JP2008259114A - Image processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform printing so as to prevent personal information from being leaked, when a manager copies an information medium. <P>SOLUTION: An image reading section 2 reads an information medium and inputs an image. A discrimination section 64 calculates the size of the information medium from the input image and discriminates a type of the information medium. According to the information medium, the position of a particular image representing personal information is determined. A region determining section 63 specifies the particular image for the information medium and determines the position of a specific region, in which the particular image exist in the input image. When confirming that copying is instructed from a manager, a control section 7 sets the specific region to be masked, according to the security level of the particular image. The control section 7 performs image processings for masking the set specific region. An image forming section 3 prints an image, in a state where the particular image is concealed. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an image processing apparatus having a protection function for a copy of an information medium such as a credit card or a license in which personal information is described.

  Personal information such as a card number, a person's face photo, and a name is written on an information medium such as a credit card, a driver's license, an insurance card, or a passport. Such an information medium is also used to prove an individual's identity. For example, an information medium is copied and a unique image representing personal information is printed on a recording sheet. This recording sheet is used for identification.

  The specific image is recorded as it is on the recording sheet copied from the information medium. Therefore, if a third party obtains this recording sheet, personal information may be leaked and personal information may be misused.

  Patent Document 1 describes a holder capable of masking personal information described in an information medium. When the information medium placed in the holder is copied, the specific image at a predetermined position is hidden and printed.

On the other hand, in an image processing apparatus that copies an information medium, as described in Patent Document 2, it is determined whether the document is a copy-restricted document, and the copy of the document is restricted. In this case, the copy-restricted document is a special document such as a document on which an image is printed with magnetic ink or a document on which a resonance circuit is formed.
JP 2001-231619 A JP 2004-245962 A

  However, in the above-described image processing apparatus, it is not possible to determine that an information medium such as a credit card is a copy-restricted document. Therefore, the specific image read from the surface of the information medium is copied as it is. That is, the image processing apparatus does not have a protect function for preventing leakage of personal information when copying an information medium. In order to prevent unnecessary personal information from being copied, the holder as described above must be used, and the use of the holder causes trouble for the user.

  On the other hand, if the administrator has the authority to output an image without restriction, when the administrator copies the information medium, the unique image on the information medium is copied without restriction. However, personal information may be leaked from the copied recording sheet depending on the method of use.

  In view of the above, an object of the present invention is to provide an image processing apparatus capable of preventing leakage of personal information by preventing a specific image representing personal information from being printed even when an administrator copies an information medium. To do.

  The present invention includes an input unit that inputs an image having a specific image from an information medium, a determination unit that determines the type of the information medium, an area determination unit that determines a specific area where the specific image exists based on the type of the information medium, And a control unit that performs image processing for selectively masking a specific area.

  The unique image in the information medium is an image representing confidential information such as personal information. If a copy process or the like is performed on the specific area where the unique image exists without any limitation, the unique image is output and confidential information is leaked. Therefore, by selectively masking a specific area, a part of the specific image can be hidden and output. Thereby, important confidential information does not appear in the output image, and the confidential information does not leak.

  Even if the output of the image is permitted without limitation, the control unit sets a range for masking the specific area and outputs an image in which the set specific area is masked. That is, the administrator has the authority to output images without restriction. The control unit selectively masks the specific area when instructed by the administrator to output the information medium image. Even an administrator limits the output of an image by masking a specific area. This can improve the security for the output image.

  A determination unit that determines the type of the information medium is provided, and the region determination unit determines the specific region based on the type of the information medium. The specific area is determined according to the type of information medium. Therefore, when the type of the information medium is determined, the area determination unit can specify the specific area. Then, the position of the specific area in the input image is determined. The control unit masks a specific area in the input image.

  The determination unit acquires information regarding the size of the information medium and determines the type of the information medium. The size varies depending on the type of information medium. Therefore, the determination unit acquires the information regarding the size by detecting the size of the information medium from the input image, or acquires the information regarding the size by directly inputting the size.

  A display unit that displays the specific area is provided, the specific area displayed on the display unit can be changed, and the control unit masks the changed specific area. The display unit displays the input image. This image includes a unique image. In some cases, the specific area determined by the area determining unit is shifted from the position of the input specific image. Therefore, the specific image is surely hidden by changing the displayed specific area, such as moving or scaling.

