JP2011029848A - Image forming device, information processing method, and program therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a risk when a removable storage medium such as a USB memory is utilized by managing the storage medium appropriately when it is utilized. <P>SOLUTION: First user identification information for identifying a user to be logged in an image forming device is received, and the storage medium identification information of a storage medium is acquired when connection of the storage medium is detected. Second user identification information for identifying a user who is approved to utilize the storage medium connection detected, is then received. When a decision is made that the storage medium is taken out, first management information including the storage medium identification information, the first user identification information, and the second user identification information is outputted in order to take out the storage medium. When a decision is made that the storage medium is returned by a means for deciding utilization of the storage medium, second management information including the storage medium identification information and the second user identification information is outputted in order to return the storage medium. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an image forming apparatus that can use a removable storage medium.

  In recent years, a multifunction device is also equipped with a USB port so that a USB memory can be connected.

  For this reason, a USB memory is connected to the multifunction device, and document data stored in the USB memory is read by the multifunction device, or document data is stored in the USB memory.

  Therefore, from the viewpoint of security, it is desired to manage the connected USB memory even when the USB memory is connected and used in the multifunction machine.

  For this reason, a technique for managing the usage history information of a USB memory by a multifunction peripheral is disclosed. (For example, Patent Document 1)

JP 2008-78762 A

  In general, when using a USB memory in a company, from the viewpoint of "1. Information leakage due to loss of USB memory", "2. Intentional information leakage due to USB memory", "3. Virus infection due to USB memory connection" Management before and after using the USB memory is required.

  However, in the mechanism of Patent Document 1, the use history can be managed when the USB memory is used on the multifunction peripheral. However, the management of the USB memory itself is not considered, and the proper management of the USB memory is not considered. I couldn't.

  In general, as a countermeasure for “1. Information leakage due to loss of USB memory”, a management ledger is created, and information on the USB memory take-out return is entered in the management ledger and approved by the approver. The operation that was done was done, and time-consuming management was done.

  As for “2. Intentional information leakage by USB memory”, a USB memory is connected to a client PC normally used by each user and a file is copied, but it is difficult to strictly manage each client PC. Information was easily taken out.

  Regarding "3. Virus infection caused by USB memory connection", it can be considered that the USB memory is checked for viruses in advance, but the virus check version is the latest version. It is difficult to prevent virus infection via the USB memory because it is left to each user.

  In particular, information leakage and virus infection from USB memory are strictly managed because they may develop into important problems related to the survival of the company, such as leakage of confidential information, loss of corporate credibility, and corporate image down. However, since various operations are performed, it is difficult to appropriately manage the USB memory when it is used.

  Accordingly, an object of the present invention is to provide a mechanism for appropriately managing when a removable storage medium such as a USB memory is used, and reducing risk when using the storage medium.

  In order to achieve the above-described object, a first image forming apparatus to which a removable storage medium is connected, which receives first user identification information for identifying a user for logging in to the image forming apparatus. According to the user identification information receiving means, the storage medium identification information obtaining means for obtaining the storage medium identification information of the storage medium in accordance with the connection detection of the storage medium, and the user who approves the use of the storage medium whose connection is detected. Second user identification information accepting means for accepting second user identification information, storage medium utilization determining means for determining whether to take out or returning the connected storage medium, and the storage medium utilization determining means When it is determined to take out the storage medium, the storage medium identification information, the first user identification information, and the The first management information output means for outputting the first management information including the user identification information of 2 and when the storage medium use determining means determines to return the storage medium, the storage medium is returned. To this end, there is provided a second management information output means for outputting second management information including the storage medium identification information and the second user identification information.

  In addition, the apparatus includes virus inspection execution means for executing virus inspection of the storage medium, and the virus inspection execution means executes virus inspection when it is determined by the previous storage medium use determination means that the storage medium is taken out. It is characterized by.

  The first management information includes a test result obtained by executing a virus test by the virus test executing unit.

  In addition, when the storage medium use determination unit determines to return the storage medium, the storage medium use determination unit includes a file determination unit that determines whether there is a file in the storage medium, and the virus inspection execution unit includes the storage medium A virus check is performed when it is determined that the storage medium is to be returned by the usage determination means and the file determination means determines that there is a file.

  The second management information includes a test result obtained by executing a virus test by the virus test executing unit.

  In addition, the image processing apparatus includes a display unit that displays a test result obtained by executing the virus test by the virus test execution unit, and a printing unit that prints the test result displayed by the display unit.

  In addition, a take-out mode for taking out the storage medium and a return mode for returning the storage medium are provided, and the take-out is performed when a user who logs in to the image forming apparatus is different from a user who approves the use of the storage medium. A mode or a return mode is executed.

  According to the present invention, for example, management at the time of use of a removable storage medium such as a USB memory can be appropriately performed, and risk reduction when using the storage medium can be achieved.

The figure which shows an example of the system configuration | structure of the information processing system which concerns on embodiment of this invention Block diagram showing an example of the hardware configuration of the authentication server 103, management server 104, and client PC 105 Block diagram showing an example of a hardware configuration of the multifunction machine 100 A block diagram illustrating an example of a functional configuration of a functional block diagram of the multifunction peripheral 100, the authentication server 103, and the management server 104 Flow chart showing an example of file transmission processing Flow chart showing an example of authentication processing A flowchart showing an example of processing when the USB memory 102 is used Flow chart showing an example of virus scan execution processing Flowchart showing an example of print execution processing Flow chart showing an example of approval information search processing Data structure diagram showing an example of user file information 1200 Data configuration diagram showing an example of authentication information 1300 Data configuration diagram showing an example of approval information 1400 An image diagram showing an example of a file transmission login screen when logging in to the MFP 100 An image diagram showing an example of a file transmission screen when selecting a file to be transmitted to the multifunction device 100 An image diagram showing an example of a user authentication screen initially displayed on the operation unit 308 An image diagram showing an example of a USB memory connection waiting screen displayed on the operation unit 308 An image diagram showing an example of a USB memory approval screen displayed on the operation unit 308 An image diagram showing an example of a file selection screen displayed on the operation unit 308 An image diagram showing an example of a scan result display screen displayed on the operation unit 308

  Hereinafter, a preferred embodiment of a screen forming system according to the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram illustrating an example of an image forming system (information processing system) of the present embodiment.

