JP2022088734A - Information processing device, information processing program and information processing method - Google Patents

Abstract

To provide an information processing device, an information processing program and an information processing method for restoring data saved in a security mode.SOLUTION: An information processing device (a compound machine 10) comprises a detection sensor 42, an internal storage medium and a computer 44. The detection sensor detects a prescribed event. The computer transfers object data stored in the internal storage medium to a server when the prescribed event is detected in a security mode, and further preserves object data by deleting the object data from the internal storage medium. The computer restores the returned object data when the object data is returned to the compound machine from the server according to preset restoration timing and restoration condition after the security mode is released.SELECTED DRAWING: Figure 3

Description

The present invention relates to an information processing apparatus, an information processing program and an information processing method, and in particular, an information processing apparatus, an information processing program and an information processing method capable of setting a security mode using a sensor such as a human sensor. Regarding.

Patent Document 1 discloses an electronic device that detects the occurrence of a disaster or the intrusion of a suspicious person and executes data security according to each detection.

Japanese Unexamined Patent Publication No. 2004-21214 [G06F 12/14]

Patent Document 1 does not consider how to restore the preserved data.

Therefore, a main object of the present invention is to provide a novel information processing device, information processing program and information processing method.

Another object of the present invention is to provide an information processing apparatus, an information processing program, and an information processing method for recovering data saved in a security mode.

The first invention is an information processing apparatus including an information processing means, an internal storage medium and a communication means, in which a security mode can be set or canceled, and an event detecting means for detecting a predetermined event, an event detection in the security mode. When a predetermined event is detected by the means, a transfer means for transferring the target data stored in the internal storage medium to an external storage device by a communication means, a maintenance means for preserving the target data transferred by the transfer means, and security. It is an information processing apparatus provided with a restoration means for restoring target data according to a preset restoration timing and restoration conditions after the mode is released.

In the first invention, the information processing apparatus (10: reference reference numeral illustrating the corresponding portion in the embodiment; the same applies hereinafter) is an information processing means (44) such as a computer, an internal storage medium (48), and communication. The security mode may be manually set or canceled, for example by an administrator, comprising means (56), eg, using a user interface. The event detecting means (42) is, for example, a human detection sensor, in which case, for example, the approach of a person to an information processing apparatus is detected as a predetermined event. When a predetermined event is detected by the event detecting means in a state where the security mode is set, the transfer means (44, S3) is stored in, for example, the data storage unit (52) of the internal storage medium (48). The target data is transferred to the external storage device (54) by the communication means (56). The preservation means (44, S7) preserves the target data by, for example, deleting the target data from the internal storage medium (48) or setting the target data inaccessible. Then, after the security mode is released, the restoration means (44, S21-S31) restores the target data in the internal storage medium (48) according to the restoration timing and the restoration conditions set in advance. However, the restoration timing is the timing at which the target data saved in the external storage device or the like should be restored to the internal storage medium of the information processing device after the administrator or the like cancels the security mode, and the restoration condition is the restoration condition. Basically, it is a condition to set which target data to restore.

According to the first invention, when the security mode is canceled, the target data is restored in the internal storage medium according to the preset restoration timing and restoration conditions. Therefore, the restoration timing and restoration conditions are appropriately set. As a result, it is possible to reduce the overlap between the time required for restoring the target data (returning to the current state) after the security mode is canceled and the user's usage time, and the usability of the information processing device is good.

The second invention is subordinate to the first invention and further includes a setting storage unit for storing preset restoration timings and restoration conditions, and the restoration means is a description restoration timing and restoration preset in the setting storage unit. It is an information processing device that restores target data according to conditions.

In the second invention, the restoration timing and the restoration condition are set in advance in the setting storage unit (50) provided in the internal storage medium (48), for example, manually by the administrator using the user interface (40). Obtained, the restoration means (44, S21-S31) restores the target data to the data storage unit of the internal storage medium according to the restoration timing and the restoration conditions set in the setting storage unit.

According to the second invention, since the restoration timing and the restoration condition can be manually set in the setting storage unit, the restoration method of the target data can be arbitrarily set.

The third invention is dependent on the first or second invention, the restoration condition includes the restoration level of each of the plurality of target data, and the restoration means restores the order data of the plurality of target data according to the restoration level. It is an information processing device.

In the third invention, for example, four types of restoration timings can be selectively or combinedly set, and for example, three types of restoration conditions can be set.

According to the third invention, since various restoration timings and restoration conditions can be set, the usability of the information processing apparatus can be further improved.

