JP4323913B2 - Image forming apparatus, control method, storage medium, and program - Google Patents

Description

  The present invention relates to an image forming system and an information management method including a storage unit capable of storing and managing received information, a storage medium and a program storing a computer-readable program, and a copy mode, a print mode, and a transmission mode, for example. And an image forming system having at least one of a plurality of operation modes including at least one of the operation modes of the box mode, a job processing method thereof, a storage medium storing a computer-readable program, and a program It is about.

  Conventionally, in an information processing apparatus that can store information using an external storage device, when storing received information and reading the stored information again, management information for specifying the storage location of the information Information processing apparatuses such as the following Patent Documents 1 and 2 are known that delete information specified using the management information when processing such as printing and transmission is completed.

  Specifically, in an information processing apparatus such as a digital copying apparatus, management information such as FAT (file allocation table) is used to specify a storage location of input information on a storage medium and information to be output. Information storage / readout processing such as designation of the location of the information is managed.

  According to such FAT, an information number is assigned to each stored information. Since the FAT reference value is determined by this information number, the storage position of each information can be specified by the information number.

Further, the FAT is updated every time a job such as a copying operation is completed, and when the FAT is erased or updated, information specified by the FAT is also erased, thereby avoiding the possibility of security leakage.
Japanese Patent Laid-Open No. 9-223061 Japanese Patent Laid-Open No. 9-307314

  However, in the above-described conventional information processing apparatus, as the case 1, when the power is cut off or the power is cut off before the processing such as printing is completed in a long job even when there is no paper, jam, or normal operation, the storage medium is stored even if the FAT disappears. There is data left over and they can be stolen.

  In Case 2, when the administrator turns off the power and returns, the MFP accepts jobs via the network or telephone line, starts a job with a specified time, or turns off the power during the job. Sometimes. Even in this case, even if the FAT disappears, data remains on the storage medium, and problems such as the possibility of being stolen have been pointed out.

  The present invention has been made to solve the above-described problems of the prior art, and an object thereof is to provide a highly confidential and safe information processing method and apparatus free from security holes.

  Further, the present invention has been made to solve the above-described problems, and an object of the present invention is to delete each information in an apparatus that manages information so that it can be stored in a storage medium and outputs information. The information to be erased remaining on the storage medium is malicious when the information to be erased is erased at the time of power on or off and the power state is changed to the power on state or the off state. An information processing apparatus and an information management method capable of freely constructing an information management environment capable of securely managing information that reliably avoids a situation of being leaked by a storage medium, a storage medium storing a computer-readable program, and a program Is to provide.

The present invention is an image forming apparatus configured to cause an output unit to perform output processing of at least one of printing or transmission of image data stored in a storage unit in accordance with an output instruction from an operation unit. The apparatus causes the erasing means to start erasing processing of the image data stored in the storage means in response to the output means executing the output processing, and any part of the image data is erased by the erasing processing. The image forming apparatus is configured to store the processing status indicating whether or not the image forming apparatus turns off the power of the apparatus according to an operator request from the operation unit even if the erasing process is not completed. When the image forming apparatus is configured to turn off the power of the apparatus according to the request while the erasing process is not completed, After the power supply of the device in the ON state, characterized in that it is configured so as to complete the process of erasing portions of the unerased of the image data by the erasing unit based on the stored processing state.

  According to the present invention, when turning off the power of the own device while the image data erasing process started in response to the execution of the output processing is incomplete, after turning on the power of the own device, It is possible to complete the erasing process of the unerased portion of the image data.

  Next, the best mode for carrying out the present invention will be described with reference to the drawings.

[First Embodiment]
FIG. 1 is a longitudinal side view showing a configuration of an image forming apparatus (also referred to as an image forming system) according to a first embodiment of the present invention. The information processing apparatus includes an image forming apparatus main body (copying apparatus main body) 100 and This is an example of a so-called image processing apparatus having an image storage unit or the like as a storage unit having a circulation type automatic document feeder (RDF) 189 or a memory such as a hard disk to be described later.

  In the figure, 101 is a platen glass as a document placing table, and 102 is a scanner. The scanner 102 includes a document illumination lamp 103, a scanning mirror 104, and the like. The scanner 102 is reciprocally scanned in a predetermined direction by a motor (not shown), and the reflected light of the document is passed through the lens 108 via the scanning mirrors 104 to 106 and imaged on the image sensor unit 109 using a CCD sensor. .

  An exposure control unit 120 includes a laser, a polygon scanner, and the like. The exposure control unit 120 converts laser light 129 that has been converted into an electrical signal by the image sensor unit 109 and modulated based on an image signal that has been subjected to predetermined image processing to be described later. The photosensitive drum 110 is irradiated.

  Around the photosensitive drum 110, a primary charger 112, a developing device 121, a transfer charger 118, 119, a cleaning device 116, and a pre-exposure lamp 114 are provided to constitute an image forming unit 126. In this image forming unit 126, the photosensitive drum 110 is rotated in the direction of the arrow shown in FIG. 1 by a motor (not shown) and charged to a desired potential by the primary charger 112, and then the exposure control unit 120 receives the laser. Light 129 is irradiated to form an electrostatic latent image.

  The electrostatic latent image formed on the photosensitive drum 110 is developed by the developing device 121 and visualized as a toner image.

  On the other hand, the transfer paper fed from the upper cassette 131 or the lower cassette 132 by the pickup rollers 133 and 134 is sent to the copying apparatus main body 100 by the paper feed rollers 135 and 136, and is fed to the transfer belt 130 by the registration rollers 137. The visualized toner image is transferred to the transfer paper by the transfer charger 118.

  After the transfer, the photosensitive drum 110 is cleaned of residual toner by the cleaning device 116, and the residual charge is erased by the pre-exposure lamp 114. The transfer paper after the transfer is separated from the transfer belt 130, the toner image is recharged by the pre-fixing chargers 139 and 140, sent to the fixing device 141 and fixed by pressurization and heating, and the copier main body by the discharge roller 142. 100 is discharged to the outside.

  In addition, the image forming unit 126 uses an adsorption charger (not shown) that attracts the transfer paper sent from the registration roller 137 to the transfer belt 130, and is used for rotating the transfer belt 130, and at the same time, an adsorption charger. A pair of transfer belt rollers (not shown) for attracting and charging the transfer paper to the transfer belt 130 are provided.

  The copying apparatus main body 100 is equipped with a deck 150 that can store, for example, 4000 transfer sheets. The lifter 151 of the deck 150 is equipped with a multi-manual feed mechanism 153 that rises according to the amount of transfer paper so that the transfer paper always comes in contact with the paper feed roller 152 and can accommodate 100 sheets of transfer paper. Yes.

  Further, in FIG. 1, reference numeral 154 denotes a paper discharge flapper, which switches the path between the duplex recording side or the multiple recording side and the paper discharge side. The transfer paper fed from the paper discharge roller 142 is switched to the duplex recording side or the multiple recording side by the paper discharge flapper 154.

  Reference numeral 158 denotes a lower conveyance path. The transfer sheet sent from the sheet discharge roller 142 is turned over through the reverse path 155 and guided to the refeed tray 156. Reference numeral 157 denotes a multiple flapper that switches between a duplex recording path and a multiple recording path. By tilting the multiple flapper to the left, the transfer sheet is directly guided to the lower conveyance path 158 without passing through the reverse path 155. Reference numeral 159 denotes a paper feed roller that guides the transfer paper to the photosensitive drum 110 side through the path 160.