  The area determining unit determines a specific area to be masked according to the security level. Based on this, the control unit masks a specific area for all the specific images in the information medium, or masks only a specific area for a part of the specific images. The higher the security level, the more specific areas are masked and the leakage of personal information is strictly prevented. When the security level is low, only some specific areas are masked, and disclosure of unimportant personal information is allowed.

  The security level can be changed after the image is input. When the security level is changed, the area determination unit changes the specific area to be masked. The security level needs to be changed according to the purpose of using the personal information described in the information medium. Since the security level can be changed in this way, only necessary personal information can be obtained.

  The security level of the specific image is set according to the type of the information medium, and the area determination unit determines the specific area according to the security level of the specific image. The importance of the personal information described in the information medium differs depending on the type of the information medium. Therefore, a security level is preset for each unique image. The area determination unit determines a specific area to be masked and a specific area that does not need to be masked based on the security level of the specific image.

  An authentication unit for authenticating a user, and when the region determination unit is a user other than the administrator, the specific region is determined based on the higher security level of the user security level and the security level of the specific image. Decide. If the user is not an administrator, the area determination unit determines a specific area to be masked according to the security level of the user. If the user has a high security level, the specific area to be masked is reduced. If the user has a low security level, the specific area to be masked is increased to prevent leakage of unnecessary personal information.

  By considering the security level of the user and the security level of the specific image, the specific area can be determined strictly. The area determination unit determines the specific area based on the higher security level of the user security level and the security level of the specific image. Thus, the specific image for the necessary personal information is not hidden, the specific image for the unnecessary personal information is hidden, and personal information can be prevented from leaking unnecessarily.

  When executing the image processing for masking the specific area, the control unit prohibits creation of log information for this processing. In addition, when the image processing for masking the specific area is executed, the control unit prohibits the storage of the image having the input unique image. When this image processing is executed, an image including a specific image is input. When creating log information, an input specific image may be stored as log information. In the filing for saving images, all input images are saved. In this way, storing the specific image may lead to leakage of personal information. Therefore, leakage of personal information can be prevented by prohibiting the creation of log information and filing.

  Here, the information medium is a license or a card having an image representing personal information as a unique image on the surface. The input unit reads the surface of the information medium and inputs an image. When the information medium has images on the front and back surfaces, the input unit reads both surfaces of the information medium and inputs the images. Then, the control unit combines the images on both sides and outputs the two images side by side.

  According to the present invention, when outputting an image including personal information written on an information medium by copying the information medium or the like according to an instruction from an administrator, the specific area for the specific image is masked and the image is output. As a result, the unique image is output in a hidden state, so that confidential information such as personal information cannot be visually recognized. By selectively masking a specific area including important confidential information, leakage of important confidential information can be prevented regardless of the method of using the output image.

  An image processing apparatus of this embodiment is shown in FIG. The image processing apparatus is a multifunction machine that executes a copy mode, a print mode, a scanner mode, and a facsimile mode. The image processing apparatus 2 reads an original and inputs image data into a cabinet 1 and processes the image data. The image forming unit 3 for printing, the storage unit 4 for storing the image data, the communication unit 5 for communicating with the external device, the operation panel 6 for input operation, and the processing unit are controlled, and the image according to the mode And a control unit 7 that executes data processing. The processing unit performs processing to output input image data, and includes the image forming unit 3, the storage unit 4, and the communication unit 5.

  As shown in FIG. 2, the image reading unit 2 is disposed above the cabinet 1 and includes a scanner unit 10 and an automatic document feeder 11. The automatic document feeder 11 is provided above the scanner unit 10 and automatically conveys a document in order to read image data of the document.

  A document table 12 made of platen glass is provided on the upper surface of the cabinet 1, and a document cover 13 that covers the document table 12 is provided. The automatic document feeder 11 is integrally mounted on the document cover 13. The document cover 13 can be freely opened and closed. When the document cover 13 is in a closed state, the document is conveyed by the automatic document conveyance unit 11. When the document cover 13 is open, the document can be placed on the document table 12. Opening / closing of the document cover 13 is detected by a cover opening / closing sensor. A document size detection sensor for detecting the size of the document placed on the document table 12 is also provided.

  When a document is set on the document set tray 15 of the automatic document feeder 11, the document detection sensor 16 detects that the document has been set. Then, on the operation panel 6, copy conditions such as the size of the recording sheet to be printed and the scaling ratio are input. Thereafter, reading of the image of the document is started by an input operation of the start key.

