JP2007088878A - Image forming system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming system and an image forming method for establishing the compatibility between confidentiality and supervision of illegitimacy. <P>SOLUTION: The image forming system includes an image reader 17 for reading an image; an output 20 for outputting the image read by the image reader 17; an image log generator 32 for generating an image log of the image read by the image reader 17; and a log management 41 for storing the image log generated by the image log generator 32. Further, the system includes a system control unit 22 for selecting whether or not the image log generator 32 generates the image log. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image forming system and an image forming method, and more particularly to an image forming system and an image forming method capable of generating an image log in order to monitor illegal image formation.

  In conventional copying machines, copying of securities and banknotes is prohibited by dedicated hardware. However, since the prohibition is performed only for the copy function, in a multifunctional copier having functions such as a fax machine, a scanner, and a printer, an illegal image can be obtained by combining a scanner and a printer, for example. There was a possibility of formation. In addition, not only securities and banknotes but also user-specific confidential information such as customer information is copied and taken out. In order to monitor illegal image formation such as these, user authentication is performed before each copy, fax, scanner, and printer function is executed, and the image log and authentication information that is the read image are stored in the copier. Alternatively, a system for identifying a user who has performed unauthorized image formation by accumulating in a file server connected via a network and making it possible to confirm later has begun to be used.

As an example, a rule that specifies whether to permit or disallow an operation based on the security attribute of the target information to be operated and the security attribute of the user requesting the operation is used. It has been proposed to perform processing such as log generation uniquely (see, for example, Patent Document 1).
JP 2005-38371 A

  However, in the above technique, regardless of whether or not the information to be operated by the user to be used is confidential, the process (image log generation) to be performed uniquely is determined. There was a problem that it was impossible to achieve coexistence with monitoring. For example, when a copy function is provided in a public institution such as a library or a convenience store, even if the confidentiality of the data copied by the user is necessary, the image log of all the data is stored and the confidentiality is lost. It will be broken.

  The present invention has been made in view of such problems, and an object thereof is to provide an image forming system and an image forming method capable of achieving both confidentiality and fraud monitoring.

  In order to achieve the above-mentioned object, the present invention provides a reading means for reading an image, an image processing means for processing an image read by the image reading means, and an image for generating an image log of the image read by the image reading means. A log generation unit, a selection reception unit that receives a selection as to whether or not to generate an image log, and an image log generated by the image log generation unit when the selection reception unit receives a selection that the image log is not generated An image forming system is provided that includes a prohibiting unit that prohibits image processing, and a limiting unit that limits processing contents of the image processing unit when the prohibiting unit prohibits generation of an image log.

  As a result, when the selection accepting unit accepts that the image log is generated by the image log generating unit, the image log generating unit generates an image log of the image read by the image reading unit, and the image log is stored in the image log storage unit. Remember. Then, for example, an administrator can check the image log stored in the image log storage unit, thereby enabling unauthorized monitoring. On the other hand, if the selection accepting unit selects not to generate the image log by the image log generating unit, the image log generating unit does not generate the image log of the image read by the image reading unit, thereby obtaining confidentiality. be able to. Therefore, it is possible to achieve both confidentiality and fraud monitoring.

  In the image forming system, user authentication information input means for inputting user authentication information; user authentication information storage means for storing user authentication information in advance; and user authentication information input to the user authentication information input means. A user authentication unit that determines whether the user authentication information is stored in the user authentication information storage unit, and the selection reception unit generates an image log when the determination result of the user authentication unit is negative It is preferable to accept such a selection.

  In the image forming system, the image forming system further includes a detecting unit that detects whether or not a coin kit for inserting coins is mounted, and the selection receiving unit detects the mounting of the coin kit, and the coin receiving unit It is preferable to accept selection of whether or not to generate an image log on condition that a coin has been inserted into the kit.

  In the image forming system, the image forming system further includes special information detecting means for detecting whether or not predetermined special information is included from an image read by the reading means, and the selection receiving means is configured such that the special information detecting means includes the special information detecting means. It is preferable to accept selection of whether to generate an image log on condition that special information is detected.

  In the image forming system, it is preferable that the restriction by the restriction unit is a restriction for prohibiting image output.

