JP2012141948A - Printing system, image processor, control method and program thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce risks of leakage of confidential information by controlling the display of a name related to print data displayed after a user having logged in a printing device, and thereby preventing identification of the print data considered confidential by the user.SOLUTION: A printing system receives authentication information, according to the received authentication information, sends a print control server a list requirement including user information of a user who has logged in an image processor and requiring a list information of print data, and displays the list of the print data using list information of print data transmitted from the print control server corresponding to the list requirement. The printing system displays corresponding to prescribed operation conditions the list of the print data by changing the print data identification information to different information when the print data displayed in the list requires re-authentication according to re-authentication necessity information included in the list information.

Description

  The present invention relates to a printing system, an image processing apparatus, a control method, and a program thereof, and more particularly, to a printing system, an image processing apparatus, a control method, and a program for displaying a list of print data stored in a server.

  Conventionally, a so-called “pull print (accumulated printing)” printing system that enables a user to output print data from the printing apparatus by making a print request to the print data temporarily accumulated on the server from the printing apparatus. Has been proposed. Accordingly, the user can output print data from a desired printing apparatus instead of outputting to a specific printing apparatus when printing from an application.

  An example of a printing procedure in such a printing system is as follows. When the user logs in to the printing apparatus, the printing apparatus transmits a print list request to the bibliographic information server. The bibliographic information server receives the print list request transmitted from the printing apparatus, and transmits a print data list associated with the user name in the print list request to the printing apparatus. Based on the print data list, a print request is transmitted from the printing apparatus to the bibliographic information server. The bibliographic information server that has received the print request transmits a print instruction to the corresponding virtual printer server based on the bibliographic information. The virtual printer server that has received the print instruction acquires and prints the temporarily stored print data of the login user.

JP 2006-99714 A

  On the other hand, when the user leaves the printing device after being logged in to the printing device, for example, the user forgets to perform a logoff operation, and the printing device is often in a login state. In the meantime, when the printing apparatus is operated by a third party, there is a problem that print data with high confidentiality is printed.

  At the same time, since there is no distinction between common print data and personal print data, both high-density print data and low-size print data are exposed to the same threat.

  Furthermore, if the document name of a job with high confidentiality is displayed, it may be immediately recognized that the document name is important confidential information, and a malicious third party prints the document. As a result, the risk of theft or leakage of important confidential information has increased. As an example, there is a case where a manager user prints a job having a document name such as “(secret) personnel information”.

  An object of the present invention is to control the display of names related to print data that are displayed after the user logs in to the printing apparatus, thereby preventing the identification of print data that is considered to be sensitive to the user. To provide a mechanism to reduce the risk of leakage.

  In order to achieve the object of the present invention, print data identification information for specifying print data, information for specifying a user who can print the print data, and re-authentication are required when operating the print data A print management server that stores bibliographic information including re-authentication necessity information that indicates whether or not the image is necessary, and an image processing apparatus that includes a printing unit, the print management server including the image processing In accordance with the user information of the user who has logged into the image processing apparatus received from the apparatus and the bibliographic information, a list of print data that can be printed with the user information, including the re-authentication necessity information and print data identification information is transmitted. A list information transmitting unit, wherein the image processing apparatus is configured to accept authentication information according to authentication information received by the authentication information receiving unit; A list request unit that includes user information of a user who has logged into the image processing apparatus and requests print data list information to the print management server, and the print management in response to the list request by the list request unit Display means for displaying a list of print data using list information of print data transmitted from a server, and the display means displays print data to be displayed in a list in the list information according to a predetermined operation condition. When the print data needs to be re-authenticated based on the included re-authentication necessity information, the print data identification information is changed to different information and displayed.

  Further, the authentication information receiving means receives authentication information again, and further comprises authentication information determination means for determining whether or not the authentication information corresponds to user information included in the list request, and the display means includes the authentication information When the information determination means determines that the authentication information corresponds to the user information included in the list request, the different information is changed to the print data identification information and displayed.

  In addition, the predetermined operation condition is a condition for determining that an operation that makes a transition from another function is performed, and the display unit makes a transition from the other function and print data using print data list information. When the list is displayed, the print data identification information is changed to different information and displayed.

  The predetermined operation condition is a condition for determining that there is no operation for a predetermined time, and the display means changes the print data identification information to display different information when there is no operation for a predetermined time. It is characterized by doing.

  The display means accepts authentication information by the authentication information acceptance means to log in to the image processing apparatus, and print data list information transmitted from the print management server in response to a list request by the list request means. When a list of print data is displayed using, the print data identification information is displayed without changing to different information.

  In addition, it further comprises print output instruction means for transmitting a print output instruction for print data designated from a list of print data displayed by the display means to the print management server, wherein the display means differs in the print data identification information. The information is displayed in the form of information, and when the print output instruction is instructed by the print output instruction means, a display prompting the input of the authentication information is provided.

  The print management server further includes output control means for issuing an output instruction to print the print data specified by the print output instruction in the image processing apparatus in accordance with the print output instruction received from the image processing apparatus. The image processing apparatus requests re-authentication to the logged-in user when the instructed print data requires re-authentication at the time of printing based on re-authentication necessity information included in the list information. A re-authentication requesting unit, wherein the print output instructing unit determines that the specified print data does not need to be re-authenticated at the time of printing due to re-authentication necessity information included in the list information; and the re-authentication request A print output instruction of the designated print data is transmitted to the print management server when the authentication is performed by the second authentication requested by the means;

  According to the present invention, by controlling the display of the name related to the print data displayed after the user logs in to the printing apparatus, it is possible to prevent the identification of the print data considered to be sensitive to the user and The risk of leakage can be reduced.

1 is a system configuration diagram illustrating an example of a configuration of a printing system according to the present invention. 2 is a block diagram illustrating an example of a hardware configuration of a print management server 100, an authentication server 200, a client terminal 400, and a print server 500. FIG. 2 is a block diagram illustrating an example of a hardware configuration of an image processing apparatus (particularly, a multifunction machine) 300. FIG. It is a conceptual diagram for demonstrating the outline | summary of a pull print system. It is a data block diagram which shows an example of the bibliographic information data in the printing system of this embodiment. It is a data block diagram which shows an example of the table for IC card authentication in the printing system of this embodiment. 4 is a flowchart illustrating an example of processing for registering print data generated by the client terminal 400 in the print system of the present embodiment in the print server 500 and registering bibliographic information data in the print management server 100. 6 is a flowchart illustrating an example of processing until print data is output by performing authentication processing and print output instruction using the multifunction peripheral 300 in the printing system of the present embodiment. 6 is a flowchart illustrating an example of a detailed processing procedure (first processing procedure) of document name mask processing and print job information selection processing in the printing system of the present embodiment. 6 is a flowchart illustrating an example of a detailed processing procedure (second processing procedure) of document name mask processing and print job information selection processing in the printing system of the present embodiment. 5 is an image diagram illustrating an example of a personal job list screen displayed on the display unit of the multifunction peripheral 300. FIG. 6 is an image diagram illustrating an example of a common job list screen displayed on the display unit of the multifunction peripheral 300. FIG. 6 is an image diagram illustrating an example of a personal job print screen displayed on a display unit of the multifunction peripheral 300. FIG. 6 is an image diagram illustrating an example of a personal job printing failure screen displayed on the display unit of the multifunction peripheral 300. FIG. 5 is an image diagram illustrating an example of a common job confirmation dialog screen displayed on the display unit of the multifunction peripheral 300. FIG. 6 is an image diagram illustrating an example of a print job list screen displayed on a display unit of the multifunction peripheral 300. FIG. 5 is a flowchart illustrating an example of a detailed processing procedure (first processing procedure) of document name mask processing of a personal job displayed on the display unit of the multifunction peripheral 300 in the printing system of the present embodiment. 10 is a flowchart illustrating an example of a detailed processing procedure (second processing procedure) of document name mask processing of a personal job displayed on the display unit of the multifunction peripheral 300 in the printing system of the present embodiment. FIG. 10 is an image diagram illustrating an example of a personal job print screen displayed on the display unit of the multifunction peripheral 300 when a document name is masked. 6 is an image diagram illustrating an example of a case where a document name is masked on a print job list screen displayed on the display unit of the multifunction peripheral 300. FIG. 5 is an image diagram illustrating an example of a personal job block screen displayed on the display unit of the multifunction peripheral 300. FIG. 6 is an image diagram illustrating an example of a document name mask release failure screen displayed on the display unit of the multifunction peripheral 300. FIG. 12 is a flowchart illustrating an example of a detailed processing procedure (first processing procedure) of document name mask processing and print job information selection processing in another embodiment. 14 is a flowchart illustrating an example of a detailed processing procedure (second processing procedure) of document name mask processing and print job information selection processing in another embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram illustrating an example of a configuration of a print system to which a print management server 100 (corresponding to the print management server 400 of FIG. 4) and a printer according to the present invention can be applied.