  In the automatic document feeder 11, each document on the document set tray 15 is pulled out one by one by the pickup roller 17. The document passes through between the separating plate 18 and the transport roller 19 and is sent to the document table 12. The document is transported in the sub-scanning direction on the document table 12 and discharged to the document discharge tray 20. The document discharge tray 20 is provided with a document discharge sensor to detect the presence or absence of a document on the document discharge tray 20.

  The scanner unit 10 includes a first reading unit 21 and a second reading unit 22. A reading area is formed on one side of the document table 12 and passes through the reading area when the document is conveyed on the document table 12. Below the reading area, the first scanning unit 23 of the first reading unit 21 is positioned, and the surface (lower side) of the document is read.

  When the document is transported to the document table 12 by the automatic document transport unit 11, the first scanning unit 23 is moved to the reading position and positioned, and the second scanning unit 24 is also positioned at a predetermined position. The surface of the document is irradiated from below the document table 12 by the exposure lamp of the first scanning unit 23. Reflected light from the document is guided to the imaging lens 25 by the respective reflection mirrors of the first and second scanning units 23 and 24. The reflected light of the document is condensed on the CCD 26 by the imaging lens 25. An image on the surface of the document is formed on the CCD 26. As a result, the image on the surface of the conveyed document is read.

  Further, the second reading unit 22 reads the back surface (upper side surface) of the document. The second reading unit 22 is disposed above the document table 12 and has an LED that irradiates the back side of the document, an exposure lamp array having a fluorescent lamp, a self-focal lens array that collects reflected light of the document for each pixel, and a cell. A contact image sensor (CIS) that photoelectrically converts reflected light from a document received through a fock lens array and outputs an analog image signal is provided. As a result, the image on the back side of the conveyed document is read.

  When a document is placed on the document table 12, the first reading unit 21 reads an image on the surface of the document. The first and second scanning units 23 and 24 move in the sub-scanning direction while maintaining a predetermined speed relationship with each other. The document on the document table 12 is exposed by the first scanning unit 23, and reflected light from the document is guided to the imaging lens 25 by the first and second scanning units 23 and 24. An image of the original is formed on the CCD 26 by the imaging lens 25.

  When the image on one or both sides of the document is read in this way, the image data on one or both sides of the document is input to the control unit 7. The control unit 7 includes an image processing unit, and performs various types of image processing on the image data by the image processing unit. This image data is output to the image forming unit 3.

  The image forming unit 3 prints a color image or a monochrome image on a recording sheet based on the input image data. The image forming unit 3 includes a laser scanning unit 30, four image stations 31, an intermediate transfer belt unit 32, a fixing device 33, and a conveying device 34.

  Each image station 31 forms a color image corresponding to each color of black, cyan, magenta, and yellow. Each image station 31 includes a photosensitive drum 35, a developing device 36, a charging device 37, a cleaning device 38, and a charge eliminating device (not shown).

  The photosensitive drum 35 is rotationally driven in one direction, the cleaning device 38 cleans the residual toner on the surface of the photosensitive drum 35, and the neutralization device neutralizes the surface of the photosensitive drum 35. The charging device 37 uniformly charges the surface of the photosensitive drum 35.

  The laser scanning unit 30 modulates laser light based on image data input from an image reading unit or the like, and repeatedly scans the surface of the photosensitive drum 35 in the main scanning direction with this laser light, thereby generating an electrostatic latent image. It is formed on the surface of the photosensitive drum 35. The developing device 36 supplies toner to the surface of the photosensitive drum 35 to develop the electrostatic latent image, and forms a toner image on the surface of the photosensitive drum 35.

  The intermediate transfer belt unit 32 includes an intermediate transfer belt 40, an intermediate transfer roller 41, a transfer belt cleaning device 42, and a tension mechanism 43. The intermediate transfer belt 41 is disposed above each photosensitive drum 35, is wound around the driving roller 44 and the driven roller 45, and rotates in the direction of arrow B.

  The intermediate transfer roller 41 is disposed to face the photosensitive drum 35 with the intermediate transfer belt 40 interposed therebetween, and a transfer bias voltage is applied thereto. The toner image on the surface of the photosensitive drum 35 is transferred to the intermediate transfer belt 40 by applying a voltage having a polarity opposite to that of the toner by the intermediate transfer roller 41. The toner images of the respective colors are laminated on the intermediate transfer belt 40, and a combined multi-color toner image is formed.

  The transfer roller 41 is disposed in pressure contact with the intermediate transfer belt 40, and a voltage having a polarity opposite to that of the toner is applied. The toner image on the intermediate transfer belt 40 is transferred by the transfer roller 46 to a recording sheet conveyed between the transfer roller 46 and the intermediate transfer belt 40. The toner remaining on the intermediate transfer belt 40 is removed by the transfer belt cleaning device 42.

