a print function have been diversified, and various functions have been added. As an example of this, recent multifunction peripherals not only have a function of printing on recording paper, but also a function of transmitting transmitted print data and read image data to an external device, so that data transmission to the outside is easy. I have to. Functions such as “Scan to Email”, “Scan to FAX”, and “Scan to FTP” are widely used as a transmission function to an external device.

  On the other hand, there is a problem that a confidential document or the like is transmitted to an incorrect transmission destination due to a user's mistake in operation. In addition, some multifunction devices include a large-capacity storage device such as a hard disk and have a function of storing data transmitted from the outside or data read by a scanner in the hard disk. Such a multifunctional machine has improved data usability, but has problems such as data tampering, unauthorized removal, and deletion. Tampering, taking without permission, or deleting other people's data may be done maliciously, but generally it can occur by accessing data without knowing how to operate it. The majority of user operation errors. In addition, due to such an operation mistake, the user himself may falsify his data, take it out to another storage area, or even delete it.

  Such problems are not limited to multi-function peripherals. Operational errors can occur in various data processing devices such as printers, personal computers (PCs), and various dedicated devices. Any possible data processing device can occur.

  As a conventional technique for preventing an erroneous call, there has been proposed a communication device that warns an operator when a new destination that is not in the call history is input, thereby allowing the operator to recognize the erroneous input before the call is made (for example, a patent). Reference 1).

  There has also been proposed a facsimile apparatus that prevents erroneous dialing during facsimile transmission by taking appropriate measures according to the cause type of facsimile transmission failure (see, for example, Patent Document 2). In the facsimile apparatus described in Patent Document 2, a history storage unit that records a transmission failure history, and whether or not the transmission destination telephone number input at the time of facsimile transmission is that of the transmission destination recorded in the history storage unit. A comparison and determination unit for determining whether or not and a restriction execution unit. The comparison determination unit searches the history management unit for the number of failures for each cause of failure for the telephone number, and when the number of failures found exceeds a preset allowable number of failures, the restriction execution unit Restricts facsimile transmission.

Furthermore, there has also been proposed an unauthorized operation monitoring device that can monitor unauthorized input / operation in real time by constantly monitoring the operation history log of the monitored computer system (see, for example, Patent Document 3). An apparatus described in Patent Literature 3 includes an operation history log information acquisition unit that acquires operation history log information from a monitored computer system, an operation history log memory that stores the operation history log information, and an unauthorized operation. Unauthorized detection information registration means for registering unauthorized discovery information as information, input information memory for storing input information such as key input intervals and input warning values as unauthorized discovery information, and operation pattern information as unauthorized discovery information are stored. Operation pattern information memory, and unauthorized operation monitoring means for comparing unauthorized discovery information and operation history log information to monitor unauthorized operations.
JP-A-5-91213 JP-A-10-262143 JP 2002-258972 A

  However, the techniques described in Patent Documents 1 and 2 do not prevent a general operation error, and cannot prevent a situation in which a confidential document is transmitted to a destination different from the destination to be transmitted. It is not possible to prevent tampering.

  Further, in the technology as described in Patent Document 3, fraudulent input information and fraudulent operation by another person's malicious intention can be monitored in real time using fraud detection information, but the user himself / herself is a confidential document at a destination different from the destination to be transmitted. It is not possible to prevent a situation in which the user transmits the data, and further, it is not possible to prevent a situation in which the user himself / herself falsifies his / her data due to an operation error.

  The present invention has been made in view of the circumstances as described above, and is a data processing apparatus capable of preventing erroneous transmission or deletion of data due to a user's operation mistake or operation mistake, and an erroneous operation notification method in the apparatus. An object of the present invention is to provide a misoperation notification program for incorporation into the apparatus and a computer-readable recording medium on which the program is recorded.

  The present invention is constituted by the following technical means in order to solve the above-described problems.

  The first technical means is a data processing apparatus that performs data processing based on a user's operation, the user identifying means for identifying the user of the data processing apparatus, and the use identified by the user identifying means An operation accepting means for accepting an operation from the user, a history accumulating means for accumulating an operation history for each user identified by the user identifying means, and a past operation history accumulated by the history accumulating means, An operation determination unit that determines whether or not the operation received by the operation reception unit is different from the past operation history, and the operation reception unit that is different from the past operation history as a result of the determination by the operation determination unit. It is characterized by comprising notifying means for informing the user that the operation received in is regarded as an erroneous operation.