A fourth aspect of the present invention is an information processing system including an information processing device, an internal storage medium, and a communication means, the security mode of which can be set or canceled, and an external storage device. Event detection means for detecting the event, transfer means for transferring the target data stored in the internal storage medium to the external storage device by the communication means, and transfer when a predetermined event is detected by the event detection means in the security mode. The external storage device is provided with an external data storage unit for storing the target data transferred by the transfer means, and the information processing device is further released from the security mode. After that, it is an information processing system provided with a restoration means for restoring the target data according to the restoration timing and the restoration conditions set in advance.

In the fourth invention, the information system includes an information processing device (10) and an external storage device (54), and the information processing device includes an information processing means (44) such as a computer, an internal storage medium (48), and communication. The security mode may be set or canceled manually, for example by an administrator, comprising means (56), eg, using a user interface. The event detecting means (42) is, for example, a human detection sensor, in which case, for example, the approach of a person to an information processing apparatus is detected as a predetermined event. When a predetermined event is detected by the event detecting means in a state where the security mode is set, the transfer means (44, S3) is stored in, for example, the data storage unit (52) of the internal storage medium (48). The target data is transferred to the external storage device (54) by the communication means (56). The preservation means (44, S7) preserves the target data by, for example, deleting the target data from the internal storage medium (48) or setting the target data inaccessible. The external storage device (54) stores the target data transferred by the transfer means in the external data storage unit (64). Then, after the security mode is released, the restoration means (44, S21-S31) restores the target data in the internal storage medium (48) according to the restoration timing and the restoration conditions set in advance.

According to the fourth invention, the same effect as that of the first invention can be expected.

The fifth invention is subordinate to the fourth invention, the maintenance means includes the deletion means (44, S7) for deleting the target data transferred to the external storage device by the transfer means from the internal storage medium, and the restoration means is. The external storage device includes a return requesting means (44, S27) that requests the external storage device to return the target data to be restored, and the external storage device includes a return means for returning the target data to the information processing device in response to the return request. It is an information processing system.

In the fifth invention, the deletion means (44, S7) deletes the target data transferred to the external storage device by the transfer means from the internal storage medium (48). Therefore, the target data does not remain in the internal storage medium, and therefore, the restoration means (44, S21-S31) returns the target data to be restored to the external storage device by the return request means (44, S27). Request. Accordingly, the return means (60) of the external storage device (54) returns the target data to the information processing device. Then, the restoration means restores the returned target data in the internal storage medium.

According to the fifth invention, since the data preservation process is performed by deleting the target data from the internal storage medium of the information processing device, the target data disappears from the internal storage medium, and the target data is physically stored from the information processing device. It is possible to prevent the target data from being stolen or tampered with without permission.

The sixth invention is dependent on the fifth invention, and the return means of the external storage device is an information processing system that returns the target data stored in the external data storage unit.

In the sixth invention, the return means (60) returns the target data stored (saved) in the external data storage unit (64) to the information processing apparatus.

According to the sixth invention, the information processing apparatus can restore the target data returned from the external storage device.

The seventh invention is an information processing program executed by an information processing apparatus including a computer, an internal storage medium, a communication means, and an event detecting means for detecting a predetermined event, and a security mode can be set or canceled. The information processing program transfers the computer by a transfer means or a transfer means that transfers the target data stored in the internal storage medium to the external storage device by the communication means when a predetermined event is detected by the event detection means in the security mode. It is an information processing program that functions as a maintenance means for preserving the target data and a restoration means for restoring the target data according to a preset restoration timing and restoration conditions after the security mode is released.

The seventh invention can also be expected to have the same effect as the first invention.

Eighth invention is an information processing method in an information processing apparatus including an information processing means, an internal storage medium, a communication means, and an event detecting means for detecting a predetermined event, and a security mode can be set or canceled. When a predetermined event is detected by the event detecting means in the mode, the target data stored in the internal storage medium is transferred to the external storage device by the communication means (S3: reference numeral illustrating the corresponding portion in the embodiment. The same applies hereinafter), the transferred target data is preserved (S7), and after the security mode is released, the target data is restored according to the preset restoration timing and restoration conditions (S21-S31). It is an information processing method.

The eighth invention can also be expected to have the same effect as the first invention.

The above-mentioned object, other object, feature and advantage of the present invention will be further clarified from the detailed description of the following examples with reference to the drawings.

FIG. 1 is a perspective view showing the appearance of an image forming apparatus according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of a detection range of a human detection sensor provided in the image forming apparatus shown in FIG. FIG. 3 is a block diagram showing an electrical configuration of the image forming apparatus shown in FIG. FIG. 4 is a flow chart showing an example of operation when the security mode in the embodiment of FIG. 1 is turned on. FIG. 5 is a flow chart showing an example of operation when the security mode in the embodiment of FIG. 1 is turned off.