  As shown in FIG. 1, the image forming system (information processing system) includes, for example, one or a plurality of multifunction peripherals (image forming apparatuses) 100, one authentication server 103, one management server 104, one or more The client PC 105 is connected via a local area network (LAN) 110 (communication medium).

  The multi-function device 100 transmits a card number read from a card held over a card reader 101 described later to the authentication server 103 as an authentication request. In addition, the user name and password input by the operation unit 308 of the multi-function device (to be described later) are transmitted to the authentication server 103 as an authentication request.

  The MFP 100 can be connected to a USB memory 102 (detachable storage medium). When the USB memory 102 is connected, the USB memory 102 is taken out or taken out (returned).

  Further, the multi-function device 100 stores the file transmitted from the client PC 105 and outputs the stored file to the USB memory 102.

  The authentication server 103 stores authentication information (FIG. 13), which will be described later, and performs an authentication process using the authentication information in response to an authentication request from the multifunction device 100 using an IC card or an authentication request using a user name and password. I do.

  The authentication server 103 is configured to be communicable with, for example, a directory server (not shown), and when there is an authentication request with a user name and password, the directory server is inquired and the user name is stored in the directory server. If it is determined that the authentication has succeeded, the authentication result can be transmitted from the authentication server 103 to the multifunction peripheral 100. That is, the authentication server 103 is a device having a directory server function.

  In addition, the client PC 105 transmits a file to the multifunction device 100 and transmits print data to the multifunction device 100 via a printer driver installed in the client PC 105.

  The management server 104 is a server that manages the USB memory 102 connected to the multifunction peripheral 100, and manages the approval information 1400 in FIG. The management server 104 may be configured as the same housing as the authentication server 103. Also, the MFP 100 can be provided with a management server function to manage the USB memory 102 in the MFP.

  Next, the hardware configuration of the client PC 105, the authentication server 103, and the management server 104 shown in FIG. 1 will be described with reference to FIG.

  FIG. 2 is a block diagram illustrating a hardware configuration example of an information processing apparatus applicable to the management server 104. Note that the block diagram of FIG. 2 can also be applied to the authentication server 103 and the client PC 105.

  As shown in FIG. 2, the management server 104 includes a CPU (Central Processing Unit) 201, a RAM (Random Access Memory) 203, a ROM (Read Only Memory) 202, an input controller 205, a video controller 206, a system bus 204, and the like. A configuration in which a memory controller 207, a communication I / F controller 208, and the like are connected is adopted.

  The CPU 201 comprehensively controls each device and controller connected to the system bus 204.

  Further, the ROM 202 or the external memory 211 will be described later, which is necessary for realizing the functions executed by each server or each PC, such as BIOS (Basic Input / Output System) and OS (Operating System) which are control programs of the CPU 201. Various programs are stored. Information necessary for carrying out the present invention (for example, the approval information in FIG. 13 for the management server 104, the user file information in FIG. 11 for the client PC 105, and the authentication information in FIG. 12 for the authentication server 103). Is stored in the external memory 211. The external memory may be a database.

  The RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program or the like necessary for executing the processing from the ROM 202 or the external memory 211 to the RAM 203 and executing the loaded program.

  The input controller 205 controls input from a keyboard (KB) 209 or a pointing device such as a mouse (not shown).

  The video controller 206 controls display on a display device such as the display 210. The display device may be a display device such as a liquid crystal display. These are used by the administrator as needed.

  The memory controller 207 is an external storage device (hard disk (HD)), flexible disk (FD), or PCMCIA (Personal Computer) that stores a boot program, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 211 such as a Compact Flash (registered trademark) memory connected to a Memory Card International Association (Card Memory) card slot via an adapter.

  The communication I / F controller 208 connects and communicates with an external device via a network (for example, the LAN 110 illustrated in FIG. 1), and executes communication control processing in the network. For example, communication using TCP / IP (Transmission Control Protocol / Internet Protocol) is possible.

  The CPU 201 can display on the display 210 by executing an outline font rasterization process on a display information area in the RAM 203, for example. Further, the CPU 201 enables a user instruction using a mouse cursor (not shown) on the display 210.

  Various programs to be described later for realizing the present invention are recorded in the external memory 211 and executed by the CPU 201 by being loaded into the RAM 203 as necessary. Furthermore, a definition file and various information tables used when executing the program are also stored in the external memory 211, and a detailed description thereof will be described later.

  Next, the hardware configuration of the multifunction peripheral 100 as the information processing apparatus of the present invention will be described with reference to FIG.

  FIG. 3 is a block diagram illustrating a hardware configuration example of the multifunction peripheral 100.

  In FIG. 3, a controller unit 316 is connected to a scanner 314 functioning as an image input device and a printer 312 functioning as an image output device, and is connected to a local area network such as the LAN 110 shown in FIG. By connecting to a public line (WAN) such as ISDN, image data and device information are input and output.

  As shown in FIG. 3, the controller unit 316 includes a CPU 301, a RAM 302, a ROM 303, an external storage device (hard disk drive (HDD)) 304, a network interface (Network I / F) 305, a modem (Modem) 306, an operation unit interface ( Operation unit I / F) 307, external interface (external I / F) 318, image bus interface (IMAGE BUS I / F) 320, raster image processor (RIP) 310, printer interface (printer I / F) 311, scanner interface (Scanner I / F) 313, an image processing unit 317, and the like.

  The CPU 301 is a processor that controls the entire system.

  A RAM 302 is a system work memory for the operation of the CPU 301, and is a program memory for recording a program and an image memory for temporarily storing image data.

  The ROM 303 stores a system boot program and various control programs.

  An external storage device (hard disk drive HDD) 304 stores various programs for controlling the system, image data, and the like.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit (UI) 308, and outputs image data to be displayed on the operation unit 308 to the operation unit 308.

The operation unit I / F 307 serves to transmit information (for example, user information) input by the system user from the operation unit 308 to the CPU 301. Note that the operation unit 308 includes a display unit having a touch panel, and various instructions can be given by a user pressing (touching with a finger or the like) a button displayed on the display unit.