  The second technical means is a series of operations performed before the operation accepted by the operation accepting means when the result of the judgment by the operation judging means is different from the past operation history in the first technical means. It is characterized by having a holding means for holding the contents of the operation and the data acquired by the series of operations.

  According to a third technical means, in the first or second technical means, the notifying means receives an operation received by the operation receiving means when the result of the determination by the operation determining means is different from a past operation history. It is characterized by having means for informing that it is confirmed whether or not is an erroneous operation, and means for allowing the user to input the result of the confirmation.

  According to a fourth technical means, in any one of the first to third technical means, the operation determination means determines whether the operation received by the operation reception means is different from the past operation history. This is performed based on the execution frequency of the operation in the operation history.

  According to a fifth technical means, in any one of the first to fourth technical means, the operation determination means includes means for registering the determination level from a plurality of levels for each user. Is.

  A sixth technical means is any one of the first to fifth technical means, wherein the operation determining means is based on each time zone in which the data processing device is used and / or on the calendar information. It is characterized by having means for registering from among a plurality of levels.

  A seventh technical means is an erroneous operation notification method for notifying a user's erroneous operation in a data processing device that performs data processing based on a user's operation, and identifies a user of the data processing device. A step of accepting an operation from the identified user, a history accumulation step of accumulating an operation history for each identified user, and the accepting operation based on the accumulated past operation history. An operation determination step for determining whether the received operation is different from the past operation history, and if the result of the determination is that the operation is different from the past operation history, the received operation is regarded as an erroneous operation, and the user is And a notifying step for notifying.

  An eighth technical means is a program that is incorporated into a data processing device that performs data processing based on a user's operation and that is executed by a central processing unit in the data processing device, the user of the data processing device A user identification step for identifying the user, an operation reception step for accepting an operation from the identified user, a history accumulation step for accumulating an operation history for each identified user, and the accumulated past operation history The operation determination step for determining whether or not the received operation is different from the past operation history, and when the received operation is different from the past operation history as a result of the determination, the received operation is an erroneous operation. It is assumed that the central processing unit is caused to execute a notification step of notifying the user.

  The ninth technical means is a computer-readable recording medium on which the program in the eighth technical means is recorded.

  According to the present invention, in the data processing apparatus, it is possible to prevent erroneous transmission or deletion of data due to a user's operation mistake or operation mistake.

  FIG. 1 is a diagram showing a configuration example of a data processing apparatus according to an embodiment of the present invention. In the figure, 1 is a data processing apparatus, 11 is a user identifying means, 12 is an operation accepting means, and 13 is an operation history database. (Operation history DB), 14 is an operation determination unit, 15 is a notification unit, and 16 is a data processing unit.

  The data processing apparatus according to the present invention is an apparatus that performs data processing based on the user's operation, as long as the operation according to the process requested by the user is possible, such as a copying function, a facsimile function, and a printing function. This includes various image processing apparatuses such as multifunction peripherals and printers, information processing apparatuses such as PCs, and various data processing apparatuses such as various dedicated devices. Further, since the data processing apparatus has a multi-function, operation errors are further increased. Therefore, the multi-function apparatus is more useful, and a data processing apparatus capable of transmitting and receiving data is more useful.

  The data processing apparatus according to the present invention includes a user identification unit 11, an operation reception unit 12, an operation history DB 13, an operation determination unit 14, and a notification unit 15, which will be described later, and performs various types of data processing according to user operations. The data processing means 16 is provided in the same manner as a normal device.

  The user identification unit 11 is a unit for identifying the user of the data processing apparatus 1. The user identification unit 11 is a unit for inputting the ID (and password) of an individual or group user and collating it with previously recorded information. Various forms such as means for reading information from an IC card on which information is recorded can be adopted. As described above, the present invention can also be applied to a case where a user is authenticated by a group such as a department. Further, it is preferable not only to identify but also to authenticate the user.

  The operation accepting unit 12 is a unit that accepts an operation from the user identified by the user identifying unit 11, and corresponds to an information input unit such as an operation touch panel and an operation key. You may comprise so that an input may be received by a means. Furthermore, since an operation from the user after identification is accepted, it is preferable to associate the user with the operation content.

