JP2009177419A - Image processor, information processing method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of confidential documents caused by scanning while knowing that a user scans the confidential documents. <P>SOLUTION: An image processor has an image acquisition means for acquiring images obtained by reading an original manuscript with a reading part, a reduced-image preparation means for preparing reduced images of the images on the basis of the images acquired by the image acquisition means, a determination means for determining whether restricted information, stored in a storage part beforehand, is included in the images acquired by the image acquisition means, a change means for changing the images so as to prevent a user from viewing them when determined by the determination means that the restricted information is included in the images and changing the reduced images corresponding to the images so that the user can identify that the restricted information is included in the images, and a transmission means for transmitting the images and the reduced images, respectively changed by the change means, to a control device. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an image processing apparatus, an information processing method, and a program.

  2. Description of the Related Art Conventionally, a scanned image is transmitted to a folder of a terminal device such as a personal computer using a scanner device or a digital multi-function peripheral equipped with a scanner function.

  As a security function at this time, there is a mechanism in which all scan image results are accumulated in a database on the terminal device side, and an administrator can confirm the scan image later.

  Further, there is a mechanism for setting a user authority for a scan performer to ensure security and prohibiting a scan process in accordance with the user authority (for example, see Patent Document 1). In addition, there is a mechanism in which information for determining whether scanning is prohibited is embedded in the scanned paper medium itself, and this information is determined by the digital multi-function peripheral when scanning is performed, thereby prohibiting scanning processing.

JP 2004-128549 A

  However, in the technique such as Patent Document 1, it is possible to prohibit scanning at the time of executing the scanning process. However, when the scanning is simply prohibited according to the authority, an unauthorized user cannot scan any document. . For this reason, a user who performs a document management task (hereinafter referred to as a document management task) that scans and handles the scanned data cannot be given the authority to prohibit scanning. As a result, the user who performs the document management task cannot be given the authority to prohibit scanning, so that the user can scan any document. That is, the user can scan and hold a high-security document that cannot be handled by the user who originally performs the document management work as electronic data. As a result, there is a concern that a user who performs a document management task may cause information leakage, which has been a problem in recent years.

  In order to solve this problem, a mechanism is conceivable in which it is determined whether or not a document is to be scanned and only documents that are determined to be scannable are scanned. In the case of such a mechanism, since the scanning process itself cannot be performed, the scanned user can determine what kind of document is scanned and cannot be scanned. However, other users (for example, administrators) have a problem that it is impossible to confirm which user has performed what type of scan-prohibited document.

  On the other hand, in recent years, scanned document data is often stored using a document management application in a server without being stored in a personal shared file.

  In this case, if the scanned document is simply stored in the server, the user can view any file, resulting in a security leak. Therefore, it is conceivable to reduce secret leakage by performing control that does not allow scanning according to a document. However, in this case, since no document is stored in the document management application, the administrator cannot understand what document the user is scanning. For this reason, there is a problem that the administrator cannot grasp the state of the company such as what kind of confidential document is being scanned by who and how much.

  In the case of a confidential document, it may be possible to leak confidential information by sending the scanned document to the document management server so that it is not displayed to the user. However, with this method, there is a problem in that it is not clear why the user has not scanned (not displayed) the data, causing inconvenience in business.

  An object of the present invention is to make it possible to grasp that a user has scanned a confidential document and to prevent leakage of the confidential document accompanying the scanning.

  Therefore, the present invention is an image processing apparatus having a reading unit, based on an image acquisition unit that acquires an image obtained by reading a document by the reading unit, and an image acquired by the image acquisition unit. Reduced image creation means for creating a reduced image of the image, and determination means for determining whether or not the image acquired by the image acquisition means includes restriction information stored in advance in a storage unit. When the determination unit determines that the restriction information is included in the image, the image is changed so that the user does not visually recognize the restriction information, and the user includes the restriction information in the image. A change unit that changes the reduced image corresponding to the image, and a transmission unit that transmits the image and the reduced image changed by the change unit to a management device, so that the image can be identified. Characterized in that it has.

  With such a configuration, it is possible to grasp that the user has scanned the confidential document, and it is possible to prevent leakage of the confidential document accompanying the scanning.

  The present invention may be an information processing method and program.

  According to the present invention, it is possible to grasp that the user has scanned the confidential document and to prevent leakage of the confidential document accompanying the scanning.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<Embodiment 1>
FIG. 1 is a diagram illustrating an example of a system configuration.
The management server 100 manages data read by the multifunction machine 120 and is configured by an information processing apparatus such as a general-purpose computer. The management server 100 is communicably connected to the multifunction machine 120 (computer) via the communication network 140 and is installed in a corporate office. More specifically, the management server 100 and the multifunction device 120 are connected by an in-house LAN. Further, on the management server 100, an OS and applications not shown are running.

The multifunction device 120 continuously reads and digitizes the original. Note that the multifunction device 120 may be configured by a client computer and a scanner.
Note that the system shown in FIG. 1 performs user authentication. When the user ID and password are input via the operation panel or the like, the multi function peripheral 120 transmits an authentication request including the user ID and password to the management server 100 via the communication network 140.

  Upon receiving the authentication request, the management server 100 executes authentication based on the user ID and password included in the authentication request and the authentication table, and sends the authentication result to the multi function peripheral 120 via the communication network 140. return. When the authentication is successful, the management server 100 transmits the file transmission destination folder information and the scan authority level information for determining the scan result processing together with the authentication result to the multi function device 120.

  Upon receiving the result of the authentication success, the multifunction device 120 displays a scan setting screen on the operation panel or the like. On the scan setting screen, the user sets scan information such as a file format to be saved (PDF, JPEG, TIFF), resolution, and density, and whether to execute a preview before scanning. After the setting is completed, the user sets original paper in the reading unit or the like of the multifunction device 120 and causes the multifunction device 120 to start scanning processing.

