JP2016179594A - Image formation apparatus and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow an image formation apparatus which can be connected to a plurality of communication networks and to which another image formation apparatus is connected via the network to properly execute an alternative operation when the other image formation apparatus is unavailable.SOLUTION: An image formation apparatus 10 comprises: an availability determination unit 202 which determines whether or not an image formation apparatus 21a is available; a security level comparison unit 203 which compares the security levels of first and second communication interfaces 108a, 108b when the image formation apparatus is unavailable; a security level change unit 204 which changes the second security level so as to have the same value as the first security level when the first security level of the first communication interface 108a is different from the second security level of the second communication interface 108b; and an alternative operation unit 207 which performs the alternative operation of the image formation apparatus 21a on the basis of the first security level and the changed second security level.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an image forming apparatus and a program.

  2. Description of the Related Art Conventionally, in a system in which a plurality of image forming apparatuses having a printer function and a scanner function are connected to a network, a technique has been proposed in which another image forming apparatus performs an alternative operation when a certain image forming apparatus fails (for example, Patent Document 1). In Patent Document 1, in a system including a plurality of multifunction peripherals (MFPs) connected to a network, when the management source MFP cannot be used for a long time due to failure or maintenance, another MFP replaces the management source MFP. It is described that the operation is performed. According to the above configuration, for example, when print job data is transmitted to a malfunctioning image forming apparatus, it is possible for another image forming apparatus to receive the print job data and execute print processing. Become.

JP 2009-278243 A

  In recent years, an image forming apparatus that can be connected to a plurality of communication networks such as an intranet and the Internet has been proposed. In this image forming apparatus, for example, a specific user uses a high-security communication network (for example, an intranet) constructed to be usable in a local area, or a low-security level constructed to be usable by the public. It can be used by unspecified users via a communication network (for example, the Internet).

  However, when an image forming apparatus that can be connected to a plurality of communication networks has the above-described alternative function, the following problem may occur. For example, when the image forming apparatus operates on a highly confidential print job data instead of the failed image forming apparatus, the print job data may be leaked to the outside through a communication network with a low security level. There is. Further, for example, when print job data with low confidentiality that can be shared by a plurality of users is operated by the image forming apparatus instead of the failed image forming apparatus, the print job data has a high security level. There is a risk that convenience may be impaired by restricting (prohibiting) transmission to the outside via the Internet.

  According to the present invention, in an image forming apparatus that can be connected to a plurality of communication networks and another image forming apparatus is connected to the network, an alternative operation can be appropriately executed when the other image forming apparatus cannot be used. An object of the present invention is to provide an image forming apparatus and a program.

  An image forming apparatus according to a first aspect of the present invention includes a plurality of communication interfaces individually connected to a plurality of communication networks, and another image forming apparatus connected to the communication interface via a network. Determining means for determining whether or not the other image forming apparatus is in a usable state, and each of the plurality of communication interfaces when the other image forming apparatus is not in a usable state. The first security level of the first communication interface to which the other image forming apparatus is connected when the comparison means for comparing the corresponding security level and the other image forming apparatus are not available. And the second security level of the second communication interface to which other devices are connected is different Change means for changing the second security level to the same value as the first security level, and if the other image forming apparatus is not available, the first security level and the change means have changed Operating means for performing an alternative operation of the other image forming apparatus based on the second security level.

  An image forming apparatus according to a second aspect of the present invention is the image forming apparatus according to the first aspect, wherein the second security level is the first security level when the other image forming apparatus is not in a usable state. If it is lower than the security level, the second security level is changed to the same value as the first security level.

  An image forming apparatus according to a third aspect of the present invention is the configuration according to the first aspect, wherein, when the other image forming apparatus is not available, the other image forming apparatus registered in the server. Rewriting means for rewriting the IP address with the IP address of its own device is further included.

  An image forming apparatus according to a fourth aspect of the present invention is the user terminal connected to the other image forming apparatus via a network when the other image forming apparatus is not available in the configuration according to the first aspect. In addition, the information processing apparatus further includes notification means for notifying that the apparatus performs an alternative operation of the other image forming apparatus.

  According to a fifth aspect of the present invention, in the image forming apparatus according to the first aspect, the operation unit performs an operation on a plurality of data input via the first communication interface or the second communication interface. , The data is executed in the order of input.