  The toner image transferred to the recording sheet is heated and pressurized by the fixing device 33 and fixed on the recording sheet, and an image is formed on the recording sheet. The recording sheet on which the image is printed in this manner is discharged to a discharge tray 50 provided in the upper part of the cabinet 1.

  The transport device 34 transports the recording sheet from the sheet cassette 51 or the manual feed tray 52 along the transport path 53. The conveyance path 53 passes between the intermediate transfer belt 40 and the transfer roller 46, passes through the fixing device 33, and reaches the discharge tray 50.

  The transport device 34 includes a pickup roller 54, a transport roller 55, a registration roller 56, and a discharge roller 57. The recording sheets in the sheet cassette 51 or the manual feed tray 52 are sent one by one to the transport path 53, transported through the transport path 53, and discharged to the discharge tray 50. During the conveyance of the recording sheet, an image is printed on the recording sheet. In addition, a switchback conveyance path 58 is provided for duplex printing. The recording sheet after fixing passes through the switchback conveyance path 58 by the conveyance roller 55 and is conveyed between the intermediate transfer belt 40 and the transfer roller 46. The recording sheet printed on both sides passes through the fixing device 33 and is discharged to the discharge tray 50.

  The operation panel 6 is provided in the scanner unit 10 and includes an operation unit 60 and a display unit 61. The operation unit 60 includes various operation keys. The display unit 61 includes a liquid crystal display and is a touch panel. Touch keys are formed in the operation screen displayed on the display unit 61, and these also function as operation keys.

  The communication unit 5 includes a communication interface, and the communication interface is connected to a network such as a LAN or a WAN. A plurality of external devices are connected to the network. The external device is another image processing device, an information processing device such as a personal computer, or a server. The network is connected to the Internet from a router through a communication line such as a telephone line or an optical fiber. The communication unit 5 can communicate with an external device through a network using a predetermined communication protocol. The image processing apparatuses can also communicate with each other. Communication within the network may be wired or wireless. An image processing system is formed by these image processing devices and external devices.

  The communication unit 5 includes a modem device. A telephone line is connected to the modem device. The image processing apparatus can perform facsimile communication. The image processing apparatus can also perform data communication by Internet facsimile through a network. Furthermore, the communication unit 5 includes a communication terminal and a communication card for wireless communication. A storage medium such as a USB memory or an IC card is connected to the communication terminal, and the communication unit 5 transmits / receives data to / from the storage medium. In addition, data is transmitted and received by wireless communication with a communication terminal such as a mobile phone or PDA through a communication card.

  The storage unit 4 includes a hard disk device. The storage unit 4 stores image data input from the image reading unit 2 or image data input from the communication unit 5. The input image data is temporarily stored in an image memory such as a DRAM, subjected to image processing and encryption processing, and then transferred from the image memory to the storage unit 4. Further, when image data is read from the storage unit 4, the image data is subjected to image processing and decoding processing and stored in an image memory. Thereafter, the image data is output to the outside by printing, data transmission, and facsimile communication according to the processing to be executed.

  The storage unit 4 includes a management table 62, and information necessary for operating the image processing apparatus such as control information, setting information, and user authentication information of the image processing apparatus is stored in the management table 62. When these pieces of information are created and changed, the information in the management table 62 is updated. The management table 62 may be provided in a non-volatile memory different from the storage unit 4.

  The control unit 7 includes a microcomputer having a CPU, a ROM, and a RAM. The CPU reads a control program stored in the ROM into the RAM and executes the control program. Each unit operates according to the control program. When image data is input from an input unit such as the image reading unit 2 or the communication unit 5, the print mode is set based on input information from the operation unit 60 or processing conditions included in header information of image data input from an external device. Any one of a copy mode, a scanner mode, and a facsimile mode is executed. In addition, the control program includes a browser and mail software, and the control unit 7 performs data communication with an external device or transmits / receives e-mails using a communication protocol such as TCP / IP protocol.

  The control unit 7 temporarily stores the input image data in the storage unit 4 when performing each mode. Further, the control unit 7 executes a filing mode in which the input image data is stored in the storage unit 4 and managed. The stored image data is re-output according to the instructed process.

  The output image data is erased from the storage unit 4 according to an instruction from the control unit 7. At the time of this erasure, the image data is invalidated so that it cannot be restored by overwriting the image data with random data. In this way, invalidation of image data is prevented by performing invalidation processing and further encryption processing.

