JP4416702B2 - Image data processing device - Google Patents

Description

  The present invention relates to an image data processing apparatus such as a digital copying machine comprising a scanner device and a printer device, and is preferably connected to a communication path such as a network and functions as image communication and a printer in addition to the function as the copying machine. Specifically, in order to process image data input to the multifunction device, it is temporarily stored in a storage device mounted on the device, and processing of the stored image data is performed. The present invention relates to an image data processing device that invalidates image data in a storage device for those that have been completed.

  2. Description of the Related Art In recent years, digital copying machines have been commercialized in which an image of a document is electronically scanned and read by a scanner device, and image data output from the scanner device is recorded and output from a printer device. Recently, it has evolved into a digital multi-function peripheral equipped with communication functions (fax function, printer function, etc.) for communicating with external devices and transmitting and receiving image data. In addition, a storage device that temporarily stores image data to be processed as a digital multi-function peripheral is also installed, and has been improved so that a large amount of image data and a plurality of jobs can be processed efficiently.

  On the other hand, there are various types of storage devices for storing image data, such as a storage device comprising a semiconductor memory and a storage device comprising a magnetic storage medium such as a hard disk device. In these storage devices, the environment for storing image data is different in terms of storage capacity, cost, writing speed, reading speed, volatility, and non-volatility.

  In particular, in a magnetic storage device such as a hard disk device, each area is managed by dividing a disk (storage medium) into small units by management data called FAT. When data is stored in each area of the disk (storage medium), the FAT data is updated, and when the data stored in each area is read out as necessary, the FAT data is used as a basis. Reading out.

  Currently, this hard disk device is installed in a digital multi-function peripheral as an auxiliary storage device for semiconductor memory in terms of storage capacity, price (part cost), data transfer speed, etc., and a certain amount of job data is stored on the semiconductor memory. While processing, the newly input job data is temporarily stored, and read and processed on the semiconductor memory when the processing order comes. This configuration is provided to the market as a processing system that can efficiently process a large amount of job data without stagnation as a system (digital multi-function peripheral) that processes image data.

  However, when highly confidential document data is processed by such a digital multi-function peripheral, there is a problem in terms of security. For example, job data (image data) temporarily stored in each area of the hard disk device is updated when the FAT data is no longer needed, and new image data is stored based on the FAT data. Unless new image data is overwritten in the area where unnecessary image data is stored or image data is forcibly erased as an unnecessary data area, the job data itself remains as data. It is.

  Therefore, when the processing is completed in the digital multi-function peripheral, the image data area stored in the hard disk device is forcibly deleted, or the irregular pattern image generated by random numbers is overwritten, and the image is An image processing apparatus that cannot be reproduced as data has been proposed (see, for example, Patent Document 1).

  However, strictly speaking, since the storage device is based on a magnetic storage medium, new image data or image data that has been previously stored can be obtained only by overwriting or erasing a specific pattern. It is not completely unreadable.

Therefore, in order to solve the above-mentioned problem, the applicant of the present invention repeatedly deletes the image data stored in the memory according to the security level when erasing the image data stored in the memory. Thus, an image processing apparatus that achieves sufficient security of image data is provided. When the “image data erasing process” is in operation, such as when a job is completed or a job is cleared, this image processing device displays a window indicating that the current data is being erased at the approximate center of the display screen. (For example, refer to Patent Document 2).
JP-A-9-284572 JP 2004-7059 A

  By the way, recent digital multi-function peripherals may output an image of a document read from a scanner device mounted on the apparatus, or may output image data sent from an external device via a communication path. In some cases. Here, a big difference is whether or not there is a user in front of the apparatus when image data is output.

  If you want to copy or send a document, set the document, set the copy and transmission conditions from the operation panel, and instruct the start of processing (start switch operation). It is normal. On the other hand, when image data is sent via a communication path (network: LAN, telephone line, etc.), there is no user in front of the apparatus because the image data is generated by an operation instruction from an external device. Is normal.

  On the other hand, in the image processing apparatus described in Patent Document 2, when the “image data erasing process” is operating due to the end of a job or the clearing of a job, the image erasing process is currently performed. The window will always be displayed. In other words, regardless of how the data to be erased is input, and regardless of the status of the device, a guidance display window for erasing (invalidating) data is displayed each time image data is erased. It appears on the operation screen and is notified to the user.