With reference to FIG. 1, the multifunction device 10 according to the first embodiment of the present invention is, for example, an information processing apparatus having a plurality of functions such as a copy function, a printer function, an image scanner function, and a facsimile function. The multifunction device 10 of this embodiment includes an image reading unit 12 as an image reading means and an image forming unit 14 as an image forming means.

The image reading unit 12 is provided on the upper part of the multifunction device 10 (housing). The image reading unit 12 has a platen (not shown) made of a transparent material such as glass. A document holding cover 16 is freely opened and closed above the platen via a hinge or the like. The image reading unit 12 is responsible for an image reading process that reads an image of a document placed on a document table and outputs two-dimensional image data corresponding to the image. Therefore, although not shown, the image reading unit 12 includes an image reading unit including a light source, a plurality of mirrors, an imaging lens, a line sensor, and a driving mechanism for moving the image reading unit.

Further, the document holding cover 16 is provided with an automatic document feeder (ADF) 18. The automatic document feeder 18 has a document mounting tray 20 on which a plurality of documents can be placed, and one sheet of the document placed on the document loading tray 20 is placed at the image reading position of the image reading unit 12. Supply one by one.

The image forming unit 14 is provided below the image reading unit 12. The image forming unit 14 is responsible for forming an image by a known electrophotographic method on the paper supplied one by one from the feeding unit 22. Therefore, although not shown, the image forming unit 14 includes a photoconductor drum, a charging device, an exposure device, a developing device, a transfer device, a fixing device, and the like. The paper after the image is formed by the image forming unit 14, that is, the printed paper is ejected to the output tray 22.

In the multifunction device 10 shown in FIG. 1, only one paper cassette 26 constituting the paper feed unit 24 is provided, but a plurality of paper cassettes 26 may be provided. Further, the paper ejection tray 22 is provided between the image reading unit 12 and the image forming unit 14, in other words, is formed by the in-body space between the image reading unit 12 and the image forming unit 14. However, it may have a structure other than this.

In addition, a substantially rectangular plate-shaped operation unit 28 is provided at the front of the multifunction device 10, specifically, at the front of the image reading unit 12 (housing). The operation unit 28 is provided so that its upper surface faces diagonally upward, that is, the upper surface is slightly inclined to the front lower side of the multifunction device 10. A display 32 with a touch panel 30 is provided on the upper surface of the operation unit 28. At the same time, a power saving button 34 and a home button 36 are provided on the upper surface of the operation unit 28.

The display 32 with the touch panel 30 is an integral combination of a display 32 having a rectangular display surface and a touch panel 30 provided on or inside the display surface of the display 32. The touch panel 30 is an example of an operation receiving means for receiving an operation of a user who uses the multifunction device 10, and is an arbitrary method such as a capacitance method. The display 32 is an example of a display means for displaying various information, and is, for example, a liquid crystal display (LCD) or an organic EL display. The display 32 with the touch panel 30 may be referred to as a touch display 32.

The power saving button 34 is, for example, a capacitance type switch which is a kind of hardware key. The power saving button 34 is provided on the right side of the display 32 with the touch panel 30. This power saving button 34 is also an example of the operation receiving means, and more specifically, an operation for shifting the operation mode of the multifunction device 10 from the normal mode described later to the power saving mode, or shifting from the power saving mode to the normal mode. This is an example of reception means. Although not shown, the power saving button 34 is provided with, for example, a light emitting diode (LED) as a backlight.

Like the power saving button 34, the home button 36 is a capacitance type switch, and is provided in the vicinity of the power saving button 34 on the right side of the display 32 with the touch panel 30. The home button 36 is also an example of an operation reception means, and more particularly, an example of an operation reception means for displaying the home screen multifunction device 100 described later on the display 32. Although not shown, the home button 36 is also provided with a light emitting diode as a backlight.

The user generally stands in front of the multifunction device 10 and uses the multifunction device 10 to operate the operation unit 28 in particular. In order to improve the operability and visibility of the operation unit 28 by the user at that time, the operation unit 28 is provided so that its upper surface is slightly inclined toward the front side of the multifunction device 10 as described above. Further, the operation unit 28 is rotatably provided about a coupling portion with the image reading unit 12 so that the inclination angle of the upper surface thereof can be changed within an appropriate range.

Further, a power button 38 is provided at an appropriate position of the multifunction device 10, for example, a position in the vicinity of the coupling portion with the operation unit 28 in the image reading unit 12. Specifically, the power button 38 shifts the operation mode of the multifunction device 10 from the power saving mode described later to the normal mode for turning on / off the power of the multifunction device 10, or from the normal mode. Move to power saving mode. The power button 38 is, for example, a momentary push button switch which is a kind of hardware key.