  As shown in FIG. 1, the print system according to the present embodiment includes one or a plurality of client terminals 400 (for example, for each user), a plurality of image processing apparatuses 300 (printer A 300a, printer B 300b, multifunction device 300), and a print management server. 100, an authentication server 200, and a print server 500 (corresponding to the print server in FIG. 4) are connected via a local area network (LAN) 600 to transmit and receive information.

  The client terminal 400 is installed with form software that obtains a form and text data necessary for form generation from a server (not shown) and overlays to generate a form. The form software transmits the generated form together with a form print execution command and user information to the print management server using communication such as SOAP.

  The print management server 100 stores bibliographic information data (described later in FIG. 5) received from the print server 500 in an internal memory, receives a print output instruction from the image processing apparatus 300 (printer or multifunction machine), and prints The print server 500 storing the print data for which output is instructed is specified. Then, an output instruction is sent to the specified print server 500 with the print data instructed to be output as the output destination of the image processing apparatus 300 that is the source of the print output instruction.

  A printer driver is installed in the print server 500, print data received from the client terminal 400 is stored in an internal memory, and an output instruction from the image processing apparatus 300 (hereinafter referred to as the printer 300) is sent from the print management server 100. Based on the output instruction, print data is transmitted to the printer 300 via the printer driver.

  The authentication server 200 stores an IC card authentication table, and performs authentication processing using the IC card authentication table in response to an authentication request made by holding the IC card over the card reader of the printer 300.

  Hereinafter, the hardware configuration of the information processing apparatus applicable to the client terminal, the print management server, the authentication server, and the print server illustrated in FIG. 1 will be described with reference to FIG.

  FIG. 2 is a block diagram illustrating a hardware configuration of an information processing apparatus applicable to the client terminal, the print management server, and the authentication server illustrated in FIG.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls devices and controllers connected to the system bus 204. Further, the ROM 202 or the external memory 211 is necessary to realize a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS), which is a control program of the CPU 201, or a function executed by each server or each PC. Various programs to be described later are stored.

  A RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program or the like necessary for execution of processing from the ROM 202 or the external memory 211 into the RAM 203 and executing the loaded program.

  An input controller 205 controls input from a keyboard (KB) 209 or a pointing device such as a mouse (not shown). A video controller 206 controls display on a display device such as a CRT display (CRT) 210. In FIG. 2, although described as CRT 210, the display device is not limited to the CRT, but may be another display device such as a liquid crystal display. These are used by the administrator as needed.

  A memory controller 207 is connected to the hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, etc. via an adapter. The access to the external memory 211 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F controller 208 is connected to and communicates with an external device via a network (for example, the LAN 600 shown in FIG. 1), and executes communication control processing on the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the CRT 210 by executing outline font rasterization processing on a display information area in the RAM 203, for example. In addition, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 210.

  Various programs to be described later for realizing the present invention are recorded in the external memory 211 and executed by the CPU 201 by being loaded into the RAM 203 as necessary. Furthermore, definition files and various information tables used when executing the program are also stored in the external memory 211, and a detailed description thereof will be described later.

  Next, the hardware configuration of the printer 300 shown in FIG. 1 will be described with reference to FIG.

  FIG. 3 is a block diagram illustrating an example of a hardware configuration of the multifunction peripheral 300 illustrated in FIG.

  In FIG. 3, reference numeral 316 denotes a controller unit which is connected to a scanner 314 functioning as an image input device and a printer unit 312 functioning as an image output device, while being connected to a LAN (for example, the LAN 600 shown in FIG. 1) or a public line (WAN). ) (For example, PSTN or ISDN) to input / output image data and device information.

  In the controller unit 316, reference numeral 301 denotes a CPU, which is a processor that controls the entire system. A RAM 302 is a system work memory for the CPU 301 to operate, and is also a program memory for recording a program and an image memory for temporarily recording image data.

  A ROM 303 stores a system boot program and various control programs. A hard disk drive (HDD) 304 stores various programs for controlling the system, image data, and the like.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit (keyboard) 308. Further, the operation unit I / F 307 serves to transmit the key information (for example, pressing of the start button) input from the operation unit 308 to the CPU 301.

  A network interface (Network I / F) 305 is connected to the network (LAN) 600 and inputs / outputs data. A modem (MODEM) 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  Reference numeral 318 denotes an external interface (external I / F), which is an I / F unit that accepts external inputs such as USB, IEEE 1394, printer port, and RS-232C. In this embodiment, an IC card for a portable terminal required for authentication A card reader 319 for reading (storage medium) is connected to the external I / F unit 318. The CPU 301 can control reading of information from the IC card of the mobile terminal by the card reader 319 via the external I / F 318, and can acquire information read from the IC card of the mobile terminal. The above devices are arranged on the system bus 309.

  Reference numeral 320 denotes an image bus interface (IMAGE BUS I / F), which is a bus bridge that connects the system bus 309 and an image bus 315 that transfers image data at high speed and converts the data structure.

  The image bus 315 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data such as a PDL code into a bitmap image. A printer interface (printer I / F) 311 connects the printer unit 312 and the controller unit 316 and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 313 connects the scanner 314 and the controller unit 316 and performs synchronous / asynchronous conversion of image data.

  An image processing unit 317 performs correction, processing, and editing on input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 performs image data rotation and compression / decompression processing such as JPEG for multi-valued image data and JBIG, MMR, MH for binary image data.

  The scanner unit 314 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner 314, and the feeder feeds the original paper one by one to read the original image. I do.

  The printer unit 312 is a part that converts raster image data into an image on paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and ink is ejected from a micro nozzle array directly on the paper. There is an inkjet method for printing an image, but any method may be used. The activation of the printing operation is started by an instruction from the CPU 301. The printer unit 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has a paper cassette corresponding thereto.

  The operation unit 308 has an LCD display unit, and a touch panel sheet is pasted on the LCD. The operation unit 308 displays an operation screen of the system. When a displayed key is pressed, the position information is displayed on the operation unit I / F 307. To the CPU 301 via The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Note that the display unit has different display performance depending on the printer, and a printer that can be operated via a touch panel, a printer that simply has a liquid crystal screen and displays a character string (displays the print status and the name of the document being printed). Is structured.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used. Further, the stop key of the operation unit 308 functions to stop the operation in operation. The ID key of the operation unit 308 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit.

  The card reader 319 reads information stored in an IC card provided in the mobile terminal under the control of the CPU 301 and notifies the CPU 301 of the read information via the external I / F 318.

  With the configuration described above, the printer 300 can transmit the image data read from the scanner 314 to the LAN 600 and print out the print data received from the LAN 600 by the printer unit 312.

Further, the image data read from the scanner 314 can be faxed to the public line by the modem 306, and the image data received by fax from the public line can be output by the printer unit 312.
<Pull print processing overview>

  The overall flow of pull printing in the printing system of this embodiment will be described below using FIG.