  The problem here is the relationship between the user in front of the device and the image data to be invalidated. If the image data to be invalidated and the user in front of the device are completely unrelated, The display window is meaningless, and in some cases, it may interfere with the operation and cause a deterioration in operability.

  For example, suppose that another user sets a copy or transmission condition by setting a document to be copied or transmitted to a copier while printing out image data sent from a personal computer via a network. At this time, when the image data being printed is completed, a display window that indicates the start of erasure (invalidation) of the processed image data is displayed on the operation screen. Therefore, if another user is standing in front of the device and setting new job conditions, a display window will be displayed suddenly during the setting, and the user who is currently operating Problems such as confusion occur.

  The present invention was devised to solve such a problem, and its purpose is to determine whether a user related to the image data to be invalidated is in front of the apparatus before starting the invalidation of the image data. Thus, an object of the present invention is to provide an image data processing apparatus that can accurately guide the user to invalidate the image data.

  In order to solve the above problems, an image data processing apparatus according to the present invention includes an image data processing unit that processes input image data, and an image data processing unit that includes a data invalidation unit that invalidates data that has been processed. The apparatus further comprises notification means for notifying that the data is invalidated by the data invalidation means, wherein the notification means is provided when the user who has input the data invalidated by the data invalidation means Based on whether or not the notification means can be confirmed, a notification form to the user is determined.

Here, as one method for determining whether or not the user who has input the data to be invalidated can check the notification means, the user who has input the invalidated data can check the notification means Is provided with a determination criterion table that is set in advance based on the operation mode of the apparatus or the input path of the image data , and the notification means refers to the determination criterion table to determine the state. It can be configured to determine the notification form to the user based on the determination result.

  A specific example of the determination criterion will be described. As a condition that the user related to the invalidated data is not displayed in front of the apparatus, for example, processing is performed in parallel during a new copy reservation. When the output of a print job is completed, the output of a received fax image that is processed in parallel during a new copy reservation is completed, and the output of a print job that is processed in parallel during a new transmission reservation Is completed, when the output of the received fax image being processed in parallel during the new transmission reservation is completed, while the machine is waiting for a new job instruction, the job being printed is completed When the machine is waiting for a new job and the output of the received fax image during print processing is completed, the original to be sent is scanned and the transmission is completed. When it took time, and the like.

  In addition, as a condition for displaying that the user related to the invalidated data is in front of the apparatus, for example, when the original to be copied is read and printed out, the original to be transmitted is selected. When image data is transmitted and processed via a network, image data sent via the network is held in the apparatus, and an output instruction is issued from the image data.

The above conditions are stored as judgment criteria in the judgment criteria table, and by referring to this judgment criteria table, it is judged whether the user related to the data to be invalidated is in front of the device, and the operation panel display It is determined whether or not to display data invalidation by the display window on the screen. As a result, it becomes possible to accurately guide the invalidation of the data, and the user related to the image data can be assured that the invalidation of the data can be confirmed. In addition, it becomes possible to make a reservation instruction for a new process smoothly for a user who is not related to the invalidated data without hindering the operation.

In this case, the notification unit displays time when it is determined that the user is not in front of the device based on a determination result of whether or not the user who has input the data is in a state where the user can check the notification unit. The display time may be switched so as to be shorter than the display time when it is determined that the user is in front of the device . Specifically, the notification time when the user who has input data is in a state where the notification means can be confirmed is, for example, 5 seconds, and the notification time when the user who has input data is in a state where the notification means cannot be confirmed is set as the notification time. For example, it can be 1 second.

  Further, the notification unit may be configured to switch a size of a notification screen to notify the user based on whether or not the user who has input the data is in a state where the user can check the notification unit. Specifically, when the user who has input data is in a state where the notification means can be confirmed, the size of the notification screen is enlarged and displayed in the center of the display screen, and the user who has input the data When the notification means cannot be confirmed, the size of the notification screen is reduced and displayed in the corner of the display screen. As a result, the user who has input the data can clearly confirm that the data has been invalidated. In addition, when a person who is not a user who has input data is operating the apparatus, it is only displayed small in the corner of the display screen, and thus does not hinder the input operation.

