JP2010267101A - Image forming system and image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming system and an image forming apparatus for increasing mental suppression effects to the illegal use of a user, and for suppressing the leakage of a secret document by making it possible to specify a user who instructs the execution of a job related with the secret document. <P>SOLUTION: This image forming system is provided with: an imaging means for picking up the image of the face of a user who instructs the execution of a job; a document determination means for determining whether or not a document to be processed by the job is a secret document; an acquisition means for, when it is determined that the document is the secret document by the document determination means, picking up the image of the user by the imaging means to acquire the face image data of the user; a face image storage means for storing the face image data acquired by the acquisition means; and an output means for outputting the face image data stored in the face image storage means. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an image forming system and an image forming apparatus. The present invention particularly relates to an image forming system and an image forming apparatus for processing a job related to a confidential document.

  In order to prevent leakage of confidential information, a technique for restricting document copying and printing by an image forming apparatus such as an MFP (Multi-Function Peripheral) by authenticating a user using a PIN code or an IC card is known. ing. Such user authentication technology prevents unauthorized copying and printing of confidential documents by unregistered users.

  However, in the user authentication technique using a PIN code or an IC card, for example, an unregistered user may receive user authentication using another registered PIN code or IC card. That is, the user authentication technology using a PIN code or an IC card may not be able to reliably identify the user, and a sufficient suppression effect against unauthorized copying or printing of confidential documents cannot be obtained. Therefore, it is desired to suppress the leakage of the confidential document by reliably specifying the user who has copied or printed the confidential document with the image forming apparatus.

  As a technique for specifying a user who uses a copying machine, a technique for acquiring a user's face image by capturing an image of the user's face with an imaging device such as a CCD, and specifying the user based on the acquired face image is known. (See Patent Document 1). However, this technique always captures a user's face and acquires a face image regardless of the confidentiality of the document to be copied, and does not prevent unauthorized copying of the confidential document.

JP 2001-34128 A

  The present invention has been made in view of the above-described problems. Accordingly, an object of the present invention is to enable image identification that can increase the psychological suppression effect on unauthorized use of a user and suppress leakage of the confidential document by enabling the identification of the user who has instructed execution of the job relating to the confidential document. A system and an image forming apparatus are provided.

  The above object of the present invention is achieved by the following means.

  (1) Imaging means capable of imaging a user's face instructing execution of a job, document determination means for determining whether or not a document processed by the job is a confidential document, and the document determination means Is determined to be a confidential document, an acquisition unit that captures an image of the user's face by the imaging unit and acquires the face image data of the user, and stores the face image data acquired by the acquisition unit An image forming system comprising: a face image storage unit; and an output unit that outputs the face image data stored in the face image storage unit.

  (2) An image determining unit that determines whether or not the face image data has been acquired by the acquiring unit; and when the image determining unit determines that the face image data has been acquired, the job by the image forming system Execution control means for prohibiting execution of the job by the image forming system when the image determination means determines that the face image data has not been acquired. The image forming system as described in (1) above,

  (3) An imaging control unit that permits execution of the job by the image forming system without acquiring the face image data by the acquiring unit when the document determining unit determines that the document is not a confidential document. The image forming system according to (1) or (2), further comprising:

  (4) Document image storage means for storing image data of the confidential document is further included, and the output means, together with the face image data, outputs the confidential information in response to an instruction from an operator having authority to view the confidential document. The image forming system according to any one of (1) to (3), wherein image data of a document is output.

  (5) The face image data is stored in the face image storage means in association with execution information indicating that the job has been executed, and in response to selection of the execution information by an operator, the output means The image forming system according to any one of (1) to (4), wherein the face image data associated with the selected execution information is output.

  (6) a receiving unit that receives an input of identification information by the user; and an identification information storage unit that stores the identification information in association with the execution information when the identification information is received by the receiving unit. (5) The image forming system as described in (5) above.

  (7) Reading means for acquiring image data of the document by reading a document, wherein the document determination means includes predetermined image information relating to confidentiality included in the image data of the document acquired by the reading means. The image forming system according to any one of the above (1) to (6), wherein it is determined whether or not the document is a confidential document by detecting.

  (8) The document processed in the job is a document in a predetermined file format, and the document determination unit determines whether the document is a confidential document based on attribute information related to the confidentiality of the document. The image forming system as described in any one of (1) to (6) above.

  (9) Document determination means for determining whether or not a document to be processed in a job instructed to execute is a confidential document, and when the document determination means determines that the document is a confidential document, an imaging means Acquisition means for imaging a user's face instructing execution of the job and acquiring face image data of the user, face image storage means for storing the face image data acquired by the acquisition means, and the face And an output unit that outputs the face image data stored in the image storage unit.