  First, the premise for executing pull printing of this embodiment will be described.

  First, a normal printer driver is installed in each client PC 100 (corresponding to the client terminal 400 in FIG. 1), and a logical printer is added. Note that this logical printer has its print destination (print port) set in the print server 500.

  When a user issues a print instruction to a logical printer added to each client PC 100 (corresponding to the client terminal 400 in FIG. 1) and whose print destination is set in the print server 500, the pull print of this embodiment is performed. Is executed.

  The overall flow of pull printing according to this embodiment will be described below.

  FIG. 4 is a schematic diagram illustrating the entire flow of pull printing in the printing system of the present embodiment.

  As shown in FIG. 4, first, the user logs in to the client PC 100 (corresponding to the client terminal 400 in FIG. 1) ((1) -1) and executed by the client PC 100 (corresponding to the client terminal 400 in FIG. 1). From the application program to be printed, a print instruction is given to the logical printer whose print destination (print port) is designated by the print server 500 ((1) -2).

  In response to this print instruction, the application program of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) transmits data to the printer driver via the graphic engine. A printer driver of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) generates print data based on data received from the application program via the graphic engine. At that time, common job flag information determined by the user is also added to the print data. Then, the client PC 100 (corresponding to the client terminal 400 in FIG. 1) connects to the print server 500 using the LPR protocol and transmits the generated print data ((2) -1). It is stored in a predetermined storage location (spool area set in advance) ((2) -2). The file name of the print data stored in the predetermined storage location of the print server 500 will be described later. The print server 500 does not transmit to the printing apparatus even if the print data is stored in the predetermined storage location.

  Next, the print server 500 extracts (generates) bibliographic information data from the print data received from the client PC 100 (corresponding to the client terminal 400 in FIG. 1) and stored in the predetermined storage location ((2) -3) The extracted (generated) bibliographic information data is transmitted to the print management server 400, and a predetermined storage location (a preset directory) of the print management server 400 is used by using a file common mechanism on the network. (3) -1). The file name of bibliographic information data stored in a predetermined storage location of the print management server 400 will be described later.

  The print management server 400 monitors the predetermined directory, and when the bibliographic information file is stored from the print server 500 in the predetermined directory, the bibliographic information file is analyzed and the bibliographic information is stored in the bibliographic information DB (print management server 400). Registered on the external storage device) ((3) -2).

  When the multifunction device 300 detects an IC card that can be read by the card reader 319, the multifunction device 300 reads the personal authentication information in the IC card, and transmits the read personal authentication information to the print management server 400 as an authentication request (( 4) -1). The personal authentication information is information used for authentication and may be a manufacturing number of the IC card.

  When the print management server 400 receives the personal authentication information from the multi-function peripheral 300, the print management server 400 performs authentication processing of the personal authentication information based on the IC card authentication table stored on the external storage device of the print management server 400, and the authentication result. Is returned to the MFP 300 ((4) -2). If the authentication process is successful, the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) is transmitted as the authentication result. This is the first authentication result.

  Next, upon receiving an authentication result (login user ID of the client PC 100) indicating that the authentication has succeeded from the print management server 400, the multifunction device 300 transmits a print data list request to the print management server 400 ((5)). -1). Note that the print data list request includes the login user ID of the client PC 100.

  When the print management server 400 receives the print data list request from the multi-function peripheral 300, the print management server 400 searches the bibliographic information DB by using the login user ID included in the print data list request and obtains the print data list corresponding to the login user ID. It is generated and returned to the MFP 300 ((5) -2). The print data list also includes common job flag information.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308. At that time, the personal job list screen (FIG. 11) displaying the list of personal print data that does not have the common job flag is displayed by looking at the common job flag information. The common job list screen (FIG. 12) displaying the list can be selected on the tab.

  When the list acquisition button 1101 is pressed on the personal job list screen (FIG. 11), the multi-function peripheral 300 transmits a print data list request to the print management server 400 again ((5) -1). The print data list request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1).

  When the print management server 400 receives the print data list request from the multi-function peripheral 300, the print management server 400 searches the bibliographic information DB again with the login user ID included in the print data list request, and print data list corresponding to the login user ID. Is sent back to the multi-function device 300 ((5) -2). The print data list also includes common job flag information.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308.

  When the all selection button 1102 is pressed, all personal jobs displayed on the UI of the operation unit 308 are selected. When the selection release button 1103 is pressed, the personal job is displayed on the UI of the operation unit 308. All existing personal jobs are in a non-selected state.

  When the delete button 1104 is pressed, the MFP 300 transmits a print data delete request to the print management server 400. It is assumed that the print data deletion request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1).

  When the print management server 400 receives a print data erasure request from the multi-function peripheral 300, the print management server 400 searches the bibliographic information DB using a login user ID included in the print data erasure request, and prints the print data corresponding to the login user ID. After erasing from the information DB, a print data list is generated and returned to the MFP 300. The print data list also includes common job flag information.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308.

  Next, when a personal job is selected and the print button 1105 is pressed, the MFP 300 displays a personal job print screen (FIG. 13) and requests the user to perform second authentication using an IC card or the like again. At the time of the second authentication, when the MFP 300 detects an IC card that can be read by the card reader 319, the MFP 300 reads the personal authentication information in the IC card, and holds the read personal authentication information in the RAM 302 of the MFP 300. If the second authentication process is successful, the print request (output instruction) for the selected print data is transmitted to the print management server 400 (6). This print request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) and the print data time stamp. If the second authentication process fails, a personal job print failure screen (FIG. 14) is displayed. When the user presses the cancel button 1401 on the personal job print failure screen (FIG. 14), the screen transits to the personal job list screen (FIG. 11).

  When the user selects and displays the common job list screen (FIG. 12) and presses the list acquisition button 1201 on the common job list screen (FIG. 12), the multifunction peripheral 300 prints the print data to the print management server 400. Send the list request again. The print data list request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1).

  When the print management server 400 receives the print data list request from the multi-function peripheral 300, the print management server 400 searches the bibliographic information DB again with the login user ID included in the print data list request, and print data list corresponding to the login user ID. Is returned to the MFP 300. The print data list also includes common job flag information.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308.

  When the select all button 1202 is pressed, all personal jobs displayed on the UI of the operation unit 308 are selected. When the selection cancel button 1203 is pressed, the personal job is displayed on the UI of the operation unit 308. All existing personal jobs are in a non-selected state.

  When the delete button 1204 is pressed, the multifunction peripheral 300 transmits a print data delete request to the print management server 400. It is assumed that the print data deletion request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1).

  When the print management server 400 receives a print data erasure request from the multi-function peripheral 300, the print management server 400 searches the bibliographic information DB using a login user ID included in the print data erasure request, and prints the print data corresponding to the login user ID. After erasing from the information DB, a print data list is generated and returned to the MFP 300. The print data list also includes common job flag information.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308.

  Next, when a common job is selected and the print button 1205 is pressed, the multi-function device 300 transmits a print request (output instruction) for the selected print data to the print management server 400 (6). This print request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) and the print data time stamp.

  When the print management server 400 receives a print data print request (output instruction) from the MFP 300 (6), the print management server 400 transmits the bibliographic information of the print data for which the output instruction has been issued to the client PC 100 (corresponding to the client terminal 400 in FIG. 1). ) Is used to search the bibliographic information DB using the login user ID and print data time stamp as keys, and the print server 500 storing the corresponding print data is identified from the retrieved bibliographic information. A print instruction for print data to be transmitted is transmitted (7). The print instruction is a print command including the corresponding print data file name.

  When the print server 500 receives a print instruction from the print management server 400, the print server 500 transmits print data to the multi-function peripheral 300 using the LPR protocol based on the print instruction and causes the multi-function peripheral 300 to print (8).