  A network interface (Network I / F) 305 is connected to a network (LAN) and inputs / outputs data.

  A modem (MODEM) 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  An external interface (external I / F) 318 is an interface unit that accepts external inputs such as USB, IEEE 1394, printer port, RS-232C, etc. In this embodiment, a card reader for reading an IC card required for authentication is used. 101 is connected.

  The CPU 301 can control reading of information from the IC card by the card reader 101 via the external I / F 318, and can acquire information read from the IC card. Note that the storage medium is not limited to an IC card, and any storage medium that can identify a user may be used.

In this case, identification information for identifying the user is stored in the storage medium. This identification information may be a production number of the storage medium or a user code given by the user within the company.
The above devices are arranged on the system bus 309.

  On the other hand, an image bus interface (IMAGE BUS I / F) 320 is a bus bridge that connects a system bus 309 and an image bus 315 that transfers image data at high speed and converts a data structure.

  The image bus 315 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data such as a PDL code into a bitmap image, for example.

  A printer interface (printer I / F) 311 connects the printer 312 and the controller unit 316 to perform synchronous / asynchronous conversion of image data.

  A scanner interface (scanner I / F) 313 connects the scanner 314 and the controller unit 316, and performs synchronous / asynchronous conversion of image data.

  An image processing unit 317 corrects, processes, and edits input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 performs image data rotation and compression / decompression processing such as JPEG for multi-valued image data and JBIG, MMR, MH for binary image data.

  A scanner 314 connected to the scanner I / F 313 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner, and the feeder feeds the original paper one by one to read the original image. I do.

  The printer 312 connected to the printer I / F 311 is a part that converts raster image data into an image on paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and ink is supplied from a micro nozzle array. There is an ink jet method for ejecting and printing an image directly on a sheet, but any method may be used. The activation of the printing operation is started by an instruction from the CPU 301. The printer unit 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has a paper cassette corresponding thereto.

  The operation unit 308 connected to the operation unit I / F 307 includes a liquid crystal display (LCD) display unit. A touch panel sheet is affixed on the LCD to display a system operation screen, and when a displayed key is pressed, the position information is transmitted to the CPU 301 via the operation unit I / F 307. The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. There are green and red LEDs in the center of the start key, and indicates whether or not the start key can be used depending on the color. In addition, the stop key of the operation unit 308 functions to stop the operation being performed. The ID key of the operation unit 308 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit 308.

  The card reader 101 connected to the external I / F 318 reads information stored in an IC card (for example, Sony Felica (registered trademark)) under the control of the CPU 301, and reads the read information to the external I / F. The CPU 301 is notified via F318.

  Next, functions of the client PC 105, the authentication server 103, and the multifunction peripheral 100 as an information processing apparatus according to the present invention will be described with reference to FIG.

  FIG. 4 is a functional block diagram illustrating an example of functions of the multifunction peripheral 100, the authentication server 103, and the management server 104.

  The first user information input unit 401 of the multifunction device 100 acquires the card information of the IC card held over the card reader 101 in order to log in to the multifunction device 100 and transmits it to the authentication server 103. Then, an input of user information for a user using the USB memory authenticated by the authentication server 103 is accepted.

  When the user information is input from the first user information input unit 401 and the MFP 100 is logged in, the USB memory detection unit 402 detects that the USB memory 102 is connected to the external I / F 309. The detected machine number of the USB memory 102 is received.

  When the connection of the USB memory 102 is detected by the USB memory detection unit 402, the second user information input unit 403 obtains user information for approving (permitting) the use of the connected USB memory 102. The card information of the IC card held over the card reader 101 is acquired and transmitted to the authentication server 103. And the input of the user information used as the authorized user authenticated by the authentication server 103 is received. The second user information input unit 403 outputs an input error when the card information that is the same user information as the user information input by the first user information input unit 401 is acquired.

  When the USB memory detection unit 402 detects the connection of the USB memory 102, the take-out determination unit 404 refers to the USB memory approval information (management information) stored in the management server 104 and connects the connected USB memory 102. It is determined whether or not is taking out. If the USB memory 102 is being taken out, the process proceeds to a return process in order to cause the USB memory 102 to be returned. If the USB memory is being taken out, it is possible to shift to the take-out process in order to take out the USB memory again. If it is not being taken out, the process proceeds to taking out the USB memory 102.

  The file management unit 405 stores the file received from the client PC 105 and manages it for each user. When a file is taken out from the connected USB memory 102, a file corresponding to the user information input by the first user information input unit 401 is searched, and a file to be stored in the USB memory 102 is acquired according to a user instruction. . The file is output to the USB memory 102.

  When the connected USB memory 102 is returned, the file stored in the USB memory 102 is copied and the file is deleted.

  The virus scan result reception unit 406 receives a virus scan result for determining whether the connected USB memory 102 is infected with a virus or the like.

  The USB memory management information acquisition unit 407 is a USB memory that can be acquired by the first user information input unit 401, the second user information input unit 403, the USB memory detection unit 402, the file management unit 405, and the virus scan result reception unit 406. Get management information to manage This management information is transmitted to the management server 104 to manage the USB memory.

  The USB memory management information output unit 408 generates print data including the virus scan result in order to display the virus scan result received by the virus scan result reception unit 406 on the operation unit 308 or to output the virus scan result on paper. ,Output. In addition to the virus scan result, the approval information 1400 of the connected USB memory 102 is acquired from the management server 104, and print data is generated and output.

  The authentication unit 410 of the authentication server 103 determines whether or not there is authentication information 1300 corresponding to the card information received from the multifunction peripheral 100. If there is, the authentication result including at least the user name is combined as a successful authentication. To the machine 100. Otherwise, the authentication result is transmitted to the multi-function device 100 as an authentication failure.

  The USB memory information management unit 420 of the management server 104 receives the management information transmitted from the multifunction device 100, stores it in the approval information 1400, and manages it. Further, according to the search instruction including the search condition obtained from the client PC 105, the USB memory approval information (management information) is searched, and the search result is returned to the client PC.