  (10) An image determining unit that determines whether or not the face image data has been acquired by the acquiring unit; and when the image determining unit determines that the face image data has been acquired, the job by the image forming apparatus An execution control unit that prohibits execution of the job by the image forming apparatus when the image determination unit determines that the face image data has not been acquired. The image forming apparatus as described in (9) above, wherein

  (11) An imaging control unit that permits execution of the job by the image forming apparatus without acquiring the face image data by the acquiring unit when the document determining unit determines that the document is not a confidential document. The image forming apparatus according to (9) or (10), further comprising:

  (12) Document image storage means for storing image data of the confidential document is further included, and the output means, together with the face image data, outputs the confidential information in response to an instruction from an operator authorized to view the confidential document. The image forming apparatus according to any one of (9) to (11), wherein image data of a document is output.

  (13) The face image data is stored in the face image storage means in association with execution information indicating that the job has been executed, and in response to selection of the execution information by an operator, the output means The image forming apparatus according to any one of (9) to (12), wherein the face image data associated with the selected execution information is output.

  (14) It further includes: a receiving unit that receives an input of identification information by the user; and an identification information storage unit that stores the identification information in association with the execution information when the identification information is received by the receiving unit. The image forming apparatus as described in (13) above.

  (15) Further comprising reading means for acquiring image data of the document by reading a document, wherein the document determination means is predetermined image information relating to confidentiality included in the image data of the document acquired by the reading means. The image forming apparatus according to any one of (9) to (14) above, wherein it is determined whether or not the document is a confidential document.

  (16) The document processed in the job is a document in a predetermined file format, and the document determination unit determines whether or not the document is a confidential document based on attribute information regarding confidentiality of the document. The image forming apparatus as described in any one of (9) to (14) above.

  According to the present invention, when execution of a job relating to a confidential document is instructed, the user's face image data is acquired. Therefore, after executing the job, the user who instructed execution of the job is identified by referring to the face image. It becomes possible to do. Therefore, it is possible to enhance the psychological suppression effect against unauthorized use by the user and suppress leakage of confidential documents.

1 is a block diagram showing an overall configuration of an image forming system according to an embodiment of the present invention. It is a block diagram which shows the structure of the client PC shown by FIG. FIG. 2 is a block diagram illustrating a configuration of the MFP illustrated in FIG. 1. FIG. 2 is a functional block diagram illustrating a software configuration of the image forming system illustrated in FIG. 1. 3 is a flowchart for explaining a copy process by the MFP shown in FIG. 1. It is a flowchart which shows the process which follows FIG. It is a flowchart for demonstrating the confidential document determination process shown by step S104 of FIG. 6 is a flowchart for explaining history display processing by the MFP shown in FIG. 1. It is a figure which shows an example of a confidential document operation log list. It is a figure which shows an example of an operator ID input screen. FIG. 11A is a diagram illustrating an example of a display image with a confidential document image, and FIG. 11B is a diagram illustrating an example of a display image without a confidential document image. 3 is a flowchart for explaining print instruction processing by a client PC shown in FIG. 1. It is a flowchart which shows the process which follows FIG. 3 is a flowchart for explaining a printing process by the MFP shown in FIG. 1.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing the overall configuration of an image forming system according to an embodiment of the present invention.

  As shown in FIG. 1, the image forming system according to the present embodiment includes a client PC 100 and an MFP 200, which are connected to each other via a network 300 so as to communicate with each other. The client PC 100 and the MFP 200 are provided with cameras 150 and 250, respectively. The camera 150 is a Web camera equipped in the client PC 100, and the camera 250 is a dedicated CCD camera.

  The network 300 includes various networks such as a LAN in which computers and network devices are connected according to standards such as Ethernet (registered trademark), token ring, and FDDI, or a WAN in which LANs are connected by a dedicated line. The type and number of devices connected to the network 300 are not limited to the example shown in FIG. Further, the client PC 100 and the MFP 200 may be directly connected (locally connected) between devices without going through the network 300.

  FIG. 2 is a block diagram showing the configuration of the client PC shown in FIG. The client PC 100 includes a CPU 101, a ROM 102, a RAM 103, a hard disk 104, a display 105, an input device 106, a dedicated video interface 107, and a communication interface 108, which are connected to each other via a bus 109 for exchanging signals. Has been.

