JP2010154045A - Image forming apparatus, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming apparatus for improving information security, in the image forming apparatus provided with a setting change function. <P>SOLUTION: The image forming apparatus includes: a user determination function (S902) for determining which of the manager of a first kind, the manager of a second kind and the other general user a user is; an execution function for executing a function for the manager in response to the operation of the user determined to be the manager of the first and second kinds; a function permission function for setting whether or not to permit an operation by the manager of the second kind for the function for the manager in response to the operation of the user determined to be the manager of the first kind; and a function limiting function (S918) for limiting execution of the function by the user determined to be the manager of the second kind according to the setting of the function permission function. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an image forming apparatus having a printing function and a transmission function of image data, and more particularly to an image forming apparatus having a function of recording a log of operations performed on the apparatus.

  An image forming apparatus having an image data transmission / reception function has a function of recording operation history information (operation log) such as how many pieces of image data have been printed or where the image data has been transmitted. There is. By recording and analyzing the operation log, the administrator can be alerted regarding unauthorized use of the image forming apparatus. In particular, by leaving a transmission record of image data including a transmission time and a transmission destination, it is possible to confirm whether an in-house document has been transmitted to an inappropriate destination, which is effective in improving information security.

  In the maintenance of the apparatus, not only the operation information but also error information of the apparatus itself and setting change information are very important information. When the apparatus does not operate as intended, what setting changes were made before and after and what error information was output are useful for resolving the abnormality of the apparatus at an early stage. Such information that a general user does not often contact is also important information for an administrator who is engaged in maintenance.

Patent Document 1 can set the audit log storage method consisting of the device usage history and the device setting history, set whether to allow log overwriting to the storage area, etc., and audit without omission A technique capable of storing logs is disclosed.
JP 2008-65490 A

  In the image forming apparatus, there are two main types of user authority: general users who are limited to general operations and administrator users who can change the settings of the apparatus. In many cases, a user in a company is a general user, and a service person of a manufacturer who performs maintenance of the apparatus uses the image forming apparatus with the authority of the administrator user.

  In the image forming apparatus, an administrator user can change settings related to log collection. The administrator user may change the settings so that the administrator user can view information that the user does not want to know, such as registration information of the transmission destination in the image forming apparatus and image data transmission / reception history, without leaving an operation history. It was possible. Such a situation is unsatisfactory for the user company. The fact that destination information and transmission / reception information, etc., which is information that should be managed by companies, is viewed by third parties outside the company is extremely dangerous from the viewpoint of information security and is a major issue. .

  The technique of Patent Document 1 is a technique for performing capacity control on a storage area and storing a log without omission, and therefore does not provide a solution to the above problem.

  Therefore, an object of the present invention is to provide an image forming apparatus that realizes an improvement in information security in an image forming apparatus having a setting change function.

  Furthermore, another object of the present invention is to provide an image forming apparatus that can easily improve information security in an image forming apparatus having a setting change function.

  An image forming apparatus according to a first aspect of the present invention is a user for determining whether a user is a first type administrator, a second type administrator, or any other general user. A determination unit; a function execution unit for executing a function for an administrator in response to an operation of the user determined as the first and second types of administrator by the user determination unit; and a user determination unit Function permission for setting whether to permit operation by the second type administrator for the function for the administrator in response to the operation of the user determined to be the first type administrator And a function restricting means for restricting the execution of the function by the function executing means by the user determined as the second type administrator by the user determining means in accordance with the setting of the function permitting means. .

  The user determination means determines whether the user is a first type administrator, a second type administrator, or any other general user. The function execution means executes the function for the administrator in response to the operation of the user determined as the first and second types of administrator by the user determination means. Whether the function permission means permits the operation by the second type administrator for the function for the administrator in response to the operation of the user determined as the first type administrator by the user determination means. Set whether or not. The function restricting means restricts the execution of the function by the function executing means by the user determined by the user determining means as the second type administrator according to the setting of the function permitting means.

  In this image forming apparatus, a user who is determined to be a first type administrator can set whether or not to permit an operation by the second type administrator for the administrator function. The functions that can be used by the user who is determined to be the second type administrator are limited according to the setting. As described above, since the first type administrator can set the function for the second type administrator, the unauthorized operation of the second type administrator can be restricted. As a result, it is possible to provide an image forming apparatus that can improve information security in an image forming apparatus having a setting change function.

  Preferably, the user determination means includes a password storage means for storing the user's password together with information indicating whether the user is the first type or the second type administrator, and a function by the user In response to a request to execute the execution means, the user is requested to input a password, the password input means for receiving the password input, the password input by the password input means, and the password storage means And a means for determining whether the user is a first type administrator, a second type administrator, or a general user by checking the password.

