JP2009130497A - Image communication device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image communication device capable of transferring acquired image data to an external device using a transmitting function such as electronic mail. <P>SOLUTION: The image communication device includes: an acquiring means 70 for acquiring image data; an encrypting means 78 for encrypting the acquired image data 200; a creating means 80 for creating a password for decoding the encrypted image data 202 acquired by the encryption; an input means 74; and a transmission means 76. The input means 74 specifies a transmission destination address when transmitting the encrypted image data and re-specifies a transmission destination address when transmitting the password, in response to external input. The transmission means 76 transmits encrypted image data 210a to the transmission destination address specified by the input means 74, and transmits the password to the transmission destination address re-specified by the input means 74. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an image communication apparatus, and more particularly to an image communication apparatus that transfers acquired image data to an external apparatus using a transmission function such as an electronic mail.

  Along with the recent networking of multi-function peripherals, multi-function peripherals having a function of encrypting an image acquired by a scanner function or a facsimile function with a password and attaching it to an e-mail and transferring it have been proposed. In business scenes such as offices, from the viewpoint of information security, an encrypted file and a password are often transmitted separately in separate e-mails.

For example, Japanese Patent No. 3857104 (Patent Document 1) is a registration means for registering image information transmission destination address information and a predetermined identification character string in association with each other. An image communication apparatus comprising: an encryption unit that encrypts image information using an identification character string input by an input unit as an decryption key; and a registration unit that stores image information encrypted by the encryption unit. A transmission unit that transmits based on destination information registered in association with an identification character string, and an decryption key transmission unit that separately transmits the identification character string input by the input unit to a transmission destination An image communication apparatus is disclosed. Japanese Patent Application Laid-Open No. 2007-150454 (Patent Document 2) discloses an apparatus that transmits an encrypted mail separately from an encrypted mail obtained by encrypting an attached file and transmits a password notification mail after a fixed time has elapsed. . In addition, JP-A-2001-268307 (Patent Document 3) can be cited as related to transfer of acquired image data by electronic mail.
Japanese Patent No. 3857104 JP 2007-150454 A JP 2001-268307 A

  However, input destinations and selection designations of e-mails are often mistaken. Conventionally, when using the above-mentioned transfer function by e-mail with image data attached, for example, an encrypted file and Even when the password is transmitted separately by e-mail, if the input or selection of the destination is incorrect, the encrypted file and the password are transmitted to the wrong destination. For this reason, conventionally, there is a possibility that information is leaked, which has been a problem.

  The present invention has been made in view of the above problems, and suitably reduces the risk of information leakage due to erroneous transmission when the acquired image data is encrypted and transferred to an external device using a transmission function such as e-mail. An object of the present invention is to provide an image communication apparatus.

  In the present invention, in order to solve the above-described problem, the image communication apparatus first encrypts the acquired image data, transmits the encrypted image data, and then decrypts the encrypted image data. Send the created password separately. When sending the password separately, it is not the destination address specified as the one for sending the encrypted image data, but the destination address re-specified by the input means as the one for sending the password separately. Send to.

  With the above configuration, even if the destination address is incorrectly specified, it is possible to confirm that the destination address matches, and even if the destination address does not match, it will be encrypted Since the image data and the password are transmitted to different transmission destination addresses, it is possible to prevent the image data from being decoded at the erroneous transmission destination, and to appropriately reduce the risk of information leakage.

  The image communication apparatus may further include a determination unit that compares the transmission destination address of the designated encrypted image data with the transmission destination address of the redesignated password and determines a match between them. With this configuration, it is possible to confirm the coincidence of the transmission destination addresses before transmitting the password, and thus it is possible to suitably prevent erroneous transmission.

  Furthermore, it is possible to set the number of times and the time limit for re-designation by the input means when it is determined that the destination addresses do not match. With this configuration, it is possible to further improve security.

  Hereinafter, although it demonstrates using embodiment of this invention, embodiment of this invention is not limited to the following embodiment. In this embodiment, as an example of the image communication apparatus, an example using a multifunction machine 10 having a complex function for handling images such as a copy, a facsimile, a scanner, and a print will be described.