  In the image forming system, it is preferable that the image forming system further includes an informing unit for informing the prohibition when the restricting unit prohibits the output of the image.

  To achieve the above object, the present invention generates an image reading step for reading an image, an image processing step for processing the image read in the image reading step, and an image log of the image read in the image reading step. An image log generation step; a selection reception step for receiving a selection as to whether or not to generate an image log; and a selection not to generate an image log in the selection reception step. Providing an image forming method comprising: a prohibiting step for prohibiting generation; and a limiting step for limiting processing contents by the image processing step when the prohibiting step prohibits generation of an image log. .

Next, an embodiment as the best mode for carrying out the invention will be described.
“First Embodiment”
As shown in FIG. 1, an image forming system 11 according to the first embodiment includes a multifunction machine 12 (hereinafter referred to as a multifunction machine 12) having a copy function and a fax function and a scanner function, and the Internet or a LAN. A file server (image log server) 13 is communicably connected to the multifunction machine 12 via a network.

  The multifunction machine 12 includes a UI unit 15 that is a user interface such as a touch panel capable of performing notification including operation display by the user and a UI, and a UI control unit 16 that controls display of the UI unit 15. An image reading unit 17 composed of a scanner that reads an image of an object to be read such as a document brought in by the user, an input control unit 18 that controls the image reading unit 17, and a printer that prints an image read by the image reading unit 17 on paper. , An output control unit 21 that controls the output unit 20, a UI control unit 16, an input control unit 18, and a system control unit 22 connected to the output control unit 21.

  In addition, the multifunction machine 12 is a network communication unit 24 that is a network interface for connecting the system control unit 22 and the file server 13, and a user who manages the user based on information input from the user via the UI unit 15. The management unit 25, an authentication unit 26 that authenticates a user based on information input from the user via the UI unit 15, and a user authentication database 27 that stores data for user authentication.

  Furthermore, the multifunction device 12 restricts functions based on information input from the user via the UI unit 15, thereby restricting a part of the image read by the image reading unit 17 when the output unit 20 outputs the image. A function restriction information management unit 30 is provided, and a function restriction information database 31 in which setting data for function restriction is held.

  In addition, the multifunction machine 12 includes an image log generation unit 32 that generates an image log of an image read by the image reading unit 17, and an image log generation attribute database 34 that stores image log generation attributes for generating an image log. The image processing unit 33 performs image processing on an image to be output by the output unit 20.

  Note that the above-described multifunction machine 12 has a coin kit 35 in which a coin is inserted and the amount of money can be detected (when used by an unspecified number of users) and a case where it is not attached (such as in a company). Used by users within a specified range).

  The file server 13 stores the image log generated by the network communication unit 40 that is a network interface connected to the multifunction device 12 and the image log generation unit 32 of the multifunction device 12, and the stored image log is confirmed by the confirmer. And a log management unit (image log storage means) 41 that outputs the data in a confirmable manner.

  In the image forming system 11 according to the first embodiment described above, the system control unit 22 of the multifunction machine 12 confirms whether or not the coin kit 35 is attached as shown in FIG. 2 (step SA1). If it is mounted, the available functions are displayed on the UI unit 15 via the UI control unit 16 (step SA2). When a function is selected by the user (step SA3), the UI control unit 16 requests the user management unit 25 to determine whether or not user authentication has already been performed (step SA4).

  Here, for example, when an ID card holding an identification number for identifying the user with respect to another user is inserted in a card reader (not shown), the user management unit 25 reads the identification number and sets the identification number. The data is output to the authentication unit 26. Then, the authentication unit 26 determines whether or not the same number as the identification number is stored from the information stored in the user authentication database 27 in advance, and the one that matches the identification number of the ID card is stored in the user authentication database 27. If it is in the identified identification number, it is determined that it has been authenticated and is output to the user management unit 25; The user management unit 25 outputs the result of whether or not the authentication has been completed to the UI control unit 16. Alternatively, when a user ID, a password, or the like is input to the UI unit 15, the user may be authenticated by collating it with information stored in the user authentication database 27.