  Here, personal information is described in information media such as a credit card, a driver's license, an insurance card, and a basic resident register card. For example, in a credit card, as shown in FIG. 3, a card number, an expiration date, and a name are written on the front surface, and a signature is written on the back surface. In the cash card, as shown in FIG. 4, a card number and a name are written on the surface. In the insurance card, as shown in FIG. 5, the expiration date, symbol, name, date of birth, etc. are written, and the address is written on the back. The insurance card shown in FIG. 6 also includes a symbol, name, date of birth, etc. on the surface. The name, date of birth, address, and permanent address of the driver's license are printed on the front. In your passport, your name, date of birth, address, and photo of your face are listed.

  As described above, in various information media, specific images are formed as images representing personal information on the front surface and the back surface. And the specific area | region which is an area | region where a specific image exists is prescribed | regulated by each information medium. A plurality of unique images are formed on the information medium, and there are a plurality of specific areas.

  This image processing apparatus has a protection function that prevents personal information from being leaked unnecessarily when an image on an information medium is processed. That is, as shown in FIG. 1, when an image having a specific image is input from the information medium by the input unit, an area determination unit 63 that determines a specific area and a determination unit 64 that determines the type of the information medium are provided. The operation of the area determination unit 63 and the determination unit 64 is controlled by the control unit 7. The control unit 7 performs image processing for masking a specific area when the input image is subjected to image processing and output.

  The determination unit 64 acquires information regarding the size of the information medium and determines the type of the information medium. The size of the information medium is defined according to its type. In the management table 62, information medium management information relating to the size of various information media, the form of a specific image, and the position of a specific area is stored in advance. When the image reading unit 2 reads the information medium, the determination unit 64 recognizes the outer periphery of the information medium from the input image and calculates the size of the information medium. At this time, the control unit 7 recognizes that the image of the information medium has been input, and executes the protect function. The determination unit 64 refers to the information medium management information and determines the type of the information medium based on the acquired size. Alternatively, the user inputs the size through the operation unit 60. Also by this, the size of the information medium can be acquired, and the determination unit 64 determines the type of the information medium based on the input size.

Here, for example, a credit card and a cash card have the same size. Thus, even different types of information media may have the same size. However, in each information medium, the form of the unique image is different from the position where the unique image is formed. Therefore, the determination unit 64 extracts a unique image from the input image and recognizes its form and position. Then, the type of the information medium is determined with reference to the information medium management information.
The area determination unit 63 determines a specific area based on the type of information medium. The type of information medium and the specific area correspond to each other. The area determination unit 63 refers to the information medium management information and specifies a specific area in the determined information medium. Here, the position of the outer periphery is known from the input image of the information medium. The specific area is at a fixed position with respect to the outer periphery. Therefore, the region determination unit 63 can determine the position of the specific region in the input image.

  In the control unit 7, the image processing unit performs image processing for masking the specific region by filling the specific region with a solid image or overwriting another image.

  The image data that has been subjected to such image processing is output to the image forming unit 3, and an image in which the unique image is hidden is printed and output to the outside. Instead of printing, the image data may be output to the external device by data communication by outputting the image data to the communication unit 5. In the external device, an image in which the unique image is hidden is displayed or printed.

  As described above, when an information medium in which a unique image such as personal information is read is read by the image processing apparatus, an image in which the unique image is not known is output. Therefore, even if a third party tries to copy the information medium and take out the personal information, the unique image for the personal information is output while being hidden, so that leakage of the personal information can be prevented.

  In addition, the image processing apparatus has a function of reading images from the front and back surfaces of the information medium, combining the images on the front and back surfaces, and outputting them in one page. Here, this function is referred to as a card shot function. When the card shot function is instructed, the control unit 7 automatically executes the above protect function. As a result, two images in which the unique images are hidden as shown in FIG. 7 are output side by side on one page. In the case of an information medium having an image only on one side, when the card shot function is executed, an image on one side is output on one page.

  Here, there is a case where a person concerned including the person copies the information medium for the identity confirmation. In order to cope with such a case, the area determination unit 64 determines a specific area according to the security level. As a result, the determined specific area is masked. When the security level is high, the specific area to be masked increases, and when the security level is low, the specific area to be masked decreases.