FIG. 1 shows an embodiment of a hardware configuration of the multifunction machine 10. The multifunction machine 10 according to the present embodiment includes a controller 12, an operation panel 42, an FCU (facsimile control unit) 44, and an engine unit 46. The controller 12 includes a CPU (Central Processing Unit) 14, an NB (North Bridge) 18, an ASIC (Application Specific Integrated Circuit) 20 following the CPU 14 via the NB 18, and a system memory 16. . The ASIC 20 executes various image processing and performs AGP (Accelerated).
It is connected to the NB 18 via a (Graphics Port) 48. The system memory 16 is used as a drawing memory or the like.

  The ASIC 20 is connected to a local memory 22, a hard disk drive (hereinafter referred to as HDD) 24, and a nonvolatile memory (hereinafter referred to as NV-RAM) 26 such as a flash memory. The local memory 22 is used as a copy image buffer or a code buffer, and the HDD 24 is a storage for storing image files, document data, programs, font data, form data, and the like. The NV-RAM 26 stores a program for controlling the multifunction machine 10 and various setting information, an address book for registering an e-mail address (hereinafter simply referred to as an address), and a re-designation to be described later. Stores setting values such as the number of times of input limit and time limit.

  The controller 12 further includes an SB (South Bridge) 28, a NIC (Network Interface Card) 30, an SD card slot 32, a USB interface 34, an IEEE 1394 interface 36, and a Centronics interface 38. These are connected to the NB 18 via the PCI bus 50. The NIC 30 is an interface device that connects the multifunction machine 10 to a network such as the Internet or a LAN (Local Area Network), and transmits an electronic mail including an acquired image file or the like via the network. The USB interface 34, the IEEE 1394 interface 36, and the Centronics interface 38 are interfaces conforming to the respective standards. Note that the SB 28 is a bridge for connecting the PCI bus 50 to a ROM or a peripheral device (not shown).

  The operation panel 42 is connected to the ASIC 20 of the controller 12 and receives input of various instructions from the operator and outputs a screen to provide a user interface. The FCU 44 and the engine unit 46 are connected to the ASIC 20 via the PCI bus 52. The engine unit 46 includes a plotter engine and a scanner engine, acquires an image forming instruction and an image file issued by an application, and executes an image forming process and an image reading process.

  1 reads out a program (not shown) stored in a storage device such as a ROM (not shown), HDD 24, NV-RAM 26, SD card (not shown), and the like. By expanding the memory area of a memory (for example, including the system memory 16 and the local memory 22) that provides a working memory area of the CPU 14, each function unit described later is realized.

FIG. 2 is a diagram illustrating a schematic configuration of a network environment including the multifunction peripheral according to the present embodiment. A network environment 100 shown in FIG. 2 includes a multifunction machine 10, a mail server 60, and a terminal 62. The mail server 60 includes SMTP (Simple Message Transfer Protocol), POP3 (Post Office Protocol Version).
3) Execute mail transmission / reception processing according to protocols such as IMAP (Internet Message Access Protocol). The mail server 60 receives a mail transmission request from the multifunction machine 10 and performs mail transmission processing to the transmission destination address of the request. The mail server 60 accepts a mail reception request from the terminal 62 provided with a mail client, and delivers the electronic mail stored in the mailbox at the requested address to the terminal 62.

  For example, the MFP 10 encrypts an image file read and acquired from the document P, and transmits an e-mail 210a attached with the encrypted image file 212a to a predetermined transmission destination address. Further, the multifunction machine 10 attaches a password 222a for decrypting the encrypted image file 212a to an e-mail 220a different from the one attached with the image file 212a, and sends it to a predetermined destination address. To do.

  The mail server 60 that has received the transmission request for the e-mails 210a and 220a executes transmission processing for each e-mail, and in the embodiment shown in the figure, stores it in the mailbox at the destination address of each e-mail. When the mail server 60 receives a mail reception request for the address from the terminal 62 after storage, the mail server 60 reads the mail from the mailbox at the address and delivers the electronic mails 210b and 220b to the terminal 62. The terminal 62 that has received the password 222b and the encrypted image file 212b uses the password 222b to decrypt the encrypted image file 212b to obtain a non-encrypted image file.

  Hereinafter, an embodiment of transferring an image file by e-mail will be described in more detail. FIG. 3 is a data flow diagram related to the transmission processing of the e-mail including the encrypted image file according to the present embodiment. 3 includes a reading unit 70, an encryption unit 72, an input unit 74, and a transmission unit 76.