  In step SA4, when the user management unit 25 determines that the user has been authenticated, the system control unit 22 identifies that the user is a registered user, and the image read by the image reading unit 17 with this authentication. On the other hand, the image log generation mode for the registered user is selected (step SA5).

  That is, the system control unit 22 reads preset image log generation setting information for registered users from the image log generation attribute database 34 (step SA6), and displays a function setting screen on which all unrestricted functions can be selected. This is displayed on the UI unit 15 via the control unit 16 (step SA7).

  In response to this display, when the user selects a function with the UI unit 15 and instructs an operation start instruction, the UI control unit 16 issues an operation start instruction to the system control unit 22. When the function set in the UI unit 15 by the user is, for example, a copy function, the system control unit 22 reads an image of a document by the image reading unit 17 (image reading step), and then via the output control unit 21. The image data is formed on the paper by the output unit 20 without any restriction by the image processing unit 33, and then the image log is generated based on the image log generation setting information for the registered user. (Image log generation step).

  When the image log generation unit 32 notifies the system control unit 22 that the image log generation is completed, the system control unit 22 uses the image log generated by the image log generation unit 32, for example, the operation date and time, and the multifunction machine 12 that has operated. Are stored in the log management unit 41 of the file server 13 in association with the identification information, the operation content, and the authentication result of the authentication unit 26 (image log storage step). Therefore, with respect to the image forming process performed in this way, the log manager 41 can confirm the image read by each user's operation in the log management unit 41, and fraud such as taking out confidential information. Monitoring can be performed, and a fraud suppression effect can be obtained.

  In step SA4, when the user management unit 25 determines that the user has not been authenticated, the UI control unit 16 identifies whether the user is an anonymous user and inputs whether or not to permit recording of the image log. A prompting display is displayed on the UI unit 15 (step SA8). When a user's decision to permit recording of an image log is input to the UI unit 15 by the user (step SA9), the system control unit 22 applies an anonymous user image to the image read by the image reading unit 17. An image log generation mode is selected (step SA10).

  That is, the system control unit 22 reads preset image log generation setting information for anonymous users from the image log generation attribute database 34 (step SA6), and displays a function setting screen on which all unrestricted functions can be selected. This is displayed on the UI unit 15 via the control unit 16 (step SA7).

  In response to this display, when the function set in the UI unit 15 by the user is, for example, a copy function, when the image reading unit 17 reads an image of a document (image reading step), the system control unit 22 Is formed on the sheet by the output unit 20 without any restriction, and thereafter, an image log is generated by the image log generation unit 32 based on the image log generation setting information for the anonymous user (image log generation step). .

  When the image log generation unit 32 notifies the system control unit 22 that the image log generation is completed, the system control unit 22 uses the image log generated by the image log generation unit 32, for example, the operation date and time, and the multifunction machine 12 that has operated. Are stored in the log management unit 41 of the file server 13 in association with the identification information and the operation content (image log storage step). Therefore, with respect to the image forming process performed in this way, the log manager 41 can confirm the image read by each user's operation in the log management unit 41, and fraud such as taking out confidential information. Monitoring can be performed, and a fraud suppression effect can be obtained.

  On the other hand, in order to ensure confidentiality in step SA9 described above in which the user selects in the UI unit 15 whether to generate an image log for an image read by the image reading unit 17 without authentication by the authentication unit 26. When a determination that the recording of the image log is not permitted is input to the UI unit 15 by the user, the system control unit 22 outputs the image log to the image log generation unit 32 for the image read by the image reading unit 17. The non-generated image log mode for anonymous users is selected (step SA11).

  Then, the UI control unit 16 reads out the function restriction information in the image log non-generation mode preset and stored in the function restriction information database 31 via the function restriction information management unit 30 (step SA12). The function restriction information is set in advance according to the situation where the multifunction machine 12 is installed.

  Here, the function restriction information is, for example, information that prohibits functions such as a copy function and a scan function, information that prohibits copying and scanning at a higher resolution than a specified resolution, and when color copy is available. What prohibits color copying, what embeds a prohibited copy pattern in the image processing unit 33 in the output image of the output unit 20 such as copy and scan, and the operation date and time and the multi-function machine operated in the output image of the output unit 20 such as copy and scan 12 pieces of identification information are embedded by the image processing unit 33.