In addition, the notification unit displays a notification screen that notifies the user that the user who has input the data has been invalidated based on a determination result of whether or not the user can confirm the notification unit. You may comprise so that a form can be cut. Specifically, when the user who has input the data is in a state where the notification means can be confirmed, the display is displayed brightly, displayed in a conspicuous color (red, etc.), or displayed in the center of the display screen. If the user who entered the data is in a state where the notification means cannot be confirmed, it is displayed darkly, displayed in an inconspicuous color (gray etc.), or displayed in the corner of the display screen. To do. As a result, the user who has input the data can clearly confirm that the data has been invalidated. In addition, when a person who is not a user who has input data is operating the apparatus, it is only displayed small in the corner of the display screen, and thus does not hinder the input operation.

The image data processing apparatus of the present invention is an image data processing apparatus comprising image data processing means for processing input image data, and data invalidation means for invalidating processed data. Informing means for informing that the data is invalidated by the invalidating means is further provided, and the informing means notifies the user based on whether or not the user who inputted the data exists in the vicinity of the apparatus. it may be configured to determine a notification form.

  Here, as one method for determining whether or not a user who has input data exists in the vicinity of the apparatus, an identification means for identifying whether or not the user who has input data exists in the vicinity of the apparatus is provided. The notification means can be configured to determine a notification form to the user based on the identification result of the identification means.

  For example, an RFID (Radio Frequency-Identification) tag can be used as the identification means. By storing user information in the RFID tag in advance, it is possible to determine whether the person in front of the device is a user related to the invalidated data. In this case, it is necessary to provide a tag reader for reading user information stored in the RFID tag on the image data processing apparatus side. User information stored in the RFID tag is also stored in the image data processing apparatus, and the read user information is compared with the stored user information for determination. Here, the user information is identification information of a device such as a personal computer used by the user. Since the identification information of the device is also added to the transmitted image data, the image data processing apparatus compares the identification information added to the image data with the identification information read from the RFID tag. Will do.

  In this case, the notification means can be configured to switch the time to notify the user based on whether or not the user who has input the data exists in the vicinity of the apparatus. Specifically, the notification time when the user who has input data is in the vicinity of the device is, for example, 5 seconds, and the notification time when the user who has input data is not in the vicinity of the device is, for example, 1 second. Can do. However, when the user who inputs data does not exist in the vicinity of the apparatus, the notification may not be made.

  Further, the notification means may be configured to switch the size of a notification screen to notify the user based on whether or not the user who has input the data exists in the vicinity of the apparatus. Specifically, if the user who entered the data is in the vicinity of the device, the size of the notification screen is enlarged and displayed in the center of the display screen, and the user who entered the data does not exist in the vicinity of the device In this case, the notification screen is reduced in size and displayed in the corner of the display screen. However, if the user who entered the data does not exist in the vicinity of the apparatus, it may not be displayed. As a result, the user who has input the data can clearly confirm that the data has been invalidated. In addition, when a person who is not a user who has input data is operating the apparatus, it is only displayed small in the corner of the display screen, and thus does not hinder the input operation.

  Further, the notification means can switch a display form of a notification screen that notifies the user that the user who has input the data is invalidated based on whether the user is present in the vicinity of the device. It may be configured. Specifically, if the user who entered the data is in the vicinity of the device, the data is displayed brightly, displayed in a conspicuous color (such as red), or displayed in the center of the display screen. When there is no user who has entered the input in the vicinity of the apparatus, the display form is dark, displayed in an inconspicuous color (such as gray), or displayed in the corner of the display screen. However, if the user who entered the data does not exist in the vicinity of the apparatus, it may not be displayed. As a result, the user who has input the data can clearly confirm that the data has been invalidated. In addition, when a person who is not a user who has input data is operating the apparatus, it is only displayed small in the corner of the display screen, and thus does not hinder the input operation.

  The image data processing apparatus according to the present invention also includes a first mode (direct print mode) for processing the image data input via the communication unit and the image data input via the communication unit. A second mode (hold print mode) in which data is once stored in the apparatus and started in response to an output instruction from the user thereafter. In the second mode, data is transmitted by the notification means. May be configured to notify that the data is invalidated and in the first mode, the notification means may not notify that the data is invalidated. That is, when the image data received by direct printing is printed out as it is, the user is not in front of the apparatus, and in this case, it is not notified that the data is invalidated. On the other hand, when the received image data is temporarily held and output in accordance with an instruction from the user, the user is surely in front of the apparatus, so that in this case, it is notified that the data is invalidated.