  An image forming apparatus according to a sixth aspect of the present invention is the image processing apparatus according to the first aspect, wherein the operation unit performs an operation on data input via the first communication interface via the second communication interface. Executes with higher priority than the operation for the input data.

  An image forming apparatus according to a seventh aspect of the present invention is the image processing apparatus according to the first aspect, wherein the comparison unit includes a security level set in advance corresponding to each of the plurality of communication interfaces and the other image. Comparison is made between a plurality of security levels including a security level set in advance corresponding to the forming apparatus, and the changing means changes all the security levels to the same value as the highest security level.

  An image forming apparatus according to an eighth aspect of the present invention is the configuration according to the first aspect, wherein the changing unit is changed when the other image forming apparatus returns from an unusable state to an usable state. Return the security level to the original value.

  According to a ninth aspect of the present invention, in the configuration according to the first aspect, when the other image forming apparatus is in a usable state, the apparatus is connected to the first communication interface. It is configured so that its own device cannot be recognized.

  According to a tenth aspect of the present invention, there is provided a program including a plurality of communication interfaces individually connected to a plurality of communication networks, and a computer in which another image forming apparatus is network-connected to the communication interface. Determining means for determining whether or not the other image forming apparatus is in a usable state; when the other image forming apparatus is not in a usable state, the image forming apparatus is set in advance corresponding to each of the plurality of communication interfaces. Comparing means for comparing security levels, and when the other image forming apparatus is not available, the first security level of the first communication interface to which the other image forming apparatus is connected is connected to another device. If the second security level of the second communication interface is different, Changing means for changing the security level to the same value as the first security level, and when the other image forming apparatus is not available, the first security level and the first security level changed by the changing means. 2 is a program for functioning as an operation means for performing an alternative operation of the other image forming apparatus based on the two security levels. This program may be stored in a computer-readable information storage medium such as a CD-ROM or a DVD-ROM.

  According to the configuration of claims 1 and 10 of the present invention, when an image forming apparatus that can be connected to a plurality of communication networks and is connected to another image forming apparatus through a network, the other image forming apparatus cannot be used. The substitute operation is executed appropriately.

  According to the configuration of the second aspect of the present invention, when the second security level is lower than the first security level when the other image forming apparatus is not usable, the second security level is the first security level. Will be changed to the same value. Thus, a job input to another image forming apparatus is appropriately performed by the image forming apparatus for alternative operation.

  According to the configuration of the third aspect of the present invention, a job input to another image forming apparatus is received by the image forming apparatus for alternative operation.

  According to the configuration of claim 4 of the present invention, a user who has submitted a job to an image forming apparatus in which an abnormality has occurred recognizes that the image forming apparatus for alternative operation executes the job instead.

  According to the configuration of the fifth aspect of the present invention, the operations for the plurality of data input via the first communication interface or the second communication interface are executed in the order in which the data is input.

  According to the configuration of the sixth aspect of the present invention, the operation for the data input via the first communication interface is executed with priority over the operation for the data input via the second communication interface.

  According to the configuration of claim 7 of the present invention, all security levels are set in advance corresponding to each of the plurality of communication interfaces, and security set in advance corresponding to another image forming apparatus. It is set to the same value as the highest security level among a plurality of security levels including the level.

  According to the configuration of the eighth aspect of the present invention, the other image forming apparatus returns to the state before the abnormality occurs, and the normal operation is performed.

  According to the configuration of the ninth aspect of the present invention, when the other image forming apparatus is in a normal state, the user of the device (for example, a user terminal) connected to the first communication interface forms an image for alternative operation. The device is not recognized.

1 is an overall configuration diagram of an image forming system according to an exemplary embodiment. 1 is a functional block diagram of an image forming apparatus according to an embodiment. It is a schematic diagram which shows the structure of a data storage part. It is a figure which shows the profile corresponding to a 1st communication interface. It is a figure which shows the profile corresponding to a 2nd communication interface. It is a figure which shows the changed profile. FIG. 4 is a diagram illustrating IP addresses of devices when the image forming device is in a usable state. FIG. 6 is a diagram illustrating IP addresses of devices when the image forming device is not available. FIG. 6 is an operation flowchart of the image forming apparatus. 1 is a functional block diagram of an image forming apparatus according to an embodiment. It is a figure which shows the changed profile.