  Furthermore, when the image processing unit 33 detects a specific attribute in the information included in the image read by the image reading unit 17, for example, when the confidential expiration date information is detected and the operated date and time is within the expiration date, the copy function and Functions such as the scan function itself are prohibited. In addition, a specific character string, pattern, or the like indicating at least one of confidential information unsuitable for output and legally restricted copying (for example, banknotes, securities) When detected by the image processing unit 33, functions such as a copy function and a scan function are prohibited. That is, when it is selected that image log generation is not performed, if the system control unit 22 includes information indicating that it is not suitable for output to an image read by the image reading unit 17, the system control unit 22 The output by the output unit 20 is prohibited. In this case, functions such as a copy function and a scan function may be executed on condition that a log image is generated. It should be noted that some function restrictions may be provided at the time of generating the image log for the anonymous user as compared to the time of generating the image log for the registered user.

  Then, the UI control unit 16 determines whether or not the function can be used from the function restriction information (step SA13), and when the function can be used, the function can be selected from the restricted functions based on the function restriction information. A function setting screen is displayed on the UI unit 15 (step SA14). For this display, when the function set in the UI unit 15 by the user is, for example, a copy function, when the image is read by the image reading unit 17, the system control unit 22 is set in advance as necessary. Restrictions (resolution reduction conversion, embedding of prohibited copy patterns, embedding of operation date and time, etc.) are added by the image processing unit 33 and formed on the paper by the output unit 20. Therefore, with respect to the image forming process performed in this way, the confirmer cannot confirm the image at the log management unit 41, and confidentiality can be ensured.

  On the other hand, if the function cannot be used in step SA13, the UI unit 15 is displayed to notify the user that the function cannot be used, that is, the output from the output unit 20 is prohibited (step SA15). .

  When the coin kit 35 is mounted in step SA1 described above, the system control unit 22 acquires ON / OFF (valid / invalid) of the service key (step SA16). Here, the service key is managed by an administrator or a service person. When the service key is turned on at the time of maintenance or the like, the multifunction machine 12 can be operated regardless of coin insertion.

  The system control unit 22 notifies the UI control unit 16 of the result of step SA16. Then, when the service key is turned on, the UI control unit 16 displays a user authentication screen on the UI unit 15 (step SA17). According to this display, for example, when an ID card is inserted into a card reader (not shown) by the user, the user management unit 25 reads the identification number and outputs the identification number to the authentication unit 26. Then, the authentication unit 26 determines whether or not the same number as the identification number is stored from the information stored in the user authentication database 27, and the one that matches the identification number of the ID card is stored in the user authentication database 27. If the identification number is found, it is determined that the authentication is successful. Wait until it can be determined that the authentication is successful (step SA18). Alternatively, when a user ID, a password, or the like is input to the UI unit 15, the user may be authenticated by collating it with information stored in the user authentication database 27. When it is determined that the authentication is successful, a signal indicating that is output to the user management unit 25. The user management unit 25 outputs this authentication success to the UI control unit 16. Then, the UI control unit 16 executes step SA5 and subsequent steps.

  If the result of step SA16 notified from the system control unit 22 to the UI control unit 16 is that the service key is turned off, the system waits for coins to be inserted into the coin kit 35 (step SA19). When a coin is inserted into 35, the system control unit 22 outputs a signal to that effect to the UI control unit 16. In response to this, the UI control unit 16 executes step SA8 and subsequent steps.

  According to the first embodiment described above, the system control unit 22 for selecting whether or not to perform image log generation by the image log generation unit 32 is provided, and the system control unit 22 is provided with the image log generation unit. When the image log generation by the image reading unit 17 is selected, the image log generation unit 32 generates an image log of the image read by the image reading unit 17, and the image log is stored in the log management unit 41 of the file server 13 connected to the network. Remember. Then, since the confirmer can check the stored image log, the log management unit 41 can perform fraud monitoring. On the other hand, when the system control unit 22 selects not to generate the image log by the image log generation unit 32, the image log generation unit 32 does not generate the image log of the image read by the image reading unit 17, Confidentiality can be obtained. Therefore, it is possible to achieve both confidentiality and fraud monitoring.

