JP2019022171A - Communication control device and communication line system - Google Patents

Abstract

To provide a communication control device and a communication line system, capable of suppressing information leakage in comparison with a case when determination means does not determine whether or not a communication line intended to be used is available, using user information of a user intending to use.SOLUTION: A communication control device 10 includes: storage means 18, which is connected to a plurality of independent communication lines 60, 70 through which communication is performed, and in which user information is stored user-by-user; and determination means 14 which determines, from user information of a user which intends to use, whether or not each communication line 60, 70 intended to be used is available.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a communication control device and a communication line system.

  As an invention for selecting one network interface from a plurality of network interfaces, for example, Patent Document 1 listed below determines whether a plurality of communication interfaces or the plurality of communication interfaces can communicate with an information processing apparatus. And an image forming apparatus including: selecting means for selecting any one of the plurality of communication interfaces as a communication interface for communicating with the information processing apparatus based on a determination result of the determination means. An apparatus is disclosed.

JP 2014-220607 A

  When operating by connecting to a plurality of independent networks, there is a problem that an inappropriate network interface with high confidentiality is used.

  The present invention provides a communication control capable of suppressing information leakage compared with a case where the determination means does not determine whether or not the communication line to be used is usable with the user information of the user to be used. An object is to provide an apparatus and a communication line system.

  The present invention according to claim 1 is connected to a plurality of independent communication lines through which communication is performed, and storing means for storing user information for each user and the user information of the user who intends to use the user. Determining means for determining whether or not the communication line to be used is usable.

  According to a second aspect of the present invention, in the first aspect, the plurality of communication lines have different predetermined security levels, and have communication line connection means connected to the communication lines having different security levels. It is a communication control apparatus of description. The security level is a degree that can be handled with respect to the user, information, operation, and the like.

  According to a third aspect of the present invention, the user information is stored in association with user identification information set for each user and the communication line usable for each user identification information. The communication control device according to claim 1 or 2.

  In the present invention according to claim 4, the user information is connected to the user identification information set for each user, the communication line usable for each user identification information, and the communication line. The communication control device according to claim 2, wherein the communication line connection unit is stored in association with each other.

  In the present invention according to claim 5, the determination means can use the communication line connection means connected to the communication line to be used by the user with the user identification information of the user to be used. It is a communication control apparatus of Claim 4 which determines whether it is.

  According to a sixth aspect of the present invention, in the communication according to any one of the first to fifth aspects, the communication line that can be used by the user is displayed on a display unit according to the user information of the user who intends to use the communication. It is a control device.

  In the present invention according to claim 7, the determination means determines whether or not the information to be transmitted to the communication line by the user to be used can be transmitted by the user information of the user to be used. It is a communication control apparatus in any one of Claims 1-6 to determine.

  The present invention according to claim 8 is used based on a plurality of independent communication lines through which communication is performed, storage means storing user information for each user, and the user information of the user who intends to use the user. A communication control system including: a determination unit that determines whether or not the communication line to be used is usable; and a terminal device connected from the communication control apparatus via the communication line. is there.

  According to the first aspect of the present invention, the determination means leaks information compared to a case where it is not determined whether or not the communication line to be used is usable based on the user information of the user to be used. Can be suppressed.

  According to the second aspect of the present invention, in addition to the effect of the present invention according to the first aspect, it is possible to suppress leakage of information according to communication lines having different security levels.

  According to the third aspect of the present invention, in addition to the effect of the present invention according to the first or second aspect, the determination is performed as compared with the case where the user identification information and the communication line are not stored in association with each other. It becomes easy.

  According to the present invention of claim 4, in addition to the effect of the present invention of claim 2, compared to the case where the user identification information, the communication line and the communication line connection means are not stored in association with each other, It becomes easier to make a judgment.

  According to the fifth aspect of the present invention, in addition to the effect of the present invention according to the fourth aspect, the usable communication line is determined by comparing with a case where it is not determined by whether or not the communication line connecting means is usable. can do.

  According to this invention concerning Claim 6, in addition to the effect of this invention concerning any one of Claims 1-5, compared with the case where a usable communication line is not displayed on a display means, it is a usable communication line. Can be easily determined visually.

  According to the present invention of claim 7, in addition to the effect of the present invention of any one of claims 1 to 6, compared to the case where it is not determined whether or not the information to be transmitted to the communication line can be transmitted. , Information leakage can be suppressed.