  An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is an overall configuration diagram of an image forming system according to the present embodiment. As shown in FIG. 1, an image forming system 100 includes an image forming apparatus 10, user terminals 20a and 20b used by a user, another image forming apparatus 21a connected to the image forming apparatus 10 via a network, and an image forming system. 100 includes a DNS server 22a that manages the IP addresses of the devices included in 100. The image forming apparatus 10, the user terminal 20a, the image forming apparatus 21a, and the DNS server 22a are connected to each other via the first communication network 30a, and the image forming apparatus 10 and the user terminal 20b are connected to the second communication network. They are connected to each other through 30b. The number of user terminals and other image forming apparatuses connected to the image forming apparatus 10 via a network is not limited. That is, the number of user terminals and other image forming apparatuses connected to the first communication network 30a and the number of user terminals and other image forming apparatuses connected to the second communication network 30b are each one. There may be more than one. Here, for convenience, one user terminal 20a and one image forming apparatus 21a are connected to the first communication network 30a, and one user terminal 20b is connected to the second communication network 30b. A DNS server may also be connected to the second communication network 30b.

  The first communication network 30a and the second communication network 30b are independent communication networks and are not connected to each other. Further, here, the first communication network 30a is a communication network having a relatively high security level (secure), and the second communication network 30b is a communication network having a relatively low security level (non-secure). Assume that there is. A communication network with a high security level is an intranet such as an in-house LAN, and a communication network with a low security level is the Internet, for example. An intranet is a network constructed so that a specific user can use it, for example, in a local area (in-house or the like), and the Internet is a network constructed so that an unspecified number of users can use it in the public, for example. Further, in one company (in-house), the first communication network 30a is a network constructed exclusively for the first business unit, and the second communication network 30b is a network constructed exclusively for the second business unit. You can also. The types of communication networks to which the image forming apparatus 10 can be connected are not limited to the above, and may be three or more types. That is, the image forming apparatus 10 has a configuration that can be connected to a plurality of independent communication networks. Similarly to the image forming apparatus 10, the image forming apparatus 21 a may have a configuration that can be connected to a plurality of independent communication networks, or only in one communication network (here, the first communication network 30 a). You may have the structure which can be connected.

  The user terminal 20a is a terminal device used by the user, connected to the first communication network 30a. The user terminal 20a performs data communication with the image forming apparatus 10 or the image forming apparatus 21a via the first communication network 30a based on a user operation. Accordingly, for example, the user terminal 20a transmits data (for example, print job data), a print command, or the like to the image forming apparatus 10 or the image forming apparatus 21a in accordance with a user operation. Data (for example, scan data) read by the forming apparatus 10 or the image forming apparatus 21a is acquired (received). Although details will be described later, in the image forming system 100, the image forming apparatus 21a executes a job from the user terminal 20a in a normal time, and the image forming apparatus 10 substitutes a job from the user terminal 20a in an emergency. Run.

  The user terminal 20b is a terminal device used by the user, connected to the second communication network 30b. The user terminal 20b performs data communication with the image forming apparatus 10 via the second communication network 30b based on a user operation. Thereby, for example, the user terminal 20b transmits data (for example, print job data), transmits a print command to the image forming apparatus 10 according to a user's operation, and reads the image by the image forming apparatus 10. The received data (for example, scan data) is acquired (received). Each user terminal 20a, 20b incorporates software such as a browser and an e-mail client. Each user terminal 20a, 20b is, for example, an information terminal device such as a personal computer, a PDA (Personal Digital Assistant), or a smartphone.

  The image forming apparatus 10 and another image forming apparatus 21a connected to the image forming apparatus 10 have functions of a general multifunction peripheral such as a copy function, a scanner function, and a FAX function. The image forming apparatuses 10 and 21a may be an apparatus having at least one of the above functions. Since these functions are well-known structures, description thereof is omitted. The image forming apparatus 10 has a function of substituting the operation of the image forming apparatus 21a when the image forming apparatus 21a cannot be used (emergency).

  FIG. 1 also shows the hardware configuration of the image forming apparatus 10. The image forming apparatus 10 includes a control unit 101, a display unit 102, an input unit 103, a storage unit 104, a reading unit 105, a data storage unit 106, an output unit 107, and a communication unit 108. The image forming apparatus 10 may include an operation unit, a power switch, and the like. The control unit 101 includes a CPU (Central Processing Unit), executes various arithmetic processes based on a program stored in the storage unit 104, and controls each unit of the image forming apparatus 10. Details of the control unit 101 will be described later.