In this specification, for convenience, these operation units 28 (display 32 with touch panel 30), power saving button 34, home button 36, and power button 38 are collectively referred to as a user interface 40 (FIG. 3). The user interface 40 is an interface that accepts input operations by the user.

An administrator of the multifunction device 10 or a person having management authority (administrator or the like) can use the user interface 40 to set a security mode for the multifunction device 10. Here, the security mode means that when a predetermined event (notable event) is detected by the event detection sensor 42 described below in the state of transition to the mode, the administrator uses e-mail or the like. It is a mode that notifies such things to others, and is sometimes called a warning mode, a monitoring mode, or the like.

However, even if the administrator or the like is notified, there is a possibility that data may be output from the storage medium built in the multifunction device 10 or physically taken away by a malicious third party. , Data of confidential materials such as personal information data and print data stored in the internal storage medium may be stolen. Therefore, in the embodiment described in detail below, the processing in such a security mode is improved to deal with such a problem.

Therefore, the event detection sensor 42 is provided at an appropriate position of the multifunction device 10, for example, a position below the operation unit 28 in the front portion of the multifunction device 10. In this embodiment, the event detection sensor 42 is a motion sensor for detecting whether or not a person including a user exists in the range A (see FIG. 2) set around the multifunction device 10. This is an example of an event detection means.

The event detection sensor 42 is, for example, a distance sensor such as an infrared sensor, an ultrasonic sensor, and a laser distance sensor, and the distance sensor outputs distance data to the computer 44.

In the computer 44, which is an example of the information processing means, a person is placed in front of (in front of) the multifunction device 10 depending on whether or not the distance indicated by the distance data output from the distance sensor is within a predetermined distance defining the range A. Determine if it exists.

When the event detection sensor 42 is a motion sensor, a charcoal sensor, a floor sensor (pressure sensor), a digital camera (image sensor), or the like can be used instead of the distance sensor. When a pyroelectric sensor is used, the pyroelectric sensor detects a temperature change in the range A, and the computer 44 determines whether or not a person is present in the range A according to the output of the pyroelectric sensor. Further, when a floor sensor is used, a floor sensor is provided on the floor surface corresponding to the range A, and the computer 44 determines whether or not a person exists in the range A according to the output of the floor sensor. do. When an image sensor is used, the movement of an object within a predetermined detection range can be detected by the change (movement) of the image.

However, as the event detection sensor 42, in addition to the motion sensor of the embodiment, an arbitrary event such as heat or vibration, for example, a sensor for detecting an abnormal state may be used. The computer 44 receives the output of the event detection sensor 42 and determines whether or not some remarkable event (for example, an abnormal state) has occurred.

FIG. 3 is a block diagram showing an electrical configuration of the multifunction device 10 shown in FIG. With reference to FIG. 3, the multifunction device 10 includes a computer (CPU or processor) 44. The computer 44 includes a program memory 46, in which a program for the computer 44 to detect the occurrence of a predetermined event based on the output signal of the event detection sensor 42 and a security mode are turned on (set). For example, the control program shown in FIG. 4 when the occurrence of the predetermined event is detected while the security mode is turned off, the control program shown in FIG. 5 when the security mode is turned off (released), and the like are set in advance.

The above-mentioned event detection sensor 42 gives a detection signal to the computer 44, and the computer 44 determines that a predetermined state such as an approach of a person to the multifunction device 10 is detected by the event detection sensor 42 based on the detection signal. ..

The multifunction device 10 further includes an internal storage medium 48 such as an HDD (hard disk drive) or SSD (solid state drive) attached to the computer 44. The internal storage medium 48 has a setting storage unit 50 that stores setting information input by the user interface 40, and data that should be kept secret such as telephone book data, scan data, print data, etc. (simply referred to as "target data"). Includes a data storage unit 52 that stores). The setting storage unit 50 further stores information used when the computer 44 transmits the target data in the data storage unit 52 to the external storage device 54 or restores the target data from the external storage device 54. For example, it is information indicating which of the data stored in the data storage unit 52 belongs to the above-mentioned target data. The external storage device 54 is configured by a server in this embodiment.

The above-mentioned user interface 40 is also used to input that a predetermined state (abnormal state) in the security mode has been resolved, and to input setting information for the setting storage unit 50 referenced by the computer 44. Can be done.