  Reference numeral 161 denotes a discharge roller that is disposed in the vicinity of the paper discharge flapper 154 and discharges the transfer paper switched to the discharge side by the paper discharge flapper 154 to the outside of the copying apparatus main body 100.

  During double-sided recording (double-sided copying) or multiple recording (multiple copying), the paper discharge flapper 154 is raised upward, and the copied transfer paper is stored in the refeed tray 156 in a state of being turned upside down through the transport paths 155 and 158. To do.

  At this time, during double-sided recording, the multiple flapper 157 is tilted to the right, and during multiple recording, the transfer sheets stored in the refeed tray 156 are fed one by one from the bottom via the path 160 by the sheet feed roller 159. Then, it is guided to the registration roller 137 of the copying machine main body 100.

  When the transfer sheet is reversed and discharged from the copying apparatus main body 100, the discharge flapper 154 is raised upward, the flapper 157 is tilted rightward, the copied transfer sheet is conveyed to the conveyance path 155, and the trailing edge of the transfer sheet is transferred. After passing through the first feed roller 162, the sheet is conveyed to the second feed roller 162 a side by the reverse roller 163, and the transfer paper is turned over by the discharge roller 161 and discharged outside the copying machine main body 100.

  2 is a block diagram showing a control configuration of the information processing apparatus shown in FIG. 1, and the same components as those in FIG. 1 are denoted by the same reference numerals.

  In FIG. 2, an image reading unit 201 as an example of a scanner unit includes a lens 108, an image sensor unit 109, an analog signal processing unit 202, and the like. The original image formed on the image sensor unit 109 via the lens 108 is converted into an analog electric signal by the image sensor unit 109.

  The converted image information is input to the analog signal processing unit 202, subjected to sample & hold, dark level correction, and the like, and then subjected to analog / digital conversion (A / D conversion). The digitized signal is subjected to shading correction (variation of sensors for reading a document and correction of light distribution characteristics of a document illumination lamp) and a scaling process, and then to an image management unit 203 connected to the image reading unit 201. Entered.

  The external I / F processing unit 209 is connected to the image management unit 203, develops image data input from an external computer or the like (not shown), and inputs the image data to the image management unit 203. In the image management unit 203, the input image data is subjected to correction processing necessary for an output system such as γ correction, smoothing processing, edge enhancement, other processing and processing, and the like, and the image connected to the image management unit 203 The data is output to the printer unit 204 as output means.

  The printer unit 204 includes the exposure control unit 120 including the laser described with reference to FIG. 1, an image forming unit 126, a transfer paper conveyance control unit, and the like, and records an image on the transfer paper in accordance with an input image signal.

  The CPU circuit unit 205 includes a central processing unit (CPU) 206, a ROM (read only memory) 207, a RAM (read / write memory) 208, and the like, and an image reading unit connected to the CPU circuit unit 205 via a CPU bus. The unit 201, the image management unit 203, the printer unit 204, and the like are controlled to comprehensively control the sequence of the apparatus.

  An operation panel unit 210 includes a liquid crystal display unit and a touch panel. Under the control of the CPU circuit unit 205, various operation screens and a security shutdown screen shown in FIG. 7 to be described later can be displayed. .

  In the present embodiment, an image forming system including the printer unit 204, the scanner unit 201, the image management unit 203 including the image storage unit 310 shown in FIG. However, the image forming system may be a separate type in which each of these units is provided in a separate housing, and the present embodiment can be applied to any apparatus configuration.

  FIG. 3 is a block diagram showing a detailed configuration of the image management unit 203 shown in FIG.

  In FIG. 3, the image sent from the image reading unit 201 is input as black luminance data and sent to the log conversion unit 301. The log conversion unit 301 stores an LUT (reference table) for converting the input luminance data into density data, and the luminance data is converted into density data by outputting a table value corresponding to the input data. Is converted to

  Thereafter, the density data is sent to the binarization unit 302. The binarization unit 302 binarizes the multi-value density data, and the density value becomes “0” or “255”. The binarized 8-bit image data is converted into 1-bit image data of “0” or “1”, and the amount of image data stored in the memory is reduced.

  However, when the image is binarized, the number of gradations of the image is changed from 256 gradations to two gradations. Therefore, when image data having a large halftone such as a photographic image is binarized, the image is generally greatly deteriorated. Therefore, it is necessary to perform pseudo halftone expression using binary data.

  Here, an error diffusion method is used as a method of performing halftone expression in a pseudo manner using binary data.

  In this method, if the density of an image is greater than a certain threshold value, it is assumed that the density data is “255”, and if it is less than a certain threshold value, the density data is “0”. In other words, the difference between the density data and the binarized data is distributed to surrounding pixels as an error signal.

  In this embodiment, error distribution is performed by multiplying a weighting factor on a matrix prepared in advance with an error caused by binarization and adding it to surrounding pixels. As a result, the average density value of the entire image is stored, and the halftone can be expressed in a pseudo binary manner.

  The binarized image data is sent to the control unit 303. Further, input image data from the external computer input from the external I / F processing unit 209 is processed as binary image data by the external I / F processing unit 209, and thus input to the control unit 303 as it is. The control unit 303 temporarily stores all images of the original to be copied in the image storage unit 304 or sequentially reads out and outputs the image data from the image storage unit 304 according to a command from the copying apparatus main body 100.

  The image storage unit 304 includes a hard disk (HD) 310 as an unillustrated scuzzy (SCSI) controller and an external storage device, and job data (image data or a data set for it) is stored in the hard disk 310 in accordance with a command from the scuzzy controller. Including various print processing condition parameters).

  The plurality of image data stored in the hard disk 310 are output in the order corresponding to the editing mode designated by the operation unit of the copying apparatus main body 100.

  For example, in the sort mode, the first copy is read sequentially from the last page of the document bundle to the first page by the circulation type automatic document feeder 180 and is output while being stored in the hard disk 310. For the second and subsequent copies, the image data of the original S stored at the time of the first copy is read from the hard disk 310 in order from the last page to the first page and output. Thereby, it can play the same role as a sorter having a plurality of bins.

  The FAT (file allocation table) is stored in the RAM 208 when a speed such as one copy is required, and is stored on the hard disk 310 in the sort mode as described above. In this FAT, a data number is assigned to each image data written to the hard disk 310 and stored every time image data is written.

  Since the FAT reference value is determined by this data number, the writing position of the written image data is specified by the data number.

  The problem here is that the FAT data is stored in the RAM 208, and when the paper is out or jammed, only the FAT data disappears when the power is turned off, and the image data cannot be managed.

  Further, the update of the FAT and the image data is performed after the output of the image data when the erasing mode is set, and the erasing mode can be designated by the operator through the operation unit (not shown) of the copying apparatus main body 100. It is configured as follows. Whether or not the erasing mode is set is determined by the control unit 303 according to the setting state of the operator on the operation panel provided in the present system, and the processing of storing and erasing the FAT is performed by the CPU circuit shown in FIG. This is executed by the control unit 303 based on an instruction from the unit 205.

  When executing this mode, in response to the request for execution of the mode being made by the operator, whether or not the user has the authority is requested to input authentication data such as password input or IC card input. A UI screen is displayed, and in response to input of proper authentication data via the screen, execution of an erase mode, which will be described later, is permitted. On the other hand, authentication data is not input or incorrect authentication data. When “” is input, the CPU circuit 205 may be configured to prohibit execution of an erasure mode, which will be described later, and close a setting screen for the erasure mode.