  According to the present invention of claim 8, in the determination means, compared with the case where it is not determined whether or not the communication line to be used is usable based on the user information of the user to be used. Leakage can be suppressed.

FIG. 1 is a schematic diagram showing a configuration of a network system including an image forming apparatus according to Embodiment 1 of the present invention. FIG. 2 is a schematic diagram illustrating a hardware configuration of the image forming apparatus according to the first embodiment. 3A and 3B are diagrams illustrating information stored in the storage unit according to the first embodiment. FIG. 4 is a flowchart showing the operation of the image forming apparatus common to the first to third embodiments. 5A and 5B are diagrams illustrating screens displayed on the display unit according to the first embodiment. FIG. 6 is a diagram illustrating information stored in the storage unit according to the second embodiment. 7A and 7B are diagrams illustrating screens displayed on the display unit according to the second embodiment. FIG. 8 is a schematic diagram illustrating a configuration of a network system including the image forming apparatus according to the third embodiment. FIG. 9 is a schematic diagram illustrating a hardware configuration of the image forming apparatus according to the third embodiment. 10A and 10B are diagrams illustrating information stored in the storage unit according to the third embodiment.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the embodiment shown below exemplifies a communication control device and a communication line system for embodying the technical idea of the present invention, and is not intended to specify the present invention. Other embodiments that fall within the scope of the claims are equally applicable.

[Embodiment 1]
First, a network system 50 as a communication line system including a communication control apparatus according to the first embodiment will be described with reference to FIGS. The image forming apparatus 10 will be described as an example of the communication control apparatus according to the first embodiment.

  As shown in FIG. 1, the network system 50 according to the first embodiment includes an image forming apparatus 10 and a plurality of terminal devices 40. The image forming apparatus 10 and each terminal device 40 are configured as a plurality of communication lines. And in the first embodiment, the first network 60 as the first communication line and the second network 70 as the second communication line are connected to each other. At this time, the image forming apparatus 10 is connected to a first network interface 26 (hereinafter referred to as a first NIC 26) as a first communication line connection unit connected to the first network 60 and a second network 70 connected to the second network 70. 2 has a second network interface 28 (hereinafter referred to as a second NIC 28) as communication line connection means.

  In FIG. 1, at least one provided in the first network 60, in the first embodiment, two terminal devices are the terminal devices 40 a, and at least one provided in the second network 70, two in the first embodiment. The terminal device is a terminal device 40b. Note that the terminal devices 40a and 40b may be collectively referred to as the terminal device 40.

  The terminal device 40 performs data communication with the image forming apparatus 10 via the first network 60 or the second network 70 based on a user operation. Accordingly, the terminal device 40 generates, for example, print data and transmits it to the image forming apparatus 10 or receives image data read by the image forming apparatus 10 in response to a user operation. Or

  The first network 60 and the second network 70 are independent of each other. For example, a network is constructed for each user and data to be handled.

  In the first embodiment, the first network 60 is a network for confidential data, and handles confidential data related to specific work such as personal information and customer information.

  The second network 70 is, for example, an intranet, and is used when a limited user performs authentication, and the connected devices are permitted in advance and are permanently connected. In the first embodiment, the second network 70 is also connected to the Internet via the router 42.

  At this time, the first network 60, which is a confidential data network, is used by a limited user authenticating more than the second network 70, which is an intra network, and the connected devices are also limited. Therefore, the security level of the first network 60 is higher than that of the second network 70. Here, the security level is a degree of handling with respect to the user, information, operation, and the like.

  The image forming apparatus 10 receives the print data transmitted from the terminal device 40, executes various image processes as an image processing apparatus, and outputs an image corresponding to the print data on a sheet. The image forming apparatus 10 is a so-called multi-function machine having functions such as a print function, a scan function, a copy function, and a facsimile function.

  As shown in FIG. 2, the hardware configuration of the image forming apparatus 10 includes a control unit 12, a display unit 16, a storage unit 18, an image reading unit 22, an image forming unit 24, a first NIC 26, a second NIC 28, and the like. ing.

  The control unit 12 includes a CPU (Central Processing Unit), and executes various processes and controls each device of the image forming apparatus 10 based on a program stored in the storage unit 18.