  When the MFP 300 receives print data from the print server 500, the MFP 300 executes print processing. When the printing process is completed, the multi-function device 300 transmits a print completion notification of the completed printing process to the print management server 400 (9).

  The print data list described above includes a personal job list, a common job list, and a print job list, which will be described later. The personal job list screen (FIG. 11) is a highly confidential print data list screen in which the user has turned off the common job flag. The common job list screen (FIG. 12) is a list screen of low confidential print data in which the user turns on the common job flag. The print job list screen (FIG. 16) is a print data list screen that combines the highly confidential print data with the common job flag turned off by the user and the less confidential print data with the user turned on the common job flag. It is.

  Note that the print data with the common job flag turned on is print data that can be printed out in common by a plurality of user groups, although detailed description is omitted in the present embodiment. The login user name 801 in FIG. 5 contains the user group name. The user group name represents a group in which a plurality of user names are registered. When the user group name is registered in the login user name 801, the print management server requests a print data list from the multifunction device. When received, the print job information corresponding to the user is returned including the print job information in which the user group name including the corresponding user is registered.

  The description of each button on the print job list screen (FIG. 16) is the same as that of the personal job list screen (FIG. 11) described above, and is omitted here, and the processing procedure of FIG. 10 is described. Will be described in detail.

  As described above, the printing system according to the present invention is capable of identifying information (for example, the print data storage server IP address 802, the print data path 803, the document name 804, the time stamp 808, or any one of them). Good), information (login user name 801) for specifying a user who can print the print data, and re-authentication necessity information (common job flag) indicating whether or not re-authentication is necessary. It includes a print management server 100 that stores bibliographic information (bibliographic information data in FIG. 5) and an image processing apparatus 300 that includes a printing unit.

<Explanation of pull print data>

First, the user logs in to the client PC 100 (corresponding to the client terminal 400 in FIG. 1), and the printing destination (printing port) is printed from an application program executed on the client PC 100 (corresponding to the client terminal 400 in FIG. 1). A print instruction is issued to the logical printer designated by the server 500. At this time, the logical printer pops up a common job confirmation dialog (FIG. 15) when the user executes printing. When the No button 1501 of the common job confirmation dialog (FIG. 15) is selected, the print job 500 is transmitted to the print server 500 without setting the common job flag of the print data. When the Yes button 1502 of the common job confirmation dialog (FIG. 15) is selected, a common job flag of print data is set and transmitted to the print server 500.

  Next, the print server 500 extracts (generates) bibliographic information data from the print data received from the client PC 100 (corresponding to the client terminal 400 in FIG. 1) and stored in the predetermined storage location. The generated bibliographic information data (FIG. 5) is transmitted to the print management server 400 and stored in a predetermined storage location (a preset directory) of the print management server 400 using a file common mechanism on the network. Let Here, bibliographic information data will be described with reference to FIG.

  FIG. 5 is a data configuration diagram showing an example of bibliographic information data in the print system of the present embodiment.

  As shown in FIG. 5, the bibliographic information data includes the login user name 801, the print data storage server IP address 802, the print data path 803, the document name 804, the number of copies 805, the page 806, the error presence / absence 807, and the time stamp 808. It consists of information such as job flag information 809.

  The login user name 801 indicates the login user name of the client PC 100 (corresponding to the client terminal 400 in FIG. 1), for example. The print data storage server IP address 802 indicates the IP address of the print server 500 that stores the corresponding print data. A print data path 803 indicates a full path indicating a storage location of the corresponding print data.

  A document name 804 indicates the document name of the corresponding print data. The number of copies 805 indicates the number of copies of the corresponding print data. A page 806 indicates the number of pages of the corresponding print data. The error presence / absence 807 indicates whether or not there is an error in printing the corresponding print data, and is “None” at the timing when the bibliographic information data is created.

  The time stamp 808 is given when print data is received by the print server 500, and indicates the date and time when the corresponding print data is received.

  The common job flag information 809 is flag information given at the time of printing by the driver from the client PC 100 (corresponding to the client terminal 400 in FIG. 1).

  Returning to the overall description of the printing system.

  The print management server 400 monitors the predetermined directory, and when the bibliographic information file is stored from the print server 500 in the predetermined directory, the bibliographic information file is analyzed and the bibliographic information is stored in the bibliographic information DB (print management server 400). Registered on the external storage device (FIG. 5)).

  When the multifunction device 300 detects an IC card that can be read by the card reader 319, the multifunction device 300 reads the personal authentication information in the IC card and transmits the read personal authentication information to the IC card authentication server as an authentication request. The personal authentication information is information used for authentication and may be a manufacturing number of the IC card.

  When the IC card authentication server receives the personal authentication information from the multi-function device 300, the IC card authentication server performs authentication processing of the personal authentication information based on the IC card authentication table (FIG. 6) stored on the external storage device of the IC card authentication server. The authentication result is returned to the multi-function device 300. If the authentication process is successful, the login user name of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) is transmitted as the authentication result. Here, the IC card authentication table will be described with reference to FIG.

  FIG. 6 is a data configuration diagram showing an example of an IC card authentication table in the print system of the present embodiment.

  As shown in FIG. 6, the IC card authentication table is composed of information such as a card manufacturing number 901, a user name 902, a mail address 903, a department ID 904, a department password 905, and an administrator authority 906.

  Returning to the overall description of the printing system.

  Next, upon receiving the first authentication result (user name) indicating that the authentication has succeeded from the IC card authentication server, the multifunction peripheral 300 transmits a print data list request to the print management server 400.

  The print data list request includes a user name. The log-in user name 801 in the bibliographic information data shown in FIG. 4 and the user name 902 in FIG. 5 have the same format, and a list of print data can be acquired by associating this user information.

  Upon receiving the print data list request from the multifunction device 300, the print management server 400 searches the bibliographic information DB with the user name included in the print data list request, and generates a print data list corresponding to the user name. Reply to the MFP 300.

  The print data list includes a user name, time stamp, document name, printing date and time, common job flag information, and the like.

  When the MFP 300 receives the print data list from the print management server 400, the MFP 300 displays the print data list on the UI of the operation unit 308. At that time, the personal job list screen (FIG. 11) displaying the list of personal print data that does not have the common job flag is displayed by looking at the common job flag information. The common job list screen (FIG. 12) displaying the list can be selected on the tab. When print data on the personal job list screen is selected and a print instruction is issued, the multi-function device 300 displays a personal job print screen (FIG. 13) and requests the user to perform second authentication using an IC card or the like again. At the time of the second authentication, when the MFP 300 detects an IC card that can be read by the card reader 319, the MFP 300 reads the personal authentication information in the IC card, and holds the read personal authentication information in the RAM 302 of the MFP 300. If the second authentication process is successful, the print request (output instruction) for the selected print data is transmitted to the print management server 400 (6). This print request includes the login user ID of the client PC 100 (corresponding to the client terminal 400 in FIG. 1) and the print data time stamp. If the second authentication process fails, a personal job print failure screen (FIG. 14) is displayed. When the user presses the cancel button 1401 on the personal job print failure screen (FIG. D), the screen transits to the personal job list screen (FIG. 11). When the user selects / displays the common job list screen (FIG. 12), and the user selects print data and gives a print instruction, the multi-function peripheral 300 issues a print request (output) for the selected print data. Command) to the print management server 400. This print request includes a user name and a print data time stamp.

  When the print management server 400 receives a print data print request (output instruction) from the multi-function peripheral 300, the bibliographic information of the print data for which the output instruction has been issued is used with the user name and the time stamp of the print data as keys. A search is performed from the DB, the print server 500 storing the corresponding print data is identified from the searched bibliographic information, and a print instruction for the corresponding print data is transmitted to the print server 500. The print instruction is a print command including a corresponding time stamp and document name. The time stamp described above is given when print data is received by the print server 500.