  Image data called from the image storage unit 304 and image data not stored in the image storage unit 304 are sent to the smoothing unit 305. The smoothing unit 305 first converts 1-bit data into 8-bit data, and sets the image data signal to a state of “0” or “255”.

  The converted image data is obtained as the sum of multiplications of coefficients on a predetermined matrix and density values of neighboring pixels, and is replaced with a weighted average value.

  As a result, the binary data is converted into multi-value data according to the density value in the neighboring pixels, and an image quality closer to the read image can be reproduced. The smoothed image data is input to the γ correction unit 306. When the density data is output, the γ correction unit 306 performs conversion using a table in consideration of the characteristics of the printer, and adjusts the output according to the density value set by the scanning unit.

  Note that the image forming apparatus (image forming system) according to the present embodiment outputs image data read from a scanner unit in response to a user operation via the operation panel of the apparatus for the job. The so-called copy mode for printing on recording paper according to conditions, and print data output from an external device such as a host computer are set in response to a user operation via the printer driver of the host computer for the job In the case of a multi-function device having a plurality of image forming modes such as a so-called print mode for printing on recording paper in accordance with printing processing conditions, a description will mainly be given, but a plurality of image forming such as a copy mode, a print mode, a facsimile mode, etc. Applicable in single function devices with only one of the modesIn any case, the job data of each mode can be output via the hard disk in the image storage unit of the present embodiment, and the CPU circuit unit 205 can output the job data of each mode via the hard disk to the user. Is controlled so as to be output in a desired output process (print process, process to be transmitted to another apparatus, etc.) in accordance with an instruction from.

  The image forming apparatus according to the present embodiment can execute job data input processing and output processing asynchronously by using a hard disk 310 in an image storage unit included in the apparatus described later. Job data (image data) and a plurality of jobs including job data from an external device such as a computer can be held in association with the output conditions set for each job, and then the operation of the image forming apparatus It is equipped with a box function that can be read out at an arbitrary timing according to an operator's instruction from the printing section and can be printed under a desired printing condition. The box mode also has a transmission processing function for transmitting job data stored in the box to an external device in accordance with an instruction from the operation unit from the user.

  Of course, jobs in each operation mode such as a copy mode, a printer mode, and a transmission mode, which are operation modes other than the box mode, can be output using the hard disk.

  When using this function, the user can operate the job registration processing (reading processing) for the box and the job printing processing from the box asynchronously and independently.

  As processing at the time of registration in the box, the user selects a box for storing job data from a plurality of boxes (for example, 100 boxes) provided in the hard disk, Job data registration processing is executed for the selected box (that is, printing processing is not performed at this point).

  Each box can register a plurality of jobs for each box. Note that when a plurality of types of jobs, such as a job from a scanner and a job from a computer, can be handled as in the above-described multi-function device, the job from the computer is developed from PDL data to bitmap data ( (The state of the image data) is controlled so that it is registered in the box (this eliminates the development work at the time of subsequent printing, and takes productivity into consideration so that the user can print immediately when he or she wants the output. ).

  Regarding the procedure for printing the job data in the box, for example, an operation panel of the image forming apparatus (this screen has a function for notifying the user of the setting status and status and an operation function for inputting an instruction from the user. In response to the user selecting the box mode via the touch panel format, the box list is displayed on the operation panel, and the box list screen is displayed. A desired box is selected by the user.

  In response to the user selecting a desired box from the plurality of boxes via the screen, a list of jobs stored in the box is displayed (for example, a plurality of jobs are displayed in the box). If they are stored, the job list is displayed so that the document name and registration date and time can be known. Then, when a desired job is selected by the user via the job list screen, whether the printing condition for the job is output under the printing condition set by the user at the time of storage, or a new printing condition is set, A screen for inquiring to the user is displayed. If the previous printing conditions can be maintained, the confirm button is pressed as it is, and if the setting is to be changed, the setting change button is pressed and a new printing condition is set by the user. Set through the operation panel. Then, when the printing conditions are determined through the above operations, the printing process of the job is executed by the printing unit according to the determined printing conditions.

  When printing, the user is also inquired whether to delete the job after printing via the operation panel. When an instruction to delete job data to be read from the box after printing is set through the operation of the instruction key by the user in the operation unit, the CPU circuit unit 205 prints the box after printing the job. Control to erase from. In addition, when the user performs setting of not erasing after printing through the operation of the instruction key by the user in the operation unit, control is performed so that the job is held in the box as it is after being printed by the printer unit.

  As a result, unnecessary jobs can be deleted, and the necessary jobs can be retained in the box after printing, and repeated as long as the user does not delete them again at the desired timing with the desired printing conditions. The CPU circuit unit 205 controls all units such as the printer unit and the storage unit so that printing can be performed under various printing conditions.

  In the box mode, job data stored in the box can be transmitted to an external device. In this case, a box is selected from the box list, a job to be transmitted is selected from the selected box, and the selected job data is transmitted to the external apparatus according to the set processing conditions. In addition, it is possible to set the transmission form such as facsimile transmission, e-mail transmission, Internet facsimile transmission, etc. and the setting of the transmission destination of the transmission destination from the operation unit at this stage. The job is controlled and configured so that the job can be transmitted to a desired transmission destination in a desired transmission condition and in a desired transmission form.

  As described above, in the box mode of the present embodiment, a user can execute desired output processing such as print processing and transmission processing of a job read from the box.

  FIG. 4 is a flowchart showing an example of the first data processing procedure in the image processing apparatus according to the present invention, and corresponds to the document copy control procedure. S401 to S406 indicate each step. A program for executing this processing is stored in the ROM 207, and this processing is executed by the control unit 303 based on the control of the CPU circuit unit 205.

  First, user settings made via the operation unit (for copy mode and box mode, settings on the operation panel of the image forming system, and for print mode, settings made by the computer's printer driver) The CPU circuit unit 205 determines whether or not the erase mode is set (S401), and if it is determined that the erase mode is not set, the read image data is After the image data is stored in the hard disk 310 together with the FAT (S405) and the stored image data is output by the printer unit 204 (S406), the control is immediately terminated.

  On the other hand, if it is determined in step S401 that the erase mode is set, the read image data is stored in the hard disk 310 together with the FAT (S402), and the stored image data is output from the printer unit 204. After that (S403), the image data stored in the hard disk 310 and the FAT corresponding to the image data are deleted (S404), and control is made to end this processing.

  FIG. 5 is a diagram for explaining data management processing in the information processing apparatus according to the present invention, and shows a processing status storage step according to the present embodiment.

  In FIG. 5, the block management table BMT is set in a backup area of the RAM 208 (an area that does not disappear even when the power is turned off), and a flag storage array is provided for each block of the hard disk 310. A flag is set when the block is secured, and the flag is cleared after erasure by releasing the block. The numerical value in the flag storage array is set to “1” or “0”. When “1” is set, it indicates that the block has not been erased, and when “0” is set. Indicates that the block has been erased.

  As described above, by providing the block management table in the backup area of the RAM 208 in addition to the normal file management, it is possible to check the block being processed even when the abnormal power is turned off.

  FIG. 6 is a flowchart showing an example of a second data processing procedure in the image processing apparatus according to the present invention, and corresponds to the power ON processing procedure. In addition, S601-S604 shows each step.