  The control means 12 is provided with a determination means 14. The determination unit 14 uses either the first network 60 or the second network 70 by a user who uses the image forming apparatus 10 based on user information for each user stored in the storage unit 18 described later. It is determined whether it is possible.

  Further, when the determination unit 14 determines that the user can use the first network 60 or the second network 70 that the user who operates the image forming apparatus 10 intends to use, the operation of the image forming apparatus 10 is performed as it is. Is executed, and when it is determined that the device cannot be used, a notification that the device cannot be used is displayed, for example, on a display unit.

  The display means 16 is composed of a display device such as a liquid crystal display, and displays the results of information processing by the control means 12. In addition, the display unit 16 may include an input device such as a touch panel and button keys, and may have a function as a user interface (UI) that allows a user to perform an operation input.

  The storage means 18 is composed of an information recording medium such as a ROM (Read Only Memory), a RAM (Random Access Memory), an HDD (Hard Disk Drive), and the like, and an information recording medium for holding a program executed by the control means 12. It is. The storage unit 18 also operates as a work memory of the control unit 12, for example. Further, various data such as document data and image data transmitted from the terminal device 40 to the image forming apparatus 10 via the first network 60 or the second network 70, image data read by the image reading unit 22, and the like. Saved.

  The storage unit 18 stores user information as user information. Examples of the user information include user identification information (user ID) as user identification information given to each user, affiliation network information to which each user belongs (see FIG. 3A).

  As shown in FIG. 3A, the user information includes user identification information (user ID) set for each user, a belonging network, and usable network interface attributes as a database.

  For example, a user whose user ID is “sc11111” is a first network whose belonging network is a confidential data network, the first NIC 26 is used, and a user whose user ID is “in31111” It is a second network that is an intra network, and the second NIC 28 is used.

  Further, the user information management means 20 is provided in the storage means 18, and the user identification information of the user and the belonging network information are managed in association with each other (see FIG. 3B). That is, when the belonging network is the first network that is a confidential data network, the first NIC 26 is usable (O) and the second NIC 28 is unusable (x), while the belonging network is an intra network. In the case of the second network, the first NIC 26 is unusable (x), and the second NIC 28 is usable (O).

  The image reading unit 22 is configured by a scanner or the like. The image reading means 22 optically scans an object such as a paper medium to read information on the object as, for example, image information (image data).

  The image forming unit 24 includes a printing unit for forming an image on a medium such as paper. For example, when the user performs a print instruction operation, image data or the like is printed (output) on a paper medium based on the processing of the control unit 12.

  The first NIC 26 is connected to the first network 60, and the second NIC 28 is connected to the second network.

  Next, the operation of the image forming apparatus 10 as the network system 50 according to the first embodiment will be described with reference to FIGS. As an operation at this time, a case where an original is read by the image reading unit 22 of the image forming apparatus 10 and an operation of transferring the read data to the terminal device 40 will be described.

  First, the user logs in to the image forming apparatus 10 (step 01). By this login, the user information of the user is acquired from the storage unit 18 of the image forming apparatus 10. The user information acquired at this time is, for example, information on the network to which the user belongs and the usable NIC corresponding to the user identification information (user ID) of the user.

  Next, from the acquired user information, the determination unit 14 of the control unit 12 determines the user's affiliation network (step 02), and then determines the NIC that can use the determined affiliation network (step 03). ).

  Thereafter, when the user performs an operation for causing the image reading unit 22 of the image forming apparatus 10 to read the original, an operation for transmitting the read data from the image forming apparatus 10 to the terminal device 40 is accepted (step 04).

  At this time, the control unit 12 of the image forming apparatus 10 determines whether or not the user can use the operation of transmitting this data (step 05). That is, it is determined whether the network to which the terminal device 40 to which the user transmits data can be used with the user ID of the user.

  If it is usable (Y in Step 05), the data is transferred to the network to which it belongs, and the terminal device 40 receives it (Step 06), and the operation ends.

  On the other hand, if it cannot be used (N in Step 05), the display unit 16 of the image forming apparatus 10 displays a message indicating that operation is not possible (Step 07), and the operation ends. The series of operations of the image forming apparatus according to the first embodiment is as described above.

  Here, as a specific case, a case where a user whose user ID is “sc11111” uses the image forming apparatus 10 will be described.