  The operation history DB 13 is a database that accumulates an operation history for each user identified by the user identification unit 11 and is stored in the storage device of the data processing device 1. Note that the database format is not limited as long as such accumulation is possible.

  The operation determination unit 14 is a unit that determines whether the operation received by the operation reception unit 12 is different from the past operation history based on the past operation history accumulated in the operation history DB 13. A search program or the like corresponds to this. Whether the accepted operation is different from the past operation history can be determined, for example, by the fact that the operation is less frequently used.

  The notification means 15 is a means for notifying the user that the operation received by the operation reception means 12 is an erroneous operation when the operation determination means 14 differs from the past operation history as a result of the determination. Examples of notification methods include displaying warning texts and confirmation texts on an operation panel, etc., or outputting voices, and simpler methods such as lighting or blinking the corresponding LED lamps. It is done. If it is not an erroneous operation, the data processing means 16 executes data processing based on the user's operation.

  As described above, in this embodiment, the user of the data processing apparatus 1 is identified, and if the user's past usage history is different from the past usage history (eg, the usage frequency is low), the operation is erroneous. This is predicted and the user is notified. This is based on the fact that the user's method of using the device can be predicted to be an erroneous operation when the operation is different from time to time. Informing the user (making the user recognize the erroneous operation) reduces the user's useless work and, for example, prints useless data in the case of a device with a print function added. As a result, it is possible to prevent consumption of supplies due to printing mistakes. In addition, it is predicted that confidential data will be transmitted to the outside or other departments due to erroneous operations. By issuing warnings by predicting erroneous operations from past transmission history, data such as confidential data will be leaked or deleted due to erroneous operations. Can be prevented and security can be improved.

  Further, as another embodiment, it is preferable to provide the following holding means. This holding means is based on the contents of a series of operations performed before the operation accepted by the operation accepting means 12 and the series of operations when the judgment by the operation judging means 14 is different from the past operation history. Retain the acquired data. In other words, this embodiment is configured to hold the operation content and data when different from the past use history (less frequently used). By confirming (warning) the user and holding the printout, it is possible to prevent leakage of confidential data and unauthorized use of the device due to erroneous operation. In other words, this allows data to be printed by the user, or to temporarily hold the data read by the scanner and reconfirm with the user so that processing can be performed immediately when the user confirms it. As a result, the burden on the user is reduced and high-speed processing is possible.

  As another embodiment, it is preferable that the notification means 15 includes the following means. A notifying means for notifying whether or not the operation accepted by the operation accepting means is an erroneous operation when the result of the judgment by the operation judging means is different from the past operation history; Means for allowing the user to input the result of the confirmation.

  As described above, as another embodiment of the present invention, the operation determination unit 14 determines whether or not the operation received by the operation reception unit 12 is different from the past operation history. It is preferable to carry out based on the execution frequency. Here, the operation execution frequency refers to the number of times of each operation in the user (or user group), the number of times of use of the function corresponding to each operation, or the ratio to the total set. The determination can be made by providing a threshold for the operation execution frequency.

  As another embodiment, the operation determination unit 14 preferably includes a unit for registering a determination level from a plurality of levels for each user. Therefore, in this embodiment, the user is identified by the user identification unit 11 and the determination is performed according to the determination level (registration level) for each registered user.

  In addition, registration may be partially set for each user by default, and various methods may be used, such as dividing users by class and assigning each level to each class. For example, the determination level may be set according to the proficiency level of the user with respect to the data processing apparatus 1 such as an administrator level and a general user level, and the notification level may be varied depending on the set level. By setting the determination level according to the proficiency level, it is possible to understand the setting of the apparatus and the operation method, and not to notify the administrator level that is expected to have few operation errors. At the same time, general users understand general operations, but do not understand complicated operations, and it is expected that there will be many operation errors for complex operations. It is advisable to set a threshold value that facilitates this. In particular, the company can notify a new employee or the like of even a trivial matter by lowering the threshold for error determination. In this way, it is possible to prevent the user from feeling uncomfortable by changing the notification level according to the registration level of the user. Moreover, when performing the determination based on the above-described execution frequency, for example, a threshold for each determination level of the execution frequency may be prepared for each operation.