  After the scanning process, the multifunction device 120 digitizes the image data based on the scan settings such as the file format, and the electronic data (hereinafter referred to as a scanned image) and a thumbnail image generated based on the scanned image. The image is temporarily stored in the storage area of the multifunction device 120.

  Here, the multifunction machine 120 executes the OCR process. A prohibited character, which is an example of restriction information, is set (stored) in advance in the multifunction device 120, and the multifunction device 120 checks whether the prohibited character exists when the OCR process is executed.

  The multifunction device 120 determines processing related to the thumbnail image and scan image generation method (or transmission method) based on the check result of the prohibited characters and the scan authority information received from the management server 100. More specifically, when there is a prohibited character or when there is no scanning authority, the multifunction device 120 does not transmit a scanned image, transmits a pre-stored image instead, and stores it in advance. An image in which characters are embedded is created, and processing such as transmitting this image is determined.

At the same time as the above processing, the multifunction device 120 displays a thumbnail image on the operation panel or the like of the multifunction device 120 when the preview display setting is ON. Further, if the user has authority, the multi function peripheral 120 can enlarge the thumbnail image on the operation panel or the like.
When the process is determined, the multi function peripheral 120 transmits, for example, an image (image file) created according to the process to the management server 100 via the communication network 140.

The management server 100 stores, for example, thumbnail images and scan images received from the multifunction device 120 in a designated user folder.
At the same time, the management server 100 registers the thumbnail image received from the MFP 120 in the database 110 that is directly connected to the management server 100. Here, the database 110 is a database management system, and may be installed in the management server 100 or may be installed in a computer or the like directly connected to the management server 100.

After the image transmission, the multifunction device 120 deletes the image stored in the storage area of the multifunction device 120.
A general user can acquire thumbnail images and scan images stored in a user-specified folder of the management server 100 via the multifunction device 120 or the client device 150 (scan user terminal).
It is assumed that there are a plurality of multifunction devices 120 in the system depending on the user environment.

  An administrator (system administrator) connects to the management server 100 via the communication network 140 from the MFP 120 or an administrator terminal (not shown). Then, the administrator logs in the management server 100 after inputting the user ID and password for the administrator. The administrator can search for thumbnail information stored in the database 110 and confirm the display by setting search conditions via the MFP 120 or an administrator terminal (not shown).

Further, the administrator can confirm the detailed data of the image (or data) corresponding to the thumbnail by selecting a specific thumbnail.
As a warning function, when the multifunction device 120 scans forbidden characters, an email may be automatically transmitted to the email address set in advance by the management server 100.

  Further, a document management application may be mounted on the management server 100, and a client document management application capable of communicating with the document management application of the management server 100 may be mounted on the multifunction peripheral 120 or the client device 150. By doing so, the multifunction device 120 or the client device 150 can browse the scan data scanned by itself.

The management server 100 manages the scanned images for each logged-in (scanned) user as shown in FIG. 2, and displays a virtual folder corresponding to this folder in a document management application such as a client. Display on the screen. Here, FIG. 2 is a diagram illustrating an example of a virtual folder corresponding to the folder and data stored in the folder.
The management server 100 stores the scanned image in one folder, displays a virtual folder for each user when displaying it on a document management application such as a client, and displays the user's file group in the folder. You may do it.

FIG. 3 is a diagram illustrating an example of a hardware configuration of the management server 100 and the client device 150. Details will be described below with the management server 100 as an example.
As shown in FIG. 3, the management server 100 includes a CPU 201, a RAM 202, a ROM 203, a LAN adapter 204, a video adapter 205, a keyboard 206, a pointing device such as a mouse 207, a hard disk 208, and a recording medium drive 209. These components are connected to each other via a system bus 200. However, in reality, an interface circuit, a chip set, and the like exist among the CPU 201, the recording medium drive 209, and the system bus 200, but are omitted in FIG.

  The system bus 200 is various system buses such as a PCI bus and an AGP bus, and a plurality of system buses are usually connected via a so-called chip set, but are omitted in FIG.

  The CPU 201 realizes functions described later or processing according to a flowchart by sequentially reading and executing a program stored in the ROM 203 or the hard disk 208 or the like after being stored in the RAM 202.

The RAM 202 is a memory for temporarily storing various data including an array and variables used when a part of the OS and the program are loaded and the program is executed under the control of the CPU 201.
The ROM 203 stores a control program (so-called BIOS) for each hardware. Note that the ROM 203 can also store a part of an operating system (OS).

A LAN adapter (network interface card) 204 is a communication interface for connecting the management server 100 to a network.
The video adapter 205 is a so-called video graphic adapter (VGA) to which various displays such as a liquid crystal display are connected.

  The hard disk 208 stores an OS and various application programs including screen information (information for displaying a screen on a display or the like described in itml, CGI, or the like).

The hard disk 208 also stores image data, management information for managing the image data, a program for transmitting / receiving (including transferring) the image data, and the like.
The recording medium drive 209 is a drive device that can read data on a recording medium such as a CD-ROM drive, a DVD-ROM drive, or a DVD-R drive.

  FIG. 4 is a diagram illustrating an example of a hardware configuration of the multifunction machine 120. Similar to the management server 100, the multifunction device 120 includes a system bus 30, a CPU 31, a RAM 32, a ROM 33, a LAN adapter 34, and a hard disk 38. Further, the multi function peripheral 120 has a liquid crystal panel & I / F 35, a communication line I / F 36, a scan engine 37, and a print engine 39.

  The liquid crystal panel & I / F 35 includes an operation panel (touch panel) and has a display function and a data input function. The communication I / F 36 controls an interface such as a USB and can connect to the management server 100 or the client device 150. The scan engine 37 optically reads a document image, converts it into digital image data, and inputs the digital image data to the multifunction device 120. The print engine 39 prints data or the like input from the scan engine 37 on paper or the like.