  The CPU 101 performs control of the above parts and various arithmetic processes according to a program. The ROM 102 stores various programs and various data. The RAM 103 temporarily stores programs and data as a work area. The hard disk 104 stores various programs including an operating system and various data. The hard disk 104 includes an application for viewing and editing a document file, and converting the document file into print data described in a language interpretable by the MFP 200 (for example, a page description language such as PostScript (registered trademark)). Printer driver is installed.

  The display 105 displays various information. The input device 106 is a pointing device such as a mouse or a keyboard, and is used for performing various inputs.

  The dedicated video interface 107 is an interface for communicating with the camera 150, and may be a serial interface such as RS-232C, IEEE 1394, or USB, a parallel interface such as IEEE 1284, or a proprietary standard. Good. The communication interface 108 is an interface for communicating with other devices via the network 300, and standards such as Ethernet (registered trademark), token ring, and FDDI are used.

  FIG. 3 is a block diagram showing a configuration of the MFP shown in FIG. The MFP 200 includes a CPU 201, a ROM 202, a RAM 203, a hard disk 204, an operation panel unit 205, an image reading unit 206, a printing unit 207, an image capturing unit 208, a dedicated video interface 209, and a communication interface 210, which exchange signals. Are connected to each other via a bus 211. Of the above-described units of the MFP 200, portions having the same functions as those of the above-described units of the client PC 100 are not described in order to avoid redundant description.

  The operation panel unit 205 is used for displaying various information and inputting various instructions. The image reading unit 206 obtains image data by reading a document. The image reading unit 206 applies light to a document set at a predetermined reading position on the document table or a document transported to a predetermined reading position by an ADF (Auto Document Feeder) with a light source such as a fluorescent lamp. The reflected light is photoelectrically converted by a light receiving element such as a CCD, and image data is generated from the electric signal.

  The printing unit 207 prints an image based on various data on a recording material such as paper using a known image forming process such as an electrophotographic process. The image capturing unit 208 is used to control the camera 250.

  The client PC 100 and the MFP 200 may include components other than the above-described components, or some of the above-described components may not be included. Unlike the present embodiment, the camera 250 may be built in the MFP 200.

  Next, the operation of the image forming system of this embodiment will be described with reference to FIG.

  FIG. 4 is a functional block diagram showing a software configuration of the image forming system shown in FIG.

  As shown in FIG. 4, the MFP 200 includes an original reading processing unit 221, a confidential document determination processing unit 222, a face image reading processing unit 223, a panel operation history recording unit 224, a confidential document operation history creation processing unit 225, and a confidential document operation history. A list display processing unit 226, an operator ID confirmation processing unit 227, and a confidential document operation history display processing unit 228 are included.

  The document reading processing unit 221 acquires document image data generated by the image reading unit 206 reading a document. The confidential document determination processing unit 222 determines whether the original document is a confidential document. The face image reading processing unit 223 captures the user's face with the camera 250 and creates face image data. The panel operation history recording unit 224 creates history information indicating a user operation history for the operation panel unit 205. The confidential document operation history creation processing unit 225 creates confidential document operation history information including document image data, face image data, and history information. The confidential document operation history information is stored in the hard disk 204 of the MFP 200. The confidential document operation history list display processing unit 226 displays a list of confidential document operation history information stored in the hard disk 204. The operator ID confirmation processing unit 227 confirms the operator ID input by the operator. The confidential document operation history display processing unit 228 displays confidential document operation history information.

  The client PC 100 also includes a confidential document determination processing unit 121, a face image reading processing unit 122, a print history recording unit 123, a confidential document information creation processing unit 124, and a print data transmission processing unit 125.

  The confidential document determination processing unit 121 determines whether the document instructed to be printed is a confidential document. The face image reading processing unit 122 images the user's face with the camera 150 and creates face image data. The print history recording unit 123 creates history information indicating a print instruction history. The confidential document information creation processing unit 124 creates confidential document information including face image data and history information. The print data transmission processing unit 125 transmits confidential document information and print data. The confidential document information and the print data are transmitted to the confidential document operation history creation processing unit 225 of the MFP 200, and after the image data of the original is generated from the print data, it is stored in the hard disk 204 of the MFP 200 as confidential document operation history information. The

  Note that the functions of the above-described units of the client PC 100 and the MFP 200 are exhibited when programs stored in the storage unit such as the hard disks 104 and 204 are read onto the RAMs 103 and 203 and executed.

  Next, the operation of the image forming system according to the present embodiment will be described with reference to FIGS. Hereinafter, a case where the user copies a document with the MFP 200 will be described as an example.

  5 and 6 are flowcharts for explaining the copying process by the MFP shown in FIG. 5 and 6 is stored as a program in a storage unit such as the hard disk 204 of the MFP 200, and is executed by the CPU 201.

