JP2007158571A - Data processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent resuming processing by others who are not authenticated, and prevent that secret data are known by others when execution of the processing is interrupted. <P>SOLUTION: When processing is executed, if a trouble occurs and the processing is interrupted, authentication is requested. A user who asks the processing inputs an authentication code, if the authentication code is confirmed and the authentication completes, the interruption reason is notified. The user who receives the notification performs an action for the trouble according to the interruption reason. The user requests authentication again, the processing resumes after the authentication. If others input an authentication code, or input of authentication code is not made; the interruption reason is not notified. The trouble is not released, and the processing is not resumed. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a data processing apparatus that performs processing such as copying and printing on input image data.

  Some data processing apparatuses that process input image data and output it as an image have a confidential printing function. In the confidential printing function, when the user inputs authentication information such as a predetermined password on the operation panel and the authentication information is authenticated, processing of the input image data is executed. As a result, confidential documents can be printed so that others cannot see them.

  By the way, if an abnormality such as a paper jam occurs during the execution of the process, the process is interrupted. In this case, when the abnormality is resolved, the processing is automatically resumed, and an image is printed on the recording sheet and output. If the user himself / herself is beside the data processing apparatus and works to eliminate the abnormality, there is no problem even if the processing is resumed immediately. However, another person who notices an abnormality in the data processing apparatus may perform this operation. When the processing is resumed, there arises a problem that the content of the output image is seen by others or the output recording sheet is taken.

Therefore, as described in Patent Document 1, when the process being executed is interrupted and the reason for the interruption is resolved, the process is not resumed unless authentication information such as a password is input. That is, when the user himself / herself enters authentication information, this is authenticated and the process is resumed. Therefore, the process is not resumed by another person. Moreover, in patent document 1, when the time from the interruption of a process to the cancellation of the reason for the interruption being short, it is determined that the user himself / herself is beside the apparatus, and the process is resumed without inputting authentication information. .
JP 2005-236357 A

  As described above, when the process is interrupted, in principle, authentication information is input, and when it is authenticated, the process is resumed. However, in order to efficiently perform the process, the process is automatically resumed without authentication when the time from the interruption of the process to the cancellation of the reason for the interruption is short.

  In this case, the user himself / herself does not always work to eliminate the reason for interruption, and in some cases, another person may work. That is, there is still a possibility that the output image can be seen by other people, and it cannot be said that it is perfect in terms of security.

  In view of the above, an object of the present invention is to provide a data processing apparatus that prevents confidential data from being known to others by preventing an unauthorized person from resuming the process when the process being executed is interrupted. To do.

  The present invention is a data processing apparatus that executes processing of input image data, and includes authentication means for requesting authentication, and notification means for notifying the reason for interruption when processing of input image data is interrupted. The authentication unit requests authentication when the processing is interrupted, and the notification unit notifies the reason for suspension when the input authentication information is authenticated.

  When image data is input, processing is started. If an error occurs during execution of the process, the process is interrupted. At this time, authentication is required. Then, unless the input authentication information is authenticated, the reason for interruption is not notified.

  Therefore, the user who has requested the process can know the reason for the interruption and can take measures to eliminate the reason for the interruption. On the other hand, even if another person inputs authentication information, this is not authenticated, so the other person cannot know the reason for the interruption. For this reason, others cannot eliminate the reason for the interruption. In addition, since only authentication is requested, it is possible to prevent other people from knowing that the processing is interrupted. That is, since the notification is made after the authentication information is input, it can be understood that the processing is interrupted at this time.

  The reason for interruption to be notified is information on an abnormality that can be handled by the user among the abnormalities that occurred during the process. In this case, the user can eliminate the reason for interruption. However, in the case of an abnormality that cannot be dealt with by the user, the processing is stopped. In this case, since the user cannot eliminate the reason for the interruption, the serviceman must deal with it.

  When the reason for suspension is resolved, the authentication means requests authentication, and when the input authentication information is authenticated, the suspended processing is resumed. Alternatively, when the reason for interruption is resolved, the interrupted process is resumed.