  The image processing apparatus includes an authentication unit 65 that authenticates a user, and a security level is set according to the user. When authentication information such as ID information, password, and biometric information is input, the authentication unit 65 identifies the user based on these information. Then, the user is authenticated based on user information registered in advance. In the user information, the security level for each user is registered. The security level of a user with high authority such as an administrator is high, and the security level of a user with low authority is lowered. Depending on the level of the security level, processing on the input image is restricted.

  A security level is also set for the specific image. The personal information described in the information medium includes information that causes a problem when leaked and information that does not cause a problem even if leaked. The security level is raised as the unique image for the important personal information. Therefore, a security level is determined for each unique image of the information medium, and a security level for each unique image is set in advance in the information medium management information. Whether to mask is determined according to the level of the security level.

  The area determination unit 64 determines a specific area according to the security level of the user and the security level of the specific image. That is, the area determination unit 64 compares the security level of the user with the security level of the specific image, and determines a specific area to be masked based on the higher security level. Thereby, when there are a plurality of specific images on the information medium, a part of the specific images is selected according to the security level, and the specific area for the specific image is set as a specific area to be masked. On the other hand, the specific areas for the remaining unselected special images are not masked.

  The operation when the card shot function is performed will be described with reference to FIG. Here, it is assumed that the credit card is copied. First, the user operates the image processing apparatus and inputs ID information and authentication information. The authentication unit 65 confirms these pieces of information and authenticates the user (S1). Based on the user information, the security level of the user is specified (S2). If the user is not a registered user, the user is not authenticated, and the use of the image processing apparatus is restricted to limited operations.

  The user places the credit card on the document table 12 and selects the card shot function by the operation unit 60 (S3). By operating the start key, the image reading unit 2 reads the surface of the credit card. The user turns over the credit card and places it on the document table 12. By operating the start key, the image reading unit 2 reads the back side of the credit card.

  The determination unit 64 calculates the size of the read credit card based on the input image. By referring to the information medium management information, the type of information medium corresponding to this size is determined (S4). This identifies the credit card.

  If it is determined that it is a credit card, the area determining unit 63 confirms the position of the specific area in the credit card based on the information medium management information, assigns the position to the input image, A specific area is specified (S5).

  The area determination unit 63 reads the security level of the user from the user information (S6). Also, the security level of the specific image is read from the information medium management information. Then, the area determination unit 63 compares both security levels (S7).

  When the security level of the user is higher than the security level of the specific image, processing corresponding to the security level of the user is performed. That is, when the security level of the user is high, since the user has authority such as an administrator, the control unit 7 does not mask the specific area and outputs the input to the image forming unit 2 The image is printed as it is (S10).

  When the security level of the specific image is higher than the security level of the user, the area determination unit 63 determines a specific area to be masked (S8). Then, the control unit 7 performs image processing for masking the specific area (S9), and the image forming unit 2 prints an image (S10).

  Here, the specific area is determined so as to mask the specific area for all the unique images of one credit card. Instead of this, the region determination unit 63 can determine whether to mask each unique image and determine a specific region.

  The area determination unit 63 determines the specific area to be masked and the specific area not to be masked by comparing with the security level of the user for each specific image. In response to this determination, the control unit 7 masks some of the specific areas and does not mask the remaining specific areas. For example, the specific area for the specific image representing the card number is masked, and the specific area for the specific image representing the expiration date is not masked. Alternatively, the specific area for the last four digits of the card number is masked, and the specific areas for other card numbers are not masked. Even if the security level of the specific image is the same, the specific area to be masked differs depending on the user. In the case of a user with a high security level, the specific area for the name is masked, whereas for the user with a low security level, the specific area for the card number as well as the name is masked.

  In this way, the specific area for each unique image is individually masked according to the security level, so that a part of the unique image is output in a hidden state. Therefore, it is possible to provide personal information necessary for identity verification and the like, and unnecessary personal information is kept secret, and personal information can be prevented from leaking unnecessarily.

  By the way, even if it is the same kind of information medium, the number of digits of a card number may differ, for example, and a name and an address may be long. In such a case, the specific area for the actual unique image may be larger than the specific area defined in advance. Therefore, the area determination unit 63 can change the specific area.

  When the specific area in the input image is specified, an area setting screen is displayed on the display unit 61 as shown in FIG. On this screen, a specific image and a specific area are displayed, and a change key is also displayed. Each specific area can be moved and enlarged / reduced on the display unit 61. When one specific area is selected, the specific area is moved and enlarged / reduced by operating the change key. However, the change of the specific area is restricted. The movement amount, the enlargement rate, and the reduction rate are limited within predetermined ranges. By limiting the amount of change in this way, it is possible to prevent the specific image in the specific area from protruding from the specific area that has been changed.