  The display unit 102 is configured by a display device such as a liquid crystal display, and displays a result of information processing performed by the control unit 101. The input unit 103 is configured by an input device such as a touch panel or button keys, and receives an operation input from a user. The input unit 103 may be displayed on the display unit 102 as an electronic input device. The input unit 103 functions as a user interface (UI). The storage unit 104 is an information recording medium that includes an information recording medium such as a ROM, a RAM, and a hard disk, and holds a program executed by the control unit 101. The storage unit 104 also operates as a work memory of the control unit 101, for example. Note that various memories can be applied as the storage unit 104. For example, the storage unit 104 may be realized by a storage device such as a semiconductor memory. In addition, the program and various data described as being stored in the storage unit 104 in this embodiment may be acquired from an external device via the communication unit 108 or may be acquired from an external storage medium. It may be. The storage unit 104 may be provided outside the image forming apparatus 10 and connected to the image forming apparatus 10 via a network.

  The reading unit 105 is configured by a scanner or the like. The reading unit 105 optically scans an object such as a paper medium to read information on the object as image information (image data), for example.

  The data storage unit 106 includes document data and image data input (transmitted) from the outside (user terminal 20) to the image forming apparatus 10 via the communication network 30, and electronic data (scanned image) read by the reading unit 105. Data) etc. are saved in a file format. That is, the data storage unit 106 stores print job data, scan data, and the like in a file format. Similar to the storage unit 104, the data storage unit 106 is configured by an information recording medium such as a ROM, a RAM, or a hard disk. The data storage unit 106 may be included in the storage unit 104 or may be provided outside the image forming apparatus 10 and connected to the image forming apparatus 10 via a network. For example, the data storage unit 106 may be configured by a data server connected to the network via the communication unit 108.

  The output unit 107 includes printing means for forming an image on a medium such as paper. For example, when the user performs a print instruction operation, the output unit 107 prints (outputs) image data or the like on a paper medium based on the processing of the control unit 101.

  The communication unit 108 includes a plurality of mutually independent communication interfaces corresponding to a plurality of communication networks, and performs data communication with the plurality of user terminals 20. For example, the communication unit 108 includes a first communication interface 108a and a second communication interface 108b. The first communication interface 108a is connected to a first communication network 30a (for example, an intranet), and the second communication interface 108b is connected to a second communication network 30b (for example, the Internet). Each communication interface is individually configured by, for example, a NIC (Network Interface Card) or the like. 1 shows an example in which the communication unit 108 includes two communication interfaces 108a and 108b. However, the number of communication interfaces included in the communication unit 108 corresponds to the number of communication networks. It is not limited to one and may be three or more.

  FIG. 2 is a functional block diagram of the image forming apparatus 10. As illustrated in FIG. 2, the control unit 101 functionally includes a data acquisition unit 201, an availability determination unit 202, a security level comparison unit 203, a security level change unit 204, an address rewriting unit 205, a notification unit 206, In addition, an alternative operation unit 207 is included. Each of these functions is realized by executing a program stored in the storage unit 104 by the control unit 101.

  The data acquisition unit 201 is data (for example, print job data) transmitted (input) to the image forming apparatus 10 from the user terminal 20 via the communication network 30, and image data (for example, scan data) read by the reading unit 105. To get. The data acquisition unit 201 stores the acquired data in a file format in the data storage unit 106. When the data storage unit 106 is connected to the image forming apparatus 10 via the network, the data acquisition unit 201 stores the acquired data (file) in the data storage unit 106 via the communication unit 108.

  The data storage unit 106 may include a plurality of data storage areas (folders). FIG. 3 is a schematic diagram illustrating a configuration example of the data storage unit 106. Each data storage area is configured to be capable of storing a plurality of data. Each data storage area may be associated with one or a plurality of user terminals 20. Further, for example, the data storage area A may store data received from the user terminal 20, and the data storage area B may store data read by the reading unit 105.

  The availability determination unit 202 (determination unit) determines whether or not another image forming apparatus (here, the image forming apparatus 21a) connected to the image forming apparatus 10 via a network is in a usable state. When the image forming apparatus 21a is not usable (unusable), the image forming apparatus 21a has a fault (abnormality), the image forming apparatus 21a has been turned off, or has been overloaded. A state in which normal operations and services cannot be executed, such as a state in which the service of the device 21a cannot be used. Further, the availability determination unit 202 determines the state of the image forming apparatus 21a at predetermined intervals. For example, the availability determination unit 202 determines the state of the image forming apparatus 21a by polling. The availability determination unit 202 can determine (understand) the status (status) of other devices connected to the image forming apparatus 10 via a network by a known method.