  When the process is resumed, the user has already entered the authentication information, so it can be automatically resumed as it is. However, there is a possibility that the user will leave the data processing apparatus after the reason for the interruption is resolved. For example, when cleaning up after work for elimination, there is a possibility of leaving. Therefore, the processing is not resumed immediately, but is resumed after authentication. As a result, the processing is resumed only when the user is near the data processing apparatus, and thus the output image can be prevented from being touched by others.

  Registration means for registering a plurality of authentication information is provided, and the notification means notifies the reason for interruption when the input authentication information is registered authentication information. In addition to the user who requests processing, authentication information of a person who is permitted to access the output image is registered. If the registered person inputs authentication information when the process is interrupted, the authentication information is authenticated, and the reason for the interruption is notified. Therefore, if it is an authorized person, the process can be resumed. The registration means registers authentication information in advance before image data is input. Alternatively, authentication information may be added to the image data, and when the image data is input, the registration unit may register the input authentication information.

  The authentication means requests authentication when starting the process, and if the authentication information authenticated when starting the process is different from the authentication information authenticated when the process is interrupted, the latter authentication information is registered. If it is the authentication information, the notification means notifies the reason for interruption.

  That is, the registration unit registers a plurality of pieces of authentication information including the user who requests processing. The user himself / herself requests the process, but there are a plurality of persons who can access the image output by this process. Therefore, if registered, the reason for interruption may be notified and the process can be resumed without any problem.

  According to the present invention, when processing confidential data, even if the processing is interrupted, only the user who requests the processing or an authorized person can know the reason for the interruption. Since others cannot know the reason for interruption, the process cannot be resumed. Therefore, it is possible to prevent the output confidential data from touching others' eyes. Therefore, it is possible to realize a data processing apparatus that can perform processing with high security.

  A data processing apparatus of this embodiment is shown in FIG. The data processing apparatus is a digital multi-function peripheral having a copy mode, a printer mode, a scanner mode, and a facsimile mode, and includes an image reading unit 1 that reads a document and inputs image data, an operation unit 2 that receives user input, An image forming unit 3 that prints input image data, a hard disk device 4 that stores image data, a communication unit 5 that performs data communication with an external device, and a FAX modem 7 that communicates with a facsimile device 6 A management unit 8 that stores control information and setting information for the entire apparatus, and a device control unit 9 that controls the entire apparatus.

  The image reading unit 1 functions as a data input unit that inputs image data, and includes an image sensor such as a CCD 1a and a document detection sensor 1b that detects a document set on a document table or an automatic document feeder (ADF). Image data read by the CCD 1 a is output to the image forming unit 3.

  The operation unit 2 includes an input unit 2a composed of various input keys and a display unit 2b such as a liquid crystal display. The operation unit 2 operates the entire apparatus and inputs various settings, and displays the input contents and the operation status of the entire apparatus. Is done.

  The image forming unit 3 includes a local memory 10 that stores input image data, a printing unit 3a including a laser scanning unit, and a paper feeding unit 3b. As the local memory 10, a readable / writable semiconductor memory such as an SDRAM or a flash memory is used. The local memory 10 stores image data by overwriting old image data with new image data. The printing unit 3 a prints an image on a recording sheet supplied from the paper feeding unit 3 b based on the image data stored in the local memory 10.

  In the image forming unit 3, the input image data is stored in the local memory 10. The image data is subjected to image processing such as compression, expansion, and processing by the image processing unit 11 and is stored in the local memory 10. The image data subjected to the image processing is output to the printing unit 3a, the hard disk device 4, or the device control unit 9. That is, the image forming unit 3 functions as a data processing unit.

  The local memory 10 is divided into an area for storing input image data and an area for storing image data for output. Instead of dividing and using one local memory 10, two local memories 10 may be used for input and output, respectively.

  The communication unit 5 is connected to a router, a switching hub, and the like via a LAN cable, and is connected to a network formed by the information processing apparatus 12 such as a personal computer or a server. The network is connected to the Internet via a communication line such as a telephone line network or an optical fiber. The communication unit 5 transmits / receives data to / from the information processing apparatus 12 in the network, and transmits / receives data and electronic mail to / from the external information processing apparatus 12 and the facsimile apparatus 13 through the Internet. The FAX modem 7 is connected to the telephone line network via a telephone line, and performs facsimile communication with the external facsimile apparatus 6. Thus, since image data is input through the communication unit 5 and the FAX modem 7, these also function as data input means.