  Note that, when the power is turned on, the CPU circuit 205 controls to check and erase the uncompleted processing from the beginning to the end of the block management table BMT shown in FIG.

  Note that the image forming apparatus according to the present embodiment includes a mechanical hard key (main power key) (not shown) for instructing ON / OFF of the main power supply on the side surface of the casing of the apparatus main body. The CPU circuit unit 205 determines that the state of the device has transitioned from the OFF state to the ON state in response to the key being pressed by the user when the device is in a power-off state. The power supply to each unit that should operate is executed. In addition, when the device is in a power-on state, it is determined that the device state transitions from the ON state to the OFF state in response to the key being pressed by the user. The power supply to each unit whose operation should be stopped is cut off. In the control described later, before the physical main power key is pressed by the user, a process immediately before the power shutdown including execution of an erase mode described later is executed. Therefore, when the power is shut off, various display controls are executed so that an instruction to turn off the power is input in advance using a touch panel key (soft key) on the operation panel. A program for executing this processing is stored in the ROM 207, and this processing is executed by the control unit 303 based on the control of the CPU circuit unit 205.

  Specifically, it is confirmed whether or not the arrangement of the block management table BMT in FIG. 5 is indicated (S601). If the arrangement is outside the arrangement range, the process is terminated.

  On the other hand, if it is determined in step S601 that it is within the range, the contents of the block management table BMT are confirmed (S602). If it is determined that the value is not set to “1”, the process proceeds to step S604, and “1” is set. If it is determined that it is set, the actual data in the block on the HD 310 is erased (S603).

  Next, the arrangement of the block management table BMT is advanced by 1 (S604), and the process returns to the first step (S601).

  Note that the above-described actual data erasure processing is performed by erasing (overwriting) the management table information data for specifying the storage location of the actual data (image data) in the memory, which has been conventionally performed. This means a complete erasure process rather than a simple erasure process in which apparently the data is erased, such as performing only the process of dissociating the association between the address data and the actual data. This complete erasing process is not a simple erasing process such as erasing only the address data for specifying the storage location of the actual data as the erasing process of the data stored in the memory, but erasing the actual data itself. It is processing to do.

  As an example of the erasing method of the complete erasing process, for example, an arbitrary block (for example, the head storing actual job data) among a plurality of blocks storing actual data (image data) of job data is stored. Blocks or all blocks may be overwritten with arbitrary data (XXXX ...) or predetermined data (AAAAA ...) so that the actual data on the memory is The actual data is actually read from the memory in addition to the above-described work of discontinuing the association with the address data by rewriting the data to the specified data or the predetermined data so that the actual data does not exist on the memory. Make it impossible. This realizes a complete erasure process of actual data. In any case, the present embodiment can be applied as long as it is an erasure processing method for making actual job data itself unreadable (invalid) from the hard disk. In this way, control is performed so that the actual data itself is invalidated.

  This is a function that is expected to become an environment where further security is desired in the future. For example, in the unlikely event that a memory such as a hard disk is removed from an image forming apparatus by a malicious operator, This is a function that is installed to prevent the data from being read out by analyzing the data with a special machine or the like to prevent the data from being read from the hard disk.

  In the first embodiment and the second embodiment, which will be described later, real data that is data to be completely erased (data to be erased in the processes described in FIGS. 5, 6, and 7) For example, image data handled mainly by the image forming apparatus corresponds to this.

  Since the present embodiment has the composite function as described above, the data handled is, for example, copy mode image data corresponding to various job data that can be output using a hard disk, printer mode, and the like. There are various types of job data, such as image data in the transmission mode and image data in the transmission mode.

  Since this embodiment has various functions, for example, when output processing such as print processing and transmission processing is completed, image data to be erased from a memory such as a hard disk and output such as print processing and transmission processing are output. Even after the processing is completed, there are two types of image data to be held in a memory such as the hard disk.

  For example, as the former example, normal copy mode image data (job data) input from the scanner unit, normal printer mode image data (job data) from the host computer, or normal facsimile data received from a facsimile machine Image data (job data) in the facsimile reception mode is output to the output process (print process in accordance with the output processing conditions from the user (print setting parameter for print processing or transmission setting parameter for transmission processing)) after being stored in a memory such as a hard disk. Until the completion of the transmission process), it is stored in the memory for the convenience of printing and editing with a plurality of electronic sort functions. For example, all the output copies specified by the user are printed. Once completed, it is considered unnecessary data and from the memory For example, in response to receiving a print end notification signal from the printer unit (or in response to receiving a transmission end notification signal from the transmission unit) so as to be handled as image data (job data) to be left, the CPU circuit unit 205 controls to execute the deletion processing (complete deletion processing) of the job from the memory. As another example of job data to be deleted after output processing, in other words, for example, image data stored in a temporary area in a hard disk is also image data that is deleted after output processing such as printing. It corresponds to a candidate.

  On the other hand, as an example of the latter, for example, as described above, in the box mode that the image forming apparatus has as an image forming mode, the job data stored in the box is stored in a memory such as a hard disk unless there is an instruction from the user. In response to an output request instruction from the user, it is repeated as many times as necessary in the desired output form as needed, and is read from the memory and printed by the printer unit or by the transmission unit. The transmission processing to another device is configured to be executable.

  That is, the CPU circuit unit 205 determines that such image formation mode / setting image data (job) is a job that remains without being erased from the memory even after the output processing. Is controlled by the CPU circuit unit 205 so that it is not erased from the memory even after it is output (a complete erasure process is not executed). Note that another example of a job that is held without being erased from memory after output corresponds to a hold job that is set to be held after printing in the printer driver setting of the host computer.

  In the present embodiment, for example, when handling certain job data, for example, when it is determined that the job is data to be deleted after output (this is the image forming mode for the job and the setting conditions of the user) Based on information.

  For example, a normal copy mode job such as an electronic sort function, a normal printer mode job, or a normal facsimile mode job), the CPU circuit unit 205 determines that the job is a job to be deleted after printing. As information for enabling discrimination by the unit 205, a flag “1” is set in the table (block management table BMT in FIG. 5) so as to be associated with this job. When the printing process of the job is completed, the erasing process from the memory of the job is executed. When the erasing process is completed, the job flag is rewritten from “1” to “0”.

  On the other hand, when handling a certain job, for example, when it is determined that the job is to be held in the memory without being erased after the printing process (this depends on the image forming mode for the job and the user setting conditions). For example, a job stored in a box or a job to be printed in the box mode is selected from the box, but the job is set to be retained after printing, or The CPU circuit unit 205 associates the job with the job as information for enabling the CPU circuit unit 205 to determine that the job is to be held in the memory even after printing. In addition, a flag “0” is set in the table.

  Even when the printing process of this job is completed, the flag data is referred to, and the erasing process for the job is prohibited. The erasing process of the job is not executed after printing and is held in the memory as it is. Control to end the process in the state.

  Hereinafter, examples of jobs corresponding to jobs to be deleted after printing among a plurality of types of jobs that can be handled by the apparatus of the present embodiment will be listed.

-Normal (* 1) print job output from the scanner unit in the copy mode-Normal (* 1) print job output from the host computer in the printer mode-Normal (* 1) transmitted from the facsimile machine in the facsimile mode ) Print jobs ・ Jobs in a box in which an instruction to delete after printing is set by the user via the operation unit when printing from the box in the box mode ・ Facsimile transmission mode, Internet fax mode, e-mail transmission mode, etc. Mode job that transfers job data stored in the memory to other devices (* 2)
In the above * 1, “normal” print job refers to a job with duplex setting, a job with staple mode, a job with reduced layout mode, a job with enlarged layout mode, etc. This is also the case.