  The password storage unit stores the password of the user together with information indicating whether the user is the first or second type administrator. The password input means requests the user to input a password in response to a request from the user to execute the function execution means, and receives the password. The means for determining is to check the password entered by the password input means against the password stored in the password storage means, so that the user can manage the first type of administrator and the second type of management. Whether the user is a general user or a general user.

  When there is a request to execute an administrator function, the user is prompted to enter a password. Based on the input password, it is determined whether the user is a first type administrator, a second type administrator, or a general user. In order to execute the function for the administrator, it is necessary to determine that the administrator is the first and second types of administrators. Therefore, improvement in security can be expected with respect to the use of the apparatus. Since password input is required when execution of a function for an administrator is requested, opportunities for password input can be reduced.

  More preferably, the function permission means responds to the operation of the first type user by function display means for displaying a list of function names of functions for the administrator, and responds to the user operation. Then, for each of the function names displayed by the function display means, a means for setting whether or not an operation by the second type operator for the corresponding function is permitted is included.

  The function display means displays a list of function names of functions for the administrator in response to the operation of the first type user. In response to the user's operation, the setting means determines whether or not the operation of the second type operator for the corresponding function is permitted for each of the function names displayed by the function display means. Set.

  A list of function names of functions for the administrator can be displayed, and for each of the displayed function names, it can be set whether or not the operation of the second type administrator for the corresponding function is permitted. As a result, it is possible to easily set whether or not an operation by the second type administrator is permitted from the list display, and it is possible to easily improve information security in an image forming apparatus having a setting change function. It is possible to provide an image forming apparatus capable of performing the above.

  Preferably, the function execution unit is configured to display a list of function names of functions for the administrator in response to a user operation determined by the user determination unit as the first and second types of administrators. Means for causing the user to select any one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name. The function restricting means prohibits an operation by the second type administrator by the function permitting means when a user who is determined to be the second type administrator by the user determining means requests the display of the list. Means for prohibiting display of the function name of the function in the list are included.

  The operation of the second type administrator is permitted by prohibiting the display of the function name of the function prohibited by the second type administrator in the function name list of the function for the administrator. Only the functions that have been performed can be displayed. As a result, it is possible to easily confirm and select a function that is permitted to be operated.

  Preferably, the function execution unit is configured to display a list of function names of functions for the administrator in response to a user operation determined by the user determination unit as the first and second types of administrators. Means for causing the user to select any one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name. In response to the function name being selected using the means for execution by the user determined as the second type administrator, the function restriction means is set to the second type by the function permission means. Means for determining whether or not execution by the administrator of the user is permitted, and means for executing or canceling the function corresponding to the selected function name according to the determination result by the determination means Including.

  In the list of function names of functions for the administrator, when the second type administrator selects a function name and tries to execute it, it is determined whether or not the execution of the function is permitted and the function is executed. Or can be canceled. Which function is restricted is not known from the function name list display, and it is possible to prevent the function restriction information from being known from the list display.

  Preferably, the means for displaying is prohibited from the function name of the function permitted to be executed by the second type administrator when displaying the list of function names of the function for the administrator. The function name of the function is displayed in a different display mode.

  By displaying the permitted functions different from the prohibited functions, the second type of administrator can determine which of the functions for the administrator is prohibited. It is easy to understand.

  Preferably, the function execution unit is configured to display a list of function names of functions for the administrator in response to a user operation determined by the user determination unit as the first and second types of administrators. Means for causing the user to select any one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name. The function restriction means executes the function name of the function that is prohibited from being operated by the second type administrator when the user who is determined to be the second type administrator requests display of the list. Means for displaying in a manner not selectable by means.

  In the list of function names of functions for the administrator, a function name that is prohibited from being operated by the second type administrator cannot be selected by a user who is determined to be the second type administrator. As a result, it is possible to prevent the execution of the function for which the operation of the second type administrator is prohibited.

  Preferably, the image forming apparatus further includes means for displaying a list of information regarding the functions set by the function permission means.

  Setting information can be easily managed by displaying, as a list, which functions of the administrator functions are permitted for the second type of administrator.

  Preferably, the image forming apparatus further includes a setting list printing unit for printing a list of information related to the function set by the function permission unit.

  By printing the list display, it is possible to grasp the setting state without operating the image forming apparatus each time, which is effective in terms of setting information management.

  A computer program according to a second aspect of the present invention provides a computer for managing settings related to an image forming apparatus, in which a user is a first type administrator, a second type administrator, and other general uses. A user determination unit for determining whether the user is an administrator, and a function for the administrator in response to a user operation determined by the user determination unit as the first and second types of administrator In response to the user's operation determined to be the first type administrator by the function execution means for performing the operation and the user determination means, the second type administrator performs the operation for the administrator function. Function permission means for setting whether or not to permit, and setting of function permission means for execution of the function by the function execution means by the user determined by the user determination means as the second type administrator According to Characterized in that to function as an execution limiting means for limit.