  If the system control unit 22 selects not to generate an image log for the image read by the image reading unit 17, the function restriction information management unit 30 places some restrictions when the output unit 20 outputs the image. Since it is provided, fraud can be prevented.

  Further, the system control unit 22 causes the image log generation unit 32 to generate an image log for the image read by the image reading unit 17 with the authentication of the authentication unit 26, and associates the image log with the authentication. Since it is stored in the log management unit 41 of the file server 13 connected to the network, fraud monitoring can be performed without providing some restrictions when the output unit 20 outputs this image. On the other hand, for an image read by the image reading unit without authentication by the authentication unit 26, the system control unit 22 causes the user to select whether to generate an image log using the UI unit 15. If the user generates an image log, fraud monitoring can be performed without any restriction when the image is output by the output unit 20 because the image log is generated. Is not generated, the function restriction information management unit 30 provides some restrictions when the output unit 20 outputs an image, so that fraud can be prevented.

  In addition, when the system control unit 22 selects not to generate an image log, when the image read by the image reading unit 17 includes, for example, information indicating fraud, the system control unit 22 The output of the image by the output unit 20 is prohibited. Therefore, fraud can be surely prevented.

  At this time, since the UI unit 15 notifies the prohibition by the image output unit 20, the user can recognize the prohibition of the output and can make a good transition to the operation of selecting again.

“Second Embodiment”
The image forming system 11 according to the second embodiment is different from the first embodiment in the control contents, and this difference will be mainly described below. In addition, the same code | symbol is attached | subjected to the part similar to 1st Embodiment, and the description is abbreviate | omitted.

  In the second embodiment, as shown in FIG. 3, when the UI control unit 16 instructs the system control unit 22 to start a scan process or a copy process using the function setting information set by the UI unit 15 (step S1). SB1) The system control unit 22 causes the image reading unit 17 to read the image of the document via the input control unit 18 for the scanning process or the copying process (step SB2). Then, the system control unit 22 determines whether or not the image log generation mode is set based on, for example, a user setting in the UI unit 15 (step SB3).

  On the other hand, in the image log generation mode, the system control unit 22 generates an image log for the image read by the image reading unit 17 by the image log generation unit 32 (step SB4) and outputs it during the copy process. The image data is formed on the paper by the output unit 20 via the control unit 21, while the image data is output as electronic data during the scanning process (step SB 5). It is determined whether or not there are more pages to be processed (step SB6). If there are more pages, the process returns to step SB2 to repeat the process until the image is completed.

  If it is determined in step SB3 that the image log generation mode is not set, the system control unit 22 determines whether or not the function restriction based on the attribute detection of the processing target image read by the image reading unit 17 is set in advance. Determination is made (step SB7). The system control unit 22 proceeds to step SB5 when the function limitation by attribute detection is not set in advance, and forms the image data on the paper by the output unit 20 via the output control unit 21 during the copy process. During the scanning process, this image data is output as electronic data.

  If it is determined in step SB7 that function restriction by attribute detection is set in advance, the system control unit 22 causes the image processing unit 33 to perform image attribute extraction processing (step SB8). In this image attribute extraction processing, for example, information such as a specific character string and pattern indicating confidentiality is extracted from the image data. Then, the system control unit 22 determines whether or not information indicating confidentiality has been extracted (step SB9). If information indicating confidentiality is not extracted, the process proceeds to step SB5, where information indicating confidentiality is extracted. If so, it is determined whether or not the restriction corresponding to the extracted information is forbidden for the entire process (step SB10). When the entire processing is prohibited, the system control unit 22 causes the UI unit 15 to notify the user that the processing of the target page is stopped via the UI control unit 16 and deletes the image being processed (step SB11). Proceed to SB6.

  If it is determined in step SB10 that the entire process is not prohibited, the system control unit 22 confirms that the process without the image log generation of the target page is prohibited by the UI unit 15 via the UI control unit 16. The user is notified and prompted to select whether or not to generate an image log (step SB12). Next, the system control unit 22 determines whether image log generation has been selected by the UI unit 15 (step SB13). If image log generation has not been selected, the system control unit 22 proceeds to step SB11 and generates image log. Is selected, an image log is generated by the image log generation unit 32 for the image read by the image reading unit 17, and this image is output via the output control unit 21 during the copy process. The data is formed on the paper by the output unit 20, while the image data is output as electronic data during the scanning process.