  First, the user logs in to the image forming apparatus 10 (step 01). At this time, “sc11111” that is the user ID of the user is input, and various types of user information are acquired from the storage unit 18 of the image forming apparatus 10.

  Based on the user information, it is determined that the network to which the user with the user ID “sc11111” belongs is the first network 60 that is a confidential data network and is connected to the image forming apparatus 10 via the first NIC 26. 14 (step 02).

  Further, from the user information, it is determined by the determination means 14 that the user who uses the first network 60 can use the first NIC 26 and cannot use the second NIC 28 (step 03).

  Next, when the user causes the image reading unit 22 of the image forming apparatus 10 to read the original, an operation for transmitting the read data from the image forming apparatus 10 to the terminal device 40 is accepted (step 04).

  At this time, when the user transfers data from the image forming apparatus 10 to the terminal device 40a belonging to the first network 60 (Y in Step 05), the determination unit 14 determines that the data can be used, and the image forming apparatus 10 The data is transmitted from the first NIC 26 to the terminal device 40a using the first network 60 (step 06), and the operation ends.

  On the other hand, when the user transfers data from the image forming apparatus 10 to the terminal device 40b belonging to the second network 70 (N in Step 05), the determination unit 14 determines that the data cannot be used, and the image forming apparatus 10 The display means 16 displays that the data cannot be transmitted (step 07), and the operation ends.

  Next, as a specific example, a case where a user with a user ID “in31111” uses the image forming apparatus 10 will be described.

  First, the user logs in to the image forming apparatus 10 (step 01). At this time, “in31111” that is the user ID of the user is input, and various types of user information are acquired from the storage unit 18 of the image forming apparatus 10.

  Then, from the user information, it is determined that the network to which the user with the user ID “in31111” belongs is the second network 70 that is an intra network, and is connected to the image forming apparatus 10 by the second NIC 28 (step). 02).

  Further, it is determined from the user information that the user who uses the second network can use the second NIC 28 and cannot use the first NIC 26 (step 03).

  Next, when the user causes the image reading unit 22 of the image forming apparatus 10 to read the original, an operation for transmitting the read data from the image forming apparatus 10 to the terminal device 40 is accepted (step 04).

  At this time, when the user transfers data from the image forming apparatus 10 to the terminal device 40b belonging to the second network 70 (Y in step 05), the determination unit 14 determines that the data can be used, and the image forming apparatus 10 The data is transmitted from the second NIC 28 to the terminal device 40b using the second network 70 (step 06), and the operation ends.

  On the other hand, when the user transfers data from the image forming apparatus 10 to the terminal device 40a belonging to the first network 60 (N in Step 05), the determination unit 14 determines that the data cannot be used, and the image forming apparatus 10 The display means 16 displays that the data cannot be transmitted (step 07), and the operation ends.

  As described above, in the image forming apparatus 10 according to the first embodiment, transmission of document data instructed by a user belonging to the “first network (sensitive data network)” is performed only on the “first network”. In the case of a user belonging to the “second network (intra network)”, it is possible to perform only on the “second network”, so that confidential information is protected. Can do.

  In the display unit 16 of the image forming apparatus 10, as shown in FIGS. 5A and 5B, based on the user information, only the NIC that can be transferred by the user is displayed in a different color, or the designation is not possible. You may make it.

  That is, when the user ID of the user is “sc11111”, for example, in the “Transfer network” column of the display means 16, the color is displayed so that the confidential data network (first network) can be used. The intra network (second network) can also be displayed as “undesignated (unusable)”.

  Further, when the user ID of the user is “in31111”, for example, in the “transfer network” column of the display means 16, it is displayed so that the intra network (second network) can be used, and the confidential data network ( The first network) can be displayed as “undesignated (unusable)” (not shown).

[Embodiment 2]
Next, a network system 50A including the image forming apparatus 10A according to the second embodiment will be described. In the second embodiment, a part of the user information managed by the user information management unit 20A of the storage unit 18A is different, and the determination method of the determination unit 14A using this user information is different from the first embodiment. Since other configurations are the same as those in the first embodiment, the same configurations are denoted by the same reference numerals, and detailed description thereof is omitted.