  Next, file transmission processing according to the embodiment of the present invention will be described with reference to FIG.

  Note that the processing of step S601, step S604, and steps S606 to S607 is executed by the client PC 105. Further, the processes of steps S602 to S603, step S605, and steps S608 to S610 are processes of the multi-function device 100 and are executed by the CPU 201.

  First, in step S601, the user accesses the MFP 100 from the client PC 105, and displays the file transmission login screen (FIG. 14) acquired from the MFP 100 on the browser. The user name and user password input from the file transmission login screen (FIG. 14) are transmitted to the multi-function device 100.

  In step S602, it is determined whether or not to log in according to the user name and the user password sent to the multi-function device 100. The determination of login is based on whether or not the user name and the user password in the authentication information (FIG. 12) stored in the external memory 211 of the authentication server 103 match by transmitting the user name and the user password to the authentication server 103. Determined. If they match, the authentication is considered successful, and if they do not match, the authentication result is transmitted from the authentication server 103 to the multi-function peripheral 100 as authentication failure. This determines login.

  The login may be determined by storing authentication information (FIG. 12) in the HDD 304 in the MFP 100 in advance, and determining whether the authentication information matches the user name and the user password.

  If the result of login determination is authentication failure, the process of step S603 is performed. In step S603, the authentication failure result is transmitted to the client PC 105. In step S604, the client PC 105 receives the result of the authentication failure and displays it on the browser display screen. The result of the authentication failure is, for example, display control information in the HTML format that can be displayed by the browser for displaying on the browser, and includes an error character string.

  As a result of the login determination, if the authentication is successful, the process of step S605 is performed. In step S605, the result of successful authentication is transmitted to the client PC 105. The result of successful authentication is display control information in, for example, HTML format that can be displayed on the browser for display on the browser. Specifically, it is data that can be displayed as a file transmission screen (FIG. 15).

  In step S606, the client PC 105 displays a file transmission screen (FIG. 15). In step S607, the file 1602 selected by the user is acquired and transmitted to the multi-function device 100. When the file 1602 is transmitted to the multi-function device 100, user file information (FIG. 11) is also transmitted.

  In step S608, the file and user file information (FIG. 11) received from the client PC 105 is received, and in step S609, the file is stored in the HDD 304. In step S610, user file information (FIG. 11) is stored in a database. In the present embodiment, the user file information (FIG. 11) can be generated by the multi-function device 100 and stored in a database. In this case, the user name 1202 uses the user name and the user ID determined in step S602, or the PC name that can be acquired by communication (for example, TCP / IP communication) between the multifunction device 100 and the client PC 105, This can be realized by acquiring the MFP IP address, the MFP name, and the like.

  Further, by managing the user file information (FIG. 11) with the multi-function device 100, the files stored in the multi-function device 100 can be centrally managed.

  Next, with reference to FIG. 6, authentication processing when the IC card according to the embodiment of the present invention is held over the card reader 101 following the processing in FIG. 5 will be described.

  Note that the processing of steps S701 to S707 is executed by the card reader 101. The processes of step S704, step S705, step S708, step S709, step S711, and step S712 are executed by the multifunction peripheral 100 and executed by the CPU 301. Further, the processing of step S706, step S707, and step S710 is processing of the authentication server 103 and is executed by the CPU 201.

  In step S <b> 701, the CPU 301 of the multifunction peripheral 100 displays a user authentication screen (FIG. 16) stored in advance in the HDD 304 on the operation unit 308 in order to prompt the user to hold the IC card. In step S701, a card holding event that can be acquired when an IC card is held over the card reader 101 is detected. The IC card stores card information (card manufacturing number and a unique identification number to be arbitrarily stored). In step S702, the card information included in the card holding event obtained by holding the IC card over the card reader 101 is acquired. In step S703, the acquired card information and reading event are notified to the multi-function device 100.

  In step S704, the read card information is received. In step S705, the card information is transmitted to the authentication server 103 via the network I / F 305.

  In step S706, the authentication server 103 receives the card information transmitted from the multifunction device 100. In step S706, card information authentication determination is performed. Whether or not there is matching card information by searching the authentication information (FIG. 12) stored in the storage area of the authentication server 103 for the IC card manufacturing number which is card information or a unique identification number to be arbitrarily stored. Make a decision with. If the card information exists, authentication is successful, and if it does not exist, authentication fails. Further, it is assumed that authentication determination can be performed by inputting user login information (user name and password) separately in addition to the card information of the IC card.

  If the authentication determination fails, the authentication server 103 transmits the result information indicating the authentication failure to the multi-function device 100, and receives the result in step S708. In step S709, an authentication failure screen (not shown) stored in the HDD 304 in advance by the CPU 301 of the multifunction peripheral 100 is displayed on the operation unit 308, and the process ends.

  If the authentication is successful in the determination in step S707, authentication information (for example, FIG. 12) in which the authentication success result matches the card information is transmitted in step S710.

  In step S711, the authentication success result and authentication information sent are received, and in step S712, authentication information including the user name is stored in the RAM 302. That is, it is a process of receiving first user identification information (user name) for identifying a user for logging in to the multifunction peripheral 100 (first user identification information reception).

  Next, a process when the USB memory 102 according to the embodiment of the present invention is used following the process of FIG. 6 will be described with reference to FIG.

  Note that the processes of steps S801 to S804, steps S807 to S815, step S818, step S819, step S821, and step S822 are executed by the multi-function device 100 and executed by the CPU 301. Further, the processing of step S805 and step S806 is processing of the management server 104 and is executed by the CPU 201 of the management server 104. Further, the processing of steps S816 to S820 is processing of the authentication server 103 and is executed by the CPU 201 of the authentication server 103. Processing in steps S809 to S811 is processing of the card reader 101.

  After logging in to the multifunction device 100 in FIG. 6, in step S <b> 801, the USB memory connection screen (FIG. 17) stored in advance in the HDD 304 by the multifunction device 100 is displayed on the operation unit 308. At this time, the user name information stored in the RAM 302 in step S711 can also be displayed. When the user connects the USB memory 102 to the USB interface of the multifunction peripheral 100, in step S802 it is detected that the USB memory 102 is connected to the USB interface, and the model number information (USB (Device ID held) is acquired (storage medium identification information acquisition) and stored in the RAM 302.