  The image data processing apparatus of the present invention further includes an input path via a scanner or an input path via a communication means as an input path for image data, and the notification means is invalidated by the data invalidation means. You may comprise so that the alerting | reporting form to a user may be determined according to the input path | route of data. Specifically, when the input is made from the scanner, the user is in front of the apparatus. In this case, the user is notified, and when the input is made from an external device via the network, the user Since it is not before, it is possible to select not to notify in this case. Even in the case of notification, as described above, the notification time can be switched, the size of the notification screen can be switched, and the display form can be switched.

  The image data processing apparatus of the present invention is particularly effective when the display screen for guiding information related to the apparatus to the user and the display screen for information necessary for operating instructions to the apparatus are common. If the screen is not common, even if another user sets a new job condition from the operation screen while invalidating the data, the notification that the data is invalidated is displayed on another screen. This is because the user's operation is not disturbed.

  According to the image data processing apparatus of the present invention, when invalidating image data, it is determined whether a user related to the invalidated image data is in front of the apparatus, and the image data is invalidated. Since it is configured to determine whether or not to notify (display) that it is present, it is possible to accurately guide the user to invalidate the image data and to prevent unnecessary guidance.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

-Description of basic configuration of image data processing device-
First, the basic configuration of the image data processing apparatus of the present invention will be described.

  FIG. 1 is a schematic configuration diagram showing an embodiment when the image data processing apparatus of the present invention is applied to a digital multi-function peripheral.

As shown in FIG. 1, the digital multifunction peripheral according to the present embodiment includes an image reading unit 2, an operation unit 4, an image forming unit 6, a device control unit 8, a FAX modem 9, a communication unit 10, a hard disk 12, and a management unit. 14 is provided.

  The image reading unit 2 includes, for example, a CCD reading device 2a and functions as image data input means for inputting image data.

The operation unit 4 includes an input unit 4a including various input keys and a display unit 4b including a display unit such as an LCD, and inputs operation of the device , conditions, and displays conditions.

  The image forming unit 6 encrypts data and temporarily saves (saves) the data to the hard disk 13 in order to protect the data coming from the work memory 6a for expanding the print data in the apparatus. An encryption / decryption unit 6c that decrypts the saved data and passes it to the memory 6a, a printing unit 6d having a laser scanning unit (LSU), and the like are provided.

  The device control unit 8 and the management unit 14 invalidate the image data stored in the image data storage means by the program set as an option (for example, overwriting meaningless data or simply deleting the image data). It acts as a means. Further, the device control unit 8 and the management unit 14 have a function as an invalidation number control unit that performs invalidation work by the image data invalidation unit a plurality of times on image data to be invalidated by a program set as an option. ing.

  The communication unit 10 is a communication unit that performs bidirectional communication with the network 41. In the present embodiment, the communication unit 10 is a printer board that includes a memory for expanding received data into data that can be handled by the device. Accordingly, the communication unit 10 sequentially transfers the received data to the working memory 6a while expanding the received data on the memory.

  Although not shown, the communication unit 10 may include an infrared communication unit capable of infrared communication with a portable communication device having an infrared communication function. Furthermore, a card reader that reads information from the memory card by directly inserting a memory card that is detachably attached to the digital camera or the like may be provided.

  The hard disk 12 serves as image data storage means for storing image data input from the input means. The image data storage means can be configured as a storage device including a magnetic storage medium.

The management unit 14 performs management of the entire device and management of invalidation processing of data that is no longer necessary.

  In the digital multi-function peripheral 1 having the above-described configuration, a facsimile machine 31 managed by, for example, an administrator can be connected to the FAX modem 9 via a telephone line 42, and a network 41 such as a LAN is connected to the communication unit 10. Terminal devices (personal computers) 32, 33 and the like are connected via the Internet, and an Internet FAX 34 and an external personal computer 35 can be connected via the Internet 43. The digital multi-function peripheral 1 according to the present embodiment is arranged in such a network environment.