The hard disk 38 of the multifunction machine 120 stores a transfer program for transferring image data to the management server 100 or the client apparatus 150 via the communication I / F 36 or the LAN adapter 34 in addition to the system program.
The CPU 31 stores a program stored in the ROM 33 or the hard disk 38 in the RAM 32, and then sequentially reads and executes the program, thereby realizing functions to be described later or processing according to a flowchart.

FIG. 5A is a flowchart (part 1) illustrating an example of scan processing executed by the system. FIG. 5B is a flowchart (part 2) illustrating an example of a scan process executed by the system. FIG. 5C is a flowchart (part 3) illustrating an example of a scan process executed by the system.
The multi function peripheral 120 inputs the user ID and password input via the operation panel (user information input) (step S401).

The multi function peripheral 120 transmits the input user ID and password to the management server 100 (step S402).
The management server 100 receives the user ID and password (step S403).
Based on the user ID and password, the management server 100 refers to the authentication table shown in FIG. 6 stored in the hard disk of the management server 100 and performs authentication (step S404). Here, FIG. 6 is a diagram illustrating an example of the authentication table. In the authentication table shown in FIG. 6, for example, each item is set in a text file or the like separated by commas, and information for one user is set in one line. Note that # in the first line is registered as a character that is not read. In the example of FIG. 6, authentication information relating to four users is registered.
The management server 100 regards that the authentication is successful when the user ID and password corresponding to the authentication table exist.

When the authentication is successful, the management server 100 acquires the user authority information (user name, thumbnail level, scan level, preview level, storage destination, PDF password) of the authentication table, and the MFP together with the authentication result indicating that the authentication is successful. It transmits to 120 (step S405). Here, FIG. 7 is a diagram illustrating an example of setting items of the authentication table.
As shown in FIG. 7, in the authentication table, PDFWDWD (PDF password) can be omitted. However, when omitted, it is assumed that a password cannot be set in the PDF.

Returning to the description of FIG. 5A again, if the corresponding user ID does not exist or the password is different, the management server 100 regards it as an authentication failure, and returns an authentication result indicating that the authentication has failed to the MFP 120 ( S406).
In this embodiment, the system is described as performing authentication using a user ID and a password. However, card information acquired from an IC card held over a card information reading device connected to the multifunction device 120 is described. Etc. may be used for authentication.

The multi function peripheral 120 receives information indicating that the authentication was successful and user authority information from the management server 100 (acquires user authority information) (step S407). At this time, the multifunction device 120 displays the user name acquired in step S401 on the operation panel of the multifunction device 120, assuming that the authentication is successful.
Next, the multifunction device 120 determines a scan format in accordance with a user setting operation (or selection operation) via the operation panel (step S408). Note that the user uses the operation panel to set the file format, resolution, reading density, preview display, page-by-page division, double-sided original, and mixed originals shown in FIG. FIG. 8 is a diagram illustrating an example of setting items in the scan setting table.

Next, the multifunction machine 120 detects that the original document to be scanned is set on the scanner original table (step S409).
Next, the multifunction device 120 detects pressing of the scan button (step S410). Then, the multifunction device 120 determines whether the scan has been performed normally (step S411).

If the scan is not normally performed due to a paper jam or the like, the multi function peripheral 120 displays on the operation panel that the scan has failed (step S412). When a message indicating that scanning has failed is displayed on the operation panel, the user sets document paper on the scanner 130 and presses the scan button again.
On the other hand, when the scan is normally performed, the multi function peripheral 120 generates a scan image from the read document based on the scan format determined in S408 (step S413). Then, the multifunction machine 120 saves the generated scan image in a storage area in the multifunction machine 120 (step S414).

  Next, the multifunction device 120 acquires the scanned image stored in the storage area (hard disk or RAM) (image acquisition), and based on the thumbnail image quality, thumbnail image file format, and the like set in FIG. A thumbnail image is created (reduced image creation) (step S415). Here, FIG. 9 is a diagram illustrating an example of setting items of the administrator setting table. Note that the administrator setting table is set and created by the administrator in the management server 100. Among the set information, prohibited character setting, prohibited character, processing when prohibited character, scan image file name, thumbnail image file name, replacement image, and thumbnail image file format are automatically set by the management server 100 for all multifunction devices. Delivered to. In addition, it is assumed that the items in FIG. 9, WordThumbnailLevel and WordScanLevel in the process for prohibited characters, are set for each item and prohibited character. Setting information such as prohibited characters is stored in the storage unit of the hard disk 38.

The multifunction device 120 stores the generated thumbnail image (reduced image) in a storage area in the multifunction device 120 (step S416). Note that the multifunction device 120 stores (or manages) the thumbnail image and the scan image used when generating (creating) the thumbnail image in association with each other.
The multi function peripheral 120 checks whether or not the scan format preview display setting determined in step S408 is ON (step S417). If the preview display setting is on, the multi function peripheral 120 performs a preview display process (step S418), and then proceeds to step S419. Details of the process in step S418 will be described with reference to FIG.

On the other hand, when the preview display setting is OFF, the multi function peripheral 120 performs OCR processing on the scanned image (step S419).
The multifunction device 120 checks (determines) whether or not the prohibited characters set in FIG. 9 are present in the scanned image based on the execution result of the OCR process (step S420). Note that instead of the prohibited characters, prohibited graphics may be set in the administrator setting table, and the multi function device 120 may check whether or not the prohibited graphics are known in the scanned image.

When the prohibited character is present in the scanned image, the multi function peripheral 120 transmits the thumbnail image corresponding to the scanned image, the prohibited character information, and the user name (UserName) acquired in step S407 to the management server 100 (step S421). The process proceeds to step S424.
Upon receiving the data (step S422), the management server 100 sends a mail containing a thumbnail image, prohibited character information, and a user name to the warning mail transmission destination mail address set in the administrator setting item of FIG. Transmit (step S423).
If there is no prohibited character, the multi function peripheral 120 performs a process of determining a scan image to be transmitted (step S424). Details of the processing in step S424 will be described with reference to FIG.