  In addition, the USB memory is also compatible with a password. In that case, a password input screen (not shown) is displayed on the operation unit 308 of the multi-function peripheral 100, and the password is canceled by inputting the password.

  The USB memory connection screen (FIG. 17) is displayed on the menu screen (not shown) after the user logs in to the multi-function peripheral 100 according to a USB memory usage instruction (for example, pressing an icon button displayed on the menu). It can also be configured to display.

  In step S804, user information (user ID and user name) and a USB memory device number are transmitted to the management server 104 from the authentication information stored in the RAM 302.

  In step S805, the management server 104 receives user information (user ID and user name) and machine number information of the USB memory. In step S806, the management server searches the database configured by 1401 to 1417 in FIG. 13 to determine whether the USB memory is already being taken out, searches for approval information that matches the machine number of the USB memory, and takes it out. Determine whether the flag is ON or OFF. The take-out flag 1408 is ON when it is being taken out, and the take-out flag 1408 is OFF when it is not being taken out. When the take-out flag 1408 is ON, the determination result is transmitted to the multifunction peripheral 100 as being taken out (returned), and when it is OFF, the take-out flag 1408 is not taken out (take-out).

  In this embodiment, the USB device number of the available USB memory is described as being registered in advance in the database of the management server 104. However, if the USB device number is not registered in the database, a new device number is newly created. It can also be configured to register. When newly registering, the take-out flag is determined to be OFF and managed as a USB memory to be newly taken out.

  In step S807, the multi-function device 100 receives the result of whether or not it is being taken out and stores it in the temporary storage area.

  In step S808, the MFP 100 displays an approval card waiting screen (FIG. 18) stored in advance in the HDD 304 on the operation unit 308. On this screen, the user who uses the USB memory and the USB device number can be displayed.

  In step S809, the card reader 101 in the multifunction peripheral 100 performs a reading operation to detect an IC card. The IC card is detected by the user holding the IC card over the card reader.

  In step S810, the card information is read. In step S811, the read card information is transmitted to the multi-function device 100.

  In step S812, the card information is received. In step S813, the read card information is compared with the card information of the user stored in the RAM 302. If the card information is the same, in step S814, a screen (not shown) having the same card information is displayed on the operation unit 308, and the process is terminated. This is a process for taking out or returning the USB memory 102, so that the take-out or return process is not performed even if an IC card of the same user is held over. That is, it means that the logged-in user and the user who approves the use of the USB memory are different. In addition, the configuration is such that the user cannot enter the USB memory take-out mode or the return mode unless the user is different.

  In the present embodiment, the configuration is such that when the IC cart having card information different from the card information read in step S702 is held over, the USB memory 102 is taken out or returned. When the card information of the user's superior IC card corresponding to the received card information is read in step S810, the USB memory 102 can be taken out or returned.

  In this embodiment, the card information for approving the use of the USB memory 102 is received after step S808. However, the present invention is not limited to this. For example, it is possible to execute after file selection in step S919 described later. It is also possible to accept card information when a take-out or return instruction is given in step S901.

  If the card information is different, the card information is transmitted to the authentication server 103 via the network I / F 305 in step S815.

  In step S816, the authentication server 103 receives the card information transmitted from the multifunction device 100. In step S817, card information authentication is determined. The information stored in the storage area of the authentication server 103 is searched in advance for the IC card manufacturing number, which is card information, and a unique identification number to be arbitrarily stored, and it is determined whether the corresponding card information exists. Do. If the card information exists, authentication is successful, and if it does not exist, authentication fails. Further, it is assumed that the authentication determination can be performed by inputting user login information (user name and password) separately in addition to the IC card information.

  If the authentication determination fails, the authentication server 103 transmits the result information indicating the authentication failure to the multi-function device 100, and receives the result in step S818. In step S819, an authentication failure screen (not shown) stored in the HDD 304 in advance by the CPU 301 of the multifunction peripheral 100 is displayed on the operation unit 308, and the process ends.

  If the authentication is successful, the authentication success result and authentication information (FIG. 12) are transmitted in step S820.

  In step S821, the authentication success result and authentication information sent are received. That is, it is a process of receiving second user identification information (user name) for identifying a user who approves the use of the USB memory 102 (second user identification information reception).

  In step S822, authentication information including the user name and user ID is stored in the RAM 302. Also, the date and time of authentication is stored in the RAM 302.

  Next, virus scanning execution processing according to the embodiment of the present invention following processing in FIG. 7 will be described with reference to FIG.

  Note that steps S <b> 901 to S <b> 903, steps S <b> 906 to S <b> 914, and steps S <b> 917 to S <b> 924 are processes of the multifunction peripheral 100 and are executed by the CPU 301. Further, the processing of step S904, step S905, step S915, and step S916 is processing of the management server 104, and is executed by the CPU 201.

  In step S901, a determination is made as to whether the USB memory is taken out or returned (storage medium use determination for determining whether to take out or return). In step S807, if it is not being taken out based on the result of whether or not it is being taken out and saved in the temporary storage area, it is determined that it is being taken out, and the process proceeds to step 917.

  Further, when taking out, a screen (not shown) for selecting take-out (take-out mode) and return (return mode) stored in the HDD 304 in advance by the CPU 301 of the MFP 100 is displayed on the operation unit 308 and taken out. Select whether to perform processing or return processing from the screen.

  If the return process is selected (return mode), it is determined whether a file exists in the USB memory 102 (file determination) in step S902. If there is a file in the USB memory 102, it is determined that there is a take-away file, and the process proceeds to step S906. Further, when there is no file in the USB memory 102, it is determined that there is no take-away file, the return process is completed, and in step S903, the user name, user ID, and authentication date and time (second storage) stored in the RAM 302 in step S822. Management information) is transmitted to the management server 104 for storage in the approval information 1400 (second management information output). In addition, in order to store in association with the approval information 1400 of the management server 104, it is transmitted together with the model number of the connected USB memory 102.