* 2 In this mode, this mode corresponds to this type of job in terms of management although it does not print itself on its own device. In other words, whether it is a printing process or a transmission process, it is managed in a management form of a job to be erased in the memory after the user has executed an output process of desired job data via the memory. Fall under)
As described above, in the present embodiment, a job in which an instruction to store in a memory such as the hard disk of the present embodiment is not explicitly set by the user as a processing condition, and after output processing (including print processing and transmission processing) A job in which an instruction to delete from the memory is explicitly set by the user corresponds to a job to be deleted after output processing. Then, a flag “1” is set for each job for each job, and when the output process is completed, the flag of the job is rewritten from “1” to “0”.

  The following corresponds to a job that should be retained in the memory without being erased from the memory even after the output process (including the print process and the transmission process) among the plural types of jobs that can be handled by the apparatus of the present embodiment. Examples of jobs to be performed are listed.

-A job that was set to be stored in a box on the hard disk that was output from the scanner unit or output from the host computer in the box storage process in the box mode. A job in a box in which an instruction not to delete after printing is set by the user via the operation unit. A job in which an instruction to hold on the hard disk by the user via the printer driver is set for a job output from the computer in the print mode. As described above, in the present embodiment, a job in which an instruction to be stored in a memory such as the hard disk of the present embodiment is explicitly set as a processing condition by the user is stored in the memory even after output processing (including print processing and transmission processing). Should be kept in Corresponding to the job. A flag “0” is set for each job for each job.

  Regarding the box mode of the present embodiment, authentication data (for example, a password or an IC card) can be set in advance by the user via the operation unit for each box, and the CPU circuit unit 205 is, for example, described above. If authentication data is set in the box selected on the box list display screen, control is performed to request the user to input authentication data corresponding to the box via the operation unit.

  Then, in response to the input of the authentication data corresponding to the box, the job list screen stored in the box is displayed, and a desired job is selected by the user via the screen and printed. On the other hand, if the authentication data is not set in the box selected on the box list screen, the job list screen of the box is displayed on the operation unit without requesting the authentication data, and the authentication data is displayed. Control is performed so that the user can select a desired job and print it without performing input.

  Furthermore, in the printer mode, the image forming apparatus (image forming system) of the present embodiment uses authentication data (password) for each job output from the computer to the apparatus via the printer driver of the host computer. Etc.) and a job for which authentication data has been set is output to the image forming apparatus together with the authentication data set for the job. When such a job is received on the image forming apparatus side, When printing such a job by storing it in the memory without printing, the user can input authentication data corresponding to the job in the operation unit of the image forming apparatus, thereby permitting print execution. Control is possible. Such a secure print mode is provided.

  On the host computer side, a job that has been output in a state where authentication data is not set is controlled so that it can be printed by the printer unit as received.

  As described above, in the present embodiment, in the box mode or the print mode, a job that requires authentication data input processing during printing and a job that does not require authentication data input processing during printing can be processed. .

  Therefore, considering such a configuration, in addition to the above-described job management method, a job that requires authentication data input processing at the time of printing is managed as a job that should be held in memory even after printing. The flag “0” is set for such a job, and a job that does not require authentication data input processing at the time of printing is managed as a job that should be erased from memory after printing, and so on. The flag “1” may be set for a simple job, and management may be performed so that the flag is rewritten from “1” to “0” when printing of a job that does not require authentication data input processing is completed.

  As described above, when the CPU circuit unit 205 performs printing processing, whether the job to be printed is a job to be erased from the memory after printing (this device also has a mode for transmitting to an external device). To be precise, it includes print processing and transmission processing, so it is equivalent to a job to be deleted from memory after execution of a user's desired output processing), and a job to be held from memory after printing (this book) Since the apparatus also has a mode for transmitting to an external apparatus, it accurately includes print processing and transmission processing.

  Therefore, the identification information for enabling the CPU circuit unit 205 to identify whether the job is to be retained without being erased from the memory even after execution of the user's desired output processing, for example, Control is performed so that the flag data is stored in a memory in a table format (for example, the block management table BMT in FIG. 5). When the CPU circuit unit 205 determines that the print processing of the job has been completed based on the print end signal from the printer unit, the CPU circuit unit 205 refers to the identification information corresponding to the job on the table. If the job corresponds to “1”, it is controlled to be erased from the memory as a job to be erased. If the job corresponds to “0”, the job does not need to be erased (or the erase processing has already been performed). As a completed job, control is performed so as to end the process without executing the erasure process for the job.

  Next, identification data for enabling the CPU circuit unit 205 to distinguish whether the data is to be erased after printing or the data to be retained without being erased after printing is described for each job. Next, it will be described whether storage management is performed in association with each other.

  In the present embodiment, as described above, a large-capacity image memory capable of storing a plurality of pages and a plurality of jobs such as a hard disk is mounted with an image forming apparatus (also referred to as an image forming system). In addition, it is possible to execute processing such as multi-copy printing and editing processing, and to execute print data input processing and print data output processing asynchronously and independently (of course, synchronously execute) Can also be made).

  Therefore, even if the job is to be deleted after printing, there is a period in which the job is stored in the memory temporarily. This is the case, for example, when a large number of copies are repeated even in a normal print job, or when a small number of copies have to wait for the print order because a plurality of other print jobs are already registered in the print queue. Etc., the period becomes longer. Also, error events such as paper jam error, document jam error, staple staple jam error, etc. occur when there is a consumable such as no paper, no toner, no staple, etc. In this case, the above-described period occurs.

  As described above, in an image forming apparatus equipped with a memory in order to realize an improvement in productivity and high added value as in the present embodiment, even if a job is to be deleted after printing, the job is reduced to a small number. A period of storage in memory has occurred.

  With this nature and situation in mind, for example, if a job to be deleted after printing in the memory and the printing process has not been completed, for example, a paper jam error, document jam error, The printing process is completed due to the occurrence of an error event such as a staple needle jam error, the occurrence of a warning event such as the absence of consumables as described above, or when the user inputs a cancel instruction. The main power key (mechanical hard key) provided on the housing of the main body of the image forming apparatus due to the reason for the configuration of the device or the user's unfamiliar operation. Is pressed by the operator, and thereby, the power supply to the image forming apparatus is expected to be cut off.

  This is because, for example, when the operator intentionally turns off the power to release the interruption factor as described above (for example, when removing paper jam, document jam, staple staple jam, or supplying the above consumables) Or when the power is turned off accidentally by an unfamiliar operator who does not know how to deal with it.

  As described above, when the main power of the image forming apparatus is turned off in a state where the job data that has not yet been output in the memory and the job data to be deleted after the output exists in the memory However, although it is preferable that the job data is appropriately treated as illegal / unnecessary data, the power is shut off while remaining in the memory. In such a case, when the user depresses the main power key of the image forming apparatus again, the image forming apparatus starts up again (turns on), but remains due to the unexpected power off. The above unnecessary data (in other words, data to be deleted when the output process is completed) remains in the memory even after the power is turned on.

  In the present embodiment, focusing on such a situation, in the future, it will become an environment where security is desired more and more, and such a situation is considered a problem. I try to prevent it. In addition, the image forming apparatus can handle a job that is intentionally intentionally controlled to be held without being erased from the memory after printing in order to provide high added value such as a box function. Mixed in memory.