Subsequently, the multi function peripheral 120 performs processing for determining the transmission result of the thumbnail image (step S425). Details of the processing in step S425 will be described with reference to FIG.
The multi function peripheral 120 transmits the scan image determined in step S424 and the thumbnail image determined in step S425 to the management server 100 (step S426). At this time, the multifunction device 120 receives the file storage destination folder information acquired in step S407, information on the prohibited character and the location where the prohibited character exists, user authority information, and the IP address of the multifunction device 120 if the prohibited character exists. The address information is also transmitted to the management server 100. In addition, the multifunction device 120 also transmits the scan image processing result determined in step S424 and the thumbnail image processing result determined in step S425 to the management server 100 together.

The management server 100 receives the scanned image and thumbnail image, file storage folder information, image processing result, prohibited character information, and the like (step S427). Then, the management server 100 stores the scanned image and the thumbnail image in the received file storage destination folder (step S428). See Fig. 2 for the image of the destination folder and file.
Here, if the save destination folder does not exist, the management server 100 creates the folder and saves the scanned image and the thumbnail image. Note that the management server 100 follows the items shown in FIG. 9, the scanned image file name and the thumbnail image file name as the file name naming rule when saving the file.
Furthermore, the management server 100 stores thumbnail images (thumbnail files) in the database 110. At this time, the management server 100 associates and stores the image processing result, the prohibited character information, the user authority information, and the IP address information of the multifunction device 120 with respect to the thumbnail image. If the scanned user does not have the authority to create a scanned image and a thumbnail image, the image may not be transmitted to the management server 100.

  After confirming that data transmission has been completed normally to the management server 100, the multi function peripheral 120 deletes the scanned image and thumbnail image stored in the storage area of the multi function peripheral 120 (step 429).

FIG. 10 is a flowchart illustrating an example of the preview display process.
The multi function peripheral 120 determines whether or not there is a preview display authority based on the preview display authority (PreviewLevel) acquired in step S407 of FIG. 5A (step S501). Here, FIG. 11 is a diagram for explaining authority levels of a thumbnail transmission authority, a scan image generation authority, and a preview display authority. For example, if the preview display authority acquired in step S407 is 1, the multi function peripheral 120 determines that there is no preview display authority from FIG. 11, and if the preview display authority is 2 or 3, 11 determines that the user has the right to display the preview.

  If it is determined that the user has no preview display authority, the multi function peripheral 120 displays a message indicating that the user does not have preview display authority on the operation panel of the multi function peripheral 120 (step 502). Note that the multi function device 120 displays a message set in the preview prohibition display of the administrator setting table on the operation panel. For example, as an example of the message, there is “no authority to execute scanning”.

If it is determined that the user has the preview display authority, the multi function peripheral 120 acquires thumbnail images stored in the storage area of the multi function peripheral 120 (step 503). Then, the multifunction device 120 displays the acquired thumbnail image on the operation panel (step S504).
The multi function peripheral 120 determines whether or not there is a preview display enlargement authority based on the preview display authority (PreviewLevel) acquired in step S407 of FIG. 5A (step S505). For example, if the preview display authority acquired in step S407 is 2, the multi function peripheral 120 determines from FIG. 11 that there is no preview display enlargement authority. If the preview display authority is 3, the MFP 120 determines from FIG. It is determined that the user has authority to enlarge the preview display.

  If it is determined that there is no preview display enlargement authority, the multifunction peripheral 120 ends the processing shown in FIG. On the other hand, if it is determined that the user has authority to enlarge the preview display, the multi function peripheral 120 determines whether the enlarge button has been pressed (step S506).

When the enlarge button is pressed, the multi function peripheral 120 generates an enlarged thumbnail image (step S507), and displays the generated enlarged thumbnail image as a preview (step S508). Next, the multi function peripheral 120 stores the generated thumbnail image in the storage area of the multi function peripheral 120 (step 509). This is because, when the preview display is returned to the original size image display and the enlargement button is pressed again, the enlarged image once created is diverted and used.
On the other hand, if the enlarge button has not been pressed, the multifunction machine 120 ends the process shown in FIG.

FIG. 12 is a flowchart illustrating an example of a process for determining a scan image to be transmitted.
The multi function peripheral 120 determines a processing method based on the scan image generation authority (ScanLevel) acquired in step S407 in FIG. 5A and information on whether or not there is a prohibited character in step S420 in FIG. S601). It should be noted that the selection of “do not send scan image” is also included in one of the processing options for determining the scan image to be sent.
Here, FIG. 13 is a diagram for explaining the processing method.

The processing when there is a prohibited character is valid only when “ScanLevel = 3”.
For example, the MFP 120 is
If “ScanLevel = 1”, go to step S602.
If “ScanLevel = 2”, go to Step S607.
If “ScanLevel = 4”, go to step S610.
If “ScanLevel = 3” and there are no prohibited characters, go to step S610.
Transition.
In addition, the multifunction machine 120
If “ScanLevel = 3” and there are prohibited characters, the processing is changed according to the scan image generation processing method level (WordScanLevel).
For example,
If “WordScanLevel = 1”, go to step S603.
If “WordScanLevel = 2”, go to step S604.
If “WordScanLevel = 3”, go to step S607.
Transition.

When the process proceeds to step S <b> 602, the multi function peripheral 120 stores information that the scan image is not transmitted in the storage area.
When the process proceeds to step S603, the multi function peripheral 120 reads an image (designated image) stored in the storage area of the multi function peripheral 120, which is set in the item of FIG. 9, the replacement image, and sets it as a scan transmission image. . Replacing confidential documents that the scan executor does not want to scan with these preset images allows the scan executor to check the image with a message from the administrator after the scan is executed. Thus, it can be easily confirmed that the document is a confidential document. Note that the replacement image may be a blank image. The blank image (image data) may be stored in advance in the storage area of the multifunction device 120 as described above, or the multifunction device 120 creates and replaces blank image data during the process of step S603. You may do it. In other words, if there is a prohibited character, the image data is changed so that it cannot be visually recognized by the user.