  When there is an input from the operation unit 2 or a data input from an external device, the device control unit 9 controls each unit based on information stored in the management unit 8 and processes the input data. That is, any one of a copy mode, a printer mode, a scanner mode, and a facsimile mode is executed on the input image data, and the input image data is output in a desired form.

  The hard disk device 4 is storage means for temporarily storing image data. When the image data is stored in the hard disk device 4 by the encryption / decryption unit 3c, the image data is encrypted. When image data is read from the hard disk device 4, the image data is decoded.

  Further, the hard disk device 4 stores management information regarding data processing as data other than image data. The management information includes filing management information, transmission destination management information, and history management information. The filing management information is a list of files in which input image data is stored. The transmission destination management information is a list of transmission destinations in facsimile communication. The history management information is a list of executed processing contents.

  An erasing unit 14 for erasing the image data of the hard disk device 4 is provided. The image data to be erased is data stored in the processing work area. The device control unit 9 controls the operation of the erasing unit 14 after processing and outputting the image data. The erasure means 14 overwrites random data or meaningless data, or erases the data, making the stored image data unreadable and invalidating it so that the original image cannot be reproduced. To do. Note that the erasing unit 14 may also invalidate the image data in the local memory 10 by erasing the old image data by overwriting or erasing the image data. The management information stored in the hard disk device 4 is not deleted unless there is a command from the device control unit 9.

  Next, the operation when each mode is executed will be described. First, in the copy mode, image data of a document read by the image reading unit 1 is output as a copy from the image forming unit 3. Specifically, the image of the original set at the reading position is read by the CCD 1a. The image data output from the CCD 1a is completed as an output image on the local memory 10, and is once transferred to the hard disk device 4 and stored. When there are a plurality of documents, the reading and storing operations are repeated.

  Thereafter, based on the processing contents instructed from the operation unit 2, the image data stored in the hard disk device 4 is sequentially read out at an appropriate timing and sent to the local memory 10. Then, the image data is transferred from the local memory 10 to the printing unit 3a at the timing of writing to the printing unit 3a, and the image is printed on the recording sheet.

  Similarly, when printing a plurality of read image data, the image data is stored in the hard disk device 4 in units of pages as output images, and sent from the hard disk device 4 to the local memory 10 in accordance with the output mode. The image data in the local memory 10 is repeated for the number of output sheets, and transferred to the printing unit 3a in accordance with the writing timing to the printing unit 3a.

  In the printer mode, the image data output from the information processing apparatus 12 is output from the image forming unit 3. That is, the image data from the information processing apparatus 12 is received by the communication unit 5. The device control unit 9 sends the input image data to the local memory 10, develops it as page data as output image data, and temporarily stores it in the hard disk device 4. The image data is sent from the hard disk device 4 to the local memory 10 and transferred to the printing unit 3a in the same manner as in the copy mode, and the image is printed on a recording sheet.

  In the scanner mode, the image data of the document read by the image reading unit 1 is communicated to an arbitrary information processing apparatus 12 through a network. In other words, the image data output from the CCD 1 a is completed as an output image on the local memory 10 and temporarily stored in the hard disk device 4. Then, the image data is sent from the hard disk device 4 to the local memory 10, and the device control unit 9 establishes communication with the transmission destination in the network instructed via the operation unit 2, and the target transmission from the communication unit 5. Send the image data first. Further, the image data is transmitted to the external information processing apparatus 12 and the facsimile apparatus 13 from the network via the network by the communication unit 5. The device control unit 9 transmits image data from the FAX modem 7 to the facsimile apparatus 6 through the telephone line 6 by the same operation in the facsimile mode.

  As described above, when processing the image data input from the data input unit, the image data is temporarily stored in the local memory 10. When the image data is processed and output is completed, the erasing unit 14 erases the image data from the hard disk device 4.