  The reading unit 70 controls the scanner engine of the engine unit 46 to execute an image reading process of the document P and acquire the image file 200. The encryption unit 72 includes an encryption processing unit 78 that executes encryption processing using an encryption method such as DES (Data Encryption Standard) and AES (Advanced Encryption Standard), and a password for decrypting the encrypted data. The image file 200 is configured to include an automatically created password creating unit 80 and encrypts the image file 200 acquired by the reading unit 70 to obtain an encrypted image file 202. The password creation unit 80 creates a password for encryption and decryption having a predetermined key length using a predetermined seed and a pseudo random number function, and notifies the encryption processing unit 78 of the password.

  The input unit 74 includes a transmission destination selection unit 82, presents transmission destination information entered in the address book of the NV-RAM 26 on the display screen of the operation panel 42, and selects an address from the user U. Waiting for external input, the selected address can be designated as the destination address. The input unit 74 includes a transmission destination direct input unit 84. The input unit 74 waits for a direct input of an address from the user U, and can specify the input address as a transmission destination address.

  The transmission unit 76 controls the NIC 30 to execute mail transmission processing, receives the encrypted image file 202 from the encryption processing unit 78, receives the designated transmission destination address 204 from the input unit 74, and receives the image file 202a. The e-mail 210a addressed to the destination including the message is created, and the transmission request is sent to the mail transmitting / receiving unit 60a of the mail server 60.

  FIG. 4 is a data flow diagram regarding transmission processing of an e-mail including the password of the encrypted image file according to the present embodiment. The transmission destination direct input unit 84 of the input unit 74 shown in FIG. 4 requests the user U to specify the transmission destination address again during password transmission, and waits for direct input of the transmission destination address from the user U. , Re-specify as the destination address according to the input. Note that the re-designation at the time of password transmission cannot be designated using the transmission destination selection unit 82. The password creation unit 80 passes the password 208 created for decrypting the encrypted image file 202 of the data flow shown in FIG.

  Upon receiving the password 208 from the password creation unit 80 and the transmission destination address 206 from the transmission destination direct input unit 84, the transmission unit 76 creates an e-mail 220a addressed to the transmission destination including the password 222a, and requests for transmission thereof. To the mail transmission / reception unit 60a of the mail server 60.

  In the network environment 100 of the present embodiment, the image file acquired by the multifunction machine 10 from the document P is encrypted and delivered via the mail server 60 to a terminal that performs reception processing for a specified transmission destination address. Become. On the other hand, the password for decrypting the encrypted image file is delivered to a terminal that performs reception processing of the re-designated destination address, separately from the image file.

  Hereinafter, an embodiment of image file transfer processing by e-mail will be described more specifically with reference to a flowchart. FIG. 5 is a flowchart showing a first embodiment of an image file transfer process by electronic mail executed by the multifunction machine. The process shown in FIG. 5 is started from step S100 when an image reading start instruction is received from the user U, for example.

  In step S <b> 101, the reading unit 70 executes image reading of the document P. In step S102, the input unit 74 causes the transmission destination selection unit 82 or the transmission destination direct input unit 84 to display a transmission destination address input screen 300 as shown in FIG. Request input of destination address, specify destination address in response to external input.

  After the transmission destination is designated, in step S103, a selection screen 300 for requesting selection of confidential designation for determining the necessity of encryption at the time of image file transfer is displayed as shown in FIG. A request for selection is made, and it is determined whether “required” is selected as the confidential designation and whether encryption of the image file is required. If it is determined in step S103 that the confidential designation is not “necessary” (NO), the process branches to step S110, the image file is transferred by e-mail without being encrypted, and the process is performed in step S109. Terminate.

  On the other hand, if it is determined in step S103 that the confidential designation is “necessary” (YES), the process branches to step S104. In step S104, the password creation unit 80 creates a password for encrypting and decrypting the image file. In step S105, the encryption processing unit 78 encrypts the image file using the password. In S106, the transmission unit 76 transfers the encrypted image file by e-mail to the transmission destination designated in Step S102.

  In the subsequent step S107, the input unit 74 causes the transmission destination direct input unit 84 to display a transmission destination address input screen 340 as shown in FIG. 7B and requests the user U to input the transmission destination address. In response to the input, the destination address is specified again. In step S108, the transmission unit 76 transfers the password by e-mail to the transmission destination redesignated in step S107, and ends the process in step S109.