  In addition, the digital multifunction peripheral 1 according to the present embodiment receives a print instruction from a printer driver of each terminal device 32, 33 connected to the network 41 such as a LAN, performs a print process, and outputs in a predetermined data format. Both of the functions of receiving the instruction and performing print processing by direct printing are provided. In the digital multifunction peripheral 1 according to the present embodiment, whether the direct print function is enabled (immediate printing) or disabled in an operating environment in which an output instruction from a printer driver is received and print processing in a local area is executed. (Whether it is saved in the hard disk 12 once and printed by the user giving an output instruction in front of the device).

  When the digital multifunction peripheral 1 according to the present embodiment is used as a copying machine, the image data of the document read by the image reading unit 2 is output from the image forming unit 6 as a copy.

  The image reading unit 2 is provided with a CCD 2a and can electronically read an image of a document set at a reading position. Then, the read image data of the document is completed as an output image on the volatile memory 6 a and temporarily stored in the hard disk 12. When there are a plurality of documents, the reading and storing operations are repeated.

  Thereafter, based on the processing mode instructed from the operation unit 4, the image data stored in the hard disk 12 is sequentially read out at an appropriate timing and sent to the volatile memory 6a. Then, the image data is transferred from the memory 6a to the printing unit 6b in accordance with the writing timing to the printing unit 6b.

  Similarly, when printing a plurality of read image data, the output image is similarly stored as an output image in the hard disk 12 and sent from the hard disk 12 to the volatile memory 6a in accordance with the output mode. The data is repeatedly transferred to the printing unit 6b in accordance with the writing timing to the printing unit 6b.

  Next, when the digital multifunction peripheral 1 according to the present embodiment is used as a printer, the image data received by the communication unit 10 is output from the image forming unit 6 via the memory 6a and the like.

  The communication unit 10 is connected to the network 41 by a communication cable or the like, and receives image data from the terminal devices 32 and 33 connected on the network 41. The image data received by the communication unit 10 is sent to the memory 6a page by page as output image data, encrypted, and temporarily stored in the hard disk 12. Then, it is read again from the hard disk 12, decrypted, sent to the volatile memory 6a, and transferred to the printing unit 6b in the same manner as when used as a copying machine.

  Further, when the digital multifunction peripheral 1 according to the present embodiment is used as a network scanner, the Internet 34 transmits image data of a document read by the image reading unit 2 from the communication unit 10 via the network 41 and the Internet 43. It can be transmitted to the external PC 35. Also here, the image of the original is electronically read by the CCD 2a provided in the image reading unit 2. The read image data of the original is completed as an output image on the volatile memory 6 a, encrypted, and temporarily stored in the hard disk 12. Then, the data is read from the hard disk 12 again, decrypted and sent to the volatile memory 6a, and after establishing communication with the transmission destination instructed via the operation unit 4, the target transmission is performed from the communication unit 10. Sent to the destination. Furthermore, the digital multi-function peripheral 1 according to the present embodiment is connected to the telephone line network 42 via the FAX modem 9, and the same operation is performed when used as a facsimile machine.

Here, the digital multifunction peripheral 1 including the hard disk 12 is described as a storage device for temporarily storing image data. However, the present invention is not limited to this, and the stored image data is retained even when the image data is removed from the apparatus body. The present invention can be similarly applied to a case where a non-volatile memory that can be used, a memory with a backup function, and other storage devices (mediums) using a magnetic storage medium are provided.

  In addition, each component of the digital multifunction peripheral 1 according to the present embodiment is controlled by the device controller 8, and monitors operation instructions from the input unit 4a such as a tablet and a key group provided in the operation unit 4. Information to be notified to the user, such as information related to the state of the digital multi-function peripheral, is accurately displayed through the display unit 4b. The management unit 14 manages information about each component managed by the device control unit 8, and the device control unit 8 controls the operation of the entire digital multi-function peripheral based on the information. .

  Next, with reference to FIG. 2, the structure of the operation part 4 comprised from the input part 4a and the display part 4b is demonstrated in detail. FIG. 2 is an explanatory diagram showing the operation unit 4 in detail.

  The operation unit (operation panel) 4 includes the input unit 4a and the display unit 4b as described with reference to FIG. The display unit 4b is configured by a dot matrix type liquid crystal panel, and can display in detail information to be notified to the user as a digital multifunction peripheral according to the present embodiment. In addition, a transparent touch panel is provided on the screen of the liquid crystal panel, and when the touch panel is operated according to information displayed on the liquid crystal panel, a part of the input unit 4a is input as an upper instruction to the system. Also works.