  This data processing apparatus has a confidential processing function for executing processing of image data input from an authenticated user. That is, the device control unit 9 includes an authentication unit that requests authentication, a determination unit that determines whether to execute processing based on input authentication information, and a processing unit that executes processing when authentication information is authenticated. Have

  Whether or not to perform the confidential processing function can be selected. When executing the confidential processing function, an external device such as the information processing apparatus 12 outputs confidential processing information for executing the confidential processing function together with the image data. In the data processing device, when image data to which confidential processing information is added is input, the device control unit 9 stores the image data in the hard disk device 4. Then, the authentication unit requests authentication. As shown in FIG. 2, the authentication unit displays a request screen for requesting input of authentication information on the display unit 2 b of the operation unit 2. Here, the authentication code is an authentication code using numbers. As shown in FIG. 3, the user inputs an authentication code from the input unit 2a.

  The determination means confirms whether the input authentication code matches a pre-registered authentication code. The registered authentication code is stored in the hard disk device 4 and managed by the management unit 8. If the input authentication codes do not match, the image data processing is cancelled. If the input authentication code matches the registered authentication code, the processing means executes printer mode processing on the image data according to the input processing conditions.

  If an abnormality such as a paper jam, out of toner, or out of paper occurs during the processing of image data, the processing is interrupted. Normally, when an abnormality occurs, the device control unit 9 displays the reason for interruption on the display unit 2b and notifies the user. For example, a paper jam is displayed as shown in FIG. When the paper runs out, it is displayed as shown in FIG. The user takes action to eliminate the reason for interruption according to this notification. When the reason for the interruption is resolved, the device control unit 9 resumes the process. An image is printed on a recording sheet and output.

  However, when the confidential processing function is executed, if the reason for the interruption is resolved and the processing is automatically restarted, the contents of the image data may be known to others. Therefore, in order to ensure the security of the image data, the device control unit 9 requests authentication when the processing is interrupted. When the input authentication information is authenticated, the reason for interruption is notified.

  The control operation when such trouble occurs will be described with reference to FIG. During the processing of the input image data, the processing is interrupted due to some abnormality. The device control unit 9 confirms the reason for interruption based on output signals from various sensors. There are two reasons for interruption: a minor abnormality and a serious abnormality. Minor abnormalities are abnormalities such as a paper jam, out of paper, and out of toner, and can be dealt with by the user. A serious abnormality is an abnormality that cannot be dealt with by the user, such as a failure of the device itself, and can only be dealt with by a service person.

  If the device control unit 9 determines that there is a serious abnormality, the device control unit 9 cancels the process being executed and displays a request for a serviceman call. When the device control unit 9 determines that the abnormality is minor, it checks whether the confidential processing function is set. When set, a display requesting input of authentication information as shown in FIG. 7 is performed.

  If not set, normal operation is performed. That is, the reason for interruption is displayed. Then, when the reason for the interruption is dealt with and the reason for the interruption is resolved, the processing is automatically resumed.

  When the user inputs the authentication code, the device control unit 9 confirms whether the authentication code matches the registered authentication code. If they do not match, a second input request is made. When the input authentication code matches, the reason for interruption as shown in FIGS. 4 and 5 is displayed on the display unit 2b to notify the user of the reason for interruption.

  When the authentication code is not correctly input, the device control unit 9 does not notify the reason for interruption. Accordingly, since the person other than the user who requested the image data processing is not authenticated, the reason for the interruption cannot be known. For this reason, no action can be taken to eliminate the reason for the interruption, and the process is not resumed.

  The user himself takes measures to eliminate the reason for the interruption according to the display content. When the device control unit 9 detects that the abnormality has been resolved, the device control unit 9 requests authentication again in order to resume the processing. When the correct authentication code is input, the device control unit 9 restarts the process, prints an image on a recording sheet, and outputs the image. Therefore, only the user himself / herself can resume the process, and others cannot resume the process. As a result, it is possible to prevent sensitive information from being seen by others.

  By the way, when the user who requested the process is not near the data processing apparatus, the authentication code is not input, so the process remains interrupted. In order to prevent such a situation, a user who is allowed to resume the process is set. For example, the authentication information of each user in the same group as the user, a user in the same workplace, or a specific user such as an administrator is registered in advance and managed by the management unit 8.

  When the process being executed is interrupted, an authentication request is made and the user inputs authentication information. When the input authentication information is different from the user's own authentication information, the device control unit 9 checks whether the authentication information matches the registered authentication information. When they match, it is determined that the authentication information is for the specific user, and the reason for interruption is notified. The authorized specific user can restart the process after seeing the reason for the interruption.