  The security level comparison unit 203 (comparison unit) compares the security levels set in advance corresponding to the first communication interface 108a and the second communication interface 108b when the image forming apparatus 21a is not in a usable state. Each communication interface 108a, 108b is associated with a profile in which a security level is set for each item relating to security. In the profile, setting values for each item related to attributes and specifications may be registered. Profile setting values are preset by the administrator of the image forming apparatus 10. Each profile is stored (held) in a profile database (profile DB) 401 of the storage unit 104.

  FIG. 4 shows a profile corresponding to the first communication interface 108a, and FIG. 5 shows a profile corresponding to the second communication interface 108b. For example, in each item regarding security of “security print”, “scan to A”, “Web access (to)”, and “Web access (from)”, the security level corresponding to the first communication interface 108a is the second communication interface. It is set to be higher than the security level corresponding to 108b. “Security print” indicates a mode in which data is temporarily stored (accumulated) for each user and printing is performed after user authentication is performed using a password or the like. “Scan to A” indicates a mode in which scanned data is transmitted to the device A registered in advance. “Web access (to)” indicates a mode in which the image forming apparatus 10 accesses an external device. “Web access (from)” indicates a mode for accessing the image forming apparatus 10 from an external device. As described above, in the example shown in FIGS. 4 and 5, the security level corresponding to the first communication interface 108a is set higher than the security level corresponding to the second communication interface 108b. “Execution control”, which is an item related to the specification of the communication interface, indicates a method for executing a print job. For example, when “execution control” is set to “RR” (round robin), print processing is executed in the order in which print jobs are stored in the print queue. When “execution control” is set to “priority”, for example, when print jobs are stored in two print queues, the print job of one print queue is executed with priority, and then the other print queue is printed. Execute the queue print job.

  The security level changing unit 204 (changing unit) includes a security level (first security level) of the first communication interface 108a to which the image forming apparatus 21a is connected and a second level when the image forming apparatus 21a is not usable. If the security level (second security level) of the communication interface 108b is different, the second security level is changed to the same value as the first security level. For example, in the example shown in FIGS. 4 and 5, the first security level (see FIG. 4) and the second security level (see FIG. 5) are different, so the security level changing unit 204 is as shown in FIG. In addition, for the items relating to security, the second security level is changed to the same value as the first security level.

  When there are three or more communication interfaces, the security level changing unit 204 changes all security levels corresponding to the respective communication interfaces to the same value as the highest security level.

  When the image forming apparatus 21a is not in an available state, the address rewriting unit 205 (rewriting means) uses the IP address of the image forming apparatus 21a registered in the DNS server 22a as the image forming apparatus 10 (self apparatus). Rewrite to the IP address. FIG. 7 shows the IP address of each apparatus when the image forming apparatus 21a is available, and FIG. 8 shows the IP address of each apparatus rewritten when the image forming apparatus 21a is not available. Is shown. 7 and 8, the host name “MFP-A” indicates the image forming apparatus 10, and the host name “MFP-B” indicates the image forming apparatus 21a. As shown in FIG. 8, when the image forming apparatus 21a fails, for example, the IP address of the image forming apparatus 21a is rewritten to the IP address of the image forming apparatus 10. When the IP address of the image forming apparatus 21a is rewritten to the IP address of the image forming apparatus 10, thereafter, a job (print job data or the like) input from the user terminal 20a to the image forming apparatus 21a is transferred to the image forming apparatus. 10 is input.

  When the image forming apparatus 21a is not available, the notification unit 206 (notifying unit) causes the image forming apparatus 10 to perform an alternative operation of the image forming apparatus 21a to the user terminal 20a connected to the image forming apparatus 21a via a network. Notify that. The notification unit 206 may perform the notification at the timing when the IP address of the image forming apparatus 21 a is rewritten to the IP address of the image forming apparatus 10. In addition, the notification unit 206 transmits, for example, a message such as “MFP-A (image forming apparatus 21a) cannot execute the job because MFP-B (image forming apparatus 21a) is unavailable” to the user terminal 20a. May be. In addition, when the image forming apparatus 21a is not available, the notification unit 206 changes the security level of the profile corresponding to the second communication interface 108b to the user terminal 20b connected to the image forming apparatus 10 over the network. May be notified. Thereby, for example, the user of the user terminal 20b can recognize that the printing process is restricted because the security level is increased.