  When the change of the specific area is completed, the area determination unit 63 updates information regarding the position of the specific area in the input image. The control unit 7 performs image processing for masking the changed specific area. Therefore, by changing the specific area so as to match the specific image, the specific image can be surely hidden and leakage of personal information can be prevented.

  In addition, the security level of the specific image can be changed. A security level is set in advance for each unique image on the information medium. However, depending on the user's request, it may be necessary to hide the specific image or to display the specific image.

  Therefore, after the image is input, the control unit 7 changes the security level of the specific image according to a user instruction. A security level setting screen is displayed on the display unit 61 as shown in FIG. On this screen, a specific image and a specific area are displayed, and a security level key is also displayed. The plurality of security level keys correspond to each specific area. The user selects one specific area and selects an arbitrary security level. The control unit 7 temporarily changes the security level of the specific image corresponding to the specific area. The area determination unit 63 determines whether to mask a specific area based on the security level of the changed specific image and the security level of the user.

  By increasing the security level of the unique image, specific areas that are not normally masked are masked. On the contrary, by lowering the security level of the specific image, a specific area that is normally masked is not masked. Therefore, the specific image can be hidden as necessary, and unnecessary personal information can be prevented from leaking.

  It should be noted that the change of the security level is preferably limited to users having a certain security level or higher. For example, it is limited to users having a security level equal to or higher than the security level of the specific image. If all users can change the security level, the third party's information medium's unique image can be copied without hiding it, which poses a security problem. Therefore, such a problem can be eliminated by limiting. In the above description, the security level is temporarily changed. However, since a normal change is a setting change, an authorized user performs the change. With this change, the information medium management information is updated.

  When the input image is processed in the image processing apparatus, the control unit 7 creates log information for the processing and stores it in the storage unit 4. The log information is added with the input image, and the image data of the specific image is stored. However, from the viewpoint of protecting personal information, when the card shot function is executed, the control unit 7 prohibits the creation of log information.

  Thus, log information is not created when an image on the information medium is processed. Further, the input image data of the information medium is deleted from the storage unit 4 and the memory when the processing is completed. Therefore, the image data of the specific image does not remain in the image processing apparatus. Therefore, personal information described in the information medium never flows out of the image processing apparatus.

  In addition, when the card shot function is executed, the control unit 7 prohibits execution of the filing mode in which the input image data is stored in the storage unit 4. Also by this, the image data of the specific image is not stored, and personal information can be prevented from leaking from the image processing apparatus.

  Incidentally, the administrator has the authority to perform processing on the input image without restriction. In this image processing apparatus, when an image of an information medium is processed, if an instruction for processing is given by an administrator, output of a specific image is restricted.

  The control unit 7 sets a range for masking the specific area and selectively masks the set specific area. At this time, the control unit 7 sets the masking range according to the security level of the specific image. When the security level of the specific image is high, a specific area where the specific image exists is masked. If the security level of the specific image is low, the specific area where the specific image exists is not masked. Whether or not to mask is determined by whether or not the security level is equal to or higher than a predetermined level.

  Note that the masking range may be a part of the specific area, not the entire specific area. Depending on the security level of the specific image, the masked range in the specific area is changed.

  When the administrator copies the information medium, the operation of the image processing apparatus will be described with reference to FIG. The same steps as those shown in FIG. 8 are denoted by the same step numbers. First, the user operates the image processing apparatus and inputs ID information and authentication information. The authentication unit 65 confirms these pieces of information and authenticates the user (S1). Based on the user information, the security level of the user is specified (S2).

  The user places the credit card on the document table 12 and selects the card shot function by the operation unit 60 (S3). By operating the start key, the image reading unit 2 reads the surface of the credit card. The user turns over the credit card and places it on the document table 12. By operating the start key, the image reading unit 2 reads the back side of the credit card.

  The determination unit 64 calculates the size of the read credit card based on the input image. By referring to the information medium management information, the type of information medium corresponding to this size is determined (S4). This identifies the credit card.

  If it is determined that it is a credit card, the area determining unit 63 confirms the position of the specific area in the credit card based on the information medium management information, assigns the position to the input image, A specific area is specified (S5).

  The area determination unit 63 reads the security level of the specific image from the information medium management information (S6). Here, the control unit 7 confirms whether the user is an administrator (S11). When the user is not an administrator, the control unit 7 performs operations from S7 to S9 in FIG. 8 to perform image processing for masking a specific area (S12), and the image forming unit 2 prints an image ( S10).