  In step S904, the management server 104 receives the user name, the user ID, and the authentication date / time. In step S905, the user ID is stored in the return approver ID 1409, the user name is stored in the return approver name 1410, and the authentication date is stored in the return approval time 1411.

  If a file exists in the USB memory in step S902, a virus scan of the USB memory is executed (virus inspection execution) in step S906. The virus scanning process is performed using a known technique. In addition, virus scanning software is stored and installed in the HDD 304 of the multifunction peripheral 100.

  In step S907, a virus scan result is acquired. As a result of virus scanning, if there is no virus-infected file, there is no infected file, if there is a virus-infected file, the presence of infected file, the number of files scanned, Virus scan date and time (start time, end time). It also has a drive name scanned for viruses.

  In step S908, the virus scan result is temporarily stored in the RAM 302.

  In step S909, the result of virus scanning is displayed on the operation unit 308 as shown in FIG. 20 (display of test results). In FIG. 20, it is possible to instruct printing to print the result of the virus scan. When the print button 2102 is pressed, information of the virus scan result 2101 is output and output on paper. Further, not only the virus scan result but also the management information of the USB memory 102 of the approval information 1400 can be acquired and output.

  In step S910, the CPU 301 of the MFP 100 displays a screen (not shown) for selecting file copy execution stored in advance in the HDD 304 on the operation unit 308, and selects whether to perform file copy processing from the screen.

  If it is desired to save the file in the USB memory 102, execution of file copy is selected, and the file in the USB memory 102 is saved in the save area of the multifunction peripheral 100 in step S911.

  Next, in step S912, the CPU 301 of the multi-function peripheral 100 displays a screen (not shown) for selecting whether to execute file deletion stored in the HDD 304 in advance on the operation unit 308 to determine whether to perform file deletion processing. Select from the screen.

  If execution of file deletion is selected, the file in the USB memory 102 is deleted in step S913.

  Next, the return process is completed in step S914, the user name, user ID, authentication date and time (second management information) stored in the RAM 302 in step S822, and the virus stored in the RAM 302 in step S908 are infected. If there is no file, there is no infected file. If there is a file infected with a virus, the presence of infected file, the name of the infected file, the number of files scanned, and the date and time (start time and end time) Are sent to the management server 104. In addition, in order to store in association with the approval information 1400 of the management server 104, it is transmitted together with the model number of the connected USB memory 102. During the return process, it is also possible to transmit both the user name and user ID stored in the RAM 302 in step S712.

  In step S712, the user name and the user ID stored in the RAM 302 are transmitted. If the user name and the user ID 1402 are different from those at the time of take-out, the return user name and the return user ID are stored in the approval information 1400 (not shown). It is also possible.

  In step S915, the management server 104 receives a user name, a user ID, an authentication date, and a virus scan result.

  In step S916, the user ID is returned to the return approver ID 1409, the user name is returned to the return approver name 1410, the authentication date is returned to the return approval time 1411, and if there is no virus-infected file, there is no infected file. If there is an infected file, the infected file name and the infected file name are inspected 1415, the number of virus scanned files is inspected 1416, and the date and time (start time and end time) of the virus scan is started. Saved at time 1414 and inspection end time 1417, respectively. In this embodiment, the drive to be inspected is stored in 1415, and the version (software name) of the virus-checked software is stored in 1412. Further, as the return is completed, the take-out flag 1408 is changed to OFF.

  If it is determined in step S901 that it is a take-out (take-out mode), the process proceeds to step S917, where the user file information 1200 is referred to from the user name saved in the temporary storage area in step S712, and the storage area of the MFP 100 Search for a file that matches the user name stored in.

  In step S918, the multifunction peripheral 100 displays a list of searched files on the operation unit 308 as a file selection screen (FIG. 19). In step S919, a file stored in the USB memory 102 and taken out is selected. Although not shown, a scheduled return date (time limit) for returning the USB memory 102 is specified.

  In step S920, the file selected by the user is stored in the MFP 100 temporary storage area.

  In step S921, the temporarily stored file is copied to the USB memory 102.

  In step S922, the USB memory 102 is scanned for viruses (virus scan execution).

  In step S923, a virus scan result is acquired. The result of virus scanning is the same as in step 907.

  In step S924, the virus scan result is temporarily stored in the RAM 302.

  Next, a print execution process according to the embodiment of the present invention following the process of FIG. 8 will be described with reference to FIG.

  Note that steps S <b> 1001 to S <b> 1004 are processes of the multifunction peripheral 100 and are executed by the CPU 301. Steps S1005 and S1006 are processes of the management server 104, and are executed by the CPU 201.

  In step S1001, the result of virus scanning is displayed on the operation unit 308 as shown in FIG. 20 (display of test results). FIG. 20 shows a configuration in which a virus scan result is displayed on 2101 on a scan result display screen 2100, and a print button 2102 and a logout button 2103 are displayed.

  In step S1002, it is determined whether the print button 2102 has been pressed in order to determine whether to perform virus scan result printing processing. If the print button is pressed, the process proceeds to step S1003. If the logout button 2103 or the USB memory 102 is removed, the process proceeds to step S1004.

  If the print button 2102 is pressed, in step S1003, print data is generated from the virus scan result, the print data is output to the image processing unit 317, and printing is executed.

  Next, in step S1004, take-out approval is completed, and the user name and user ID saved in the RAM 302 in step S712, the user name, user ID, and authentication date and time saved in the RAM 302 in step S822 (first management information) In step S924, the virus scan result (first management information) stored in the RAM 302 is transmitted to the management server 104. In addition, in order to store in association with the approval information 1400 of the management server 104, it is transmitted together with the machine number of the USB memory 102 (first management information output).

  In step S1005, the user name, user ID, authentication date and time, and virus scan result are received, and in step S1006, they are stored in the approval information 1400 information. The storage in the approval information 1400 is the same as in step S916, but the scheduled return date (time limit) designated in step S919 is also received from the multifunction device 100 and stored in the scheduled return time limit 1408.

  In this embodiment, the virus check result at the time of take-out and the information on the virus check result at the time of return are stored in the same area as 1412 to 1417. However, the virus check result at the time of take-out and at the time of return is stored. It can also be configured to be stored separately.