  In the user information management unit 20A provided in the storage unit 18A of the second embodiment, the user identification information of the user and the belonging network information are managed in association with each other as in the user information management unit 20 of the first embodiment. (See FIG. 6). At this time, when the belonging network is the first network that is a confidential data network, the first NIC 26 can be used (O), and the second NIC 28 cannot be used (X). . On the other hand, when the belonging network is a second network that is an intra network, the first NIC 26 is unusable (x), but the second NIC 28 changes whether or not it can be used depending on the type of data transmission function (Δ). It is like that.

  The type of data transmission at this time is, for example, operable when a document read by the user is transmitted as it is, and is stored in the storage unit 18A of the image forming apparatus 10A, that is, read in the past. Transmission of document data, data received from the outside such as a network or a facsimile, etc. can be disabled. Note that the type of data transmission may be arbitrarily set.

  Whether or not this operation is possible is determined by the determination unit 14A of the control unit 12 of the image forming apparatus 10A.

  Next, the operation of the image forming apparatus 10A as the network system 50A according to the second embodiment will be described with reference to FIGS. As an operation at this time, a case where an original is read by the image reading unit 22 of the image forming apparatus 10A and an operation of transferring the read data to the terminal device 40 via the network will be described.

  As an explanation of the operation, a case where a user with a user ID “in31111” uses the image forming apparatus 10A will be described. Note that the case where the user ID of the user is “sc11111” is the same as the case where the user ID of the user is “sc11111” in the first embodiment, and thus the description thereof is omitted.

  First, the user logs in to the image forming apparatus 10A (step 01). At this time, “in31111” which is the user ID of the user is input, and various types of user information are acquired from the storage unit 18A of the image forming apparatus 10A.

  Based on the user information, the determination unit 14A determines that the network to which the user with the user ID “in31111” belongs is the second network 70 which is an intra network and is connected to the image forming apparatus 10A by the second NIC 28. (Step 02).

  Further, based on the user information, the determination unit 14A determines that the user using the second network 70 can use the second NIC 28 and cannot use the first NIC 26 (step 03).

  Next, when the user causes the image reading unit 22 of the image forming apparatus 10A to read the original, an operation for transmitting the read data from the image forming apparatus 10A to the terminal device 40 is accepted (step 04).

  At this time, when the user transfers data from the image forming apparatus 10A to the terminal device 40b belonging to the second network 70 and transmits the read data as it is (Y in step 05), the determination unit 14A. The image forming apparatus 10A transmits data from the second NIC 28 to the terminal apparatus 40 using the second network 70 (step 06), and the operation ends.

  On the other hand, when the user transfers data from the image forming apparatus 10A to the terminal device 40a belonging to the first network 60, and when the user transfers data from the image forming apparatus 10A to the second network 70 Even when the data is transferred to 40b, when data other than the read data, for example, data stored in the image forming apparatus 10A is transmitted (N in Step 05), the determination unit 14A determines that the data cannot be used, and the image forming apparatus 10A. Displays on the display means 16 that data cannot be transmitted (step 07), and the operation ends.

  As described above, in the image forming apparatus 10A according to the second embodiment, transmission of document data instructed by a user other than the user of the second network (intra network), that is, the user belonging to the first network (sensitive data network) is performed. This can be limited to the original document read by the user (that is, the document whose contents can be easily grasped), and the leakage of confidential data can be prevented.

  In the display unit 16 of the image forming apparatus 10A, as shown in FIGS. 7A and 7B, based on the user information, only files that can be transmitted (selectable) by the user are displayed in different colors. You may make it display that designation | designated is impossible.

  That is, when the user ID of the user is “in31111”, for example, in the “transfer file” column of the display unit 16, the transferable transfer file is data read by a scanner (image reading unit). It is also possible to display that the color is changed and the data in the box stored in the image forming apparatus 10A cannot be specified (cannot be transmitted).

  In the transfer network column, the available networks are displayed in the same manner as in the first embodiment.

[Embodiment 3]
Next, the image forming apparatus 10B that constitutes the network system 50B according to the third embodiment will be described with reference to FIGS. The image forming apparatus 10B according to the third embodiment is connected to a third network 80 as a third communication line in addition to the first network 60 and the second network 70 according to the first and second embodiments. A third network interface 30 (hereinafter referred to as a third NIC 30) is provided as third communication line connection means connected to the. In addition, about the structure which is common in Embodiment 1 and Embodiment 2, the same code | symbol is attached | subjected and detailed description is abbreviate | omitted.