  As shown in FIGS. 5 and 6, in the copying process of this embodiment, first, copy settings are accepted (step S101). In the present embodiment, after a document is set on the MFP 200 by a user, copy settings input by a user operation are accepted. Prior to accepting copy settings, identification information such as a user ID input by a user operation can be accepted.

  Next, it is determined whether or not the start button has been pressed (step S102). In this embodiment, it is determined whether or not the start button of the operation panel unit 205 has been pressed by the user in order to instruct the MFP 200 to execute the copying process.

  When it is determined that the start button has not been depressed (step S102: NO), the processing from step S101 is repeated until the start button is depressed. On the other hand, when it is determined that the start button has been depressed (step S102: YES), the document is read (step S103). In the present embodiment, the document is read by the image reading unit 206 of the MFP 200, and image data of the document is acquired.

  Next, confidential document determination processing is executed (step S104). In the present embodiment, a confidential document determination process for determining whether or not a document is a confidential document is executed by detecting predetermined image information included in the image data acquired in the process shown in step S103. Details of the confidential document determination processing shown in step S104 will be described later.

  Next, it is determined whether or not the document is a confidential document (step S105). In the present embodiment, based on the determination result of the confidential document determination process shown in step S104, it is determined whether or not the original document is a confidential document.

  When it is determined that the document is not a confidential document (step S105: NO), a normal copying process is executed (step S106), and the process is terminated. On the other hand, when it is determined that the document is a confidential document (step S105: YES), a message indicating that the user's face is to be imaged is displayed (step S107). In the present embodiment, a message indicating that the user's face is to be captured is displayed on the operation panel unit 205 of the MFP 200.

  Next, the camera 250 is activated and a camera image is displayed on the operation panel unit 205 (steps S108 and S109). In the present embodiment, the camera 250 provided in the MFP 200 is operated, and an image acquired by the camera 250 is displayed on the operation panel unit 205.

  Next, it is determined whether or not an “OK” operation has been performed (step S110). In the present embodiment, it is determined whether or not a button permitting imaging has been pressed by the user. When it is determined that the “OK” operation has not been executed (step S110: NO), the processing from step S109 is repeated until the “OK” operation is executed.

  On the other hand, when it is determined that the “OK” operation has been executed (step S110: YES), the user's face is imaged (step S111). In the present embodiment, the camera 250 captures the user's face and acquires image data.

  Next, the face image is evaluated (step S112). In the present embodiment, face image data is created from the image data acquired in the process shown in step S111, and the face image is evaluated. Specifically, the face of the user in the captured image is automatically recognized, and face image data is created by cutting out an image area corresponding to the recognized face. Then, the orientation of the user's face in the face image data is evaluated. Note that the process of evaluating the face image itself is a general image processing technique, and thus detailed description thereof is omitted.

  Next, it is determined whether or not the face image is a front image (step S113). In the present embodiment, based on the evaluation result of the face image evaluation process shown in step S112, it is determined whether or not the user's face in the face image data is facing the front.

  When it is determined that the face image is not a front image (step S113: NO), a message “Please turn to the front” is displayed (step S114), and step S109 is performed until it is determined that the face image is a front image. The following process is repeated.

  On the other hand, when it is determined that the face image is a front image (step S113: YES), the face image is recorded (step S115). In the present embodiment, the face image data obtained by the processing shown in step S112 is stored in the hard disk 204 of the MFP 200 as confidential document operation history information.

  Then, a copy process is executed (step S116). In the present embodiment, an image based on the document image data acquired in the process shown in step S103 is printed on a sheet, and the sheet on which the image is printed is output.

  Next, the document image is stored (step S117). In the present embodiment, the image data of the document acquired in the process shown in step S103 is stored in the hard disk 204 of the MFP 200 as confidential document operation history information.

  Then, history information is recorded (step S118), and the process ends. In the present embodiment, date information and time information indicating the date and time when the copying process is executed in the MFP 200 and operation information indicating the operation content (that is, copying) are used as confidential document operation history information as the hard disk 204 of the MFP 200. Is remembered.

  As described above, according to the processing of the flowcharts shown in FIGS. 5 and 6, it is determined whether or not the document instructed to be copied by the user is a confidential document, and the document is determined to be a confidential document. The user's face is imaged. The face image data is associated with the history information and the original image data, and is stored in the hard disk 204 of the MFP 200 as confidential document operation history information.

  FIG. 7 is a flowchart for explaining the confidential document determination process shown in step S104 of FIG.