  As described above, according to this image forming apparatus, whether or not the user who is determined to be the first type administrator permits the operation by the second type administrator for the administrator function is determined. Can be set. The user who is determined to be the second type administrator is limited in function according to the setting. As described above, since the first type administrator can set the operation setting of the function for the administrator of the second type administrator, it is possible to limit the unauthorized operation of the second type administrator. it can. As a result, it is possible to provide an image forming apparatus that can improve information security in an image forming apparatus having a setting change function.

  In the following description and drawings, the same parts are denoted by the same reference numerals and names. Their functions are also the same. Therefore, detailed description thereof will not be repeated.

  In the present invention, the image forming apparatus operates as a user mode in which a general image forming apparatus is used without requiring a password as an operation mode, and requires an administrator password to be input during operation. It has an administrator mode whose main purpose is to change various settings of the apparatus and to manage setting information and logs. In this embodiment, two types of administrator passwords are issued. That is, a first password is issued to an external administrator who performs maintenance of the apparatus, and a second password is issued to a system administrator on the user side. These passwords are managed by each administrator. In addition, operation information related to the image forming apparatus, error information issued by the image forming apparatus, and the like are recorded as logs in a log recording unit described later.

[First Embodiment]
In the first embodiment, the administrator of the digital multifunction machine 30 has a first password for an external administrator who performs maintenance of the apparatus, and a second password for a system administrator on the user side. Is issued in advance. The first password has authority up to the maintenance and operation setting of the device, and the second password is user information such as transmission destination information and transmission / reception history information registered by a general user such as facsimile or e-mail in addition to these. It has the authority to enable up to operation.

-Constitution-
FIG. 1 is a diagram showing a configuration of an image processing system 20 including a digital multi-function peripheral 30 according to the first embodiment of the present invention. Referring to FIG. 1, the image processing system 20 includes a digital multifunction machine 30. The digital multifunction machine 30 is a digital multifunction machine that can operate in an image transmission mode such as a copy mode, a printer mode, and facsimile transmission. The digital multifunction peripheral 30 is connected to a local network 40 and a telephone line network 44. An external computer 32 is connected to the local network 40. An external facsimile machine 38 is connected to the telephone network 44. The local network 40 is further connected to an external computer 34 and an Internet facsimile machine 36 (hereinafter referred to as a facsimile machine 36) via a gateway (not shown) and the Internet 42.

  The digital multi-function peripheral 30 according to the present embodiment can execute facsimile transmission / reception using the telephone line network 44 and Internet facsimile transmission / reception for transmitting image data via the Internet. The digital multifunction peripheral 30 has an operation information recording function, and facsimile transmission / reception information is recorded as operation information.

  FIG. 2 is a block diagram illustrating a configuration of the digital multifunction peripheral 30 according to the present embodiment. Referring to FIG. 2, a digital multifunction device 30 is configured by a CPU (Central Processing Unit), and a control unit 50 for controlling the entire digital multifunction device 30 by executing a predetermined program, and a control unit 50, a control memory 80 for storing a control program comprising a non-volatile memory and the like, both connected to the bus 74, for storing setting information such as an administrator password. A setting information storage unit 56, a log recording unit 58 for recording operation information of the digital multifunction machine 30, an image reading unit 52 for reading a document image, an image forming unit 54 for outputting various data to a recording paper, an image An image processing unit 62 for creating transmission facsimile image data from the image data read by the reading unit 52; An operation panel 60 for receiving a force instruction, an encoding / decoding unit 66 for encoding the read image data, and decoding the received encoded data into the original image data, encoded image data, And an image storage unit 64 for storing data read by the image reading unit 52, and a destination information storage unit 82 for registering and storing destination information in the image data transmission function.

  The digital multifunction machine 30 further includes a LAN interface 72 for connecting to the LAN, a network control unit 68 for connecting to the telephone line network and controlling the line, and a facsimile for connecting to the telephone line network and performing facsimile communication. A modem 70.

  An image reading unit 52, an image forming unit 54, a setting information storage unit 56, a log recording unit 58, an operation panel 60, an image processing unit 62, an image storage unit 64, an encoding / decoding unit 66, The network control unit 68, the facsimile modem 70, the LAN interface 72, the control memory 80, and the destination information storage unit 82 are connected via a bus 74, and the entire control is performed by the control unit 50. .

  The log recording unit 58 includes a transmission / reception history recording unit 78 for recording facsimile transmission / reception information, setting change information by a general user, error information output by the digital multi-function device 30 and the like regarding operation information of the digital multi-function device 30. And a general log recording unit 76 for recording.

  FIG. 3 is a diagram illustrating the operation panel 60. The operation panel 60 includes an operation unit 90 composed of various hardware keys, and a display unit 92 composed of a liquid crystal display and a touch panel. The operation unit 90 includes a numeric keypad 94 for inputting numerical values, a clear key 96 for clearing input setting values, an all canceling key 98 for canceling all input settings, a copy start, and a transmission start. A start key 100 for inputting a command such as a printer key 102 for switching to the printer mode, an image mode key 104 for switching to the image transmission mode, a copy mode key 106 for switching to the copy mode, and a system setting mode of the digital multi-function peripheral 30. And a system setting key 108 for switching.