  Although not shown, attribute information (for example, user file information 1200) including the file name of the file stored in the USB memory 102 is received from the multi-function peripheral 100, and the received attribute information of the file is stored together with the approval information 1400. Configure to manage. It is also possible to receive a file and manage the file itself. As a result, it is possible to appropriately manage files taken out of the USB memory.

  Next, the approval information search process according to the embodiment of the present invention subsequent to the process of FIG. 9 will be described with reference to FIG.

  Note that step S1101, step S1104, step S1106, step S1107, step S1111 and step S1112 are processes of the client PC 105 and executed by the CPU 201 of the client PC 105. Further, the processing of step S1102, step S1103, and step S1105 is processing of the authentication server 103, and is executed by the CPU 201 of the authentication server 103. Further, steps S1108 to S1110 are processes of the management server 104 and are executed by the CPU 201 of the management server 104.

  In step S <b> 1101, the CPU 201 of the client PC 105 accesses the multifunction peripheral 100 via a browser provided in the client PC 105. A login screen similar to that shown in FIG. 15 is displayed on the browser screen. On the screen, the user name and password are input and the information is transmitted to the authentication server 103.

  In step S1102, the authentication server 103 receives the user name and password, and performs login determination. If it is determined that the login is successful, the process proceeds to step S1105. If it is determined that the login is failed, the process proceeds to step S1103.

  In step S <b> 1103, the CPU 201 of the authentication server 103 transmits a result of authentication failure (authentication failure message) to the client PC 105. In step S1104, the result of the CPU of the client PC 105 not being authenticated (authentication failure message) is received, and the result (authentication failure message) is displayed on the browser screen.

  In step S1105, the CPU 201 of the authentication server 103 transmits an authentication result (authentication success message) to the client PC 105. In step S1106, the CPU of the client PC 105 receives the authentication result (authentication success message) and displays the result (authentication success message) on the browser screen.

  In step S1107, a search screen that can be specified by a search condition for searching for approval information in FIG. 14 and that can be displayed by a browser is displayed, and the search condition is input. The input search condition is transmitted to the management server 104.

  In step S1108, the management server 104 receives the search condition transmitted from the client PC 105.

  In step S1109, the corresponding data is searched from the database based on the search condition. The search condition includes a takeout flag for searching the USB memory 102 being taken out. It is also possible to specify a user name and use the user name as a search condition.

  In step S1110, the search result is transmitted to the client PC 105. In step S1111, the search result transmitted from the management server is received. In step S1112, the search result is displayed on the browser screen.

  As a result, it is possible to audit the USB memory being taken out and the USB memory that has been returned, and appropriate management of the USB memory becomes possible.

  FIG. 11 is a diagram showing an example of user file information 1200 managed by the HDD 304 of the multifunction peripheral 100 used in the embodiment according to the present invention.

  User file information 1200 is used to search for a file.

  The user file information 1200 is stored for each file stored in the MFP 100, and the user ID 1201 and user name 1202 of the user who stored the file, the PC name 1203 of the client PC 105 to which the file was transmitted, and the file name of the stored file 1204 (may be a file path), file capacity 1205, multifunction device name 1206, multifunction device IP address 1207, file storage time 1208, storage destination 1209 indicating the region (folder) in which the file is stored have.

  In the present embodiment, the user file information 1200 is configured to be stored in the multi-function peripheral 100, but may be configured to be stored and managed in the management server 104. As a result, even when the USB memory 102 is connected to the multifunction device 100 in which no file is stored, the file can be acquired from the multifunction device 100 in which the file is stored and stored in the USB memory 102. .

FIG. 12 is a diagram showing an example of authentication information 1300 managed by the external memory 211 of the authentication server 103 used in the embodiment according to the present invention.
The authentication information 1300 is information used for user authentication.

  The authentication information 1300 includes a user ID 1301, a user name 1302, a password 1303, card information 1304 stored in the IC card, and a USB memory usage authority 1305 indicating whether the user has authority to take out the USB memory.

  In the present embodiment, the processing of the user who has the USB memory usage authority 1305 “Yes” will be described.

  In this embodiment, the authentication information 1300 is configured to be stored in the authentication server 103. However, it is also possible to store the authentication information 1300 in the HDD 304 of the multifunction device 100 so that the multifunction device 100 performs authentication.

  FIG. 13 is a diagram showing an example of the approval information 1400 managed in the external memory 211 of the management server 104 used in the embodiment according to the present invention.

  Approval information 1400 stores information on 1401 to 1417 for taking out and returning the USB memory 102, information on the user who has taken it out, the user who has approved the take-out and return, and virus scan results.

  14 and 15 are diagrams showing examples of screens displayed on the display 210 of the client PC 105. FIG.

  FIG. 14 shows a file transmission login screen 1500 when logging in to the multifunction peripheral 100, which includes an input area for a user name 1501 and a password 1502, and a login button 1503.

  FIG. 15 shows a file transmission screen 1600 for selecting a file to be transmitted to the multifunction device 100. A reference button 1601 for selecting a transmission file, a path 1602 for displaying the path of the selected file, and a file transmission button 1603. It consists of

  FIGS. 16, 17, 18, 19, and 20 are display screen images displayed on the operation unit 308 of the multifunction peripheral 100.

  FIG. 16 shows a user authentication screen 1700 initially displayed on the operation unit 308. FIG. 17 shows a USB memory connection waiting screen 1800 displayed on the operation unit 308 after authentication.

  FIG. 18 shows a USB memory approval screen 1900 displayed on the operation unit 308 when a USB memory is connected. Further, the user name of the authenticated user is displayed in 1901, and the device number of the USB memory connected to 1902 is displayed.

  FIG. 19 shows a file selection screen 2000 displayed on the operation unit 308 when the USB memory is taken out. Further, the user name is 2001, a list of files that can be stored in the USB memory is displayed in 2002, and the number of selected files is displayed in 2003. In addition, it includes a USB save button 2004 for instructing to save the selected file.

  FIG. 20 shows a scan result display screen 2100 displayed on the operation unit 308 when a virus scan result is displayed. Further, the virus scan result is displayed on 2101, and includes a print button 2102 and a logout button 2103.