  As shown in FIG. 7, in the confidential document determination process of the present embodiment, first, it is determined whether or not there is confidential digital information in the image data (step S201). In the present embodiment, it is determined whether or not confidential digital information indicating a confidential document is added to the image data of the document acquired in the process shown in step S103 of FIG. Here, the confidential digital information is, for example, block data embedded in a figure such as a character included in a document. Note that the technique for adding information by embedding block data in a graphic such as a character is a general information addition technique, and thus detailed description thereof is omitted.

  If it is determined that there is confidential digital information in the image data (step S201: YES), it is determined that the document is a confidential document (step S203), and the process ends.

  On the other hand, when it is determined that there is no confidential digital information in the image data (step S201: NO), it is determined whether there is a confidential information character in the image data (step S202). In the present embodiment, it is determined whether or not there is character information such as “copy prohibited” registered in advance in the image data of the document acquired in the process shown in step S103 of FIG.

  If it is determined that there is a confidential information character in the image data (step S202: YES), it is determined that the document is a confidential document (step S203), and the process ends. On the other hand, when it is determined that there is no confidential information character in the image data (step S202: NO), it is determined that the document is not a confidential document (step S204), and the process is terminated.

  As described above, according to the processing of the flowchart shown in FIG. 7, it is determined whether or not the document instructed to be copied by the user is a confidential document. If it is determined that the document is a confidential document, confidential document operation history information is created and stored in the hard disk 204 of the MFP 200.

  In the above-described embodiment, the case where the user copies a document with the MFP 200 has been described as an example. However, similar processing is executed when the user causes the MFP 200 to read a document to create a document file or send a fax. If it is determined that the document is a confidential document, confidential document operation history information is created. The confidential document operation history information stored in the hard disk 204 is browsed by the operator.

  A history display process performed by the MFP shown in FIG. 1 will be described below with reference to FIGS.

  FIG. 8 is a flowchart for explaining history display processing by the MFP shown in FIG. Note that the algorithm shown in the flowchart of FIG. 8 is stored as a program in a storage unit such as the hard disk 204 of the MFP 200 and is executed by the CPU 201.

  As shown in FIG. 8, in the history display process of the present embodiment, first, the document image, the face image, and the history information are read (step S301). In the present embodiment, document image data, face image data, and history information stored in the hard disk 204 of the MFP 200 are read.

  Next, a history list is displayed (step S302). In the present embodiment, a list of history information read in the process shown in step S301 is displayed on the operation panel unit 205.

  FIG. 9 is a diagram illustrating an example of a confidential document operation history list. As shown in FIG. 9, the confidential document operation history list 400 includes history information as execution information indicating that a job has been executed. Each history information includes job number information 401, date information 402, time information 403, operation information 404, and ID information 405. The job number information 401 is for specifying each piece of history information from the list of history information. Date information 402 and time information 403 indicate the date and time when the job is executed in the MFP 200. The operation information 404 indicates job operation details (for example, copying). The ID information 405 identifies a user who has instructed execution of a job, and is recorded only when a user ID is accepted at the time of job execution. Unlike the present embodiment, the history information may be added with information that allows the operator to determine the contents of the document, such as the file name of the document processed by the job or the first character string of the document. .

  Next, a job number is accepted (step S303). In the present embodiment, the job number of one history information selected by the operator from the list of history information displayed in the process shown in step S302 is accepted.

  Next, an operator ID input menu is displayed (step S304). In the present embodiment, as shown in FIG. 10, an operator ID input screen 500 that prompts the operator to input an operator ID is displayed.

  Next, an operator ID is accepted (step S305). In the present embodiment, an operator ID input by the operator is accepted through the operator ID input screen 500 displayed in the process shown in step S304.

  Next, it is determined whether or not the operator has the authority to display confidential documents (step S306). In the present embodiment, based on the operator ID received in the process shown in step S305, it is determined whether or not the operator has the authority to display confidential documents.

  When it is determined that the operator has the authority to display the confidential document (step S306: YES), a display image including the confidential document image is generated (step S307), and the process is terminated. On the other hand, when it is determined that the operator does not have the confidential document display authority (step S306: NO), a display image without a confidential document image is generated (step S308), and the process is terminated. The display image generated by the processing shown in steps S307 and S308 is displayed on operation panel unit 205 of MFP 200.

  FIG. 11 is a diagram illustrating an example of a display image with a confidential document image and a display image without a confidential document image. FIG. 11A is a diagram illustrating an example of a display image with a confidential document image, and FIG. 11B is a diagram illustrating an example of a display image without a confidential document image.