  The alternative operation unit 207 (operation unit) displays the first security level (see FIG. 4) and the second security level (see FIG. 6) changed by the security level changing unit 204 when the image forming apparatus 21a is not available. The image forming apparatus 21a performs an alternative operation based on For example, when print job data is input (stored) from the user terminal 20a to the image forming apparatus 21a after the image forming apparatus 21a has failed, the image forming apparatus 10 receives the first communication interface 108a from the user terminal 20a. The print job data is acquired and stored via the first, and the operation is executed according to the profile corresponding to the first communication interface 108a (see FIG. 4) and the profile corresponding to the second communication interface 108b (see FIG. 6). Specifically, for example, when the print job data stored in the data storage unit 106 is accessed from the user terminal 20b via the second communication interface 108b (for example, a transfer request for the print job data), The alternative operation unit 207 prohibits the transfer of the print job data (denies the transfer request) according to the profile (see FIG. 6) corresponding to the second communication interface 108b. As a result, it is possible to prevent the data input via the first communication interface 108a from leaking to the outside via the second communication interface 108b. Further, for example, the print job data stored in the data storage unit 106 is accessed via a first communication interface 108a from a user terminal (not shown) connected to the first communication network 30a (for example, the print job described above). When the data transfer request is made, the alternative operation unit 207 prohibits the transfer of the print job data (denies the transfer request) according to the profile (see FIG. 4) corresponding to the first communication interface 108a.

  Here, when the image forming apparatus 21a returns from the unusable state to the usable state, the security level changing unit 204 returns the changed security level to the original value, and the address rewriting unit 205 rewrites it. Restore the IP address. Thus, when print job data is input from the user terminal 20a to the image forming apparatus 21a, the job is executed in the image forming apparatus 21a. When the image forming apparatus 21a is restored, the notification unit 206 notifies the user terminals 20a and 20b that the image forming apparatus 21a has been restored and returned the changed security level to the original value. You may be notified.

  FIG. 9 is an operation flowchart of the image forming apparatus 10. Here, an example of data transfer processing of the image forming apparatus 10 will be described.

  First, the availability determination unit 202 determines whether the image forming apparatus 21a is in a usable state (S101). When the image forming apparatus 21a is in a usable state (when normal), the above determination process is repeated, and when the image forming apparatus 21a is not in a usable state (when an abnormality occurs), the process proceeds to S102.

  In S102, the security level comparison unit 203 uses the first security level (see FIG. 4) of the profile set in advance corresponding to the first communication interface 108a and the profile set in advance corresponding to the second communication interface 108b. To the second security level (see FIG. 5).

  Next, when the security level changing unit 204 differs between the first security level of the first communication interface 108a connected to the image forming apparatus 21a and the second security level of the second communication interface 108b (YES in S103). The second security level is changed to the same value as the first security level (S104).

  Next, the address rewriting unit 205 uses the IP address (“129.249.1.2”) of the image forming apparatus 21 a registered in the DNS server 22 a as the IP address (“129.249”) of the image forming apparatus 10. 1.1 ”) (see FIG. 8) (S105). Next, the notification unit 206 notifies the user terminal 20a connected to the image forming apparatus 21a over the network that the image forming apparatus 10 performs an alternative operation of the image forming apparatus 21a (S106).

  Next, the substitute operation unit 207 performs the substitute operation of the image forming apparatus 21a based on the first security level (see FIG. 4) and the second security level changed by the security level changing unit 204 (see FIG. 6). (S107). For example, when a transfer request is received from the user terminal 20b via the second communication interface 108b for the print job data input via the first communication interface 108a stored in the data storage unit 106, an alternative The operation unit 207 prohibits transfer of the print job data.

  In S103, when the first security level and the second security level are the same (NO in S103), the process proceeds to S105.