  Hereinafter, screens displayed on the touch panel of the operation panel 42 in the transfer process of the image file by electronic mail according to the first embodiment will be described. FIG. 6 shows an example of a selection screen for designating whether or not confidential designation is necessary, which is displayed in the process of step S103 of FIG. The selection screen 300 shown in the figure waits for a message 302 such as “Do you want to specify confidentiality?”, A button 304 for waiting for an instruction to designate confidentiality as “necessary”, and an instruction to designate confidentiality as “No”. The user U can select whether encryption at the time of image file transfer is necessary or not via the selection screen 300.

  FIG. 7 is a diagram showing an input screen for designating a transmission destination address. FIG. 7A shows an example of an input screen for designating the transmission destination address of the image file displayed in the process of step S102 of FIG. An input screen 320 shown in FIG. 7A includes an input item display 322 such as “image file transmission destination mail address”, a text box 324 for directly inputting an address, and a button 326 for determining an address. The user U can input the transmission destination address of the image file via the input screen 320. Note that the input screen 320 illustrated in FIG. 7A illustrates a case where designation is performed using the transmission destination direct input unit 84.

  FIG. 7B shows an example of an input screen for re-designating the transmission destination address displayed in the process of step S107 in FIG. The input screen 340 shown in FIG. 7B has the same configuration as that in FIG. 7A, and includes an input item display 342 such as “password destination mail address”, a text box 344, and a button 346. Consists of including.

  In the image file transfer process by e-mail of the first embodiment, the encrypted image file and its password are transferred by e-mail addressed to a separately input destination address. The terminal 62 that has correctly received both the encrypted image file and the password can decrypt the image file and obtain necessary information. On the other hand, if the destination address of the image file and the destination address of the re-specified password do not match due to an incorrect input, the image file and password will not be delivered to the same address, so only one of them will be acquired In such a terminal, information cannot be decoded, and information leakage due to an erroneous input of the transmission destination can be suitably prevented.

  The second embodiment of the image file transfer process by e-mail will be described below. FIG. 8 is a flowchart showing a second embodiment of the image file transfer process by electronic mail executed by the multifunction machine. The process shown in FIG. 8 is started from step S200, for example, when an image reading start instruction is received. In step S201, the reading unit 70 reads an image of the original P. In step S202, the input unit 74 displays a selection screen 360 for selecting a transmission destination designation method as shown in FIG. 9A and waits for the selection. Whether the designation by direct input has been selected or not from the address book. It is determined whether designation by selection has been selected.

  If it is determined in step S202 that the selection designation from the address book has been selected (YES), the process branches to step S203, and the input unit 74 sends the destination selection unit 82 to FIG. 9B. A destination address selection input screen 380 as shown is displayed, the user U is requested to select a destination address, and the destination address is designated.

  On the other hand, if designation by direct input is selected in step S202 (NO), the process branches to step S204, and the input unit 74 sends the destination direct input unit 84 to the destination direct input unit 84 as shown in FIG. An input screen 320 by direct input of a destination address is displayed, the user U is requested to input the destination address directly, and the destination address is designated.

  After the transmission destination is designated, in step S205, a selection screen 300 for requesting selection of confidential designation is displayed, and it is determined whether or not “necessary” is selected for confidential designation. If it is determined in step S205 that the confidential designation is not “necessary” (NO), the process branches to step S214, the image file is transferred without encryption, and the process ends in step S213.

  On the other hand, if it is determined in step S205 that the confidential designation is “necessary” (YES), the process branches to step S206. In step S206, a password for encrypting and decrypting the image file is created. In step S207, the image file is encrypted using the password. In step S208, the transmission designated in step S203 or step S204 is performed. The encrypted image file is transferred to the destination.

  In subsequent step S209, it is determined whether or not selection designation from the address book is selected in step S202. If it is determined in step S209 that the selection designation has been selected (YES), the process branches to step S210 to display the transmission destination information of the image file. In step S211, the input unit 74 An input screen 400 including image file transmission destination information as shown in FIG. 9C is displayed, the user U is requested to directly input the transmission destination address, and the transmission destination address is designated again. On the other hand, if it is determined in step S209 that designation by direct input rather than selection designation is selected (NO), the process branches to step S211 and the input unit 74 includes the transmission destination information of the image file. No input screen 340 is displayed. In step S212, the password is transferred to the transmission destination redesignated in step S211, and the process ends in step S213.

  FIG. 9 is a diagram showing a screen displayed on the touch panel of the operation panel 42 in the image file transfer processing by electronic mail according to the second embodiment. FIG. 9A shows, as an example, a selection screen 360 that is displayed in step S202 shown in FIG. 8 and for selecting a transmission destination designation method. The selection screen 360 shown in FIG. 9A includes a message 362, a button 364 for selecting direct input designation, and a button 366 for selecting selection designation. The user U selects this selection screen. Via 360, a destination designation method can be selected.