  Further, instead of registering the authentication information of a specific user in advance, the user himself / herself may specify a user who is permitted when requesting the processing. That is, when an external device outputs image data, authentication information of a specific user is added. When the authentication information of a specific user is input, the device control unit 9 registers this. Then, when the process is interrupted, it is confirmed whether the input authentication information matches the authentication information of the specific user sent from the external device. When they match, it is determined that the authentication information is for the specific user, and the reason for interruption is notified.

  That is, even if the authentication information authenticated when the process is started is different from the authentication information authenticated when the process is interrupted, the latter authentication information belongs to the authorized specific user. It can be resumed. Therefore, a specific user takes out a recording sheet on which an image is printed, but there is no problem because it is permitted to touch confidential information.

  Since the specific user permitted in this manner is determined in advance, the specific user can input the authentication information instead of the user himself / herself at the time of authentication when starting the process. The device control unit 9 confirms that the input authentication information is registered, and notifies the reason for interruption. The specific user can start the process instead of the user himself / herself.

  In the above-described embodiment, when image data is input and processing is started, input of authentication information is requested. Instead, the external device outputs image data to which authentication information such as an authentication code and a user ID is added. In the data processing apparatus, authentication information is registered in advance. The device control unit 9 confirms the input authentication information when receiving the image data. If it is confirmed that the authentication information is registered, the image data is stored in the hard disk device 4 and enters an execution standby state for processing the image data. When the user himself performs a start operation, the process is started. As a start operation, the operation unit 2 calls and selects stored image data, and operates a start key. The subsequent processing is the same as in the above embodiment, and authentication is requested when the processing is interrupted.

  In this case, input of authentication information is not directly requested at the start of processing, but authentication of the input authentication information is performed. Even if image data is input, the processing is not started immediately. Thereby, although the form is different, the confidential processing function can be executed.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. The data processing apparatus may be a multi-function machine having a copy mode and a facsimile mode, or may be a dedicated machine having only a single mode such as a copier, a printer, or a facsimile machine. In this case, the input image data is processed by copying or facsimile communication.

  The authentication may be based on biometric authentication using fingerprints or irises, or data communication with a terminal device such as an IC card, a contactless IC card, or a mobile phone in which authentication information is stored. Further, the data processing apparatus itself may authenticate using an authentication server connected to the network instead of performing authentication.

1 is a diagram showing a schematic configuration of a multifunction machine that is an embodiment of a data processing apparatus of the present invention. The figure which shows the operation section when certification is requested Figure showing the screen when entering the authentication code Figure showing the screen when the reason for interruption is displayed Figure showing the screen when the reason for interruption is displayed Flow chart of control operation when processing is interrupted Figure showing the screen when requesting authentication when processing is interrupted

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading part 2 Operation part 3 Image formation part 4 Hard disk drive 5 Communication part 8 Management part 9 Device control part

Claims (7)

A data processing apparatus for executing processing of input image data, comprising: authentication means for requesting authentication; and notification means for notifying the reason for suspension when processing of input image data is interrupted, and authentication means Is a data processing device that requests authentication when the processing is interrupted, and the notification means notifies the reason for suspension when the input authentication information is authenticated. The data processing apparatus according to claim 1, wherein the interruption reason to be notified is information related to an abnormality that can be handled by a user among abnormalities that occur during processing. The data processing apparatus according to claim 2, wherein the process is stopped when the abnormality cannot be handled by the user. The authentication means requests authentication when the reason for suspension is resolved, and when the input authentication information is authenticated, the suspended processing is resumed. The data processing apparatus described in 1. 4. The data processing apparatus according to claim 1, wherein when the interruption reason is resolved, the interrupted process is resumed. The registration means for registering a plurality of authentication information is provided, and the notification means notifies the reason for interruption when the input authentication information is the registered authentication information. The data processing apparatus described. The authentication means requests authentication when starting the process, and if the authentication information authenticated when starting the process is different from the authentication information authenticated when the process is interrupted, the latter authentication information is registered. 7. The data processing apparatus according to claim 6, wherein the notification means notifies the reason for interruption when the authentication information is received.

Images