  According to the above-described configuration of the image forming apparatus 10, during a normal time (normal time), the security policy (profile shown in FIG. 5) of the second communication interface 108b with respect to the user terminal 20b connected to the second communication network 30b. By providing a service conforming to the above, it is possible to provide a service with an appropriate security level and availability to the user of the user terminal 20b. In an emergency (abnormal), the user of the user terminal 20a connected to the first communication network 30a and the second communication network 30b without lowering the security level for the user terminal 20a connected to the first communication network 30a. Service can be appropriately provided to the user of the user terminal 20b connected to the. Further, it is possible to provide a service in a timely manner without causing the user of the user terminal 20a to wait until the image forming apparatus 21a returns from the abnormal state.

  Here, when the image forming apparatus 21a is not usable, the security level changing unit 204 may change “execution control”, which is an item related to the specification of the first communication interface 108a, to “priority”. Thereby, for example, when a print job of the first print queue input via the first communication interface 108a and a print job of the second print queue input via the second communication interface 108b are accumulated, The print job in the first print queue is preferentially executed, and after the first print queue becomes empty, the print job in the second print queue is executed. Therefore, it is possible to preferentially execute a job submitted by a user who intends to use the abnormal image forming apparatus 21a.

  In addition to the profile corresponding to the first communication interface 108a and the profile corresponding to the second communication interface 108b, the security level comparison unit 203 corresponds to an image forming apparatus (here, the image forming apparatus 21a) that is substituted in the event of an abnormality. The security levels of a plurality of profiles including the profile may be compared with each other. Further, the security level changing unit 204 may change all security levels to the same value as the highest security level. For example, when the security level (third security level) of the profile corresponding to the image forming apparatus 21a is the highest, the security level changing unit 204 includes the first security level of the profile corresponding to the first communication interface 108a and the second security level. The second security level of the profile corresponding to the communication interface 108b is changed to the same value as the third security level. The profile corresponding to the image forming apparatus 21a may be transferred to the profile DB 401 and stored (held).

  When the image forming apparatus 21a is in a usable state (normal time), the image forming apparatus 10 may be configured not to be recognized from the user terminal 20a connected to the first communication interface 108a. Specifically, when the image forming apparatus 21a is in a normal state, for example, by setting the network card corresponding to the first communication network 30a to OFF so as not to link up on the network, the user The image forming apparatus 10 may not be recognized from the terminal 20a. Thereby, the user of the user terminal 20a can be prevented from causing confusion in practice.

  In the above description, an alternative operation of the image forming apparatus 10 when the image forming apparatus 21a connected to the communication network with the higher security level (the first communication network 30a in the above example) becomes unavailable is described. However, the image forming apparatus 10 of the present embodiment is not limited to this. For example, in the configuration shown in FIG. 10, when the image forming apparatus 21b connected to the communication network (second communication network 30b) with the lower security level becomes unavailable, the image forming apparatus 10 The alternative operation is executed as follows.

  That is, the security level changing unit 204, when the image forming apparatus 21b is not usable, the security level (first security level) of the second communication interface 108b to which the image forming apparatus 21b is connected and the first communication interface. If the security level 108a (second security level) is different, the second security level is changed to the same value as the first security level. For example, in the example shown in FIGS. 4 and 5, the second security level (see FIG. 4) and the first security level (see FIG. 5) are different, so the security level changing unit 204 is as shown in FIG. In addition, for the items relating to security, the second security level is changed to the same value as the first security level. In the present specification, the security level of the communication interface (abnormal side) to which an image forming apparatus that is not in an available state (substitute image forming apparatus) is connected is referred to as “first security level”, and other devices A security level of a communication interface (normal side) to which (for example, a user terminal) is connected is represented as a “second security level”.

  The address rewriting unit 205 rewrites the IP address of the image forming apparatus 21 b registered in the DNS server 22 b with the IP address of the image forming apparatus 10 when the image forming apparatus 21 b is not available.

  Further, for example, when the print job data is input (stored) from the user terminal 20b to the image forming apparatus 21b after the image forming apparatus 21b fails, the alternative operation unit 207 determines that the image forming apparatus 10 The print job data is acquired and saved from 20b through the second communication interface 108b, and the profile corresponding to the second communication interface 108b (see FIG. 5) and the profile corresponding to the first communication interface 108a (see FIG. 11). Execute the operation according to Specifically, for example, when the print job data stored in the data storage unit 106 is accessed from the user terminal 20a via the first communication interface 108a (for example, a transfer request for the print job data), The alternative operation unit 207 permits the transfer of the print job data according to the profile (see FIG. 11) corresponding to the first communication interface 108a.