  When the process proceeds to step S604, the MFP 120 sets the prohibited characters as shown in FIG. 14A stored in the storage area of the MFP 120, which are set with the items and prohibited characters in FIG. The information and the scanned image stored in the storage area of the multifunction device 120 are acquired. Then, the multi function peripheral 120 creates an image file (restricted information embedded image) as shown in FIG. 14B in which prohibited character information is embedded in the scanned image (step S605). Next, the multifunction device 120 stores the created image in the storage area of the multifunction device 120 (step S606). FIG. 14 is a diagram illustrating an example of prohibited character information and an image file in which the prohibited characters are embedded.

  The multifunction device 120 creates an image in which such a prohibited character set in advance is embedded in a confidential document that the scan executor does not want to scan, and transmits the image to the management server 100. In this way, the scan executor can easily confirm that the document is a confidential document by confirming the image with the message from the administrator after the scan is performed. Further, unlike the image replacement, since the actually scanned image can be confirmed, the scan executor can actually confirm what kind of document the confidential document is. Further, according to such a usage method, it is not desired to use the same scan image, but an operation in which an image including characters such as “sample” can be used can be used. In other words, if there is a prohibited character, the image data is changed so that it cannot be visually recognized by the user.

  When the process proceeds to step S <b> 607, the multi function peripheral 120 acquires the PDF password acquired in step S <b> 407 in FIG. 5A and the scan image stored in the storage area of the multi function peripheral 120. Then, the multifunction machine 120 sets a PDF password for the scanned image (step S608). Scanned image with password set (password-set image) At this time, if a format other than PDF is selected as the format of the scanned image, the multi function device 120 assigns a password and creates a data file of the selected format. . The multi function peripheral 120 stores the created image (password setting image) in the storage area of the multi function peripheral 120 (step S609). In other words, if there are prohibited characters, image data is set so that the user cannot easily see it by setting a password.

  When the process proceeds to step S <b> 610, the multi function peripheral 120 acquires a scan image stored in the storage area of the multi function peripheral 120.

FIG. 15 is a flowchart illustrating an example of a process for determining a thumbnail image to be transmitted.
The multifunction device 120 determines a thumbnail image to be transmitted based on the generation / storage authority (ThumbnailLevel) of the thumbnail image acquired in step S407 in FIG. 5A and information on whether or not there is a prohibited character in step S420 in FIG. 5B. (Step S701). Here, it is assumed that the selection of “not transmitting thumbnail images” is included in one of the processing options for determining the thumbnail images to be transmitted.

Note that the processing when there is a prohibited character is valid only when “ThumbnailLevel = 3”.
For example, the MFP 120 is
If “ThumbnailLevel = 2”, go to step S702.
If “ThumbnailLevel = 4”, go to step S707.
If “ThumbnailLevel = 3” and there are no prohibited characters, go to step S707.
Transition.
In addition, the multifunction machine 120
If “ThumbnailLevel = 3” and there are prohibited characters, the process is changed according to the thumbnail generation processing method level (WordThumbnailLevel).
For example,
If “Word Thumbnail Level = 1”, go to Step S703.
In the case of “Word Thumbnail Level = 2”, go to Step S704.
Transition.

When the process proceeds to step S <b> 702, the multi function peripheral 120 stores information that the thumbnail image is not transmitted in the storage area. (Step S702)
When the process proceeds to step S703, the multi function peripheral 120 reads the image file stored in the storage area of the multi function peripheral 120, which is set in the item of FIG. 9, and is set as a thumbnail transmission image. Replacing confidential documents that the scan executor does not want to scan with these preset images allows the scan executor to check the image with a message from the administrator after the scan is executed. Thus, it can be easily confirmed that the document is a confidential document. Note that the replacement image may be a blank image. The blank image (image data) may be stored in advance in the storage area of the multifunction device 120 as described above, or the multifunction device 120 creates and replaces blank image data during the process of step S703. You may do it. That is, the user (scanner) can identify that the prohibited characters (restriction information) were included in the image.

  When the process proceeds to step S704, the MFP 120 sets the prohibited characters as shown in FIG. 14A stored in the storage area of the MFP 120, which are set with the items and prohibited characters in FIG. Information and thumbnail images stored in the storage area of the multifunction peripheral 120 are acquired. Then, the multifunction device 120 creates an image file (restricted information embedded reduced image) in which prohibited characters are embedded in the thumbnail image (step S705). Next, the multifunction device 120 stores the created image in the storage area of the multifunction device 120 (step S706).

  The multifunction device 120 creates a thumbnail image in which such a prohibited character set in advance is embedded in a confidential document that the scan executor does not want to scan, and transmits the thumbnail image to the management server 100. The scan executor can easily confirm that the document is a confidential document by confirming the image with a message from the administrator after the scan is performed. Further, unlike the image replacement, since the actually scanned image can be confirmed, the scan executor can actually confirm what kind of document the confidential document is. That is, the user (administrator) can identify that the prohibited characters (restriction information) are included in the image.

  When the process proceeds to step S <b> 707, the multi function peripheral 120 acquires thumbnail images stored in the storage area of the multi function peripheral 120.

FIG. 16 is a flowchart illustrating an example of processing for searching and browsing thumbnail images stored in the database 110 connected to the management server 100.
The multifunction device 120 inputs the user ID and password input via the keyboard or the like (step S801). In the following, processing of the multifunction device 120 and the management server 100 will be described, but the multifunction device 120 may be read as the client device 150.