  When the print server 500 receives a print instruction from the print management server 400, the print server 500 transmits print data to the multi-function peripheral 300 based on the print instruction and causes the multi-function peripheral 300 to print (LPR printing).

<Description of print data registration procedure of pull print system>

  First, with reference to FIG. 7, a flow from a print instruction on the client PC 100 (corresponding to the client terminal 400 in FIG. 1) to accumulation of print data in the print server 500 and registration of bibliographic information in the print management server 400 will be described. .

  When a print instruction is received from the user in step S1001, the client PC displays a common job confirmation dialog (FIG. 15) in step 1002. In step S1003, it is determined whether the No button 1501 has been pressed or the Yes button 1502 has been pressed in the common job confirmation dialog (FIG. 15). If the NO button 1101 is pressed, the client PC 100 generates print data with the common job flag: ON (sets “1” in the flag) in step S1004. If the YES button 1102 is pressed, in step S1005, the client PC 100 generates print data (corresponding to a print job) with a common job flag: OFF (set the flag to “0”).

  After the print data is generated, the client PC 100 transmits print data including the common job flag to the print server 500 in step S1006.

  The print server 500 that has received the print data in step S1007 extracts bibliographic information from the received print data (corresponding to a print job) in step S1008. Thereafter, the extracted bibliographic information is transmitted to the print management server 400 in step S1009.

  The print management server 400 that has received the bibliographic information in step S1010 registers the bibliographic information data in the bibliographic information DB in step S1011.

<Description 1 of Print Output Procedure for Print Data of Pull Print System>

  Next, a flow from when the MFP 300 performs authentication processing to when print data is output will be described with reference to FIG.

  First, the authentication program (that is, the CPU 301 of the MFP 300) receives the card number read from the card reader (corresponding to the authentication information receiving means), and transmits the card number to log in to the authentication server 200 in step S501.

  In the authentication server 200, the CPU of the authentication server 200 receives the card number transmitted from the authentication program of the MFP 300 in step S502.

  Next, in step S503, the CPU of the authentication server 200 compares the card number (for example, card manufacturing number) received in S502 with the card manufacturing number 901 in the IC card authentication table (FIG. 6) to perform authentication processing. The authentication result is transmitted to the multi-function device 300. Specifically, when the CPU of the authentication server 200 determines that the user is a regular user as a result of authentication, the CPU of the authentication server 200 transmits login user information (user name 902 in FIG. 6) to the multi-function device 300. On the other hand, if it is determined that the user is not an authorized user (the card number received by the IC card authentication table does not exist), authentication error (authentication NG) information is transmitted to the multi-function device 300.

  Then, in the authentication program, when the authentication result transmitted from the authentication server 200 is received in step S504, the process proceeds to step S505.

  In step S505, the authentication program determines whether authentication has been performed based on the authentication result received in step S504.

  If the authentication program determines in step S505 that the received authentication result is login user information, it is determined that authentication has been performed, and the process proceeds to step S506.

  On the other hand, if the authentication program determines in step S505 that the received authentication result is authentication NG, it is determined that the authentication has not been performed, and the process proceeds to step S507.

  In step S507, the authentication program executes local authentication. Specifically, since the authentication program refers to other authentication information, based on the IP address of the local authentication destination table (not shown) stored in advance in the HDD 304 of the multifunction device 300, the multifunction device of the IP address destination. Send card number to. The multi-function device that has received the card number refers to the IC card authentication table existing in the multi-function device, and indicates the authentication result (information indicating the user name in the case of authentication OK and authentication NG in the case of authentication NG). Send to the multifunction device that sent the card number. Then, the MFP 300 over which the IC card is held receives the authentication result to be transmitted.

  The above is the local authentication execution process of S507. In the present embodiment, it is assumed that an IC card authentication table is held in the multifunction machine 300 over which the IC card is held. Even in this case, it is assumed that the IP address of the own device is set and local authentication is performed via the network. When the IC card authentication table is held in the own apparatus, local authentication is not performed via the network, and the IC card authentication table held directly can be referred to.

  In this case, the IP address of the own device is not set in the local authentication destination table (not shown), or the IP address of the own device is compared with the IP address of the authentication destination. The card authentication table is directly referenced.

  In step S508, the authentication program determines whether authentication has been performed based on the local authentication result in step S507.

  If the authentication program determines in step S508 that the local authentication result in S507 is login user information, it is determined that authentication has been performed, and the process proceeds to step S506.

  On the other hand, if the authentication program determines in step S508 that the local authentication result in S507 is authentication NG, it is determined that the authentication has not been performed, and an indication that login to the operation unit 308 could not be performed in a step (not shown). And the login process is terminated as it is.

  In step S506, the authentication program notifies the print program of the user name received in S504 or the user name acquired in S507 as login user information, ends the login process as OK, and performs the process in step S420 of FIG. Proceed.

  In step S509, the print program acquires the login user information transmitted from the authentication program.

  In step S510, the print program transmits a list request including the login user information acquired in step S509 to the print management server. That is, a list request for requesting print data list information including user information of the user who has logged into the MFP 300 is transmitted to the print management server 100 (corresponding to a list request unit).

  In the print management server 400, in step S511, the CPU of the print management server 400 receives the login user information transmitted from the multi-function device 300.

  Next, in step S512, the CPU of the print management server 400 acquires print job information corresponding to the login user information from the bibliographic information DB based on the login user information received in step S511, and the MFP 300 receives the print job information. Sends job information (time stamp, document name, printing date and time, common job flag). That is, according to the user information and bibliographic information data of the user who has logged in to the multifunction device 300 received from the multifunction device 300, the list information of print data that can be printed with the user information including the common job flag is transmitted (list information transmitting means). Equivalent).

  In the printing program of the MFP 300, the print job information transmitted from the print management server 400 is received in step S513.

  Next, in step S514, the print program displays a list of document names, print dates and the like on the operation unit 308 based on the print job information received in step S513, and performs print job information selection processing for receiving a print instruction from the user. Do. That is, a list of print data is displayed using the print data list information transmitted from the print management server 100 in response to a list request from the list request unit (corresponding to a display unit), and the list of displayed print data is displayed. The selection of print data to be printed out is received (corresponding to a receiving means).

  Details of this print job information selection processing will be described with reference to FIG. 9 (first processing procedure) and FIG. 10 (second processing procedure).

[First print job information selection processing procedure]

  First, the processing procedure of the first print job information selection process will be described. FIG. 9 is a flowchart for explaining a detailed processing procedure (first processing procedure) of the print job information selection processing.

  First, in step S530, the main body control unit of the multifunction machine 300 determines whether the print program has changed to another function (including an extended function implemented by another program) from the other functions of the multifunction machine 300. It is determined whether a display event has been acquired. When a function realized by the printing program is pressed by the user, a display event is issued from the main body control unit to the printing program.

  If an event to be displayed has not been acquired (for example, a predetermined operation condition such as screen transition in the print program or transition to the screen of the print program immediately after login), the process proceeds to step S532 and the event to be displayed is acquired. In the case where the function implemented by the printing program is pressed by the user, in step S531, the document name mask flag held in the RAM 302 of the MFP 300 is turned on, and the process proceeds to step S532.

<First Document Name Mask Processing Procedure>

  A processing procedure of the first document name mask processing will be described. FIG. 17 is a flowchart for explaining a detailed processing procedure (first document name mask processing procedure) of the document name mask processing.

  First, in step S1701, it is determined whether the document name mask flag held in the RAM 302 of the MFP 300 is ON or OFF. If the document name mask flag is ON, the print program receives the print job received in step S513 in step S1702. Based on the information, a job list whose common job flag information is OFF (a flag set to “0”, that is, a print job that can be classified) is displayed on the operation unit 308 as a personal job list mask screen (FIG. 19). To do.