  As described above, according to the image forming apparatus 10 according to the present embodiment, even when the other image forming apparatus cannot be used, the quality of service (processing time and processing content) for the job instructed by the user is reduced. The substitute operation can be appropriately executed without any problem. For example, when highly confidential print job data is transmitted to a faulty image forming apparatus, the print job data received by the image forming apparatus 10 performing the substitute operation is leaked to the outside via a publicly available communication network. Can reduce the risk. Further, for example, when print job data with low confidentiality that can be shared by a plurality of users is transmitted to a failed image forming apparatus, the print job data received by the image forming apparatus 10 that performs the substitute operation is transmitted via the communication network. Therefore, there is no risk that convenience will be lost.

  100 image forming system, 10 image forming apparatus, 20a user terminal, 20b user terminal, 21a image forming apparatus, 21b image forming apparatus, 22a DNS server, 22b DNS server, 30a first communication network, 30b second communication network, 101 control Unit, 102 display unit, 103 input unit, 104 storage unit, 105 reading unit, 106 data storage unit, 107 output unit, 108 communication unit, 108a first communication interface, 108b second communication interface, 201 data acquisition unit, 202 use Availability determination unit, 203 security level comparison unit, 204 security level change unit, 205 address rewrite unit, 206 notification unit, 207 alternative operation unit, 401 profile DB.

Claims (10)

An image forming apparatus having a plurality of communication interfaces individually connected to each of a plurality of communication networks, and having another image forming apparatus connected to the communication interface via a network,
Determination means for determining whether or not the other image forming apparatus is available;
A comparison unit that compares a security level set in advance corresponding to each of the plurality of communication interfaces when the other image forming apparatus is not available;
When the other image forming apparatus is not available, the first security level of the first communication interface to which the other image forming apparatus is connected and the second security interface of the second communication interface to which other devices are connected. If the security level is different, changing means for changing the second security level to the same value as the first security level;
When the other image forming apparatus is not in a usable state, an alternative operation of the other image forming apparatus is performed based on the first security level and the second security level changed by the changing unit. Means of operation;
An image forming apparatus comprising: When the second security level is lower than the first security level when the other image forming apparatus is not available, the changing unit sets the second security level to the same value as the first security level. Change to
The image forming apparatus according to claim 1. If the other image forming apparatus is not in a usable state, the image forming apparatus further includes a rewriting unit that rewrites the IP address of the other image forming apparatus registered in the server with the IP address of the own apparatus.
The image forming apparatus according to claim 1. When the other image forming apparatus is not in a usable state, a notification unit that notifies the user terminal connected to the other image forming apparatus via a network that the own apparatus performs an alternative operation of the other image forming apparatus Further including
The image forming apparatus according to claim 1. The operation means performs an operation on a plurality of data input via the first communication interface or the second communication interface in the order in which the data is input.
The image forming apparatus according to claim 1. The operation means executes an operation on data input through the first communication interface in preference to an operation on data input through the second communication interface.
The image forming apparatus according to claim 1. The comparing means includes a plurality of security levels including a security level preset corresponding to each of the plurality of communication interfaces and a security level preset corresponding to the other image forming apparatus. Compare and
The changing means changes all security levels to the same value as the highest security level.
The image forming apparatus according to claim 1. The changing unit returns the changed security level to the original value when the other image forming apparatus returns from an unusable state to an usable state.
The image forming apparatus according to claim 1. When the other image forming apparatus is in a usable state, the apparatus is configured so that the apparatus cannot be recognized from a device connected to the first communication interface.
The image forming apparatus according to claim 1. A computer including a plurality of communication interfaces individually connected to each of a plurality of communication networks, and another image forming apparatus connected to the communication interface via a network.
Determination means for determining whether or not the other image forming apparatus is in a usable state;
A comparison unit that compares a security level set in advance corresponding to each of the plurality of communication interfaces when the other image forming apparatus is not available;
When the other image forming apparatus is not available, the first security level of the first communication interface to which the other image forming apparatus is connected and the second security interface of the second communication interface to which other devices are connected. If the security level is different, a changing means for changing the second security level to the same value as the first security level; and
When the other image forming apparatus is not in a usable state, an alternative operation of the other image forming apparatus is performed based on the first security level and the second security level changed by the changing unit. Means of operation,
Program to function as.

Images