  As shown in FIG. 11A, the display image 600a with a confidential document image includes history information 601, a face image 602, and a confidential document image 603. Therefore, the operator can specify the user who has performed processing such as copying or printing of the confidential document by the MFP 200 from the face image 602 of the display image 600a including the confidential document image. Further, the operator can grasp the contents of the confidential document that has been subjected to processing such as copying and printing from the confidential document image 603 of the display image 600a including the confidential document image.

  On the other hand, as shown in FIG. 11B, the display image 600b without the confidential document image includes the history information 601 and the face image 602, and does not include the confidential document image. Therefore, the operator can specify a user who has performed processing such as copying or printing of a confidential document with the MFP 200 from the face image 601 of the display image 600b including the confidential document image. However, since the operator does not have the authority to display the confidential document, the operator cannot grasp the content of the confidential document that has been subjected to processing such as copying and printing.

  As described above, according to the processing of the flowchart shown in FIG. 8, a list of history information regarding confidential documents is displayed, and a face image corresponding to one history information selected by the operator is displayed on the operation panel unit 205 of the MFP 200. Is done. At this time, an image of the confidential document is displayed on the operation panel unit 205 together with the face image according to the authority of the operator.

  According to the image forming system of the present embodiment, when the MFP 200 is instructed to execute a job related to a confidential document, the user's face image is stored in the hard disk 204 of the MFP 200 together with the job history information. After executing the above, it is possible to identify the user who instructed the execution of the job with reference to the face image. Accordingly, it is possible to enhance the psychological suppression effect against unauthorized use by the user and suppress leakage of the confidential document due to unauthorized copying or printing of the confidential document.

  Further, according to the image forming system of the present embodiment, the user is specified based on the face image, so that the user is specified more reliably than in the case where the user is authenticated using a PIN code or an IC card. Also, registration processing for registering users in advance is omitted. Furthermore, according to the image forming system of the present embodiment, the load on the hard disk is reduced as compared with the case where the user's face image is always stored.

  As described above, in the image forming system according to the present embodiment described above, when the MFP 200 is instructed to copy a confidential document, the user's face is imaged by the camera 250 provided in the MFP 200. Hereinafter, a process for capturing an image of the user's face by the camera 150 provided in the client PC 100 when the MFP 200 instructs the MFP 200 to print a confidential document will be described.

  12 and 13 are flowcharts for explaining the print instruction process by the client PC shown in FIG. 12 and 13 is stored as a program in a storage unit such as the hard disk 104 of the client PC 100, and is executed by the CPU 101.

  As shown in FIGS. 12 and 13, in the print instruction process of the present embodiment, first, a print instruction is accepted (step S401). In the present embodiment, for example, a user's print instruction for a document file displayed on the display 105 of the client PC 100 is accepted.

  Next, a confidential document determination process is executed (step S402). In the present embodiment, a confidential document determination process is performed for determining whether or not the document is a confidential document based on the policy information of the document file instructed to be printed in the process shown in step S401. Since the policy information itself is general document file attribute information, detailed description thereof is omitted.

  Next, it is determined whether or not the document is a confidential document (step S403). In the present embodiment, it is determined whether the document to be printed is a confidential document based on the determination result of the confidential document determination process shown in step S402.

  If it is determined that the document is not a confidential document (step S403: NO), print data is transmitted to the MFP 200 (step S404). In the present embodiment, a print job including print data of a document instructed to be printed is transmitted to MFP 200.

  On the other hand, when it is determined that the document is a confidential document (step S403: YES), a message indicating that the user's face is to be captured is displayed (step S405). In this embodiment, a message indicating that the user's face is imaged is displayed on the display 105 of the client PC 100.

  Next, the camera 150 is activated and a camera image is displayed on the display 105 (steps S406 and S407). In this embodiment, the camera 150 provided in the client PC 100 is operated, and an image acquired by the camera 150 is displayed on the display 105.

  Next, it is determined whether or not an “OK” operation has been performed (step S408). In the present embodiment, it is determined whether or not a button permitting imaging has been pressed by the user. When it is determined that the “OK” operation has not been executed (step S408: NO), the processing from step S407 onward is repeated until the “OK” operation is executed.

  On the other hand, when it is determined that the “OK” operation has been executed (step S408: YES), the user's face is imaged (step S409). In the present embodiment, the user's face is imaged by the camera 150, and image data is acquired.

  Next, the face image is evaluated (step S410). In the present embodiment, face image data is created from the image data acquired in the process shown in step S409, and the face image is evaluated. Specifically, the face of the user in the captured image is automatically recognized, and face image data is created by cutting out an image area corresponding to the recognized face. Then, the orientation of the user's face in the face image data is evaluated.

  Next, it is determined whether or not the face image is a front image (step S411). In this embodiment, based on the evaluation result of the face image evaluation process shown in step S410, it is determined whether or not the user's face in the face image data is facing the front.