  In another embodiment, the operation determination unit 14 preferably includes the following unit. In this means, the determination level is registered from a plurality of levels based on the time zone in which the data processing apparatus 1 is used and / or the calendar information. That is, the notification level is made different depending on the time of use of the device (working time / overtime / midnight, etc.) and the day of the week (for example, holiday / working day). As a result, if the device is used in a time zone where there are few people, such as late at night or early morning, or if there is a print instruction, it is considered to be unauthorized use. In particular, it can be assumed that data is read from the hard disk as a concern. Therefore, in such a case, it is possible to suppress unauthorized access by raising the notification level than usual.

  FIG. 2 is a flowchart for explaining an example of an erroneous operation notification process in the data processing apparatus of FIG. 1, and is also a flowchart for explaining an erroneous operation notification method according to an embodiment of the present invention.

  First, it is determined whether or not there is user authentication (step S1), and the following processing is performed when authentication is performed. Next, operation input is accepted (step S2) until the end of input is determined (step S3). In step S3, it is determined that the input has been completed when the operation is enabled (the data processing means can be operated) by the series of operations in step S2. In step S2, the operation content may be associated with the user and stored in the operation history DB 13 for future use. Further, when resetting in step S8 described later, in order to save the user's trouble, data related to the operation (for example, data to be transmitted) or link information thereof is stored in either of them. Good.

  Next, it is determined whether or not there is a past operation history (also referred to as a usage history) of the user from the operation history DB 13 by searching using the user name (or ID) as a key (step S4). If not, the erroneous operation notification process is terminated. If it is determined in step S4 that there is a past usage history, the operation input input in step S2 is compared with the past usage history of the corresponding person in the operation history DB 13 (step S5).

  As a result of the comparison in step S5, it is determined whether or not there is a mismatch with the past use history (step S6). If there is no mismatch, it is considered that the operation is correct and the erroneous operation notification process is terminated. On the other hand, when it is determined in step S6 that there is a mismatch, the received operation is regarded as an erroneous operation, and an erroneous operation (incorrect setting) is notified (step S7). In step S7, display or audio output may be performed so as to ask the user whether or not to reset the setting (re-operation). If it is determined that the user's response is received and the setting is reset, the process returns to step S2. If it is determined that the setting is not reset, the process is terminated.

  FIG. 3 is a diagram for explaining an example of a digital multi-function peripheral as an application example of the data processing apparatus of FIG. 1 and a connection form thereof. In FIG. 3, 21 is a digital multi-function peripheral as an example of a data processing apparatus, 22 is a telephone line network, 23 is a manager's facsimile machine (fax for manager), 24 is a network, 25 is an Internet network, and 26 is an Internet FAX. 27 is an external PC, 28 and 29 are terminal PCs, 31 is an image reading unit, 32 is an operation unit, 33 is an image forming unit, 34 is a device control unit, 35 is a FAX modem, 36 is a communication unit, and 37 is a hard disk ( HD), 38 is an erasure processing unit, 39 is a management unit, and 40 is a timer.

  The digital multifunction peripheral 21 illustrated in FIG. 3 is connected to a FAX 23 used by, for example, an administrator via a telephone line network 22 and via a network 24 such as a LAN (Local Area Network) and a WAN (Wide Area Network). , A plurality of terminal PCs 28, 29,. . . Further, it is connected to the Internet FAX 26 and the external PC 27 outside the network 24 via the Internet network 25. With these network configurations, various data can be transmitted and received.

  The digital multifunction device 21 includes an image reading unit 31, an operation unit 32, an image forming unit 33, a device control unit 34, a FAX modem 35, a communication unit 36, an HD 37, an erasing processing unit 38, a management unit 39, a timer 40, and the like. The Note that the configuration of the digital multifunction peripheral 21 according to the present invention and the connection form with external devices are not limited to this example, and it is only necessary to include the above-described units. Each means does not have to be composed entirely of hardware, and a program that causes the digital multi-function peripheral 21 to function as those means is incorporated in a control unit such as the device control unit 34 (or an operation history management program or the like). Embedded in the management unit 39) and can be easily implemented by causing the arithmetic unit to execute it.