  In addition, the input unit 4a has a key group arranged adjacent to the liquid crystal panel. The start key 16 for instructing the start of copying and the clear all key 17 for instructing the processing being executed are instructed. A clear key 18 for clearing the contents of the mode, a numeric keypad 22 for instructing the number of copies, a switching key 23a, 23b, 23c for each mode, a user setting key 24, and the like are included.

  This is the end of the description of the basic configuration of the digital multifunction peripheral 1 according to the present embodiment.

-Explanation of basic processing operations of the security system-
Next, a security system installed in the digital multifunction peripheral 1 according to the present embodiment will be described. The description of this security system is almost the same as the contents of the above-mentioned Patent Document 2 filed earlier by the present applicant.

As a simple processing flow, image data to be processed as a device is temporarily stored in the hard disk 12. Thereafter, the image data on the hard disk 12 is invalidated when the stored image data becomes unnecessary. At this time, the image data stored by invalidating the number of times corresponding to the security level is invalidated.

  In the following description, a copy operation in which image data of a document is read and output as a recorded material from a printer will be described. However, when the digital multi-function peripheral 1 according to the present embodiment is used as a printer or image data read as a scanner. The same processing is performed when used as a transmission device such as a facsimile or network scanner for transmitting.

  3 to 11 are enlarged views of the screen displayed on the liquid crystal panel of FIG. 2, and “image data invalidation processing for invalidating image data temporarily stored in the hard disk 12”. Is an explanatory diagram showing a display transition state of the display unit 4b in each processing step in which image data that is no longer necessary on the hard disk 12 is invalidated according to the security level. FIG. 12 is a flowchart showing a series of processing procedures for performing a copying operation in the digital copying machine 1 according to the present embodiment and then invalidating the image data on the hard disk 12.

FIG. 3 is a display screen in a situation where the “image data invalidation process” is not yet effective. As the digital multifunction peripheral according to the present embodiment, the “image data invalidation process” is functionally provided in advance in the device . Although installed, this function is set not to operate at first.

  Then, the operation of the “image data invalidation processing” function can be performed by performing the input setting of the product key from the necessity of security for the document data or the like at the installation destination. Note that this pre-installed function is selectively enabled with a product key and can be used thereafter as described in our application (Japanese Patent Laid-Open No. 2001-309099). .

  FIG. 4 shows a situation in which “image data invalidation processing” is operable at the lower left of the display screen so that the user can understand that “image data invalidation processing” is enabled by inputting the product key. It is a figure of the state which displayed the icon showing something.

When the “image data invalidation process” is not operating (when the device is on standby), if the icon portion at the lower left of the display screen is pressed (touched) with a finger, the display screen is as shown in FIG. Transition to. In this case, the version information of this function related to the security kit is displayed in a window in the approximate center of the display screen.

  The “image data invalidation function” is treated as an option on the digital multi-function peripheral as a “data security kit”, and is displayed as a “data security kit” during window display. As a result, the contents and version of the “data security kit” and “image data invalidation function” can be confirmed.

  Further, when the “image data invalidation process” is operating due to job termination, job clearing, etc. (when data on the hard disk 12 is invalidated), as shown in FIG. In the center, a window is displayed indicating that the current data invalidation process is being performed.

At this time, the icon portion under the display screen the left is pressed (touched) with a finger, the display screen is changed to Figure 7. Here, in the approximate center of the display screen, the level of the progress of the image data invalidation processing on the hard disk 12 by the “image data invalidation processing” and the progress status thereof is displayed. Thereby, the operation status of the image data invalidation process by the “image data invalidation process” can be confirmed.

  Further, when the image data on the hard disk 12 is invalidated by “image data invalidation processing”, it is displayed at a glance by displaying it in a form different from the normal display such as blinking an icon. It is effective to know that there is.

  Next, FIG. 8 shows an arbitrary number of times that “image data invalidation processing” acts on the hard disk 12 to invalidate the image data stored on the hard disk 12 due to a difference in security level with respect to document data or the like at the installation site. In the case of setting to, a detailed setting display screen for performing an operation instruction for starting “image data invalidation processing” so as to forcibly invalidate the image data stored on the hard disk 12.