  Hereinafter, execution of the destination registration list printing function in the digital multi-function peripheral 30 according to the first embodiment will be described.

  FIG. 4 is an initial screen 120 of the system setting mode displayed on the display unit 92 when the system setting key 108 is pressed. Referring to FIG. 4, the initial screen 120 includes an end button 122 for ending the system setting mode and a data list print button 124 for printing a destination list of transmission destinations registered in the digital multifunction machine 30. Including.

  To print the destination list, an administrator authority permitted to print is required. When the data list print button 124 is pressed, a program for data list printing described later is started.

  FIG. 5 is a diagram showing a control structure of a program executed by the control unit 50 of the digital multi-function apparatus 30 and related to execution of the data list printing function in the form of a flowchart. This program is executed when the data list print button 124 is pressed on the initial screen 120 in the system setting mode.

  Referring to FIG. 5, this program accepts input of data list print button 124, step S 902 follows step S 902, performs step S 904 for determining the administrator division, and step S 904, and then sets the administrator division in step S 904. 2 is determined, and is executed when it is determined in step S906 that the control flow branches according to the determination result, and the administrator classification 2 is set in step S906 (in the case of YES), Step S908 for displaying a list print screen on the display unit 92.

  FIG. 6 is a diagram showing the list print screen 130 displayed in step S908. Referring to FIG. 6, list print screen 130 includes destination registration list display 132, print button 134 for issuing a print instruction for the item selected in destination registration list display 132, and the initial screen without performing list printing. And a return button 136 for returning to 120. In the destination registration list display 132, a desired one is selected from the destination list displayed in the pull-down menu, and a print instruction is issued with the print button 134.

  Referring to FIG. 5 again, the program further determines whether or not the print button 134 has been pressed following step S908, and branches the control flow according to the determination result, and the print button in step S910. Step S912 is executed when it is determined that the button 134 has been pressed (in the case of YES), and the selected destination list is printed. After Step S912, Step S914 is displayed to display the initial screen 120 of the system setting mode. This is executed when it is determined in step S910 that the print button 134 has not been pressed (in the case of NO), and it is determined whether or not the return button 136 has been pressed to cancel printing, and control is performed according to the determination result. And step S916 for branching the flow. If it is determined in step S916 that the return button 136 has not been pressed (NO), the control proceeds to step S910. If it is determined in step S916 that the return button 136 has been pressed (YES), the control proceeds to step S914.

  This program is further executed when it is determined in step S906 that the administrator category 2 is not set (in the case of NO), and includes a step S918 for displaying a list print disabled screen on the display unit 92.

  FIG. 7 is a diagram showing the list print disabled screen 140 displayed in step S918. Referring to FIG. 7, list print disabled screen 140 includes a destination registration list display 142 and a return button 144 for returning to initial screen 120. In FIG. 6, the destination registration list display 142 is displayed in gray out, and an item cannot be selected.

  Referring to FIG. 5, the program further includes step S920 following step S918, which determines whether or not the return button 144 has been pressed and branches the control flow according to the determination result. If it is determined in step S920 that the return button 144 has not been pressed (NO), the control returns to step S920 and waits until the return button 144 is pressed. If it is determined in step S920 that the return button 144 has been pressed (in the case of YES), the control proceeds to step S914. After executing step S914, the program ends.

  FIG. 8 is a flowchart showing the control structure of the program for realizing the processing executed in step S904. Referring to FIG. 8, this program includes step S802 for displaying a password input screen on display unit 92.

  FIG. 9 shows a password input screen 150 displayed in step S802. Referring to FIG. 9, password input screen 150 includes a password input box 152, an OK button 154 that is pressed after the password is input, and a cancel button 156 for canceling the password input.

  In the password input box 152, a password issued in advance to the administrator is input. The password is input using the numeric keypad 94 or a soft keyboard (not shown) displayed on the display unit 92. The entered password characters are displayed with the “*” mark replaced for security protection.