The multifunction device 120 transmits the input user ID and password to the management server 100 (step S802).
The management server 100 receives the user ID and password (step S803).
The management server 100 refers to the authentication table shown in FIG. 6 and performs authentication based on the user ID and password (step S804). The management server 100 is authenticated successfully when the user ID and password corresponding to the authentication table exist and the user level (UserLevel) of the system authority in the authentication table is 2 (viewer) or 3 (administrator). It is considered. On the other hand, when the corresponding user ID does not exist, the password is different, or the user level of the system authority is 1, the management server 100 regards the authentication failure.
The management server 100 returns the authentication result to the multi function peripheral 120 (step S805).

  When the authentication result indicating that the authentication is successful is returned, the multi function peripheral 120 displays a search condition input screen as shown in FIG. 17 on the operation panel or the like (step S806). The user inputs an item (search condition) to be searched on the screen as shown in FIG. 17 and presses the search button. The multifunction device 120 that has detected that the search button has been pressed transmits the input search condition to the management server 100 (step S807). Here, FIG. 17 is a diagram illustrating an example of a search condition input screen. As shown in the screen of FIG. 17, for example, the user can search by a user name, search by specifying a storage period, or search by specifying a stored scanner or multifunction device IP address. Is possible.

  The management server 100 that has received the search condition issues an SQL command to the connected database 110 and acquires a thumbnail image that matches the search condition. In addition, the management server 100 transmits the acquired thumbnail image list information to the MFP 120 as a result of the search (step S808).

  The multifunction device 120 displays a search result list display screen on the operation panel or the like as shown in FIG. 18 including the received search results (step S809). FIG. 18 is a diagram illustrating an example of a search result list display screen. As shown in FIG. 18, one or more thumbnail images that match the search conditions are displayed on the search result list display screen. The search result list display screen displays the file name, file save date, and user name as reference information for each thumbnail image. That is, the management server 100 transmits the thumbnail image list information together with the thumbnail image together with the file name, the file storage date, and the user name to the multifunction device 120.

When the user wants to confirm the detailed information of the thumbnail image from the search result list, the user presses the detail button below the thumbnail image or the thumbnail image. The multifunction device 120 transmits information (file name, file save date, etc.) of the selected thumbnail image to the management server 100 (step S810).
The management server 100 that has received the information of the selected thumbnail image acquires detailed information of the corresponding thumbnail image based on the information, and returns it to the multifunction device 120 (step S811).

The multifunction device 120 that has received the detailed information displays a thumbnail detailed information display screen as shown in FIG. 19 on the operation panel or the like (step S812). FIG. 19 is a diagram (part 1) illustrating an example of a detailed thumbnail information display screen. As shown in FIG. 19, the thumbnail detailed information display screen includes a job name, save date, number of pages, size, IP address, computer name, administrator authority, file save destination, file save result, and existence result of prohibited characters. Detailed information such as a mail transmission result is displayed.
The user (administrator) can confirm more detailed information by confirming these pieces of information.

If the selected thumbnail image is a thumbnail image in which prohibited characters are embedded, the multi function peripheral 120 displays a thumbnail detailed information display screen as shown in FIG. 20 on the operation panel or the like. FIG. 20 is a diagram (part 2) illustrating an example of the detailed thumbnail information display screen. As shown in FIG. 20, on the thumbnail detailed information display screen of the thumbnail image in which prohibited characters are embedded, information on what prohibited characters are present in which locations is displayed as the prohibited character information. In addition, the thumbnail images are colored at the prohibited characters. Therefore, the administrator can easily confirm what forbidden characters exist in which place.
In the present embodiment, the screen is displayed on the operation panel. However, the screen may be displayed on a display device connected to the multi function peripheral 120.

FIG. 21 is a diagram illustrating an example of a functional configuration of the system.
The authentication function 902 of the multifunction device 120 inputs a user ID and a password and requests the management server 100 for authentication. The management server 100 that has received the user ID and password refers to the authentication table 910 as shown in FIG. 6 and performs authentication. If the authentication is successful, the management server 100 transmits user authority information to the multi function peripheral 120.

  The scan function 903 of the multifunction device 120 executes a scan and saves the scanned image in the storage area 908 of the multifunction device 120. The thumbnail generation function 904 of the multifunction device 120 reads a scan image from the storage area 908, generates a thumbnail image based on the scan image, and stores the thumbnail image in the storage area 908.

  A preview function 905 of the multifunction device 120 reads a thumbnail image from the storage area 908 and displays a preview on the operation panel or the like. When the preview screen is enlarged, the preview function 905 saves the enlarged thumbnail image in the storage area 908.

  A scan image / thumbnail image creation function 907 of the MFP 120 reads a thumbnail image, a scan image, a prohibited character, a replacement image, and the like from the storage area 908 and recreates the scan image and thumbnail image for transmission as necessary. To do. Then, the transmission function 906 of the multifunction device 120 transmits the scanned image and the thumbnail image to the management server 100.

Upon receiving the scanned image and the thumbnail image, the management server 100 stores the scanned image and the thumbnail image in the designated folder, and simultaneously stores the thumbnail image in the database (storage area) 912.
The administrator setting function 911 of the management server 100 creates an administrator setting table as shown in FIG.

<Embodiment 2>
In the present embodiment, an example of processing for switching the display of thumbnail images managed in the management server 100 according to the display mode will be described.
Since the process of logging in to the management server 100 is the same as that of FIG. 16 of the first embodiment, the processes after S805 will be described with reference to the flowchart of FIG.
FIG. 22 is a flowchart illustrating an example of a display control process for switching the display of thumbnail images according to the display mode. In the following, processing of the multifunction device 120 and the management server 100 will be described, but the multifunction device 120 may be read as the client device 150.

  The multifunction device 120 acquires virtual folder information (folder structure) for each user from the management server 100, and on the document management application of the multifunction device 120 based on the acquired information, as indicated by 2101 in FIG. 23 or 2203 in FIG. A virtual folder is displayed (step S2000). Here, FIG. 23 is a diagram illustrating an example of a thumbnail image display in the normal mode. FIG. 24 is a diagram showing an example of thumbnail image display in the restricted file mode (restricted mode).