  If it is determined that the face image is not a front image (step S411: NO), a message “Please turn to the front” is displayed (step S412), and step S407 is performed until it is determined that the face image is a front image. The following process is repeated.

  On the other hand, when it is determined that the face image is a front image (step S411: YES), the face image is recorded (step S413). In the present embodiment, the face image data obtained by the process shown in step S410 is stored in the RAM 103 of the client PC 100.

  Next, history information is recorded (step S414). In the present embodiment, date information and time information indicating the date and time when the print instruction is executed, and operation information indicating the operation content (that is, printing) are stored in the RAM 103 of the client PC 100.

  Next, confidential document information is created (step S415). In the present embodiment, confidential document information including face image data, date information, time information, and operation information recorded in the processes shown in steps S413 and S414 is created.

  Then, the print data and confidential document information are transmitted to the MFP 200 (step S416), and the process is terminated. In the present embodiment, a print job including the confidential document information created in the process shown in step S415 and the print data of the document instructed to be printed is transmitted to the MFP 200.

  As described above, according to the processing of the flowcharts shown in FIGS. 12 and 13, it is determined whether or not the document instructed to be printed by the user is a confidential document, and it is determined that the document is a confidential document. The user's face is imaged. The face image data is associated with the history information and transmitted to the MFP 200 together with the print data.

  Next, the operation of the MFP 200 that executes a print job will be described with reference to FIG.

  FIG. 14 is a flowchart for explaining printing processing by the MFP shown in FIG. The algorithm shown in the flowchart of FIG. 14 is stored as a program in a storage unit such as the hard disk 204 of the MFP 200 and is executed by the CPU 201.

  As shown in FIG. 14, in the printing process of the present embodiment, first, a print job is received (step S501). In this embodiment, a print job transmitted from the client PC 100 is received.

  Next, the print job is confirmed (step S502). In the present embodiment, the contents of the print job received in the process shown in step S501 are confirmed. Specifically, it is confirmed whether or not confidential document information is included in the print job.

  Next, it is determined whether or not the document is a confidential document (step S503). In this embodiment, based on the confirmation result of the confirmation process shown in step S502, it is determined whether or not the document to be printed is a confidential document.

  When it is determined that the document is not a confidential document (step S503: NO), a normal printing process is executed (step S504), and the process ends. In this embodiment, print data is rasterized to form image data for printing, and an image based on the image data is printed on paper.

  On the other hand, when it is determined that the document is a confidential document (step S502: NO), confidential document information is read (step S505). In this embodiment, confidential document information included in the print job received in the process shown in step S501 is read.

  Next, a face image, a document image, and history information are recorded (step S506). In this embodiment, the face image data and history information included in the confidential document information read in the process shown in step S505 and the confidential document image data created from the print data are used as confidential document operation history information. Are stored in the hard disk 204. Then, a printing process is executed (step S507), and the process ends.

  As described above, according to the process of the flowchart shown in FIG. 14, when the user instructs printing of the confidential document, the user's face image data is associated with the history information and the document image data and stored in the hard disk 204 of the MFP 200. Remembered.

  According to the image forming system of the present embodiment, when the MFP 200 is instructed to execute a job related to a confidential document, the user's face image is stored in the hard disk 204 of the MFP together with the job history information. After executing the above, it is possible to identify the user who instructed the execution of the job with reference to the face image. Accordingly, it is possible to enhance the psychological suppression effect against unauthorized use by the user and suppress leakage of the confidential document due to unauthorized copying or printing of the confidential document.

  In the above embodiment, user face image data and history information are created in the client PC 100. However, the history information may be created in the MFP 200 that has received the print job.

  The present invention is not limited to the above-described embodiments, and various modifications can be made within the scope of the claims.

  For example, in the above embodiment, the face image of the user is displayed on the operation panel unit of the MFP. However, the user's face image may be printed out by the MFP. Alternatively, the face image may be displayed on the display of a management PC that can communicate with the MFP.

  In the above embodiment, the user's face image is displayed in response to an instruction from the operator. However, regardless of the operator's instruction, for example, the face image may be printed out periodically and automatically. Further, all face images may be displayed in a lump corresponding to all history information included in the confidential document operation history list.

  The means and method for performing various processes in the image forming system according to the present embodiment can be realized by either a dedicated hardware circuit or a programmed computer. The program may be provided by a computer-readable recording medium such as a flexible disk and a CD-ROM, or may be provided online via a network such as the Internet. In this case, the program recorded on the computer-readable recording medium is normally transferred to and stored in a storage unit such as a hard disk. The program may be provided as a single application software, or may be incorporated in the software of the apparatus as a function of the apparatus in the image forming system.