When the security mode is set, the computer 44 receives the detection signal from the event detection sensor 42 as described above, and determines whether or not a predetermined event has occurred. When the computer 44 determines that a predetermined event has occurred in the security mode, the computer 44 refers to the information of the setting storage unit 50 of the internal storage medium 48 and reads out the target data stored in the data storage unit 52. , Is transmitted to the external storage device 54 via the communication unit 56 and the communication unit 58. At the same time, maintenance processing such as deleting the target data from the data storage unit 52 is executed so that the target data is not read out from the outside of the multifunction device 10.

When the target data is restored after the security mode is released, the computer 44 receives the target data sent from the external storage device 54 via the communication unit 58 and the communication unit 56. Then, the received target data is stored in the data storage unit 52 of the internal storage medium 48, if necessary.

Although the communication units 56 and 58 transmit and receive data by wire communication in the embodiment, these communication units 56 and 58 may transmit and receive data by wireless communication.

As described above, the external storage device 54 is composed of a server, which includes a computer 60. In this embodiment, the computer 60 stores the target data received from the communication unit 58 in the data storage unit 64 including an arbitrary storage medium according to the program set in the program memory 62. That is, the external storage device 54 includes a target data receiving means for receiving the target data transferred from the multifunction device 10 for saving, and further stores the received target data in the data storage unit (external data storage unit) 64. Have storage means to do. Here, "evacuation" means transferring the target data stored (stored) in the data storage unit 52 of the multifunction device 10 to the external storage device 54. Further, the computer 60 reads the target data from the data storage unit 64 and sends it to the communication unit 58 in response to the return request from the computer 44 of the multifunction device 10 according to the procedure according to the program. That is, the external storage device 54 has a return means for returning the target data in response to a request for returning the target data from the computer 44 of the multifunction device 10.

In this way, the target data saved from the internal storage medium 48 of the compound machine 10 to the external storage device (server) 54 is restored (returned) from the external storage device 54 to the data storage unit 52 of the internal storage medium 48. However, regarding the restoration of the target data, the administrator or the like sets the restoration timing and the restoration conditions in advance by using the user interface 40 or the like. The set restoration timing and restoration conditions are stored (set) in the setting storage unit 50 of the internal storage medium 48 of the multifunction device 10 and referred to by the computer 44 as described above. Here, "restoration" means making the target data saved in the external storage device 54 available to the data storage unit 52 of the multifunction device 10.

As a method of setting the restoration timing and the restoration condition, a method of registering using an external device (computer, server, etc.) that can be connected to the multifunction device 10 via the network or the communication unit 56, in addition to using the user interface 40. , An arbitrary method such as a method of registering using a storage medium such as USB in which necessary information is stored can be considered.

Here, the setting of the restoration timing and the restoration condition will be described in detail.

The restoration timing is the timing at which the target data saved in the external storage device 54 should be restored to the internal storage medium 48 of the multifunction device 10 after the administrator or the like cancels the security mode. In the embodiment, there are four types. Timing can be set selectively or in combination.

The first restoration timing is the timing of unconditionally restoring the target data when the security mode is released.

The second restoration timing is the timing when the administrator or the like approves the restoration of the target data after the security mode is released.

The third restoration timing is similar to the second restoration timing, but is the timing at which the first user (first user) approves the restoration of the target data after canceling the security mode.

The fourth restoration timing is a timing according to a time or time designated by an administrator or the like. When the fourth restoration timing is set, the computer 44 of the multifunction device 10 automatically calculates the time required for restoration based on the amount of target data to be restored, and sets the time set at the fourth restoration timing. Make sure to start the restore.

That is, the restoration timing is set by a combination of the mode (whether or not it is a security mode) of the multifunction device 10, the usage time, the user operation, the presence or absence of approval by the administrator, and the like.

Further, the restoration condition is basically a condition for setting which target data is to be restored, and the first restoration condition is a fixed setting of the target data to be restored by the user, the administrator, or the like. , Restoration conditions.

The second restoration condition is a restoration condition in which the restoration level (restoration priority) is set by the user, the administrator, or the like for each target data. However, this second restoration condition includes the case where the target data is set for each restoration timing. The second restoration condition is that when the second or third restoration timing is reached, the user answers the question of the computer 44 and inputs (sets) the level of each target data via the user interface 40. That is, when the second restoration condition is set in advance, the restoration level is set by the user each time. For example, set a high restore level for target data including the contacts of users in the company and set a low restore level for target data related to customer information. Then, the target data having a low restoration level shall be sequentially processed after the specified restoration timing. On the other hand, the target data with a high restoration level shall be processed immediately at the specified restoration timing.