  Referring to FIG. 8, the program further continues to step S802, determines whether or not the password is input and the OK button 154 is pressed, and branches the control flow according to the determination result; When it is determined that the OK button is pressed in S804 (in the case of YES), it is determined whether or not the input password matches the first password, and the control flow is branched according to the determination result. Step S806, and when it is determined in step S806 that the first password does not match (if NO), it is determined whether the input password matches the second password, and the determination result If it is determined in step S808 that the control flow is branched according to, and in step S808, it does not match the second password ( It is executed if the O), and a step S816 for displaying a message "input password is wrong" on the display unit 92. After execution of step S816, control returns to step S804. This program is further executed when it is determined in step S806 that the password matches the first password (in the case of YES), and step S812 determines that the operator is the administrator category 1, and the second password is determined in step S808. It is executed when it is determined that they match (in the case of YES), and is executed in step S814 in which the operator is determined to be the administrator category 2, and in the case where it is determined in step S804 that the OK button 154 has not been pressed (in the case of NO). And step S810 for determining whether or not the cancel button 156 is pressed and branching the flow of control according to the determination result. If it is determined in step S810 that the cancel button 156 has not been pressed (NO), the control proceeds to step S804. If it is determined in step S810 that the cancel button 156 has been pressed (YES), this program ends. When step S812 or step S814 is executed, the program ends.

―Operation―
The digital multi-function peripheral 30 according to the first embodiment operates as follows regarding the printing of the destination registration list.

  In the digital multifunction device 30, when the system setting key 108 is pressed, an initial screen 120 of the system setting mode is displayed. When the data list print button 124 is pressed on the initial screen 120, the program shown in FIG. 5 is activated, and the administrator classification determination process is executed (steps S902 and S904).

  In the administrator classification determination process, the password input screen 150 is displayed and a password input from the user is received (steps S802 and S804). When the input password matches the first password, the user is determined to be the administrator category 1 and the determination process is terminated (steps S806 and 812). When the input password matches the second password, the user is determined to be the administrator category 2 and the determination process is terminated (steps S808 and 814). If the cancel button 156 is pressed on the password input screen 150, the determination process is terminated without setting the administrator category (step S810).

  The digital multi-function peripheral 30 determines whether it is determined as the administrator category 2 in the administrator category determination process (step S906). If it is set as the administrator category 2, that is, if it is determined that the user is a system administrator on the user side, the list print screen 130 is displayed (step S908). When the destination list is selected on the list print screen 130 and the print button 134 is pressed, the selected destination list is printed. After the printing is completed, the initial screen 120 of the system setting mode is displayed and this program is terminated (step S1). S910, 912, 914).

  If it is determined as the administrator category 1 (NO in step S906), that is, if it is determined that the user is an external administrator, the list print disabled screen 140 is displayed (step S918). On the list print disable screen 140, items relating to destination list print are grayed out and cannot be executed. When the return button 144 is pressed on the list print disable screen 140, the system setting mode initial screen 120 is displayed and the program is terminated (steps S920 and S914).

  As described above, in the digital multifunction peripheral 30 according to the first embodiment, two administrator passwords are issued in advance, and if a function that requires administrator authority is executed when executing the selected function, it is managed at that time. Enter the administrator password. In addition, specific information (for example, registered transmission destination information and personal and customer information such as image data transmission / reception history information) that is not desired to be disclosed to the external administrator is included in the selected function. In such a case, the administrator classification is determined based on the input administrator password, and control is performed so as to transition to a screen that can execute only functions that are permitted in advance for the determined administrator classification. Thereby, it is possible to control information that is permitted to be disclosed to a third party and information that is not permitted, thereby enabling protection of specific information. As a result, it is possible to provide an image forming apparatus that can improve information security in an image forming apparatus having a setting change function.

  It is assumed that the administrator password issued to each administrator can only change the issued password. As a result, it is possible to prevent others from falsifying the password, and it is effective in terms of password protection and security enhancement.

  The system administrator on the user side may set information to be disclosed to the external administrator and which functions are allowed to be executed. In this case, the system administrator on the user side can execute all functions related to the image forming apparatus, while the external administrator can execute only functions permitted by the system administrator on the user side. As a result, unnecessary setting changes can be prevented from being made by an external administrator, which is effective in enhancing information security.

  In addition, the function permission restrictions set by the system administrator on the user side may be displayed on the screen as a setting list or printed on recording paper. As a result, it is possible to confirm which function is permitted to be executed and which information is disclosed to the external administrator, which is also effective in terms of information management.

[Second Embodiment]
In the digital multi-function peripheral 210 according to the second embodiment, when the system setting key 108 is pressed to shift to the system setting mode, an administrator password is requested. When the administrator password is input and the administrator classification is set, the functions permitted by the system administrator on the user side are reflected on the system setting menu screen and the function execution screen. Also, if the administrator password is omitted, minor system setting change items that do not require administrator authority are displayed.

  Hereinafter, a description will be given of printing of transmission / reception history information such as facsimile and mail as an example. The transmission / reception history information printing function is a function that requires the input of an administrator password.

-Constitution-
In the second embodiment, the hardware configuration of the digital multifunction peripheral 210 is the same as that of the digital multifunction peripheral 30 of the first embodiment, but the program executed by the control unit 50 is different.

  FIG. 10 shows an initial screen 160 in the copy mode. In the second embodiment, a program to be described later is activated when the system setting key 108 (FIG. 3) is pressed in any one of the copy mode, the image transmission mode, and the printer mode.