  Therefore, in the present embodiment, since the above-described problems are to be solved, even the jobs to be held in the memory after printing (such as job data stored in the box) are erased together from the memory. In order to enhance security, a problem such as the occurrence of the above problem can be prevented in a state in which the problem such as the occurrence of such a problem is prevented in advance.

  For this purpose, the present embodiment applies to job data to be deleted after printing among various types of job data stored in a storage unit such as a hard disk provided in the image forming apparatus (image forming system). At an arbitrary timing (when an erasing mode is executed by a user operation as in the above embodiment, when the main power supply of the image forming apparatus is turned on, or when the main power supply of the image forming apparatus is turned off as will be described later) For the job data to be erased after printing out of various types of jobs stored in the storage unit and controlled to execute the complete erasure process, the current image forming apparatus Even if the timing is the above arbitrary timing, control is performed so as to prohibit the execution of the complete erasure processing.

  For example, in the image forming apparatus (image forming system) according to the present embodiment, the CPU circuit unit 205 outputs a user's desired output process (of a plurality of types of job data remaining in a storage unit such as a hard disk). Control is performed so that the complete erasure process is executed for job data (see various job examples described above) corresponding to a job to be erased (including print processing in the printer unit and transmission processing to an external device) The actual data reading process is physically disabled), among the plural types of job data remaining in the storage unit, the job data corresponding to the job to be retained after the user's desired output process (described above) For the various job examples described above, control is performed so as to prohibit the execution of the complete erasure process (hereinafter, this series of selective control is performed with the actual data complete erasure). Also referred to as a processing sequence).

  The CPU circuit unit 205 causes the image forming apparatus to be turned on each time the main power is turned on by the operation of the main power key provided on the casing of the image forming apparatus. A program for executing the complete erasure processing sequence is automatically started, and control can be performed so that the complete erasure processing sequence is automatically executed. Thus, for example, the operator does not actively give an instruction to execute the above control every time, for example, every morning, he / she comes to the company and only turns on the main power supply of the image forming apparatus. The erasing process sequence can be automatically executed.

  It should be noted that whether or not to execute such a series of operations of automatically starting and executing the complete erasure processing sequence when the main power of the image forming apparatus is turned on is set as an initial setting in advance by the operator ( In this case, it may be configured to be set by an administrator).

  For example, as one of the setting screens for the administrator mode in the operation unit, for example, the “Permit automatic deletion process sequence automatic execution at power-on” key and the “Complete deletion process sequence automatic execution at power-on” The administrator setting screen with the “prohibit” key is controlled to be displayed on the display unit, and the administrator can select whether to permit or prohibit automatic execution of the complete erasure process sequence when the power is turned on. You may do it. However, even in the case of such a configuration, it is better to configure so that the setting of “permit automatic execution of complete erasure processing sequence at power-on” is selected by default. Thus, the range of convenience can be expanded.

  In addition, as an example of control at any timing other than when the power is turned on (as will be described in detail later), the CPU circuit unit 205 performs the operation of the main power key by the operator of the image forming apparatus. When the main power source is turned off (power is turned off) (in the example described below, immediately before the main power source is actually turned off), a program for executing the complete erase processing sequence is started up and the complete erase processing sequence is executed. It is controlled to execute.

  In this case, when the main power of the image forming apparatus (image forming system) is turned off (immediately before in the example described later) as in the embodiment described later, whether or not the complete erasure processing sequence is executed each time. The CPU circuit unit 205 may be configured to execute an operation in accordance with an instruction from the user. Thus, for example, the main power supply can be turned off after the complete erasure process sequence is performed, or the main power supply can be turned off without executing the complete erasure process sequence. The room for user selection at the time is widened, and the range of convenience can be further expanded.

  Accordingly, when the main power is turned on (first timing) for the image forming apparatus, the CPU circuit unit 205 performs the complete erasure processing sequence each time (every time the power is turned on). Is automatically executed (even if the user does not explicitly instruct execution of the complete erasure process), and when the main power of the image forming apparatus is turned off (second timing) In each case (every time the power is turned off), the operator can select whether or not to execute the complete erasure processing sequence via an operation unit (for example, each UI screen described later). .

  Whether or not the complete erasure processing sequence can be executed when the power is turned off may be set in advance by an administrator as an initial setting item, similar to the setting of whether or not the complete erasure processing sequence is executed when the power is turned on. .

  In this case, for example, as one of the setting screens for the administrator mode in the operation unit, for example, the “Permit automatic deletion process sequence automatic execution at power-off” key and the “Complete deletion process at power-off” The administrator setting screen with the “Prohibit automatic sequence execution” key is controlled to be displayed on the display, and the administrator selects permission / prohibition of automatic execution of the complete erasure processing sequence when the power is turned off via the screen. You may comprise. However, even in the case of such a configuration, display control such as a configuration in which the setting of “permit automatic execution of complete processing sequence at power-off” is selected by default may be performed.

  As described above, this embodiment, including the later-described embodiment, can enhance security in the apparatus and system, and at the same time, improve both security and operability in the office environment and usage. It can be done in a well-balanced manner in response to the various needs of the people.

[Second Embodiment]
FIG. 7 is a diagram for explaining an example of data erasure processing in the information processing apparatus according to the second embodiment of the present invention, and shows the transition of the security shutdown screen displayed on the operation panel 210 shown in FIG. It is.

  It should be noted that, in this screen, before the power of the main body is turned off, the block management table BMT shown in FIG. 5 is extracted and erased, and the power is turned off after the erasure is completed. It is as follows. A program for executing this processing relating to display control is stored in the ROM 207, and this processing is executed by the control unit 303 based on the control of the CPU circuit unit 205.

  Specifically, in response to the user pressing “completely erase and turn off power” on the shutdown screen (see FIG. 7A) on the operation panel 210, the screen shown in FIG. Display control to shift to the confirmation screen shown. When the user selects and presses the button BT2 corresponding to “No” on the confirmation screen, control is performed to return to the idle screen, and when the button BT1 corresponding to “Yes” is pressed, the operation panel 7 is controlled so as to shift to the display during erasure shown in FIG. 7C, and the corresponding block in the HD 310 is erased by the block management table BMT in step S603 shown in FIG. Erasure processing of data stored in the block to be executed). When the erasing process to be executed is completed, the image storage unit returns information indicating that to the CPU circuit unit 205.

  When the CPU circuit unit 205 determines that the erasure of the block has been completed by receiving the erasure completion signal from the image storage unit, the CPU circuit unit 205 displays the power-off display shown in FIG. The display is controlled to shift to, and the user turns off the power.

  The display control of each UI shown in FIG. 7 by the CPU circuit unit 205 will be described more specifically.

  The CPU circuit unit 205 displays a system management setting screen (not shown) on the operation panel in response to an administrator mode key (not shown) on the operation unit of the image forming apparatus being pressed by the operator. . Then, in response to the “Hard Disk Complete Erase ON / OFF” key on the screen being pressed by the operator, a Hard Disk Complete Erase ON / OFF screen having display components as shown in FIG. Is displayed on the operation panel. The operation screen of FIG. 7A includes touch panel keys that react when pressed by the user, such as an “ON” key and an “OFF” key.