  FIG. 9B shows an example of the transmission destination address selection input screen 380 displayed in step S203 shown in FIG. The selection input screen 380 shown in FIG. 9B includes a message 382, a column 384 for displaying a list of destination names, a column 386 for displaying a list of corresponding e-mail addresses, and a selected destination address. And a button 388 for determining. The user U can select and specify a transmission destination by touching an entry in the column 384 or the column 386 to select a transmission destination and touching a button 388. In FIG. 9B, the selected address is highlighted. FIG. 14A shows the data structure of the address book. The address book 240 shown in FIG. 14A is configured to include a field 240a in which a user name is input and a field 240b in which a corresponding address is input, and is referred to when selecting and specifying.

  FIG. 9C shows an example of an input screen that is displayed when a transmission destination is selected and designated in the process of step S211 of FIG. The input screen 400 shown in FIG. 9C includes a transmission destination information display 402 indicating information related to the transmission destination selected and designated, an input item display 404, a text box 406, and a button 408. . The information regarding the transmission destination of the image file shown on the input screen 400 can be displayed as various information registered in the address book, such as the name of the transmission destination and the e-mail address of the transmission destination, and is particularly limited. It is not a thing.

  In the transfer process of the image file by e-mail according to the second embodiment described above, in step S202, the user can select whether to specify the destination address of the image file by direct input or by selection from the address book. Will improve.

  A third embodiment of the image file transfer process by e-mail will be described below. FIG. 10 is a flowchart illustrating a third embodiment of image file transfer processing by electronic mail executed by the multifunction peripheral. In the third embodiment, when inputting the password transmission destination address, it is confirmed that the transmission destination address of the previously specified image file matches the transmission destination address of the password to be redesignated, and the match is confirmed. After that, transfer the password. In addition, a predetermined upper limit is set for the number of times of input when they do not match, and a time limit is set for specifying the transmission destination address of the password.

  The process shown in FIG. 10 is started from step S300, for example, when an image reading start instruction is received. Note that the processes in steps S301 to S306 and S313 correspond to the processes in steps S101 to S106 and S110 shown in FIG.

  Subsequent to the transfer of the encrypted image file in step S306, in step S307, it is determined whether or not the number of inputs is equal to or less than a predetermined number of times set in advance. If it is determined in step S307 that the number of inputs is greater than the specified number (NO), the process branches to step S312, and the process is terminated without performing password transmission. On the other hand, if it is determined in step S307 that the number of inputs is equal to or less than the specified number (YES), the process branches to step S308.

  In step S308, it is determined whether or not a specified time has elapsed since the transfer of the image file has been completed. If the specified time or more has elapsed (YES), the process branches to step S312 to perform password transmission. The process is terminated without any information. On the other hand, if it is determined in step S308 that the specified time has not yet elapsed (NO), the process branches to step S309. In step S309, the input unit 74 causes the transmission destination direct input unit 84 to display the transmission destination address input screen 340, requests the user U to input the transmission destination address, and respecifies the transmission destination address.

  In step S310, it is determined whether the destination address designated in step S302 matches the destination address redesignated in step S309. If it is determined in step S310 that the transmission destination addresses match (YES), the process branches to step S311 and the transmission unit 76 transfers the password to the matching transmission destination, and ends the process in step S312. Let On the other hand, if it is determined in step S310 that the destination addresses do not match (NO), an error is displayed and the process loops to step S307 to retry the re-designation of the destination address within the specified number of times and within the specified time. Let

  FIG. 11A shows an example of a setting screen for setting a specified number of times as an upper limit of the number of times of input when re-designating a password transmission destination. A setting screen 420 illustrated in FIG. 11A includes a message 422, a pull-down menu 424, and a button 426. The user U can set the specified number of times as the upper limit of the number of inputs described above by touching the button 424b of the pull-down menu 424, changing the value in the box 424a, and touching the button 426.

  FIG. 11B shows an example of a setting screen for setting a timeout time when re-designating a password transmission destination. The setting screen 440 shown in FIG. 11B includes a message 442, a pull-down menu 444, and a button 446. The user U can set the specified time that is the time limit for the above input by touching the button 444b of the pull-down menu 444, changing the value in the box 444a, and touching the button 446. Note that the setting screen shown in FIG. 11 is configured, for example, as a system setting screen of the multifunction machine 10 and is set in advance by the user.