  Specifically, the character string of the document name (corresponding to the print data identification information) is replaced with “*”. The replacement character may be a character other than “*”. Since it is only necessary to prevent the print data from being identified by a third party as having high confidentiality, the document name may not be displayed in addition to replacing the document name with another character. That is, it is a process of changing the document name to different information.

  In step S1703, when the MFP 300 detects an IC card that can be read by the card reader 319, it reads personal authentication information (card information such as a card number) in the IC card with the card reader and accepts the personal authentication information. (Equivalent to authentication information receiving means). In step S1704, the read personal authentication information is collated with the login card number held in the RAM 302 of the multifunction machine 300 (re-authentication) (corresponding to authentication information determination means). If the verification is successful (authentication successful), the process advances to step S1706. If it fails, the document name mask release failure screen (FIG. 22) in step S1705 is displayed, and if the cancel button 2201 on the document name mask release failure screen (FIG. 22) is pressed, the process returns to step S1702.

  In step 1706, the document name mask flag held in the RAM 302 of the MFP 300 is turned off. In step S1707, the print program is turned off based on the print job information received in step S513 (the flag is set to “0”). ) Is displayed on the operation unit 308 as a personal job list screen (FIG. 11). Specifically, “*” is replaced with the document name (document name) of the print job information.

  On the other hand, if the document name mask flag is OFF in step S1701, the print program received in step S513 is displayed in step S1707 so that the document name (document name) is displayed because there is no transition from another function. Based on the job information, a job list in which the common job flag information is OFF (the flag is set to “0”) is displayed on the operation unit 308 as a personal job list screen (FIG. 11).

  In step S1708, after the job list screen is displayed in step S1707, if the user does not perform any operation on the operation unit 308 of the multi-function device 300, a predetermined time elapses (a predetermined operation condition is satisfied), and the process proceeds to step S1709. Then, the document name mask flag held in the RAM 302 of the MFP 300 is turned ON, and the process returns to step S1701. If the user selects a tab for a common job in step S522 before the fixed time has elapsed, or if a print instruction is received from the user in step S525, the process proceeds to the subsequent processing.

  Subsequently, the description returns to the detailed processing procedure (first processing procedure) of the print job information selection processing in FIG.

  In step S522, when the user selects a common job tab on the personal job list screen (FIG. 11) displayed on the operation unit 308, in step S523, the print program is based on the print job information received in step S513. A job list whose common job flag information is ON is displayed on the operation unit 308 on the common job list screen (FIG. 12).

  In step S524, when the user selects print job information (a plurality of print job information) from the common job list screen (FIG. 12) displayed on the operation unit 308 and issues a print instruction, the print program proceeds to step S515. move on.

  On the other hand, if the user does not select the common job tab in step S522, the print job information (a plurality of print job information may be selected) is selected by the user from the personal job list screen (FIG. 11) displayed on the operation unit 308 in step S525. Can accept print instructions.

  When the print instruction is received in step S525, the print program determines the document name mask flag held in the RAM 302 of the multi function peripheral 300 in step S534. If the document name mask flag is ON, the print job is set in step S535. When the lock screen (FIG. 21) is displayed and the cancel button 2101 of the personal job block screen (FIG. 21) is pressed, the process returns to step S532. If the document name mask flag held in the RAM 302 of the multifunction device 300 is OFF, the process advances to step S526.

  In step S526, the personal job print screen (FIG. 13) is displayed, and the user is again requested for second authentication using an IC card or the like. That is, here, the user is prompted to hold the IC card over the card reader in order to authenticate again. In other words, if the print data received by the receiving means requires re-authentication at the time of operation (printing) based on the re-authentication necessity information (common job flag) included in the print data list information, Request re-authentication (equivalent to re-authentication request means).

  In step S527, when the MFP 300 detects an IC card that can be read by the card reader 319, the MFP 300 reads personal authentication information (card number) in the IC card. In step S528, the read personal authentication information is collated with the login card number held in the RAM 302 of the multi-function device 300. If the second authentication process is successful, the process proceeds to step S515. If the second authentication process has failed, the personal job print failure screen (FIG. 14) in step S529 is displayed, and if the cancel button 1401 on the personal job print failure screen (FIG. 14) is pressed, the process returns to step S532. . At this time, in step S533, the printing program changes the document name mask flag held in the RAM 302 of the MFP 300 to ON.

[Second print job information selection processing procedure]

  Next, the processing procedure of the second print job information selection process will be described. FIG. 10 is a flowchart for explaining a detailed processing procedure (second processing procedure) of the print job information selection processing. In the first processing procedure described above, the personal job list screen (FIG. 11) and the common job list screen (FIG. 12) can be switched with tabs. However, in the second processing procedure, the personal job is also a common job. A print job list screen (FIG. 16) or a print job list mask screen (FIG. 20) is also displayed.

  First, in step S607, the main body control unit of the multifunction device 300 determines whether or not the other function (including the extended function realized by another program) of the multifunction device 300 has changed to the function realized by the printing program. It is determined whether a display event has been acquired. When a function realized by the printing program is pressed by the user, a display event is issued from the main body control unit to the printing program.

  If an event to be displayed has not been acquired (for example, a predetermined operation condition such as screen transition in the print program or transition to the screen of the print program immediately after login), the process proceeds to step S609 to acquire the event to be displayed. In the case where the function implemented by the printing program is pressed by the user, the document name mask flag held in the RAM 302 of the multifunction device 300 is turned ON in step S608, and the process proceeds to step S609.

<Second document name mask processing procedure>

  A processing procedure of the second document name mask processing will be described. FIG. 18 is a flowchart for explaining a detailed processing procedure (first document name mask processing procedure) of the document name mask processing.

  First, in step S1801, it is determined whether the document name mask flag held in the RAM 302 of the MFP 300 is ON or OFF. If the document name mask flag is ON, the print program receives the print job received in step S513 in step S1802. Based on the information, all job lists are displayed on the operation unit 308 as a print job list mask screen (FIG. 20). At that time, based on the common job flag information, a job list (individual job) with the common job flag OFF is displayed on the upper part of the data list of the print job list mask screen (FIG. 20), and a job list with the common job flag ON (common (Job) is displayed next. The personal job is displayed with a personal job mark 2001 that can be identified as a personal job. The common job is displayed with a common job mark 2002 that can be identified as a common job. To display.

  In FIG. 20, the personal job display process is the same as the process in step S1702, and for example, the document name is replaced with “*” and displayed.

  In step S1803, when the MFP 300 detects an IC card that can be read by the card reader 319, it reads personal authentication information (for example, card information such as a card number) in the IC card with the card reader. Accept (equivalent to authentication information accepting means). In step S1804, the read personal authentication information is collated with the login card number held in the RAM 302 of the multi-function apparatus 300 (re-authentication). If the verification (authentication) is successful, the process proceeds to step S1806. If collation (authentication) fails, the document name mask release failure screen (FIG. 22) in step S1805 is displayed, and if the cancel button 2201 on the document name mask release failure screen (FIG. 22) is pressed, the process advances to step S1802. Return.

  If a print instruction from the user is accepted without acquiring card information in step S1803, the process proceeds to step S601.

  In step 1806, since authentication has been obtained, it can be determined that a legitimate user is in front of the multifunction device 300. Therefore, the document name mask flag held in the RAM 302 of the multifunction device 300 is turned OFF, and the printing program is updated in step S1807. Based on the print job information received in S513, all job lists are displayed on the operation unit 308 as a print job list screen (FIG. 16). At this time, based on the common job flag information, a job list with the common job flag OFF (personal job) is displayed at the top of the data list on the print job list screen (FIG. 16), and a job list with the common job flag ON (common job) ) Is displayed next. A personal job mark 1601 that makes it possible to identify an individual job is added to the personal job, and a common job mark 1602 that makes it possible to identify the common job is added to the common job. To display.

  In the display of the print job list screen (FIG. 16), since the document name of the personal job is “*”, the document name is replaced with the document name (document name) of the print job information from “*”. Alternatively, based on the print job information, all job lists are redisplayed without being converted to “*”.