  The multi function peripheral 120 determines whether or not there is an input to the virtual folder displayed on the document management application (step S2001). If there is an input, the multifunction machine 120 proceeds to step S2002, and if there is no input, repeats the process of step S2001.

  In step S2002, the multi function peripheral 120 acquires information (display mode information) regarding the currently displayed display mode. This display mode information is information for identifying the normal mode and the restricted file mode. Here, the normal mode is a display mode in which all files stored in the virtual folder in FIGS. 23 and 24 are displayed as thumbnails. On the other hand, the restricted file mode is a file that is restricted by the processing in step S603 in FIG. 12 in the first embodiment, step S604 to step S606, or step S607 to step S609 in the files stored in the virtual folder. This is a display mode for displaying thumbnails.

The multi function peripheral 120 transmits access folder information, which is information on the accessed folder (for example, a folder name), and display mode information to the management server 100 (step S2003).
The management server 100 receives the access folder information and the display mode information from the multi function device 120 (step S2004).

The management server 100 determines whether or not the received access folder information is a folder accessible by the user authenticated in S804 of FIG. 16 in the first embodiment (step S2005). If the management server 100 determines that the user is an accessible user, the process advances to step S2007. If the management server 100 determines that the user cannot be accessed, the management server 100 transmits error information to the multi function peripheral 120.
In step S2006, the MFP 120 that has received the error information displays error information indicating that the designated virtual folder cannot be accessed on the operation panel or the like.

On the other hand, in step S2007, the management server 100 determines whether or not the received display mode information is the normal mode. If it is the normal mode, the management server 100 proceeds to S2008, and if not the normal mode (if it is the restricted file mode), the management server 100 proceeds to S2009.
In step S2008, the management server 100 acquires thumbnail images of all files stored in the folder corresponding to the received access folder information, and transmits the thumbnail images to the multifunction device 120.

  On the other hand, in step S2009, the management server 100, among the files stored in the folder corresponding to the received access folder information, in step S603 in FIG. 12 of the first embodiment, or step S604 to step S606, or step S607. A thumbnail of the file restricted in the process of step S609 is acquired and transmitted to the multifunction device 120. The management server 100 determines whether or not the file is restricted based on the information shown in the job information details of FIG. 20 recorded in association with the file. For example, when “scanned image: replaced image storage” is stored, the management server 100 regards the file as a restricted file, acquires a thumbnail of the file, and transmits the thumbnail to the multifunction device 120. In addition, the management server 100 transmits identification information for enabling identification of which file is currently displayed in the entire file and which file is the restricted file in the entire file to the multifunction peripheral 120. To do.

In step S2012, the multifunction peripheral 120 receives the information transmitted by the management server 100 in step S2008 or step S2009.
Next, the MFP 120 updates (displays control) the display of the document management application according to the received information (step S2013). The thumbnail is displayed as 2103 in FIG. 23 or 2204 in FIG. When the identification information transmitted in step S2009 is received, the multifunction device 120 highlights the corresponding file icons as 2201 and 2202 in the display area 2203 in FIG.

  Next, the multi function peripheral 120 determines whether or not the display mode of the document management application has been switched. If the multifunction device 120 determines that the display mode has been switched, the process returns to step S2002. If the multifunction device 120 determines that the display mode has not been switched, the multifunction device 120 ends the processing illustrated in FIG. Note that the display mode is switched between the display as shown in FIG. 23 and the display as shown in FIG.

When the MFP 120 detects that a thumbnail is specified and an execution instruction such as double-clicking is performed, for example, the MFP 120 acquires a file (scanned image) corresponding to the thumbnail specified from the management server 100, and Display on the operation panel.
By performing such processing, it is possible to easily confirm whether the image scanned by the administrator or the scan user is properly scanned or has been scanned with restrictions.

  In the present embodiment, the process illustrated in FIG. 22 has been described using an example in which a scanned user browses, but the process is the same when the administrator browses. If the administrator browses, it is determined Yes in step S2005, and the process proceeds to step S2007.

As described above, according to each of the above-described embodiments, the administrator can visually and easily confirm what kind of image scanning process the user has attempted to execute.
Further, according to each of the above-described embodiments, when a scan performer scans a highly confidential paper medium including prohibited characters, the scan image is replaced with a predetermined replacement image, and the management server Sent to 100 and stored. On the other hand, as the thumbnail image, a thumbnail image created from the scanned image is transmitted to the management server 100 and stored. By doing so, since the scan image is not transmitted to the scan performer (the scan image cannot be referred to), there is an effect of preventing leakage of the confidential document. Further, the scan executor can recognize what kind of document the confidential document is by confirming the thumbnail image.

  Further, in the above-described system, when a highly confidential paper medium including prohibited characters is scanned, the administrator may be notified by mail to that effect. With this configuration, the administrator can grasp the scan status of the confidential document in real time.

  Further, according to each of the above-described embodiments, all the scan processing is executed, but based on whether or not prohibited characters exist in the scanned image and the scan authority of the scan performer, the file to be saved is replaced with the replacement image. Flexible operation such as replacement can be performed. Therefore, it is possible to prevent leakage of confidential documents in parallel while performing normal scanning operations.