  In the image file transfer process by e-mail according to the third embodiment described above, in step S310, the transmission destination address of the designated image file is compared with the transmission destination address of the redesignated password, and the match is determined. By doing so, it becomes possible to suitably reduce the risk of information leakage due to erroneous transmission. Further, in step S307, an upper limit is set for the number of times the transmission destination address is input when they do not match, so that security can be improved. Furthermore, since a time limit is set for specifying the transmission destination address in step S308, it is possible to further improve security.

  The fourth embodiment of the image file transfer process by e-mail will be described below. FIG. 12 is a flowchart showing a fourth embodiment of the image file transfer process by e-mail executed by the multifunction machine. In the above-described embodiments, direct input is forced when inputting a password transmission destination address. On the other hand, in the fourth embodiment, a code for identifying the user is assigned to the address book in advance together with the user name and address, and the destination address is designated by inputting the code instead of direct input. can do. In the fourth embodiment, it is assumed that the user U who is a user of the multifunction machine 10 has already registered his / her e-mail address in the address book and stored a code assigned to the user. Yes.

  The process shown in FIG. 12 is started from step S400, for example, upon receiving an image reading start instruction. Note that the processes in steps S401 to S406 and S412 correspond to the processes in steps S101 to S106 and S110 shown in FIG.

  In step S407 following step S406, a selection screen 460 for selecting a transmission destination designation method is displayed as shown in FIG. 13A, and the selection is awaited. It is determined whether the designation by is selected. If it is determined in step S407 that the code designation has been selected (YES), the process branches to processing step S408, and the input unit 74 causes the transmission destination selection unit 82 to transmit the transmission destination as shown in FIG. The address code input screen 480 is displayed, the user U is requested to input a code corresponding to the destination address, and the destination address is re-designated upon receiving the code input. On the other hand, if it is determined in step S407 that designation by direct input rather than code designation is selected (NO), the process branches to processing step S409 to display a destination address input screen 340 and prompt the user U. It requests the direct input of the transmission destination address, receives the input, and re-specifies the transmission destination address.

  In step S410, the transmission unit 76 transfers the password to the transmission destination redesignated in step S408 or step S409, and ends the process in step S411.

  FIG. 13 is a diagram illustrating a screen displayed on the touch panel in the image file transfer processing by e-mail according to the fourth embodiment. FIG. 13A shows, as an example, a selection screen 460 that is displayed in the process of step S407 shown in FIG. 12 and for selecting a transmission destination designation method. The selection screen 460 shown in FIG. 13A includes a message 462, a button 464 for selecting direct input designation, and a button 466 for selecting code designation. The user U selects this selection screen. Via 460, a destination designation method can be selected.

  FIG. 13B shows an example of the code input screen 480 for the destination address displayed in step S408 shown in FIG. The code input screen 480 shown in FIG. 13B includes a message 482, a text box 484 for inputting a code, and a button 486 for determining a destination address. The user U can select and specify a transmission destination by inputting a code in the text box 484 and touching a button 486.

  FIG. 14B shows the data structure of the address book. The address book 260 shown in FIG. 14B includes a field 260a in which a code for identifying a user is input and a field 260b in which a corresponding address is input. Reference is made when specifying by code input. Is done.

  In the image file transfer process by e-mail according to the fourth embodiment described above, in step S407, the user decides whether to specify the destination of the image file by direct input or by the code registered in the address book. Since it can be selected, convenience is improved. In particular, when the user U who is a user of the multifunction device 10 designates his / her already registered e-mail address as a transfer destination by e-mail, convenience can be suitably improved.

  As described above, according to the embodiments described above, when the acquired image data is encrypted and transferred to an external device using a transmission function such as e-mail, the risk of information leakage due to erroneous transmission is suitably reduced. It is possible to provide an image communication apparatus.

  The encrypted image data can be in a file format such as a password-attached PDF (Portable Document Format) or an encrypted ZIP in which the image data is compressed, but is not particularly limited.

  Further, the image communication device is not limited to the multifunction device having the composite function of the above-described embodiment, but as a device having a function of performing network communication of an acquired image, such as a scanner or a facsimile, according to a specific application. Can be configured.