  On the other hand, if the document name mask flag is OFF in step S1801, the print program is also displayed in step S1807 based on the print job information received in step S513, and the operation unit 308 displays all job lists as a print job list screen (FIG. 16). To display. At this time, based on the common job flag information, a job list with the common job flag OFF (personal job) is displayed at the top of the data list on the print job list screen (FIG. 16), and a job list with the common job flag ON (common job) ) Is displayed next. A personal job mark 1601 that makes it possible to identify an individual job is added to the personal job, and a common job mark 1602 that makes it possible to identify the common job is added to the common job. To display.

  In step S1808, after the job list screen is displayed in step S1807, if the user does not perform any operation on the operation unit 308 of the multifunction machine 300, a predetermined time elapses (a predetermined operation condition is satisfied), and in step S1809. The document name mask flag held in the RAM 302 of the multifunction machine 300 is turned ON, and the process returns to step S1801. If a print instruction is received from the user before the fixed time has elapsed, the process proceeds to step S601.

  Subsequently, the description returns to the detailed processing procedure (second processing procedure) of the print job information selection processing in FIG.

  In step S601, when the user selects print job information (or a plurality of print jobs) on the print job list screen (FIG. 16) displayed on the operation unit 308 and issues a print instruction, the print program is displayed in step S602. Then, it is determined whether or not the selected print job information is a personal job. If a personal job is selected, and if the document name mask flag held in the RAM 302 of the MFP 300 is ON in step S610, a personal job block screen (FIG. 21) is displayed in step S611. If a cancel button 2101 on the job lock screen (FIG. 21) is pressed, the process returns to step S609. On the other hand, if the document name mask flag held in the RAM 302 of the multifunction device 300 is OFF in step S610, the process proceeds to step S603.

  In step S603, the personal job print screen (FIG. 13) is displayed, and the user is again requested for second authentication using an IC card or the like. In other words, if the print data received by the receiving means requires re-authentication at the time of operation (printing) based on the re-authentication necessity information (common job flag) included in the print data list information, Request re-authentication (equivalent to re-authentication request means).

  In step S604, when the MFP 300 detects an IC card that can be read by the card reader 319, the MFP 300 reads the personal authentication information in the IC card. In step S605, the MFP 300 reads the read personal authentication information. The login card number stored in the RAM 302 is verified. If the second authentication process is successful, the process proceeds to step S515.

  If the second authentication process fails, the personal job print failure screen (FIG. 14) in step S606 is displayed, and if the cancel button 1401 on the personal job print failure screen (FIG. 14) is pressed, the process returns to step S609. . At this time, in step S612, the printing program changes the document name mask flag held in the RAM 302 of the MFP 300 to ON.

  If it is determined in step S602 that a personal job has not been selected, the second authentication process is not necessary, and the process advances to step S515.

<Description 2 of Print Output Procedure for Print Data of Pull Print System>

  Next, returning to FIG. 8, the latter half of the procedure for printing out print data will be described.

  In step S515, a print request including a time stamp and a user name corresponding to the selected print job is transmitted to the print management server 400. That is, the print data received by the receiving means is authenticated when re-authentication is not required at the time of operation (printing) by the re-authentication necessity information (common job flag) included in the print data list information, and when authentication is performed again If so, a print output instruction for the received print data is transmitted to the print management server 100 (corresponding to a print output instruction means). Thereafter, in step S521, the document name mask flag is changed to ON, and the process returns to step S514.

  At this time, when a plurality of print jobs are selected, the print program preferentially transmits the print job with the common job flag OFF (personal job) to the print management server 400. That is, in the MFP 300, after a personal job with a high confidentiality is printed, a common job with a relatively low airtightness is printed. This means that after the printing is completed, the printed material of the common job is placed on the personal job, and the personal job information is not touched by others, thereby realizing higher secure printing.

  In the print management server 400, in step S516, the CPU of the print management server 400 receives the print request transmitted from the MFP 300.

  Next, in step S517, the CPU of the print management server 400 specifies the print server 500 storing the print job corresponding to the print request received in S516 from the bibliographic information DB, and sends the specified print server 500 to the specified print server 500. A print request for print data corresponding to the print job requested to be printed is transmitted. This print request includes the print data path, the IP address of the output multifunction device (the multifunction device that sent the print request) 300, and the like. That is, in accordance with a print output instruction received from the multifunction device 300, an output instruction is issued to print the print data designated by the print output instruction with the multifunction device 300 (corresponding to an output control unit).

  In the print server 500, in step S518, the CPU of the print server 500 receives a print request from the print management server 400.

  In step S519, the CPU of the print server 500 specifies print data based on the print request (print data path) received in step S518, and specifies a multi-function peripheral based on the IP address included in the print request. Then, an LPR print instruction for the specified print data is transmitted to the specified multi-function peripheral.

  In step S520, the printing program of the MFP 300 receives print data transmitted from the print server 500 by LPR printing, and executes output processing. In S519, it is configured to be realized by a print program. However, normally, when LPR printing is executed, output processing is performed by a program previously stored in the multifunction machine 300.

  As described above, according to the present embodiment, by controlling the display of the name related to the print data that is displayed after the user logs in to the printing apparatus, printing that is considered to be highly sensitive to the user. Data identification can be prevented and the risk of leakage of confidential information can be reduced.

  Even after the user logs in to the printing apparatus, the print data that is considered to be highly sensitive to the user needs to be re-authenticated so that it can be easily printed by a third party. Can be prevented.

  In addition, after the user logs in to the printing apparatus, print data (personal job) that is considered to be highly sensitive to the user needs re-authentication processing, but print data that is considered not sensitive to the user ( For common jobs), a print instruction can be issued without the need for re-authentication processing. Therefore, an easy-to-use print instruction mechanism can be provided without complicating the print instruction for all print data corresponding to the user. Can be provided.

  In addition, when print data (individual job) that is considered to be highly sensitive to the user and print data (common job) that is considered not to be highly confidential to the user are instructed to be printed, the function is given to the user. Since print data (personal job) considered to have high density is printed with priority, it is possible to provide a secure printing system with higher confidentiality.

  Furthermore, when the user logs in to the printing apparatus and there is no operation for a certain period of time, when a transition is made from another function to a function realized by the print program, or when print data is instructed to print, the print data (personal job) ), It is possible to provide a secure printing system with higher confidentiality.

  In the above embodiment, the print management server 100 and the print server 500 have been described as separate devices, but the present invention is not limited to this. For example, by providing the print management server 100 with the functional configuration of the print server 500, the print data may be accumulated and the bibliographic information data may be accumulated by one print management server 100. In that case, the print management server 100 performs the processing of steps S516 to S519 in FIG.

Next, another embodiment in the present embodiment will be described.
FIG. 23 is a flowchart illustrating an example of a detailed processing procedure (first processing procedure) of document name mask processing and print job information selection processing according to another embodiment.
FIG. 23 corresponds to the flowchart of FIG. About the same step, the same step number is given and description is abbreviate | omitted.

In the common job list screen (FIG. 12) displayed on the operation unit 308, if the user selects the personal job tab (first display tab) again in step S536, the RAM 302 of the multi-function peripheral 300 is stored in step S537. In step S525, the document name mask flag to be held is set to ON. If it is determined in step S536 that the personal job tab has not been selected again by the user, the process advances to step S524.
That is, a first display tab that displays a list of print data that requires re-authentication, a second display tab that displays a list of print data that does not require re-authentication, and a second display tab This is a process of accepting authentication information again when switching from the first display tab to the first display tab.

  As a result, even when the logged-in user is away from the MFP, the information is specified from the document name in order to request re-acquisition (re-authentication) of card information again when viewing a list of highly confidential print data such as personal jobs. Security is increased.