100 client PCs,
101, 201 CPU,
102, 202 ROM,
103, 203 RAM,
104,204 hard disk,
105 display,
106 input devices,
107,209 dedicated video interface,
108,210 communication interface,
109,211 bus,
150,250 cameras,
200 MFP,
205 operation panel section,
206 Image reading unit,
207 printing section,
208 image capturing unit,
300 network,
400 confidential document operation history list,
500 Operator ID input screen,
600a Display image with confidential document image,
600b Display image without confidential document image.

Claims (16)

Imaging means capable of imaging a user's face instructing execution of a job;
Document determination means for determining whether a document processed in the job is a confidential document;
When the document determination unit determines that the document is a confidential document, the acquisition unit acquires the user's face image data by imaging the user's face by the imaging unit;
Face image storage means for storing the face image data acquired by the acquisition means;
Output means for outputting the face image data stored in the face image storage means;
An image forming system comprising: Image determining means for determining whether or not the face image data has been acquired by the acquiring means;
When it is determined that the face image data has been acquired by the image determination unit, it is determined that the face image data has not been acquired by the image determination unit while permitting execution of the job by the image forming system. The image forming system according to claim 1, further comprising: an execution control unit that prohibits execution of the job by the image forming system.   When the document determining unit determines that the document is not a confidential document, the image forming system further includes an imaging control unit that permits the image forming system to execute the job without acquiring the face image data. The image forming system according to claim 1 or 2. A document image storage means for storing image data of the confidential document;
The output means outputs the image data of the confidential document together with the face image data in response to an instruction from an operator having authority to view the confidential document. The image forming system according to item. The face image data is stored in the face image storage means in association with execution information indicating that the job has been executed,
The output means outputs the face image data associated with the selected execution information in response to selection of the execution information by an operator. The image forming system described. Accepting means for accepting input of identification information by the user;
The image forming system according to claim 5, further comprising: an identification information storage unit that stores the identification information in association with the execution information when the reception unit receives the identification information. Further comprising reading means for acquiring image data of the document by reading a document;
The document determination unit determines whether the document is a confidential document by detecting predetermined image information related to confidentiality included in the image data of the document acquired by the reading unit. The image forming system according to any one of claims 1 to 6. The document processed in the job is a document in a predetermined file format,
The image forming apparatus according to claim 1, wherein the document determination unit determines whether the document is a confidential document based on attribute information related to the confidentiality of the document. system. Document determination means for determining whether or not a document to be processed in a job instructed to execute is a confidential document;
When the document determination unit determines that the document is a confidential document, an acquisition unit that captures an image of the user's face instructing execution of the job by the imaging unit and acquires the user's face image data;
Face image storage means for storing the face image data acquired by the acquisition means;
Output means for outputting the face image data stored in the face image storage means;
An image forming apparatus comprising: Image determining means for determining whether or not the face image data has been acquired by the acquiring means;
When it is determined that the face image data has been acquired by the image determination unit, it is determined that the face image data has not been acquired by the image determination unit while allowing the image forming apparatus to execute the job. The image forming apparatus according to claim 9, further comprising an execution control unit that prohibits execution of the job by the image forming apparatus.   When the document determining unit determines that the document is not a confidential document, the image forming apparatus further includes an imaging control unit that allows the image forming apparatus to execute the job without acquiring the face image data. The image forming apparatus according to claim 9 or 10. A document image storage means for storing image data of the confidential document;
12. The output unit according to claim 9, wherein the output unit outputs image data of the confidential document together with the face image data in response to an instruction from an operator having authority to view the confidential document. The image forming apparatus described in the item. The face image data is stored in the face image storage means in association with execution information indicating that the job has been executed,
13. The face image data associated with the selected execution information is output according to any one of claims 9 to 12, wherein the output means outputs the face image data associated with the selected execution information. The image forming apparatus described. Accepting means for accepting input of identification information by the user;
The image forming apparatus according to claim 13, further comprising: an identification information storage unit that stores the identification information in association with the execution information when the reception unit accepts the identification information. Further comprising reading means for acquiring image data of the document by reading a document;
The document determination unit determines whether the document is a confidential document by detecting predetermined image information related to confidentiality included in the image data of the document acquired by the reading unit. The image forming apparatus according to any one of claims 9 to 14. The document processed in the job is a document in a predetermined file format,
The image forming apparatus according to claim 9, wherein the document determination unit determines whether the document is a confidential document based on attribute information regarding confidentiality of the document. apparatus.