  The operation unit 32 includes a touch panel that includes an output unit (display unit) 32b that displays an operation screen and an input unit 32a that allows a user to input various settings and operation contents based on the display. Based on the operation of the operation unit 32, the image reading unit 31 detects the presence or absence of a document by a document detection sensor 31b, reads the document by a CCD (charge coupled device) 31a, and outputs it as image data. The FAX modem 35 is a modem for performing facsimile communication with the administrator FAX 23. The communication unit 36 controls communication with an external device of the digital multi-function peripheral 21 connected via the network 24.

  The image forming unit 33 temporarily stores the image data read by the image reading unit 31 and the received data received by the FAX modem 35 or the communication unit 36 in the memory 33b, and from the printing unit 33a equipped with a laser scanner unit (LSU). An image is formed on a medium such as paper. In the image forming unit 33, it is possible to encrypt the data such as the image data stored in the memory 33b in the encryption processing unit 33c and store it in the HD 37, and conversely, the encrypted data stored in the HD 37. Can be decoded and output to an external device via the memory 33b via the network 24 or the like, or can be printed out as a medium by the printing unit 33a. The erasure processing unit 38 performs a process of erasing the data stored in the HD 37 in order to maintain security or secure storage capacity.

  The device control unit 34 is a main control unit connected to each of the above-described units. The device control unit 34 refers to the management data of the management unit 39 and the timer time from the timer 40, and starts exchanging data between the units of the digital multifunction peripheral 21. The overall operation of the digital multi-function peripheral 21 is controlled. The management unit 39 manages the above-described operation history DB, a management table described with reference to FIGS. 4 to 6 described later, and the IP address of the own device 21. The timer 40 measures the time of the digital multifunction device 21 in the standby state and notifies the device control unit 34 of this time. An example of the control in the device control unit 34 is as follows. The operation unit 32 notifies the device control unit 34 of a copy request or various recording conditions instructed by a user's operation input. The operating state of the multifunction device 21 is displayed on the display screen of the display unit 32b of the operation unit 32, and the image forming unit 33 is instructed to perform printing processing. Then, as will be described later with reference to FIGS. 4 to 9, the device control unit 34 refers to the operation history in the HD 37 by the management unit 39 with respect to the operation, and the processing procedure illustrated in FIG. An erroneous operation is determined and notified on the display unit 32b.

  As described above, the digital multifunction device 21 is provided with the key input unit 32 a and the display unit 32 b in the operation unit 32, and can perform ID input in addition to the function instruction operation of the digital multifunction device 21. In addition to the ID input, the digital multi-function peripheral 21 may include an ID card reader that inputs an ID card and reads the information. The digital multi-function peripheral 21 according to the present invention includes some kind of user identification means, and preferably includes such authentication means. Any authentication means may be used as long as it authenticates the user based on the user information and enables the use of the own device 21. The digital multifunction device 21 first limits the user by this authentication means. Further, the digital multifunction peripheral 21 can perform bidirectional data communication with an external device (such as a PC terminal) by the communication unit 36. The digital multi-function peripheral 21 according to the present invention preferably includes some kind of communication means.

  4 to 6 are diagrams illustrating examples of operation histories managed by the management unit of the digital multi-function peripheral of FIG. 3, FIG. 4 is an example of operation histories for printing conditions, and FIG. 5 is an example of operation histories for setting conditions. FIG. 6 shows an example of an operation history for the data transmission destination. 7 is a diagram illustrating an example of an operation panel in the operation unit of the digital multifunction peripheral of FIG. 3, FIG. 8 is a diagram illustrating a display example of the operation panel of FIG. 7, and FIG. 9 is a diagram of the operation panel of FIG. It is a figure which shows the alerting | reporting example. The examples illustrated in FIGS. 4 to 6 are also examples of the operation history DB in the data processing apparatus of FIG. 1, and the examples illustrated in FIGS. 7 to 9 are examples of notification means in the data processing apparatus of FIG. It is also a figure for demonstrating.

  The operation history is in the form of a management table 41 for printing conditions as exemplified in FIG. 4, a management table 42 for setting conditions as exemplified in FIG. 5, a management table 43 for destinations as exemplified in FIG. Each user is stored in the HD 37 and managed by the management unit 39.