The third restoration condition is that the computer 44 of the multifunction device 10 automatically restores the restoration level (priority) depending on the frequency and usage status of each function of the multifunction device 10 (copy function, printer function, image scanner function, facsimile function, etc.). It is a restoration condition that determines the degree). For example, in the case of a multifunction device that frequently uses the function of transmitting scanned data, the computer 44 sets a high priority of the target data including the information of the destination computer, the e-mail address, and the like. For example, in the case of a multifunction device that is frequently used for facsimile transmission, the computer 44 sets the priority of the target data including the telephone directory of the destination and the information of the computer to be high. Further, for example, in the case of a multifunction device managed by using user authentication, the computer 44 sets the priority of the target data including the data required for user authentication to be high.

In other words, the restore condition can be registered by the administrator or the like by determining the order of restoration for each data as described above, or the priority can be set by the administrator or the like for each data and the restoration level (priority). And the amount of data belonging to it, the computer 44 determines the final order of restoration.

On the premise that such restoration timing and restoration conditions are set in advance, when the security mode is turned on (set), the computer 44 of the multifunction device 10 is set in the program memory 46 (FIG. 3). The control shown in the flow chart of FIG. 4 shown by the program is executed. The program shown in FIG. 4 is repeatedly executed for a predetermined time, for example, every 30 seconds.

In step S1, the computer 44 compares, for example, a detection-required component such as strength (amplitude) and frequency of the detection signal from the event detection sensor 42 with a predetermined threshold value, for example, the event detection sensor 42 is a motion sensor. If so, it is determined whether or not a person's approach to the compound machine 10 (predetermined event) has been detected. In this way, when the event detection sensor 42 detects a predetermined event, "YES" is determined in this step S1, and the process proceeds to the next step S3. However, when "NO" is determined in step S1, the operation shown in FIG. 4 ends as it is.

In step S3, the computer 44 reads out the target data indicated by the setting storage unit 50 from the data stored in the data storage unit 52 of the internal storage medium 48 from the data storage unit 52, and uses the communication units 56 and 58. Then, the data is saved in the computer 60 of the external storage device 54. That is, the target data in the multifunction device 10 is transferred to the external storage device 54. The computer 44 that executes this step S3 constitutes the evacuation means or the transfer means.

After that, in step S5, the computer 44 determines whether or not the saving of the target data to the external storage device 54 is completed. Specifically, the server functioning as the external storage device 54 sends a processing completion response to the computer 44 of the multifunction device 10 when all the data received from the communication unit 58 is stored in the data storage unit 64. When the computer 44 of the multifunction device 10 receives the response, it can be determined that the saving of the target data is completed.

When the computer 44 determines in step S5 that the saving (storing) of the target data is completed in the external storage device 54, the computer 44 deletes the saved target data from the data storage unit 52 of the internal storage medium 48 in step S7. And preserve the target data. When the target data is preserved by deleting the target data from the data storage unit 52 of the internal storage medium 48, the target data disappears from the data storage unit 52, so that the target data may be physically stolen from the data storage unit 52. Or, it is possible to prevent the target data from being tampered with without permission.

Next, in step S9, the computer 44 notifies the designated notification destination by a predetermined means that a predetermined event such as an approach of a person has occurred by the event detection sensor 42 in a state where the security mode is set. The designated notification destination is, for example, the administrator of the multifunction device 10, and the predetermined means is, for example, e-mail.

Then, in step S11, the computer 44 warns that a predetermined event such as an approach of a person has occurred by an output means such as a warning sound, a voice message, or a message display.

In this way, the operation of the multifunction device 10, that is, the computer 44 when the security mode is turned on is executed.

Next, with reference to FIG. 5, the operation of the multifunction device 10, that is, the computer 44 when the security mode is turned off will be described. The security mode can be manually turned off (cancelled) by, for example, the user interface 40, by an administrator or the like.

When the security mode is turned off by an administrator or the like, in step S21, the computer 44 provides an approval GUI (not shown) for allowing the administrator or the first user to input the necessary restoration approval to, for example, the touch display 32. indicate. As explained earlier, in the case of the second restore timing, the restore timing is specified by the approval of the administrator after the security mode is released, and in the case of the third restore timing, the first after the security mode is released. The restoration timing is defined by the approval of the user (first user). However, in the case of the first restoration timing or the fourth restoration timing, the approval of the administrator or the user is not required, so this step S21 is skipped. Whether this step S21 is executed or skipped can be determined by the computer 44 based on the setting data stored in the setting storage unit 50 of the internal storage medium 48.

Then, in step S23, the computer 44 determines whether or not it is the restoration timing. For example, in the case of the first restoration timing or the fourth restoration timing, "YES" is determined in this step S23 without going through the approval input in step S21, but in the case of the second restoration timing or the third restoration timing. Is determined to be "YES" in step S23 after the approval input in step S21.