  In the above embodiment, authentication is performed using a card (IC card), and the user is logged in or permitted to log in. However, the user name, password, and authentication destination domain name are input to the operation unit. It is also possible to use a form for obtaining authentication or a mechanism for authenticating using biometric information such as a fingerprint.

  When the biometric information of the fingerprint is used in the present embodiment, the card reader 101 is replaced with a fingerprint reader (fingerprint sensor), and the feature points extracted from the fingerprint image read by the fingerprint reader from the card information 1304 of the authentication information of the authentication server 103 are obtained. It is configured to be converted into data and registered as fingerprint information. Although various techniques are disclosed as a method for extracting feature points, any method (technique) may be used for extraction.

  According to the above configuration, for example, management at the time of use of a removable storage medium such as a USB memory can be appropriately performed to reduce risk when using the storage medium.

  In particular, when a USB memory is used, by using a multi-function device, file input / output can be performed by a specific device, and the information leakage prevention effect can be enhanced.

  In addition, since the USB memory is used by a specific device, it is possible to centrally manage the USB memory usage approval and usage status (carrying out and returning), so that appropriate management of the USB memory is facilitated.

  Furthermore, as a result of virus scanning of the USB memory, information on the USB memory storage file, information on the approver, and the like can be easily printed as a result report, this is also effective when managing the management status of the USB memory with a paper medium.

  It should be noted that the configuration and contents of the various data described above are not limited to this, and it goes without saying that the various data and configurations are configured according to the application and purpose.

  For example, the approval information 1400 managed by the management server 104 is stored in the HDD 304 of the MFP 100, the authentication information 1300 of the authentication server 103 is stored in the HDD 304 of the MFP 100, and the USB memory can be taken out or returned only by the MFP 100. It is also possible to manage.

  In this case, transmission / reception from the multifunction peripheral 100 to the management server 104 is replaced with output and input processing in the multifunction peripheral 100, and the processing of the management server 104 is processing of the multifunction peripheral 100.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  Further, the program in the present invention is a program that allows a computer to execute the processing methods of FIGS. 5 to 10, and the storage medium of the present invention stores a program that allows the computer to execute the processing methods in FIGS. ing. The program in the present invention may be a program for each processing method of each apparatus in FIGS.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by executing the reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually Needless to say, a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network by a communication program, the system or apparatus can enjoy the effects of the present invention.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

100 MFP 101 Card reader 102 USB memory 103 Authentication server 104 Management server 105 Client PC
110 LAN

Claims (9)

An image forming apparatus for connecting a removable storage medium,
First user identification information receiving means for receiving first user identification information for identifying a user for logging in to the image forming apparatus;
A storage medium identification information acquisition means for acquiring storage medium identification information of the storage medium in accordance with connection detection of the storage medium;
Second user identification information receiving means for receiving second user identification information for identifying a user who approves the use of the storage medium whose connection has been detected;
A storage medium use determining means for determining whether to take out or return the connected storage medium;
When the storage medium use determining means determines to take out the storage medium, the storage medium identification information, the first user identification information, and the second user identification information are used to take out the storage medium. First management information output means for outputting first management information including:
When the storage medium use determining means determines that the storage medium is to be returned, the second management information including the storage medium identification information and the second user identification information is used to return the storage medium. An image forming apparatus comprising: second management information output means for outputting. Virus inspection execution means for executing virus inspection of the storage medium,
The image forming apparatus according to claim 1, wherein the virus inspection execution unit executes a virus inspection when the previous storage medium use determination unit determines to take out the storage medium.   The image forming apparatus according to claim 2, wherein the first management information includes a test result obtained by executing a virus test by the virus test executing unit. When the storage medium use determination unit determines to return the storage medium, the storage medium use determination unit includes a file determination unit that determines whether there is a file on the storage medium,
The virus inspection execution means executes virus inspection when it is determined that the storage medium use determination means returns the storage medium and the file determination means determines that there is a file. The image forming apparatus according to any one of 1 to 3.   The image forming apparatus according to claim 4, wherein the second management information includes a test result obtained by executing a virus check by the virus check execution unit. Display means for displaying a test result of the virus test executed by the virus test execution means;
The image forming apparatus according to claim 2, further comprising: a printing unit that prints the inspection result displayed on the display unit. A take-out mode for taking out the storage medium and a return mode for returning the storage medium;
7. The take-out mode or the return mode is executed when a user who logs in to the image forming apparatus is different from a user who approves the use of the storage medium. Image forming apparatus. A processing method of an image forming apparatus for connecting a removable storage medium,
The image forming apparatus includes:
A first user identification information receiving step for receiving first user identification information for identifying a user for logging in to the image forming apparatus;
A storage medium identification information acquisition step for acquiring storage medium identification information of the storage medium in accordance with connection detection of the storage medium;
A second user identification information receiving step for receiving second user identification information for identifying a user who approves the use of the storage medium whose connection has been detected;
A storage medium use determination step for determining whether to take out or return the connected storage medium;
When it is determined that the storage medium is to be taken out in the storage medium use determination step, the storage medium identification information, the first user identification information, and the second user identification information are set to take out the storage medium. A first management information output step for outputting first management information including:
When the storage medium use determination step determines that the storage medium is to be returned, the second management information including the storage medium identification information and the second user identification information is used to return the storage medium. And a second management information output step of outputting. A program executable by an image forming apparatus connected to a removable storage medium,
The image forming apparatus;
First user identification information receiving means for receiving first user identification information for identifying a user for logging in to the image forming apparatus;
A storage medium identification information acquisition means for acquiring storage medium identification information of the storage medium in accordance with connection detection of the storage medium;
Second user identification information receiving means for receiving second user identification information for identifying a user who approves the use of the storage medium whose connection has been detected;
A storage medium use determining means for determining whether to take out or return the connected storage medium;
When the storage medium use determining means determines to take out the storage medium, the storage medium identification information, the first user identification information, and the second user identification information are used to take out the storage medium. First management information output means for outputting first management information including:
When the storage medium use determining means determines that the storage medium is to be returned, the second management information including the storage medium identification information and the second user identification information is used to return the storage medium. A program which functions as a second management information output means for outputting.

Images