  The management table 41 stores the printing conditions 41a and information 41b related to the usage frequency of the corresponding user in association with each other. Examples of the printing condition 41a include “N-UP”, “double-sided printing”, “saddle stitching”, “paper size (B5)”, “paper size (A4)”, “paper size (B4)”, “paper size”. (A3) "and the like. In this example, the usage frequency of “paper size (A4)” is the highest, 30 times, and the usage frequency of “paper size (B5)” is 18 times, with respect to the maximum value. In other words, there is an operation history such that the frequency of use of “middle stitch” operation is 60%, and the operation frequency of “saddle stitching” is 4 times, which is 13% lower than the maximum value. Based on this operation history, for example, if the threshold set for this user is 50% for the entire printing condition, a warning is issued only when the “saddle stitching” operation is performed among these three. Made. Similarly, if the threshold value is 70%, a warning is given for an operation of “paper size (B5)” in addition to “saddle stitching”.

  The management table 42 stores setting conditions 42a and information 42b relating to the usage frequency of the user corresponding to the setting conditions 42a in association with each other. As the setting condition 42a, for example, “double-sided copy”, “enlarged copy”, “reduced copy”, “number of copies”, “Scan to Email”, “Scan to FAX”, “Scan to FTP”, “device memory (HD37)”. ) ”And“ reading from the device memory (HD 37) ”. In the management table 42, as described in the management table 41, a warning is given when a predetermined condition is satisfied.

  The management table 43 stores information 43b related to the use frequency of the transmission destination 43a and the user corresponding to the transmission destination 43a. Examples of the destination 43a include an Email address, a FAX number, an IP address, and the like. In this example, a line is added to the management table 43 when the destination is a new destination based on the transmitted history. Is shown. In the management table 43, as described in the management table 41, a warning is issued when a predetermined condition is satisfied. It is also possible that the number of transmission destinations will be enormous. For each user or department, an operation history is kept only for operations on a specific transmission destination, and other transmission destinations and the transmission frequency in the operation history A warning may be issued only to a small number of destinations.

  Each table 41 to 43 is preferably associated with user information (such as identification information and determination level information including a threshold set) and stored in a relational DB format for each user. And the value in a table should just be updated whenever a user's operation is performed, or should just be updated for every predetermined period. In addition, various management methods such as, for example, storing all the tables 41 to 43 in the relational DB format in association with the user information can be cited.

  The device control unit 34 determines an erroneous operation by the processing procedure illustrated in FIG. 2 by referring to the operation history as described above stored in the HD 37 by the management unit 39 with respect to the operation, and notifies the display unit 32b. To do. This processing procedure will be described using a digital multi-function peripheral having the operation unit 50 illustrated in FIG. 7 from the user side.

  The operation unit 50 includes an operation panel 51 formed of a touch panel, dedicated buttons such as a document filing button 52, a FAX / image transmission button 53, a copy button 54, and a user setting button 55, and general buttons such as a numeric keypad and a start button. An input button 56 is provided. The operation panel 51 in FIG. 7 displays a plurality of functions (possible operations) relating to copying. For example, a double-sided copy setting area 51a, a finishing setting area 51b, and a filing setting area 51c are displayed in a pressable manner. Yes.

  The display example on the operation panel 51 illustrated in FIG. 8 is a screen after the user presses the FAX / image transmission button 53, and a setting area 51d for switching an E-mail transmission / FTP transmission mode and an address are input. A setting area 51e for performing transmission and a setting area 51f for performing detailed transmission settings are displayed. It is assumed that the user selects FTP transmission by setting the setting area 51d, for example. In that case, the device control unit 34 causes the management unit 39 to refer to the operation history of the user and determine whether the operation is normally performed by the user. If it is determined that the operation is not normally performed, that is, the operation is not frequently used, a warning message as illustrated in FIG. 9A or 9B is issued. At the same time, if there is no problem, the “retransmission” setting area 58 may be pressed. In FIG. 9A, a statement 57 for inquiring “Is the transmission setting correct?” Is inquired, and in FIG. 9B, “The setting contents are different at any time. If there is no problem, press the transmission button.” At the same time, a guidance sentence 59 is also notified when transmitting as it is.

  Further, for example, when the user has performed the operation history operation of FIG. 6 in the past, selects FTP transmission in the setting area 51d, and further selects “198.168.0.1” as the IP address. Is not in any of the transmission destination lists illustrated in FIG. Further, when the same assumption is made and the threshold value is medium, when the user selects FTP transmission in the setting area 51d and further selects “192.168.0.12” as the IP address, Since the use frequency is low in the transmission destination list illustrated in FIG.