  FIG. 11 is a program executed by the control unit 50, and is a flowchart showing a control flow in which the administrator classification is determined regarding the system setting of the digital multifunction peripheral 210 and the setting menu screen matching the determination result is displayed. It is. This program is executed when the system setting key 108 (FIG. 3) is input.

  Referring to FIG. 11, this program receives the input of system setting key 108, follows step S 1402, follows step S 1402, performs step S 1404 for performing the administrator classification determination operation, continues to step S 1404, and is executed by the administrator in step S 1404. It is determined whether or not it is determined, step S1406 for branching the control flow according to the determination result, and when it is determined that the user is an administrator at step S1406 (in the case of YES), step S1404 is executed. Step S1408 for storing the administrator classification determined in Step S1408, Step S1408 for displaying the administrator menu screen following Step S1408, and execution in the case where the administrator is not determined in Step S1406 (in the case of NO) Of minor system settings that do not require administrator privileges And a step S1412 for displaying the general settings eye is displayed a menu screen (not shown). After executing step S1412, the program ends. After execution of step S1410, the program ends and waits for input from the administrator menu screen.

  In step S1404, the administrator determination operation program shown in FIG. 8 is executed as the administrator classification determination. If it is determined in step S1406 that the user is an administrator, the program executed in step S1404 is a case where it is determined that the user is the administrator category 1 or the administrator category 2. If it is determined in step S1406 that the user is not an administrator, the determination program is terminated by pressing a cancel button in the program executed in step S1404.

  FIG. 12 is a diagram showing an administrator menu screen 170 displayed in step S1410. Referring to FIG. 12, an administrator menu screen 170 has a logout button 172 for ending the administrator mode, a report print button 174 for shifting to an output screen for transmission / reception history information, and when entering the administrator mode. An administrator password change button for changing the first or second password input to, and a security setting button 178 for setting the security of the digital multi-function peripheral 210.

  The administrator password change button 176 can change only the password assigned to the administrator. For example, when entering the administrator mode with the first password, only the first password can be changed.

  When the report print button 174 is pressed, the report print function execution screen is displayed. Although details will be described later, the execution screen displayed by the administrator classification at the time of migration is changed.

  FIG. 13 is a program executed by the control unit 50, and shows the control structure of the program related to the execution of the print function of transmission / reception history information in the form of a flowchart after the execution of step S1410. This program is executed when the report print button 174 is pressed.

  Referring to FIG. 13, in step S1502 for accepting the input of report print button 174, this program reads the administrator classification stored in step S1408, and is permitted to execute transmission / reception history information printing. In step S1504 for branching the flow of control according to the determination result, and if it is determined in step S1504 that the administrator category is permitted to execute (YES And step S1506 for displaying the report print screen.

  In step S1504, an administrator classification that permits printing of transmission / reception history information is registered in advance. In the case of this embodiment, only the administrator category 2 (user-side system administrator) is permitted to execute printing, and the administrator category 1 (external administrator) is not permitted to execute printing. To do.

  FIG. 14 is a diagram showing the report print screen 190 displayed in step S1506. Referring to FIG. 14, a report print screen 190 includes a communication record table display 192, a print button 194 for issuing a print instruction for an item selected in the communication record table display 192, and an administrator without printing the report. And a return button 196 for returning to the menu screen 170. In the communication record table display 192, a desired one is selected from the communication record list displayed by pull-down, and a print instruction is issued by the print button 194.

  Referring to FIG. 13, the program further determines whether or not an instruction to execute transmission / reception history printing has been issued following step S1506, and executes in steps S1508 and S1508 to branch the control flow according to the determination result. This is executed when it is determined that an instruction has been issued (in the case of YES), and is executed in step S1510 for printing the transmission / reception history list, step S1512 for displaying the administrator menu screen 170 following step S1510, and step S1508. Step that is executed when it is determined that an instruction has not been issued (in the case of NO), determines whether or not the return button 196 is pressed to cancel printing, and branches the control flow according to the determination result S1514. If it is determined in step S1514 that the return button 196 has not been pressed (NO), the control returns to step S1508. If it is determined in step S1514 that the return button 196 has been pressed (YES), the control proceeds to step S1512.

  This program further includes step S1516 that is executed when it is determined that the administrator classification is not permitted in step S1504 (in the case of NO), and displays a report print disabled screen.

  FIG. 15 is a diagram showing the report print disabled screen 200 displayed in step S1516. Referring to FIG. 15, report print disabled screen 200 includes a communication record table display 202 and a return button 204 for returning to administrator menu screen 170. In FIG. 15, the communication record table display 202 is grayed out and cannot be selected.

  Referring to FIG. 13, the program further includes step S1518 following step S1516, which determines whether or not the return button 204 has been pressed and branches the control flow according to the determination result. If it is determined in step S1518 that the return button 204 has not been pressed (NO), control returns to step S1518 and waits for the return button 204 to be pressed. If it is determined in step S1518 that the return button 204 has been pressed (YES), the control proceeds to step S1512. After execution of step S1512, the program ends.