  The image forming apparatus 10B according to the third embodiment is provided with a third NIC 30 in addition to the configuration of the image forming apparatus 10 according to the first embodiment. The third NIC 30 is connected to the third network 80 (see FIG. 9). The third network 80 is provided with at least one terminal device 40c in the third embodiment (see FIG. 8). The terminal devices 40a, 40b, and 40c may be collectively referred to as the terminal device 40.

  Here, the third network 80 can be, for example, a temporary use network, which is not constantly managed by the network administrator, and is temporarily connected to a mobile device that is prohibited from connecting to an intra network. It is a network connected to. Note that the third network 80 is also independent as in the first network 60 and the second network 70.

  When the third network 80 as such a temporary use network is used, the user does not require authentication (login or the like) to the image forming apparatus 10B, and for example, the user ID is handled as “guest”.

  Therefore, the security level of the third network 80 is lower than that of the second network 70 (intra network).

  At this time, when an unauthenticated user uses the image forming apparatus 10B, the user information in the storage unit 18 of the image forming apparatus 10B has “guest” added to the user ID as shown in FIG. As the network to which the user with ID “guest” belongs, the third network is used, and the third NIC 30 is used.

  Further, in the user information management unit 20B provided in the storage unit 18B of the image forming apparatus 10B of Embodiment 3, the user identification information of the user and the belonging network information are managed in association with each other (FIG. 10B). reference). That is, when the belonging network is the first network 60, the first NIC 26 is usable (O), and the second NIC 28 and the third NIC are unusable (X). Further, when the belonging network is the second network 70, the first NIC 26 is unusable (x), and whether the second NIC 28 and the third NIC 30 can be used is changed (Δ) depending on the type of data transmission function. It has become. Further, when the belonging network is the third network 80, the first NIC 26 and the second NIC 28 are unusable (x), and whether the third NIC 30 can be used is changed (Δ) depending on the type of data transmission function. It has become.

  At this time, in the third embodiment, the user of the second network 70 can use the third network 80 having a lower security level than the second network 70. However, the second network 70 is not limited to this. Can also disable the third network 80.

  Here, with reference to FIGS. 4 and 8 to 10, the operation of the image forming apparatus 10 </ b> B as the network system 50 </ b> B of the third embodiment will be described. As an operation at this time, a case where an original is read by the image reading unit 22 of the image forming apparatus 10B and an operation of transferring the read data to the terminal device 40 via the network will be described.

  First, as an operation description, a case where a user with a user ID “in31111” uses the image forming apparatus 10B will be described. Note that the case where the user ID of the user is “sc11111” is the same as the case where the user ID of the user is “sc11111” in the first embodiment, and thus the description thereof is omitted.

  First, the user logs in to the image forming apparatus 10B (step 01). At this time, “in31111” that is the user ID of the user is input, and various types of user information are acquired from the storage unit 18B of the image forming apparatus 10B.

  Based on the user information, it is determined that the network to which the user whose user ID is “in31111” belongs is the second network 70 that is an intra network, and is connected to the image forming apparatus 10B by the second NIC 28 or the third NIC 30. 14B (step 02).

  Further, from the user information, the determination unit 14B determines that the user who uses the second network 70 or the third network 80 can use the second NIC 28 or the third NIC 30 and cannot use the first NIC 26. (Step 03).

  Next, when the user causes the image reading unit 22 of the image forming apparatus 10B to read the original, an operation for transmitting the read data from the image forming apparatus 10B to the terminal device 40 is accepted (step 04).

  At this time, when the user transfers data from the image forming apparatus 10B to the terminal device 40b belonging to the second network 70 or the terminal device 40c belonging to the third network 80, the read data is transmitted as it is. If it is determined (Y in Step 05), the determination unit 14B determines that the data can be used, and the image forming apparatus 10B uses the second network 28 or the third network 80 to transmit the data from the second NIC 28 or the third NIC 30 to the terminal device 40b or It transmits to the terminal device 40c (step 06), and operation | movement is complete | finished. Note that when data is transmitted, the control means 12 may select which of the second network 70 and the third network 80 is used in consideration of user information, etc. You may make it select from 16.