  When the user is an administrator, the control unit 7 determines whether there is a copy restriction for the specific area based on the security level of the specific image (S13). When the security level of the specific image is lower than the predetermined level, the control unit 7 does not mask this specific area. When the security level of the specific image is equal to or higher than the predetermined level, the control unit 7 sets a range for copy restriction (S14). That is, a specific area to be masked is set. And the control part 7 performs the image process which masks the set specific area (S15). When there are a plurality of specific areas, a determination is made for each specific area. The image forming unit 2 prints an image (S10).

  As a result, an image in which the specific area is masked is printed. Depending on the security level of the specific image, some specific areas may be printed without being masked. If the administrator wants to print without masking all the specific areas, the security level of the special image with copy restrictions may be lowered.

  In this way, when an authorized administrator performs processing such as copying on an information medium, it is possible to conceal and output important personal information by restricting image output. Therefore, even if the output image may be abused, all confidential information will be leaked, but by masking a specific area, some confidential information becomes invisible, and confidential information Leakage can be prevented.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. When determining the type of information medium, the user may directly input the size through the operation unit instead of calculating the size from the input image. Alternatively, the control unit displays a list of information media on the display unit when the card shot function is instructed. And a control part may discriminate | determine the kind of information medium, when a user selects an information medium.

  When the size is calculated from the input image and there are a plurality of information media of the same size, the control unit displays a list of information media of that size on the display unit. When the user selects a desired information medium from the list, the control unit determines the type of the designated information medium.

  The image input from the information medium may be an image obtained by reading the information medium in the external device or an image for the information medium created by the external device, and the image is input by data communication from the external device.

Control block diagram of image processing apparatus of the present invention The figure which shows the schematic whole structure of an image processing apparatus Diagram showing the front and back of a credit card The figure which shows the front and back of the cash card Illustration showing the front and back of the insurance card Illustration showing the surface of an insurance card The figure which shows the picture where the personal information of the credit card was hidden and outputted Flow chart showing the procedure of the card shot function Figure showing the setting screen for changing a specific area Figure showing the security level change setting screen The flowchart which shows the procedure when performing the card shot function by the direction of the manager

Explanation of symbols

2 image reading unit 3 image forming unit 4 storage unit 6 operation panel 7 control unit 63 area determination unit 64 determination unit 65 authentication unit

Claims (13)

An input unit for inputting an image having a specific image from the information medium, a determination unit for determining the type of the information medium, an area determination unit for determining a specific area where the specific image exists based on the type of the information medium, and a specific area An image processing apparatus comprising: a control unit that performs image processing for selectively masking. 2. The control unit according to claim 1, wherein the control unit sets a range for masking the specific area and outputs an image with the set specific area masked even if output of the image is permitted without limitation. Image processing device. The administrator has an authority to output an image without restriction, and the control unit selectively masks a specific area when an instruction to output an image of the information medium is received from the administrator. 2. The image processing apparatus according to 2. The image processing apparatus according to claim 2, wherein the determination unit determines the type of the information medium based on the size of the information medium. The image processing apparatus according to claim 2, further comprising a display unit that displays the specific region, wherein the specific region displayed on the display unit is changeable, and the control unit masks the changed specific region. The image processing apparatus according to claim 2, wherein the area determination unit determines a specific area to be masked according to a security level. The image processing apparatus according to claim 6, wherein the security level can be changed after the image is input. 7. The image processing apparatus according to claim 6, wherein the security level of the specific image is set according to the type of the information medium, and the area determination unit determines the specific area according to the security level of the specific image. An authentication unit for authenticating a user, and when the region determination unit is a user other than the administrator, the specific region is determined based on the higher security level of the user security level and the security level of the specific image. 9. The image processing apparatus according to claim 8, wherein the image processing apparatus is determined. 3. The image processing apparatus according to claim 2, wherein when the image processing for masking the specific area is executed, the control unit prohibits creation of log information for the processing. The image processing apparatus according to claim 2, wherein the control unit prohibits the storage of the image having the input unique image when executing the image processing for masking the specific area. The image processing apparatus according to claim 2, wherein the information medium has an image representing personal information as a specific image on the surface, and the input unit reads the surface of the information medium and inputs the image. The information medium has images on the front and back surfaces, the input unit reads both sides of the information medium and inputs the images, and the control unit combines the images on both sides and outputs the two images side by side. The image processing apparatus according to claim 2.

Images