In addition, according to each of the above-described embodiments, the thumbnail image must be created and transmitted regardless of what scan executor scans any confidential document. It is possible to easily grasp whether a scan has been made.
As described above, according to each of the above-described embodiments, it is possible for an administrator to understand what type of confidential document is being scanned, and for a user to be able to understand that a confidential document has been scanned. , Leakage of confidential documents due to scanning can be prevented.
Further, according to the above-described embodiments, it is possible to grasp that the user has scanned the confidential document, and it is possible to prevent leakage of the confidential document accompanying the scanning.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

It is a figure which shows an example of a system configuration. It is a figure which shows an example of the data stored in the virtual folder corresponding to a folder, and a folder. 2 is a diagram illustrating an example of a hardware configuration of a management server 100 and a client device 150. FIG. 2 is a diagram illustrating an example of a hardware configuration of a multifunction machine 120. FIG. It is a flowchart (the 1) which shows an example of the scanning process performed by a system. It is a flowchart (the 2) which shows an example of the scanning process performed by a system. 12 is a flowchart (part 3) illustrating an example of scan processing executed by the system. It is a figure which shows an example of an authentication table. It is a figure which shows an example of the setting item of an authentication table. It is a figure which shows an example of the setting item of a scan setting table. It is a figure which shows an example of the setting item of an administrator setting table. It is a flowchart which shows an example of a preview display process. It is a figure for demonstrating the authority level of a thumbnail transmission authority, a scanning image generation authority, and a preview display authority. It is a flowchart which shows an example of the determination process of the scanned image to transmit. It is a figure for demonstrating a processing method. It is a figure which shows an example of the image file which embedded the information of the prohibited character, and the prohibited character. It is a flowchart which shows an example of the determination process of the thumbnail image to transmit. 4 is a flowchart illustrating an example of processing for searching for and browsing thumbnail images stored in a database 110 connected to a management server 100. It is a figure which shows an example of a search condition input screen. It is a figure which shows an example of a search result list display screen. FIG. 10 is a first diagram illustrating an example of a thumbnail detailed information display screen. It is FIG. (2) which shows an example of a thumbnail detailed information display screen. It is the figure which showed an example of the function structure of the system. It is a flowchart which shows an example of the display control process which switches the display of a thumbnail image according to a display mode. It is a figure which shows an example of the display of the thumbnail image in normal mode. It is a figure which shows an example of the display of the thumbnail image in a restriction | limiting file mode.

Explanation of symbols

100 Management server 120 MFP

Claims (12)

An image processing apparatus having a reading unit,
Image acquisition means for acquiring an image obtained by reading a document by the reading unit;
Reduced image creating means for creating a reduced image of the image based on the image obtained by the image obtaining means;
A determination unit that determines whether or not the image acquired by the image acquisition unit includes restriction information stored in advance in a storage unit;
When the determination unit determines that the restriction information is included in the image, the image is changed so that the user does not visually recognize the image, and the user identifies that the restriction information is included in the image. Change means for changing the reduced image corresponding to the image;
Transmitting means for transmitting the image and the reduced image changed by the changing means to a management device;
An image processing apparatus comprising:   The changing means changes the image by replacing the image acquired by the image acquiring means with a designated image when the determining means determines that the restriction information is included in the image. The image processing apparatus according to claim 1.   When the determination unit determines that the restriction information is included in the image, the changing unit creates a restriction information embedded image in which the restriction information is embedded in the image, and the image is used as the restriction information. The image processing apparatus according to claim 1, wherein the image is changed by replacing with an embedded image.   When the determination unit determines that the restriction information is included in the image, the changing unit creates a password setting image in which a password is set in the image, and replaces the image with the password setting image. The image processing apparatus according to claim 1, wherein the image is changed by the method.   The changing unit changes the reduced image by replacing the reduced image corresponding to the image with a designated image when the determining unit determines that the restriction information is included in the image. The image processing apparatus according to any one of claims 1 to 4.   The changing means creates a restricted information embedded reduced image in which the restricted information is embedded in a reduced image corresponding to the image when the determining means determines that the restricted information is included in the image, The image processing apparatus according to claim 1, wherein the reduced image is changed by replacing the reduced image with the restriction information embedded reduced image.   When the determination unit determines that the restriction information is not included in the image, the transmission unit includes the image acquired by the image acquisition unit and the reduced image generated by the reduced image generation unit. The image processing apparatus according to claim 1, wherein the image processing apparatus is transmitted to the management apparatus. User information input means for inputting user information;
User authority information acquisition means for acquiring user authority information according to the user information input by the user information input means;
Further comprising
8. The method according to claim 1, wherein the changing unit changes a method for changing the image and the reduced image according to the user authority information acquired by the user authority information acquiring unit. 9. Image processing apparatus.   The image processing apparatus according to claim 1, further comprising display control means for switching display related to the reduced image in accordance with a display mode.   When the restriction mode is selected as the display mode, the display control means displays a reduced image corresponding to the image determined to contain restriction information by the determination means, and the normal mode is set as the display mode. The image processing apparatus according to claim 9, wherein, when selected, a reduced image corresponding to the image acquired by the image acquisition unit is displayed. An information processing method in an image processing apparatus having a reading unit,
An image acquisition step of acquiring an image obtained by reading a document by the reading unit;
A reduced image creating step for creating a reduced image of the image based on the image obtained in the image obtaining step;
A determination step of determining whether or not the image acquired in the image acquisition step includes restriction information stored in advance in a storage unit;
If it is determined in the determination step that the restriction information is included in the image, the image is changed so as not to be visually recognized by the user, and the user identifies that the restriction information is included in the image. A changing step for changing the reduced image corresponding to the image,
A transmission step of transmitting the image and the reduced image changed in the changing step to a management device;
An information processing method characterized by comprising: To a computer having a reading unit,
An image acquisition step of acquiring an image obtained by reading a document by the reading unit;
A reduced image creating step for creating a reduced image of the image based on the image obtained in the image obtaining step;
A determination step of determining whether or not the image acquired in the image acquisition step includes restriction information stored in advance in a storage unit;
If it is determined in the determination step that the restriction information is included in the image, the image is changed so as not to be visually recognized by the user, and the user identifies that the restriction information is included in the image. A changing step for changing the reduced image corresponding to the image,
A transmission step of transmitting the image and the reduced image changed in the changing step to a management device;
A program characterized by having executed.

Images