  FIG. 16 is a program executed by the control unit 50, and shows a control structure of a program related to logout in the administrator mode in a flowchart format after execution of step S1410. This program is executed when the logout button 172 is pressed.

  Referring to FIG. 16, this program continues to step S1602 for accepting the input of logout button 172, step S1602, step S1604 for erasing the administrator classification determination result stored in step S1408, and step S1604 to copy. Step S1606 for displaying the mode initial screen 160. After executing step S1606, this program ends.

―Operation―
The digital multi-function peripheral 210 according to the second embodiment operates as follows when printing transmission / reception history information such as facsimile and mail.

  When the system setting key 108 is pressed in any one of the copy mode, the image transmission mode, and the printer mode, the digital multi-function peripheral 210 displays a password input screen 150 and receives an administrator password (step S1402). 1404). If it is determined from the input password that the user is an administrator, the determined administrator classification is stored and the administrator menu screen 170 is displayed (steps S1406, 1408, and 1410). At this time, the operator operates in the administrator mode. If the password input is canceled and it is determined that the user is not an administrator, a general setting menu screen is displayed that displays minor system setting change items that do not require password input (step S1412).

  When the report print button 174 is pressed on the administrator menu screen 170, the stored administrator classification is compared with the execution permission of the selected function, and a function execution screen matching the execution permission is displayed (step S1502). 1504). If the administrator classification is permitted to print the transmission / reception history information, the report print screen 190 is displayed (step S1506). When the transmission / reception history print instruction is issued on the report print screen 190, the transmission / reception history list is printed, the administrator menu screen 170 is displayed, and the next operation instruction is waited (steps S1508, 1510, 1512). When printing of the transmission / reception history is canceled, the administrator menu screen 170 is displayed without executing printing, and the next operation instruction is awaited. If the administrator category is not permitted to print the transmission / reception history information, the report printing disabled screen 200 in which the transmission / reception history printing function is disabled is displayed (step S1516). When the return button 204 is pressed on the report print disable screen 200, the administrator menu screen 170 is displayed and the next operation instruction is awaited (steps S1518 and 1512).

  When the logout button 172 is pressed on the administrator menu screen 170, the stored administrator category determination result information is deleted (steps S1602 and 1604). Thereafter, an initial screen before entering the system setting mode is displayed (step S1606), and the administrator mode is exited.

  As described above, the digital multifunction peripheral 210 according to the second embodiment issues two administrator passwords in advance. In the second embodiment, the digital multi-function peripheral 210 accepts the input of the administrator password when shifting to the system setting mode by pressing the system setting key. When it is determined that the user is an administrator based on the input password, an administrator menu screen is displayed, and the determined administrator classification is stored. When executing the function selected from the administrator menu screen, the administrator's administrator classification and the function execution permission preset for the administrator classification are compared, and the function execution screen matching the execution permission is displayed. Control is performed. As a result, it is possible to prevent disclosure of specific information that is not desired to be disclosed to the external administrator (for example, registered transmission destination information and personal and customer information such as image data transmission / reception history information). In this way, it is possible to control the information that is permitted to be disclosed to a third party and the function that is permitted to be executed, thereby enabling protection of specific information. As a result, it is possible to provide an image forming apparatus that can improve information security in an image forming apparatus having a setting change function.

  Also, enter the password when entering the system setting mode, determine the administrator classification and memorize it, determine whether the function selected according to the settings in the digital multifunction peripheral can be executed, and adjust it accordingly Display the function execution screen. As a result, it is possible to reduce the annoyance required to input a password every time a function to be executed is selected, and to improve information security more easily in an image forming apparatus having a setting change function. An image forming apparatus can be provided.

  As described above, by using a digital multi-function peripheral, an image forming apparatus that can improve information security can be provided in an image forming apparatus having a setting change function. Furthermore, it is possible to provide an image forming apparatus that can easily improve information security in an image forming apparatus having a setting change function.

  The embodiment disclosed herein is merely an example, and the present invention is not limited to the above-described embodiment. The scope of the present invention is indicated by each of the claims after taking into account the description of the detailed description of the invention, and all modifications within the meaning and scope equivalent to the wording described therein are intended. Including.