  If it is determined in step SB6 that there is no page to be processed, the presence / absence of an image log generated by the image log generation unit 32 is determined (step SB14). The information is transferred to the log management unit 41 of the file server 13 and stored in association with the operation information such as the identification information and operation content of the operated multifunction machine 12 (step SB15).

  Also in the second embodiment described above, as in the first embodiment, when the system control unit 22 selects the image log generation by the image log generation unit 32, the image read by the image reading unit 17 is displayed. The log is generated by the image log generation unit 32 and the image log is stored in the log management unit 41 of the file server 13 connected to the network. Then, since the confirmer can check the stored image log, the log management unit 41 can perform fraud monitoring. On the other hand, when the system control unit 22 selects not to generate the image log by the image log generation unit 32, the image log generation unit 32 does not generate the image log of the image read by the image reading unit 17, Confidentiality can be obtained. Therefore, it is possible to achieve both confidentiality and fraud monitoring.

  In addition, when the system control unit 22 selects not to generate an image log, when the image read by the image reading unit 17 includes information indicating that, for example, confidential information is taken out illegally The system control unit 22 prohibits the output of the image by the output unit 20. Therefore, fraud can be surely prevented.

1 is a block diagram illustrating an image processing system according to a first embodiment of the present invention. It is a flowchart which shows the control content of the image processing system which concerns on 1st Embodiment of this invention. It is a flowchart which shows the control content of the image processing system which concerns on 2nd Embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... Image forming system, 12 ... Multi-function device (multifunction device), 15 ... UI part, 16 ... UI control part, 17 ... Image reading part, 20 ... Output part, 22 ... System control part, 26 ... Authentication part, 30 ... function restriction information management unit, 32 ... image log generation unit, 41 ... log management unit.

Claims (7)

Reading means to read the image,
Image processing means for processing an image read by the image reading means;
Image log generation means for generating an image log of the image read by the image reading means;
Selection accepting means for accepting selection of whether to generate an image log;
A prohibiting unit for prohibiting image log generation by the image log generating unit when the selection receiving unit receives a selection not to generate an image log;
An image forming system comprising: a restricting unit that restricts processing contents of the image processing unit when the prohibiting unit prohibits generation of an image log. The image forming system according to claim 1.
User authentication information input means for inputting user authentication information;
User authentication information storage means in which user authentication information is stored in advance;
User authentication means for determining whether or not user authentication information input to the user authentication information input means is stored in the user authentication information storage means;
The image forming system according to claim 1, wherein the selection receiving unit receives a selection as to whether or not to generate an image log when the determination result of the user authentication unit is negative. The image forming system according to claim 1.
A detecting means for detecting whether or not a coin kit for inserting coins is mounted;
The selection receiving means receives selection of whether or not to generate an image log on condition that the detection means detects attachment of the coin kit and a coin is inserted into the coin kit. An image forming system. The image forming system according to claim 1.
Comprising special information detection means for detecting whether or not predetermined special information is included from the image read by the reading means;
The image forming system according to claim 1, wherein the selection receiving unit receives a selection as to whether or not to generate an image log on condition that the special information detecting unit detects the special information. The image forming system according to claim 1,
The image forming system according to claim 1, wherein the restriction by the restriction means is a restriction for prohibiting image output. The image forming system according to claim 5.
An image forming system comprising: an informing means for informing the prohibition when the restricting means prohibits image output. An image reading step for reading an image;
An image processing step for processing the image read in the image reading step;
An image log generating step for generating an image log of the image read in the image reading step;
A selection accepting step for accepting selection of whether to generate an image log;
A prohibiting step of prohibiting image log generation by the image log generating step when receiving a selection not to generate an image log in the selection receiving step;
An image forming method comprising: a restricting step of restricting a processing content of the image processing step when the prohibiting step prohibits generation of an image log.

Images