  On the other hand, when the user transfers data from the image forming apparatus 10B to the terminal device 40a belonging to the first network 60, and when the user transfers data from the image forming apparatus 10B to the second network 70 Even when transferring to the terminal device 40c belonging to 40b or the third network 80, when the data accumulated in the image forming apparatus 10B other than the read data is transmitted (N in Step 05), the determination unit 14B determines that the data cannot be used, and the image forming apparatus 10B displays that the data cannot be transmitted on the display unit 16 (step 07), and the operation ends.

  Next, as a specific example, a case where a user whose user ID is “guest” uses the image forming apparatus 10B will be described.

  First, the user logs in to the image forming apparatus 10B (step 01). At this time, “guest”, which is the user ID of the user, is input, and various types of user information are acquired from the storage unit 18 of the image forming apparatus 10B.

  From the user information, it is determined that the network to which the user whose user ID is “guest” belongs is the third network 80 which is a temporary use network and is connected to the image forming apparatus 10B by the third NIC 30 ( Step 02).

  Further, it is determined from the user information that the user using the third network 80 can use the third NIC 30 and cannot use the first NIC 26 and the second NIC 28 (step 03).

  Next, when the user causes the image reading unit 22 of the image forming apparatus 10B to read the original, an operation for transmitting the read data from the image forming apparatus 10B to the terminal device 40 is accepted (step 04).

  At this time, when the user transfers the data from the image forming apparatus 10B to the terminal device 40c belonging to the third network 80 and transmits the read data as it is (Y in step 05), the determination unit 14B. The image forming apparatus 10B transmits data from the third NIC 30 to the terminal device 40c using the third network 80 (step 06), and the operation ends.

  On the other hand, when the user transfers data from the image forming apparatus 10B to the terminal device 40a belonging to the first network 60 or the terminal device 40b belonging to the second network 70, and the user transfers the data to the image forming apparatus. Even when data is transferred from 10B to the terminal device 40c belonging to the third network 80, when data other than the read data, for example, data stored in the image forming apparatus 10B is transmitted (N in Step 05), determination means 14B determines that the data cannot be used, and the image forming apparatus 10B displays that the data cannot be transmitted on the display unit 16 (step 07), and the operation ends.

  As described above, the user of the second network 70 can use the third network 80 in addition to the second network 70, thereby preventing leakage of confidential data and improving convenience.

  It is to be noted that the network that can be used by the user and the transferable file can be displayed on the display means 16 as in the first and second embodiments.

10, 10A, 10B Image forming apparatus (communication control apparatus)
12 Control means 14, 14A, 14B Determination means 16 Display means 18, 18A, 18B Storage means 20, 20A, 20B User information management means 22 Image reading means 24 Image forming means 26 First network interface (first NIC) (first Communication line connection means)
28 Second network interface (second NIC) (second communication line connection means)
30 3rd network interface (3rd NIC) (3rd communication line connection means)
40 (40a, 40b, 40c) Terminal device 42 Router 50, 50A, 50B Network system (communication line system)
60 First network (first communication line)
70 Second network (second communication line)
80 Third network (third communication line)

Claims (8)

Connected to multiple independent communication lines to communicate,
Storage means for storing user information for each user;
Determining means for determining whether or not the communication line to be used can be used according to the user information of the user to be used;
A communication control device. The plurality of communication lines have different predetermined security levels,
The communication control apparatus according to claim 1, further comprising a communication line connection unit connected to each of the communication lines having different security levels. The user information is
User identification information set for each user,
The communication line usable for each user identification information;
The communication control device according to claim 1 or 2, wherein each is stored in association with each other. The user information is
User identification information set for each user,
The communication line usable for each user identification information;
The communication line connection means connected to the communication line;
The communication control device according to claim 2, wherein each is stored in association with each other. The determination means includes
5. The communication control according to claim 4, wherein whether or not the communication line connection means connected to the communication line to be used by the user is usable is determined based on the user identification information of the user to be used. apparatus. According to the user information of the user who intends to use it,
The communication control apparatus according to claim 1, wherein the communication line usable by a user is displayed on a display unit. The determination means includes
The communication according to any one of claims 1 to 6, wherein information to be transmitted by the user who intends to use the communication line is determined based on the user information of the user to be used. Control device. A plurality of independent communication lines on which communication is performed;
Storage means for storing user information for each user;
A determination control unit for determining whether or not the communication line to be used can be used based on the user information of the user to be used;
A terminal device connected via the communication line from the communication control device;
A communication line system.

Images