When any of the first to fourth restoration timings is detected in step S23 in this way, the computer 44 in the next step S25-S31 according to any of the first restoration conditions or the third restoration conditions described above. The target data saved in the external storage device 54 is restored.

In step S25, the computer 44 displays a restore level input GUI (not shown) for user setting input in the case of the second restoration condition on the touch display 32. As described above, in the case of the second restoration condition, the user needs to set the restoration level for each target data, and therefore, in step S25, the restoration level setting screen for that purpose is displayed. Therefore, in the case of the first restoration condition in which it is not necessary to set the restoration level of the target data, or in the case of the third restoration condition in which the computer 44 automatically sets the restoration level for each target data, this step S25 is skipped. ..

Then, in step S27, the computer 44 performs the corresponding target data in the order indicated by the restoration level according to the second restoration condition set in step S25 or the restoration level according to the first restoration condition or the third restoration condition. Request the return to the external storage device, that is, the server 54. The computer 60 of the external storage device 54 receives the target data returned from the data storage unit external storage device 54 in step S29 in response to the return request, and the target data is stored in the internal storage medium 48 in step S31. Return to the data storage unit 52 of.

The target data having a low restoration level is sequentially processed by repeatedly executing steps S27-S31 between tasks (copy task, print task, etc.) executed by the multifunction device 10. That is, the multifunction device 10 can be used while the target data having a low restoration level is being restored.

Then, when the restoration of the target data of all the target data in step S31 is completed, in step S33, the computer 44 notifies the external storage device 54 of the completion of restoration of the data. Accordingly, the external storage device 54 erases the data saved from the multifunction device 10 as needed.

Here, the operation of data restoration in the first specific example in which the restoration timing is the first restoration timing and the restoration condition is the first restoration condition will be described.

In the case of this specific example, since it is the first restoration timing, when the security mode of the multifunction device 10 is released, the process immediately proceeds to step S23, and the computer 44 saves the external storage device 54 in the previous step S3. It requests the computer 60 of the external storage device 54 to return all the target data. The target data returned from the external storage device 54 is received in step S29, and is stored in the data storage unit 52 of the internal storage medium 48 in step S31. After that, step S33 is executed, and the restoration operation ends.

Next, the restoration operation in the second specific example in which the second restoration timing and the second restoration condition are set in advance will be described.

When the security mode is released, if the second restore timing is detected in step S21, the computer 44 displays the approval GUI for enabling the approval input by the administrator described above in step S21. Then, according to the approval input, the process proceeds to step S25. In step S25, the above-mentioned GUI for inputting the priority level for the user to input the restoration level of the target data under the second restoration condition is displayed, and the input from the user is awaited. After that, as described above, steps S27-S33 are executed, and the restoration operation is completed.

In the above-described embodiment, as the maintenance process in step S7, the target data saved in the external storage device 54 is deleted from the data storage unit 52 of the multifunction device 10. However, as another embodiment, as a method of maintenance processing, a method of leaving the target data in the data storage unit 52 but making it inaccessible can be considered instead of deleting the target data from the data storage unit 52. In this case, restoring the target data means canceling the inaccessibility and enabling access to the target data of the data storage unit 52. In the case of this embodiment, when there are a plurality of target data and the restoration level of each target data is set, access to each target data is permitted in the order according to the restoration level (restoration priority). It will be.

Even in the case of this embodiment, it is necessary to save the target data. Even if the target data in the data storage unit 52 is made inaccessible, if the target data is physically stolen or deleted from the data storage unit 52, the target data cannot be used. Even in this case, if the target data is saved in the external storage device 54, the target data can be restored to the data storage unit 52 even if such theft or erasure is encountered.

Further, when the target data in the data storage unit 52 is made inaccessible as described above, it is conceivable to encrypt the target data to make it substantially inaccessible, but even in this case, the target data is external. If it is stored in the storage device 54, theft and erasure can be dealt with in the same manner.

Further, when the data is preserved in the state where the target data is left in the data storage unit 52 as in this embodiment, it is conceivable that the target data in the data storage unit 52 is falsified and becomes unusable. Even in this case, if the target data is saved in the external storage device 54, the falsified target data can be erased and restored with the target data remaining in the external storage device 54.