  Further, the “completely erase and turn off the power” button on the screen in FIG. 7A is controlled to be displayed when the “ON” button is selected on the screen. In other words, when the “OFF” button is selected by the user on the screen, the CPU circuit unit 205 causes the “completely erase and turn off power” button on the screen to be erased from the screen. Control display. Or, without deleting from the screen, in response to the “OFF” button being selected, the “Completely delete and turn off the power” button is displayed in gray out (shaded display). The display is controlled so that the user cannot press the "Power off" button. In response to the "ON" button being pressed, the "Completely erase and power off" button is displayed effectively and can be selected by the user. Control display. As described above, this embodiment achieves both prevention of erroneous operation by the user and improvement in operability.

  7A, when the “ON” button on the screen of FIG. 7A is selected and the “completely erase and turn off the power” button is selected, the screen shown in FIG. In response to the user pressing the “OK” key on the screen, the CPU circuit unit 205 causes the hard disk complete erasure process (complete erasure process sequence) when the main power supply is cut off as shown in FIG. An operation screen for selecting whether or not to execute is displayed by the user. In response to the fact that “ON” is pressed on the screen of FIG. 7A, “completely erase and turn off the power” is selected, and the “OK” key is pressed, FIG. Although the screen has been changed, the prevention of erroneous operation is enhanced by inquiring the user a plurality of times in order to accurately execute the complete erasure or to accurately grasp the intention of the user.

  As an example of this operation screen, as shown in FIG. 7B, “unnecessary remaining data (job data remaining in the memory despite being a job to be deleted after printing as described above”). , Etc.) to display the guidance data such as “Please confirm that there is no job and press [Yes].” And an instruction unit for displaying a setting key (“Yes” key in the figure) for inputting an instruction to permit execution of a complete hard disk erasing process when the main power of the image forming apparatus is shut down, and a main part of the image forming apparatus An operation surface including an instruction unit for displaying a setting key (“No” key in the figure) for inputting an instruction for prohibiting execution of the hard disk complete erasure process when the power is shut down is configured on the display unit. Displaying controlled by the CPU circuit unit 205.

  At the stage where this screen is displayed, control is performed so that the “system status / cancel” key is displayed in the remaining display area on the operation panel. Here, in response to the user pressing the “system status / cancel” key, the CPU circuit unit 205 can notify the user of the system status and status status (error status and job processing status) of the own apparatus. Control to display the display screen.

  By looking at this screen, the user can check whether there are any jobs being processed, whether necessary data remains, unnecessary data remains, etc., and press the "Close" key on that screen In response to this, the CPU circuit unit 205 performs display control so that the display content of the display unit is switched again to the setting screen of FIG. Thereby, after confirmation by the user is completed, the final determination can be selected by the user via the screen of FIG. 7B, and the operability can be further improved.

  In response to the user pressing the “Yes” key and the “OK” key on the operation screen of FIG. 7B, the CPU circuit unit 205 performs the complete erasure processing sequence at the time of power-off. It is determined that the execution is permitted, the execution of the complete erasure processing sequence is started, and the display content of the display unit is controlled to transition to a display screen as shown in FIG. The CPU circuit unit 205 is a message display unit for displaying message data such as “Erasing unnecessary data. Do not turn off the main power” as shown in the screen of FIG. And a display screen including a status display unit that displays a bar graph format that can visually represent and identify the processing status (progress status) of the complete erasure process is controlled to be displayed on the display unit. .

  When the CPU circuit unit 205 determines from the notification signal from the image memory unit that the complete erasure process has been completed, the CPU circuit unit 205 controls the display content of the operation unit to be switched to a display screen as shown in FIG.

  The CPU circuit unit 205 performs a complete erasure process in the image forming apparatus such as “The unnecessary data has been erased. Turn off the main power supply on the right side of the main body” as shown in the screen of FIG. This includes both a message for notifying the user that the process has been completed and guidance data for guiding the operator to the next operation after the complete erasure process is completed. Control is performed so that a display screen having a display unit for displaying the notification data is displayed on the display unit.

  Thus, the operator can easily grasp that the main power key is installed on the right side surface of the apparatus main body according to the guidance by looking at the guidance data of the operation unit, and by pressing the main power key. The main power supply of the image forming apparatus can be shut down. As described above, the power supply to the apparatus can be cut off by the operation of the main power key from the operator in the state where the complete erasure processing is completed.

  In addition, the display control as shown in FIGS. 7C and 7D notifies the user as guidance data that the user presses the main power key after waiting for completion of the complete erasure process. Therefore, it is possible to make the user wait for the completion of the complete erasure process, and the user himself desires the complete erasure process, but the user himself / herself presses the main power key before the complete erasure process is completed. The operability is further improved without causing a problem such as a malfunction that may occur because the power supply is cut off due to pressing.

  On the other hand, when the user presses the “No” key and the “OK” key or presses the “Cancel” key on the operation screen of FIG. It is determined that the execution of the complete erasure processing sequence when the power is shut off is prohibited. When the “cancel” key is pressed by the user on the operation screen in FIG. 7B, the CPU circuit unit 205 returns to the setting screen in FIG. 7A, which is the previous operation screen. Control display.

  Further, in the operation screen of FIG. 7B, when the user presses the “No” key and the “OK” key, the setting for prohibiting the execution of the complete erasure processing sequence when the power is shut down is confirmed. 7 to return to the system management setting screen, which is the uppermost layer of the operation screen of FIG. 7, or close the system administrator setting screen and display the initial screen (for example, normally displayed on the display unit of the image forming apparatus). Return to the initial screen for setting the copy mode.

  In any case, the CPU circuit unit 205 prohibits execution of the complete erasure processing sequence when the power is shut off. In this case, since the execution of the complete erasure process itself is not started, it is natural that the user installs in the apparatus main body at his / her favorite timing without having to wait for the completion of the complete erasure process as in the previous example. The pressed main power key can be pressed. In such a situation, the CPU circuit unit 205 responds to the depression of the main power key, and prohibits execution of the complete erasing process sequence when the power is turned off, in the image forming apparatus (image forming system). Control to shut off the main power supply.

  If this selection is made, the complete erasure process is not performed when the power is turned off, so even if there is unnecessary data remaining on the hard disk, it remains. However, the control of the first embodiment described above controls the image forming apparatus to automatically execute the complete erasing process sequence when the power is turned on (when the power is turned on). Of course there is no worry.

  Therefore, with regard to the time required for complete erasure processing, assuming that the more data that remains, the longer it will take for the complete erasure processing, if the user places more importance on security enhancement than time. In addition to the automatic execution of the complete erasure process sequence when the power is turned on for the image forming apparatus, execution of the complete erasure process sequence may be selected even when the power is turned off.

  On the other hand, if the user wants to minimize the waiting time of the user when the power is shut down (the time until the user turns off the main power key of the image forming apparatus), the security does not need to be further improved. Only the complete erasure process sequence is automatically executed when the image forming apparatus is turned on, and the execution of the complete erasure process sequence is not selected when the power is turned off.

  As described above, the present embodiment realizes both further improvement of security and convenience in a state corresponding to various needs from users. In addition, as shown in FIG. 7, by displaying various setting screens and display screens, it is possible to explicitly notify the user that the actual complete erasure process is being executed. It is possible to prevent troubles such as whether the user is anxious about whether or not the user is executing, and to give the user a sense of security.

  From this point of view, the present embodiment is at least one of a plurality of operation modes such as a copy mode, a printer mode, a transmission mode, and a box mode via a storage unit capable of storing and holding a plurality of job data. In the image forming apparatus (image forming system) capable of executing the above operation modes, a further improvement in security and a further improvement in convenience are realized.