1 is a diagram showing a configuration of an image processing system 20 including a digital multi-function peripheral 30 according to a first embodiment of the present invention. 1 is a block diagram showing a configuration of a digital multifunction machine 30 according to the present embodiment. It is a figure showing the operation panel. This is an initial screen 120 of the system setting mode displayed on the display unit 92 when the system setting key 108 is pressed. FIG. 3 is a diagram illustrating a control structure of a program executed by a control unit 50 of the digital multifunction machine 30 and related to execution of a data list printing function in a flowchart format. It is a figure which shows the list print screen 130 displayed by step S908. It is a figure which shows the list printing impossible screen 140 displayed by step S918. It is the figure which represented the control structure of the program for implement | achieving the process performed by step S904 in the flowchart format. It is a password input screen 150 displayed in step S802. It is a figure showing the initial screen 160 in copy mode. FIG. 10 is a flowchart showing a flow of control in which a program executed by a control unit 50 performs administrator classification determination regarding system settings of the digital multi-function peripheral 210 and displays a setting menu screen that matches the determination result. It is a figure which shows the administrator menu screen 170 displayed by step S1410. It is a program executed by the control unit 50, and shows the control structure of the program related to the execution of the print function of transmission / reception history information in the form of a flowchart after step S1410. It is a figure which shows the report print screen 190 displayed by step S1506. It is a figure which shows the report print impossible screen 200 displayed by step S1516. It is a program executed by the control unit 50, and shows the control structure of the program related to logout in the administrator mode in the form of a flowchart after executing step S1410.

Explanation of symbols

30, 210 Digital MFP 50 Control unit 58 Log recording unit 108 System setting key 150 Password input screen

Claims (10)

User determination means for determining whether the user is a first type administrator, a second type administrator, or any other general user;
Function execution means for executing a function for an administrator in response to an operation of a user determined as the first and second types of administrator by the user determination means;
Whether or not to permit the operation by the second type administrator for the function for the administrator in response to the operation of the user determined by the user determination means as the first type administrator A function permission means for setting
A function restricting means for restricting the execution of the function by the function executing means by the user determined by the user determining means as the second type administrator according to the setting of the function permitting means; An image forming apparatus. The user determination means includes
Password storage means for storing a password of the user together with information indicating whether the user is the first or second type of administrator;
In response to a request for execution of the function execution means by the user, the password input means for requesting the user to input a password and receiving the password input;
By comparing the password input by the password input unit with the password stored in the password storage unit, the user can manage the first type administrator, the second type administrator, and the general The image forming apparatus according to claim 1, further comprising means for determining which of the users. The function permission means includes
Function display means for displaying a list of function names of the functions for the administrator in response to the operation of the first type user;
Means for setting whether to permit an operation by the second type operator for the corresponding function for each of the function names displayed by the function display means in response to a user operation. The image forming apparatus according to claim 1, comprising: The function execution means includes
Means for displaying a list of function names of the functions for the administrator in response to the operation of the user determined as the first and second types of administrator by the user determining means;
Means for causing a user to select an arbitrary one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name,
The function restricting means is configured such that when the display of the list is requested by a user who is determined as the second type administrator by the user determining means, the function permitting means is configured to output the second type administrator. 4. The image forming apparatus according to claim 1, further comprising means for prohibiting display of function names of functions prohibited by the operation in the list. 5. The function execution means includes
Means for displaying a list of function names of the functions for the administrator in response to the operation of the user determined as the first and second types of administrator by the user determining means;
Means for causing a user to select an arbitrary one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name,
The function limiting means is
In response to the function name being selected by the user determined to be the second type administrator using the means for executing, the function is set by the function permitting unit. A determination means for determining whether or not execution by an administrator is permitted;
4. The image formation according to claim 1, further comprising: a unit that executes a function corresponding to the selected function name or stops execution according to a determination result by the determination unit. apparatus.   The means for displaying is prohibited from function names of functions permitted to be executed by the second type of administrator when displaying a list of function names of the functions for the administrator. The image forming apparatus according to claim 5, wherein the function name of the function is displayed in a different display mode. The function execution means includes
Means for displaying a list of function names of the functions for the administrator in response to the operation of the user determined as the first and second types of administrator by the user determining means;
Means for causing a user to select an arbitrary one of the function names displayed by the means for displaying and executing a function corresponding to the selected function name,
The function restriction means is a function name of a function for which an operation by the second type administrator is prohibited when a user who is determined to be the second type administrator requests display of the list. 4. The image forming apparatus according to claim 1, further comprising: a unit configured to display an image in a manner that cannot be selected by the function execution unit. 5.   The image forming apparatus according to claim 1, further comprising means for displaying a list of information related to the functions set by the function permission means.   The image forming apparatus according to claim 1, further comprising a setting list printing unit for printing a list of information on the functions set by the function permission unit. A computer for managing settings related to the image forming apparatus;
User determination means for determining whether the user is a first type administrator, a second type administrator, or any other general user;
Function execution means for executing a function for an administrator in response to an operation of a user determined as the first and second types of administrator by the user determination means;
Whether or not to permit the operation by the second type administrator for the function for the administrator in response to the operation of the user determined by the user determination means as the first type administrator A function permission means for setting
Functions as an execution restricting means for restricting the execution of the function by the function executing means by the user determined by the user determining means as the second type administrator according to the setting of the function permitting means. Computer program.

Images