  The above functions can be realized by a device executable program described in a legacy programming language such as an assembler, C, C ++, C #, Java (registered trademark), an object-oriented programming language, or the like. ROM, EEPROM, EPROM, flash It can be stored in a device-readable recording medium such as a memory, flexible disk, CD-ROM, CD-RW, DVD, SD memory, MO, and distributed.

  Although specific embodiments of the present invention have been described above, the embodiments of the present invention are not limited to the above-described embodiments, and those skilled in the art will conceive other embodiments, additions, modifications, deletions, and the like. It can be changed within the range that can be achieved, and any aspect is included in the scope of the present invention as long as the effects and effects of the present invention are exhibited.

1 is a diagram illustrating an embodiment of a hardware configuration of a multifunction machine. 1 is a diagram illustrating a schematic configuration of a network environment including a multifunction peripheral according to an embodiment. The data flow figure regarding the transmission process of the email containing the encrypted image file. The data flow figure regarding the transmission process of the email containing the password of the encrypted image file. The flowchart which shows 1st Embodiment of the transfer process of the image file by an email. The figure which shows as an example the selection screen for designating the necessity of a confidential designation | designated. The figure which shows the input screen for designating a transmission destination address. The flowchart which shows 2nd Embodiment of the transfer process of the image file by an email. The figure which shows the screen displayed on a touchscreen in 2nd Embodiment. The flowchart which shows 3rd Embodiment of the transfer process of the image file by an email. The figure which shows a setting screen. The flowchart which shows 4th Embodiment of the transfer process of the image file by an email. The figure which shows the screen displayed on a touchscreen in 4th Embodiment. The figure which shows the data structure of an address book.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... MFP, 12 ... Controller, 14 ... CPU, 16 ... System memory, 18 ... NB, 20 ... ASIC, 22 ... Local memory, 24 ... HDD, 26 ... NV-RAM, 28 ... SB, 30 ... NIC, 32 ... Slot, 34 ... USB interface, 36 ... IEEE 1394 interface, 38 ... Centronics interface, 42 ... Operation panel, 44 ... FCU, 46 ... Engine part, 48 ... AGP, 50, 52 ... PCI bus, 60 ... Mail server, 60a ... mail transmission / reception unit 62 ... terminal 70 ... reading unit 72 ... encryption unit 74 ... input unit 76 ... transmission unit 78 ... encryption processing unit 80 ... password creation unit 82 ... destination selection unit 84 ... Transmission destination direct input unit, 100 ... Network environment, 200 ... Image file, 202, 212 ... Encoded image file, 204, 206 ... transmission destination address, 208, 222 ... password, 210, 220 ... e-mail, 240, 260 ... address book, 300 ... selection screen, 302 ... message, 304, 306 ... button, 320 , 340 ... input screen, 322, 342 ... input item display, 324, 344 ... text box, 326, 346 ... button, 360 ... selection screen, 362 ... message, 364, 366 ... button, 380 ... selection input screen, 382 ... Message, 384 ... column, 386 ... column, 388 ... button, 400 ... input screen, 402 ... destination information display, 404 ... input item display, 406 ... text box, 408 ... button, 420,440 ... setting screen, 422 442 ... Message, 424, 444 ... Pull-down menu, 4 6,446 ... button, 460 ... selection screen, 462 ... message, 464 and 466 ... button, 480 ... code input screen, 482 ... message, 484 ... text box, 488 ... button, P ... manuscript

Claims (5)

Acquisition means for acquiring image data;
Encryption means for encrypting the acquired image data;
Creating means for automatically creating a password for decrypting encrypted image data that can be encrypted;
In response to an external input, an input means for specifying a transmission destination address when transmitting the encrypted image data, and re-specifying a transmission destination address when transmitting the password;
An image communication apparatus comprising: transmission means for transmitting the encrypted image data to a transmission destination address designated by the input means; and transmitting the password to a transmission destination address redesignated by the input means. .   The image communication apparatus further includes a determination unit that compares a transmission destination address of the designated encrypted image data with a transmission destination address of the redesignated password and determines a match between them. The image communication apparatus described in 1.   The image communication apparatus according to claim 2, wherein the determination unit sets a limit on the number of times of re-designation by the input unit when they do not match in the determination.   The image communication apparatus according to claim 2, wherein the determination unit provides a time limit for re-designation by the input unit.   5. The image communication apparatus according to claim 1, wherein the re-designation is performed by directly inputting a transmission destination address or inputting an identification code associated with the transmission destination address.

Images