  FIG. 10 is a diagram showing a configuration example of a PC as another application example of the data processing apparatus of FIG. 1, in which 60 is a PC, 61 is a CPU (Central Processing Unit), 62 is a display unit, and 63 is a RAM. (Random Access Memory) and the like, 64 is a ROM (Read Only Memory) storing an operation system and other control programs, 65 is a print management unit, 66 is a mail management unit, 67 is an operation unit, 68 is a modem unit, 69 is a communication unit, 70 is a management unit, and 71 is a storage unit.

  The PC 60 illustrated in FIG. 10 includes an operation unit 67 such as a keyboard and a mouse for inputting various information, a storage unit 71 such as a hard disk and an external recording medium reader, and a network device for input from other devices. A printing unit connected to a communication unit 69, a modem unit 68 including a modem for performing facsimile communication via a telephone line, a display unit 62 such as a CRT or LCD for displaying notification information and other information, and a PC 60 A print management unit 65 including a printer driver and a connector for controlling printing on the apparatus, a mail management unit 66 including a mailer that transmits and receives mail via the communication unit 69 and the modem unit 68, and management of erroneous operations according to the present invention. Management unit 70 composed of a program for performing control, and further, a hard disk or ROM (rewrite program) in which a control program is recorded 64, a CPU 61 for executing a control program stored therein and a program of each unit, and a memory 63 as an execution area thereof are the main components, and these are connected by a bus. It is illustrated as a thing.

  These programs installed in the PC 60 are programs to be executed by the CPU 61, and are identified as a user identification step for identifying the user of the PC 60, and an operation reception step for accepting an operation from the identified user. A history accumulation step for accumulating operation history for each user, an operation determination step for determining whether or not an accepted operation is different from the past operation history based on the accumulated past operation history, and a result of the determination If the received operation history is different from the past operation history, the received operation is regarded as an erroneous operation, and a notification step for notifying the user is executed by the CPU 61. Other application examples are as illustrated in FIGS. 1 to 9, and the description thereof is omitted. Further, these programs may be provided with a graphical user interface (GUI) for the display unit 62 so as to be easy for the device user to use. Information handled by these devices is temporarily stored in the memory 63 at the time of processing, and then stored in various ROMs 64 and hard disks, and is read out, corrected, and written by the CPU 61 as necessary.

  A data processing apparatus other than a digital multi-function peripheral or a PC can be similarly configured. This can be understood from the fact that the program as described above is often implemented as firmware in the device control unit or management unit of the digital multi-function peripheral exemplified in FIG.

  As described above, each embodiment has been described mainly with reference to the data processing apparatus and the program of the present invention with reference to FIGS. 1 to 10, but the present invention has been described based on the processing flow in each of the above-described embodiments. In addition, a form as a data processing method can be adopted, and further, a form as a computer or a computer-readable recording medium on which the program is recorded can be adopted as described above.

  An embodiment of a recording medium storing a program and data for realizing an erroneous operation notification function according to the present invention will be described. Specifically, a CD-ROM, a magneto-optical disk, a DVD-ROM, an FD, a flash memory, and various other ROMs and RAMs can be assumed as the recording medium, and the above-described program is recorded on these recording media. This function makes it easy to realize this function. Then, the information processing apparatus such as the computer illustrated in FIG. 10 is loaded with the recording medium as described above and the program is read, or the program is stored in the recording medium included in the information processing apparatus. By reading as necessary, the function of notifying an erroneous operation according to the present invention can be executed.