  Next, a detailed processing procedure (second processing procedure) of document name mask processing and print job information selection processing in another embodiment will be described with reference to FIG. FIG. 24 is a flowchart illustrating an example of a detailed processing procedure (second processing procedure) of document name mask processing and print job information selection processing according to another embodiment.

If the document name mask flag held in the RAM 302 of the MFP 300 is ON in step S610, the print program determines in step S613 whether the selected print job information includes a shared job. To do. If a shared job is also selected, a method of canceling the print instruction for the personal job of the selected print job information in step S614 and proceeding to step S515 to print only the shared job is conceivable. On the other hand, if a shared job is not included in the selected print job information in step S613 (in the case of only a personal job), the process proceeds to a step of displaying a personal job block screen (FIG. 21) in step S611. move on.

  Note that it can be assumed that which display format of FIG. 23 (first processing procedure) or FIG. 24 (second processing procedure) is used is stored in the HDD 304 of the multifunction peripheral 300 as setting information of the printing program. . In this case, the print program setting information is read from the HDD 304 to the RAM 302 when the MFP 300 is activated, thereby determining whether to display FIG. 23 (first processing procedure) or FIG. 24 (second processing procedure). . Furthermore, which of the settings shown in FIG. 23 (first processing procedure) or FIG. 24 (second processing procedure) is to be set is determined by a user having administrator authority by sending setting information in the RAM 302 to the print program via a browser. It can be changed and saved in the HDD 304.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  The program according to the present invention is a program that allows a computer to execute the processing methods of the flowcharts shown in FIGS. 7 to 10, 17, 18, 18, 23, and 24. A program capable of being executed by the computer in the processing methods of FIGS. 10, 17, 18, 23, and 24 is stored. Note that the program according to the present invention may be stored in a storage medium by being divided into programs for each processing method of each apparatus shown in FIGS. 7 to 10, 17, 18, 23, and 24.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by executing the reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk, solid state drive, or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

100 Print Management Server 200 Authentication Server 300 Image Processing Device (Printer, Multifunction Device)
400 Client terminal 500 Print server

Claims (13)

Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data A printing system including a print management server that stores bibliographic information including rejection information, and an image processing apparatus including a printing unit,
The print management server
Print data list information that can be printed with the user information, including the re-authentication necessity information and print data identification information according to the user information of the user who has logged into the image processing apparatus and the bibliographic information received from the image processing apparatus. A list information transmission means for transmitting
The image processing apparatus includes:
Authentication information receiving means for receiving authentication information;
List request means for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving means;
Display means for displaying a list of print data using a list of print data transmitted from the print management server in response to a list request by the list request means;
The display means displays the print data when the print data to be displayed in a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition. A printing system, wherein identification information is changed to different information and displayed. An authentication information determination unit that receives authentication information again by the authentication information reception unit and determines whether the authentication information corresponds to user information included in the list request;
When the authentication information determination unit determines that the authentication information is authentication information corresponding to user information included in the list request, the display unit changes the different information to the print data identification information and displays the information. The printing system according to claim 1, wherein: The predetermined operation condition is a condition for determining that an operation of transition from another function is performed,
The display means, when transitioning from another function and displaying a list of print data using print data list information, changes the print data identification information to display different information. Item 3. The printing system according to Item 1 or 2. The predetermined operation condition is a condition for determining that there is no operation for a predetermined time,
3. The printing system according to claim 1, wherein the display unit displays the print data identification information by changing to different information when there is no operation for a predetermined time.   The display means accepts authentication information by the authentication information accepting means to log in to the image processing apparatus, and uses print data list information transmitted from the print management server in response to a list request by the list request means. The printing system according to any one of claims 1 to 4, wherein when displaying a list of print data, the print data identification information is displayed without changing to different information. A print output instruction means for transmitting a print output instruction of print data designated from a list of print data displayed by the display means to the print management server;
The display means changes the print data identification information to display different information, and displays a message prompting input of the authentication information when a print output instruction is given by the print output instruction means. The printing system according to any one of claims 1 to 5. The print management server
In accordance with a print output instruction received from the image processing apparatus, the apparatus further comprises output control means for issuing an output instruction to print the print data specified by the print output instruction by the image processing apparatus,
The image processing apparatus includes:
Re-authentication requesting means for requesting re-authentication to the logged-in user when the instructed print data requires re-authentication at the time of printing based on re-authentication necessity information included in the list information; Prepared,
The print output instructing unit is configured to re-authenticate when the designated print data does not require re-authentication at the time of printing based on re-authentication necessity information included in the list information, and when the re-authentication request unit requests the re-authentication The printing system according to claim 6, wherein when the authentication is performed, the print output instruction of the designated print data is transmitted to the print management server. The display means displays a first display tab that displays a list of print data that requires re-authentication, and a second display tab that displays a list of print data that does not require re-authentication.
8. The printing according to claim 1, wherein the authentication information receiving unit receives the authentication information again when switching from the second display tab to the first display tab. system. Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data An image processing apparatus including a printing unit that can communicate with a print management server that stores bibliographic information including rejection information,
Authentication information receiving means for receiving authentication information;
List request means for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving means;
Display means for displaying a list of print data using a list of print data transmitted from the print management server in response to a list request by the list request means;
The display means displays the print data when the print data to be displayed in a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition. An image processing apparatus, wherein identification information is changed to different information and displayed. Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data A control method in a printing system that includes a print management server that stores bibliographic information including rejection information and an image processing apparatus that includes a printing unit,
The print management server is
Print data list information that can be printed with the user information, including the re-authentication necessity information and print data identification information according to the user information of the user who has logged into the image processing apparatus and the bibliographic information received from the image processing apparatus. A list information transmission step for transmitting
The image processing apparatus is
An authentication information receiving step for receiving authentication information;
A list request step for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving step;
Performing a display step of displaying a list of print data using a list of print data transmitted from the print management server in response to a list request in the list request step;
In the display step, when the print data to be displayed as a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition, the print data A control method, wherein the identification information is changed to different information and displayed. Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data A control method in an image processing apparatus including a printing unit that can communicate with a print management server that stores bibliographic information including rejection information,
The image processing apparatus is
An authentication information receiving step for receiving authentication information;
A list request step for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving step;
Performing a display step of displaying a list of print data using a list of print data transmitted from the print management server in response to a list request in the list request step;
In the display step, when the print data to be displayed as a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition, the print data A control method, wherein the identification information is changed to different information and displayed. Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data A program that can be executed by a printing system that includes a print management server that stores bibliographic information including rejection information and an image processing apparatus that includes a printing unit,
The print management server;
Print data list information that can be printed with the user information, including the re-authentication necessity information and print data identification information according to the user information of the user who has logged into the image processing apparatus and the bibliographic information received from the image processing apparatus. Function as a list information transmission means for transmitting
The image processing apparatus;
Authentication information receiving means for receiving authentication information;
List request means for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving means;
Functioning as display means for displaying a list of print data using list information of print data transmitted from the print management server in response to a list request by the list request means;
The display means displays the print data when the print data to be displayed in a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition. A printing system, wherein identification information is changed to different information and displayed. Print data identification information for specifying print data, information for specifying a user who can print the print data, and a re-authentication requirement indicating whether re-authentication is required when operating the print data There is a program that can be executed by an image processing apparatus including a printing unit that can communicate with a print management server that stores bibliographic information including rejection information,
The image processing apparatus;
Authentication information receiving means for receiving authentication information;
List request means for sending a list request for requesting print data list information to the print management server, including user information of a user who has logged into the image processing apparatus in accordance with the authentication information received by the authentication information receiving means;
Functioning as display means for displaying a list of print data using list information of print data transmitted from the print management server in response to a list request by the list request means;
The display means displays the print data when the print data to be displayed in a list is print data that needs to be re-authenticated based on the re-authentication necessity information included in the list information according to a predetermined operation condition. A program characterized in that identification information is changed to different information and displayed.

Images