Further, as another embodiment, data having a particularly high restoration level or high priority without deleting the target data saved in the external storage device 54 from the data storage unit 52 or making it inaccessible is the relevant data. It is also conceivable to encrypt and distribute the data in other devices in the same area where the multifunction device 10 is installed, for example, in another multifunction device. In this case, as the external storage device, instead of the external storage device 54 such as the server of the previous embodiment, such another device may be used as the external storage device to specify the evacuation destination. That is, not only the external storage device 54 of the previous embodiment, but also another device having a storage medium having a function such as the data storage unit 64 can be used as the external storage device.

In the case of this embodiment, restoring the target data means deciphering the distributed target data and then returning the target data to the data storage unit 52 of the multifunction device 10. Further, in the case of this embodiment, when there are a plurality of target data and the restoration level of each target data is set, each target data is stored in the data storage unit in the order according to the restoration level (restoration priority). It is returned to 52.

In the above-described embodiment, a server connected to the multifunction device 10 by wire / wirelessly is used as the external storage device 54, but this may be a cloud server or a cloud memory that can be connected to the multifunction device 10 via a network. ..

Further, in the above-described embodiment, the security mode is set or canceled by the administrator or the like via the user interface 40, but when a plurality of multifunction devices are centrally managed, the administrator or the like may set or cancel the security mode. The security mode may be set or canceled simultaneously or individually for a plurality of multifunction devices via the network.

Further, it is not necessary to restore all the target data saved or transferred to the external storage device 54 to the multifunction device 10, and for example, it is not necessary to restore the target data that is no longer confidential data as a result of the passage of time. It is assumed that the user or the administrator can arbitrarily set which of the saved target data needs to be restored and which does not need to be restored when the restoration conditions set earlier are set. In this case, the target data that does not need to be restored may be deleted in the external storage device 54.

10 ... Multifunction device 32 ... Touch display 40 ... User interface 42 ... Event detection sensor 44 ... Computer 48 ... Internal storage medium 50 ... Setting storage unit 52 ... Data storage unit 54 ... External storage device (server)

Claims (8)

An information processing device that includes information processing means, an internal storage medium, and communication means, and whose security mode can be set or canceled.
Event detection means for detecting a predetermined event,
A transfer means for transferring target data stored in the internal storage medium to an external storage device by the communication means when the predetermined event is detected by the event detection means in the security mode.
Information including a maintenance means for preserving the target data transferred by the transfer means, and a restoration means for restoring the target data according to a preset restoration timing and restoration conditions after the security mode is released. Processing equipment. Further provided with a setting storage unit for storing the preset restoration timing and the restoration condition.
The information processing apparatus according to claim 1, wherein the restoration means restores the target data according to the restoration timing and the restoration conditions preset in the setting storage unit. The information processing apparatus according to claim 1 or 2, wherein the restoration condition includes each restoration level of the plurality of target data, and the restoration means restores the order data according to the restoration level. An information processing system including an information processing device (information processing means, an internal storage medium) and a communication means, and an information processing device and an external storage device whose security mode can be set or canceled.
The information processing device is
Event detection means for detecting a predetermined event,
When the event detecting means detects the predetermined event in the security mode, the transfer means for transferring the target data stored in the internal storage medium to the external storage device by the communication means, and the transfer means. Provided a maintenance means for preserving the target data transferred by
The external storage device includes an external data storage unit that stores the target data transferred by the transfer means.
The information processing device is an information processing system further comprising a restoration means for restoring the target data according to a preset restoration timing and restoration conditions after the security mode is released. The maintenance means includes a deletion means for deleting the target data transferred to the external storage device by the transfer means from the internal storage medium.
The restoration means includes a return requesting means for requesting the external storage device to return the target data to be restored.
The information processing system according to claim 4, wherein the external storage device includes a return means for returning target data to the information processing device in response to the return request. The information processing system according to claim 5, wherein the return means of the external storage device returns the target data stored in the external data storage unit. An information processing program that includes a computer, an internal storage medium, a communication means, and an event detection means that detects a predetermined event, and is executed by an information processing device that can set or cancel a security mode. The information processing program is the information processing program. Computer,
A transfer means for transferring target data stored in the internal storage medium to an external storage device by the communication means when the predetermined event is detected by the event detection means in the security mode.
It functions as a maintenance means for preserving the target data transferred by the transfer means, and as a restoration means for restoring the target data according to a preset restoration timing and restoration conditions after the security mode is released. Information processing program. An information processing method in an information processing apparatus including an information processing means, an internal storage medium, a communication means, and an event detecting means for detecting a predetermined event, and a security mode can be set or canceled.
When the predetermined event is detected by the event detecting means in the security mode, the target data stored in the internal storage medium is transferred to the external storage device by the communication means.
An information processing method for preserving the transferred target data and restoring the target data according to preset restoration timings and restoration conditions after the security mode is released.

Images