It is a figure which shows the structural example of the data processor which concerns on one Embodiment of this invention. It is a flowchart for demonstrating an example of the misoperation notification process in the data processor of FIG. 1, and is also a flowchart for demonstrating the misoperation notification method which concerns on one Embodiment of this invention. FIG. 2 is a diagram for explaining an example of a digital multi-function peripheral as an application example of the data processing apparatus of FIG. 1 and a connection form thereof. FIG. 4 is a diagram illustrating an example of an operation history managed by a management unit of the digital multifunction peripheral of FIG. 3. FIG. 6 is a diagram illustrating another example of an operation history managed by the management unit of the digital multifunction peripheral of FIG. 3. FIG. 6 is a diagram illustrating another example of an operation history managed by the management unit of the digital multifunction peripheral of FIG. 3. FIG. 4 is a diagram illustrating an example of an operation panel in an operation unit of the digital multifunction peripheral of FIG. 3. It is a figure which shows the example of a display in the operation panel of FIG. It is a figure which shows the example of alerting | reporting in the operation panel of FIG. It is a figure which shows the structural example of PC as another application example of the data processor of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Data processing apparatus, 11 ... User identification means, 12 ... Operation reception means, 13 ... Operation history database (operation history DB), 14 ... Operation determination means, 15 ... Notification means, 16 ... Data processing means, 21 ... Digital Multifunction machine, 22 ... telephone line network, 23 ... administrator facsimile machine (FAX for administrator), 24 ... network, 25 ... internet network, 26 ... internet fax, 27 ... external PC, 28, 29 ... terminal PC, 31 ... Image reading unit, 32 ... Operation unit, 33 ... Image forming unit, 34 ... Device control unit, 35 ... FAX modem, 36 ... Communication unit, 37 ... Hard disk (HD), 38 ... Erase processing unit, 39 ... Management unit, 40 ... Timer, 60 ... PC, 61 ... CPU, 62 ... Display unit, 63 ... Memory, 64 ... ROM, 65 ... Print management unit, 66 ... Mail management unit, 67 ... Operation unit, 6 ... modem, 69 ... communication unit, 70 ... management unit, 71 ... storage unit.

Claims (9)

  A data processing apparatus that performs data processing based on a user's operation, the user identifying means for identifying the user of the data processing apparatus, and the operation for accepting the operation from the user identified by the user identifying means Based on the accepting means, the history accumulating means for accumulating the operation history for each user identified by the user identifying means, and the operation accepting means based on the past operation history accumulated in the history accumulating means An operation determination unit that determines whether or not an operation is different from a past operation history, and an operation received by the operation reception unit when the operation determination unit is different from a past operation history as a result of the determination by the operation determination unit is an erroneous operation. A data processing apparatus comprising: an informing unit that regards the user as informing the user.   As a result of the determination by the operation determining means, when the operation history is different from the past operation history, the contents of a series of operations performed before the operation received by the operation receiving means and the data acquired by the series of operations are obtained. The data processing apparatus according to claim 1, further comprising holding means for holding.   The notification means notifies the effect of confirming whether or not the operation received by the operation reception means is an erroneous operation when the result of the determination by the operation determination means is different from the past operation history; The data processing apparatus according to claim 1, further comprising means for causing the user to input a result of the confirmation.   The operation determination unit determines whether or not the operation received by the operation reception unit is different from a past operation history based on an execution frequency of the operation in the past operation history. 4. The data processing device according to any one of items 1 to 3.   5. The data processing apparatus according to claim 1, wherein the operation determination unit includes a unit that registers the determination level from a plurality of levels for each user. 6.   The operation determining means includes means for registering the determination level from a plurality of levels based on time periods and / or calendar information in which the data processing apparatus is used. 6. The data processing apparatus according to any one of 5 above.   In a data processing device that performs data processing based on a user operation, there is an erroneous operation notification method for notifying an erroneous operation of a user, a user identification step for identifying a user of the data processing device, and the identified use An operation accepting step for accepting an operation from the user, a history accumulating step for accumulating the operation history for each identified user, and the accepted operation based on the accumulated past operation history. An operation determination step for determining whether the received operation is different from the past operation history, and a notification step for notifying the user that the received operation is an erroneous operation. An erroneous operation notification method characterized by the above.   A user identification step for identifying a user of the data processing apparatus, which is a program incorporated in a data processing apparatus that performs data processing based on a user's operation and executed by a central processing unit in the data processing apparatus An operation accepting step for accepting an operation from the identified user, a history accumulating step for accumulating an operation history for each identified user, and the accepting operation based on the accumulated past operation history. An operation determination step for determining whether or not the operation is different from the past operation history, and if the result of the determination is that the operation is different from the past operation history, the received operation is regarded as an erroneous operation and the user is notified. A program for causing the central processing unit to execute a notification step.   A computer-readable recording medium on which the program according to claim 8 is recorded.

Images