  According to the embodiment, predetermined information is stored in a storage area, management information for specifying a position on the storage area where the predetermined information is stored is stored, and the storage specified by the stored management information The processing status of the predetermined information stored at a position on the area is stored, and based on the status, the processing that has not been completed in the previous processing status storage process is extracted and erased when the power is turned on. It is possible to quickly delete the halfway predetermined information.

  In addition, before the power is turned off, it is possible to extract and erase items that have not been processed in the previous process status storage process, and to turn off the power after the erasure is completed. It will never be.

  Furthermore, the predetermined information can be surely erased even in various abnormal situations of the information processing apparatus, and the reliability of confidentiality can be further improved.

  The configuration of a data processing program that can be read by the information processing apparatus according to the present invention will be described below with reference to the memory map shown in FIG.

  FIG. 8 is a diagram for explaining a memory map of a storage medium for storing various data processing programs readable by the information processing apparatus according to the present invention.

  Although not particularly illustrated, information for managing a program group stored in the storage medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, a program for installing various programs in the computer, and a program for decompressing when the program to be installed is compressed may be stored.

  The functions shown in FIGS. 4 and 6 in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a storage medium such as a CD-ROM, a flash memory, or an FD, or from an external storage medium via a network. Is.

  As described above, a storage medium storing software program codes for realizing the functions of the above-described embodiments is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus stores the storage medium in the storage medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the programmed program code.

  In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.

  Therefore, as long as it has the function of the program, the form of the program such as an object code, a program executed by an interpreter, or script data supplied to the OS is not limited.

  As a storage medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card, ROM, DVD, etc. Can be used.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

  As another program supply method, a browser of a client computer is used to connect to a homepage on the Internet, and the computer program itself of the present invention or a compressed file including an automatic installation function is stored on a recording medium such as a hard disk from the homepage. It can also be supplied by downloading. It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server, an ftp server, and the like that allow a plurality of users to download a program file for realizing the functional processing of the present invention on a computer are also included in the claims of the present invention.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. It is also possible to execute the encrypted program by using the key information and install the program on a computer.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Further, after the program code read from the storage medium is written to a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  The present invention is not limited to the above embodiments, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these are excluded from the scope of the present invention. is not.

  Although various examples and embodiments of the present invention have been shown and described, those skilled in the art will not limit the spirit and scope of the present invention to the specific description in the present specification.

  Note that the present invention is not limited to the above-described embodiment, and it is needless to say that various modifications can be made without departing from the gist of the present invention.

  In the second embodiment, the case where the administrator erases the block data on the hard disk when the power is turned off has been described. However, the administrator authority is approved on the operation panel shown in FIG. If the approval is OK, the block erase history may be managed by transferring the erased block list to the administrator's host. At this time, it is optional to transfer the data transmission with an encryption process.

  In the above-described embodiment, the case of forcibly erasing according to the value set in the block data stored in the hard disk 310 has been described. However, the security level is added, the block data to be erased and the block to be saved The block data may be selectively erased by identifying the data.

  At this time, it is optional to set the security level according to the attribute of the data to be received (according to the image, text, and graphics object type).

It is a vertical side view which shows the structure of the information processing apparatus which shows 1st Embodiment of this invention. It is a block diagram which shows the control structure of the information processing apparatus shown in FIG. FIG. 3 is a block diagram illustrating a detailed configuration of an image management unit illustrated in FIG. 2. It is a flowchart which shows an example of the 1st data processing procedure in the image processing apparatus which concerns on this invention. It is a figure for demonstrating the data management process in the information processing apparatus which concerns on this invention. It is a flowchart which shows an example of the 2nd data processing procedure in the image processing apparatus which concerns on this invention. It is a figure explaining transition of the security shutdown screen displayed on the operation panel shown in FIG. It is a figure explaining the memory map of the storage medium which stores the various data processing program which can be read by the information processing apparatus which concerns on this invention.

Explanation of symbols

201 Image reading unit 203 Image management unit 204 Printer unit 205 CPU circuit unit 210 Operation panel unit

Claims (9)

An image forming apparatus configured to cause an output unit to perform output processing of at least one of printing or transmission of image data stored in a storage unit according to an output instruction from an operation unit,
The image forming apparatus includes:
In response to execution of the output process by the output means , the erasure means starts the erasure process of the image data stored in the storage means, and indicates which part of the image data has been erased by the erasure process. Configured to remember the processing status ,
And the image forming apparatus comprises:
Even if the erasing process is incomplete, the apparatus is configured to turn off its own power according to the operator's request from the operation means,
And the image forming apparatus comprises:
If the erasing process to supply the OFF state of the apparatus in accordance with the request prematurely, the subsequently after the power of the self apparatus to the ON state, the erase unit based on the stored processing state Configured to complete the erasure process of the unerased portion of the image data ;
An image forming apparatus. The image forming apparatus according to claim 1,
The image forming apparatus includes:
In the image data stored in the storage unit, the erasing unit performs the erasing process on the image data requiring the erasing process without performing the erasing process on the image data other than the image data requiring the erasing process. Composed,
An image forming apparatus. The image forming apparatus according to claim 2,
The image forming apparatus includes:
According to a request different from the request from the operation unit,
It is configured to turn off the power of its own device after completing the erasing process without turning off the power of its own device without completing the erasure processing,
And the image forming apparatus comprises:
Even when turning off the power of its own device after completing the erasure process,
Even when the erasing process is performed after turning on the power of its own device,
At least as the erasing process,
The erasing unit causes the erasing unit to perform the erasing process on the image data requiring the erasing process without performing the erasing process on the image data other than the image data requiring the erasing process on the image data stored in the storage unit. Composed,
An image forming apparatus. The image forming apparatus according to claim 1,
The image forming apparatus includes:
A screen displayed on the operation unit when an operation for turning off the power of the own device is performed by the operator at the operation unit or displayed on the operation unit when an instruction from the administrator is input Configured to accept the request via at least one of the screens;
An image forming apparatus. The image forming apparatus according to any one of claims 1 to 4 ,
The image forming apparatus includes:
At least during the erasing process, the erasing process status is shown without displaying another display screen different from the display screen configured to show the erasing process status on the operation unit. Configured to display the display screen configured in the operation unit,
An image forming apparatus. An image forming apparatus according to any one of claims 1 to 5 ,
The image forming apparatus includes:
As the erasing process,
Configured to cause the erasing means to perform a process of overwriting the image data with data different from the image data that requires the erasure process,
An image forming apparatus. A control method applied to an image forming apparatus configured to cause an output unit to perform output processing of at least one of printing or transmission of image data stored in a storage unit according to an output instruction from an operation unit,
In response to execution of the output process by the output means , the erasure means starts the erasure process of the image data stored in the storage means, and indicates which part of the image data has been erased by the erasure process. Steps for storing the processing status ;
A step for turning off the power of the image forming apparatus in accordance with an operator's request from the operation unit even if the erasing process is incomplete;
In the case where the image forming apparatus is turned off in accordance with the request while the erasing process is not yet completed, the image forming apparatus is turned on based on the stored processing state after that. A step for completing the erasing process of an unerased portion of the image data by the erasing means;
A control method comprising: A computer-readable storage medium storing a program for causing a computer to execute the control method according to claim 7 . A computer-executable program for causing a computer to execute the control method according to claim 7 .

Images