By setting the number of invalidations appropriate for the security level using this setting screen, the image data is repeatedly invalidated when the image data is no longer needed, and the security level at the installation location can be maintained. Therefore, it is possible to minimize a decrease in the processing level for image data as a device due to the improvement of the security level.

  Further, the image data stored on the hard disk 12 can be invalidated at an arbitrary timing, which is effective when important document data is processed.

  Hereinafter, the operation will be briefly described for each mode.

<All data area invalid mode>
When the “all data area invalid” key portion displayed on the upper left of the detailed setting display screen of FIG. 8 is pressed, the data on the hard disk 12 is invalidated at that time. At this time, a confirmation window is displayed in the approximate center of the display screen for confirmation (FIG. 9), and data invalidation on the hard disk 12 is started if there is an “invalidate” operation instruction. FIG. 10 shows a level display of the progress status of the data invalidation work on the hard disk 12.

  On the right side of the “all data area invalid” key, an “all data area invalid count” key is displayed so that the number of times this “all data area invalid” is repeatedly executed can be set, for example, between 1 and 7. Has been. The set number of times is displayed alongside the “all data area invalid number of times” key. (The default setting value is “1”.) When the “all data area invalid count” key portion is pressed, the “all data area invalid count” setting screen of FIG. 11 is displayed, and “up” and “down” are displayed. The number of times is arbitrarily set by operating the key part.

<Auto data invalid mode at power-on>
When the “automatically disable at power-on” key portion displayed in the middle of the detailed setting display screen of FIG. 8 is pressed, a check “re” is entered in the key portion, and each time the digital multifunction device is turned on. An automatic data invalidation mode for invalidating data on the hard disk 12 can be set.

  In addition, on the right side of the “automatic invalidity at power-on” key, “automatic power-on at power-on” is set so that the number of times this “automatic invalidation at power-on” is repeatedly executed can be set between 1 and 7, for example. "Invalid times" key is displayed. The set number of times is also displayed next to the “automatic invalidity count at power-on” key. (In the default setting state, the automatic invalid mode at power-on is not set, and the number of times is “0”.) When this “automatic invalid number at power-on” key portion is pressed, 11 "all data area invalid count" setting screen is displayed, and the invalid count is arbitrarily set by operating the "up" and "down" key portions.

<Auto data invalid mode at the end of each job>
When the “automatic data invalid count at the end of each job” key portion displayed in the lower part of the detailed setting display screen in FIG. 8 is pressed, each time a job to be processed in the digital multi-function peripheral is completed, The number of operations for invalidating data on the hard disk 12 can be set.

  When the “automatic data invalid count at the end of each job” key portion is pressed, the “automatic data invalid count at the end of each job” setting screen in FIG. 11 is displayed. The number of times is arbitrarily set by operating the “down” key portion. The number of times the automatic data invalid mode at the end of each job is repeatedly executed is displayed next to the “auto data invalid count at the end of each job” key. (The default setting is “1”.) Note that only in the automatic data invalid mode at the end of each job, the security kit (“image data invalidation processing”) is set according to the product key input setting described above. It is assumed that it is automatically set when the operation is permitted.

  As explained above, the purchase of the “Data Security Kit” due to the need for security has created an environment in which the “image data invalidation function” can be operated, and the “image” corresponding to the security level at the installation site. The number of operations of the “data invalidation function” is set. In addition, the start of invalidation of data on the hard disk 12 can be instructed as necessary.

  Here, the processing flow in the copy mode will be described as an example with reference to the flowcharts shown in FIGS.

When the power of the digital MFP is turned (ON), first, the respective parts constituting the equipment device control section 8 checks (S1). If there is no problem as a result of the check (Yes in S2), warm-up is started so that a predetermined operation is possible (S3). On the other hand, if an abnormality (deficiency) is confirmed (determined as No in S2), error processing such as performing a window display for confirming the abnormality (deficiency) on the display screen and asking for confirmation is performed (S4). ).

  Next, while warming up without any problem, it is checked whether the “automatic invalid mode at power-on” is set to initialize the hard disk 12 when the power is turned on (S5), and the mode is set. If so, the initialization of the hard disk 12 is started (S6), and the progress of the initialization work is displayed in a window on the display screen (S7). At this time, initialization by data invalidation of the hard disk 12 is repeated for the invalid number of times set in advance on the setting screens of FIGS. 8 and 11 (S8).

  When the above processing is completed, the display screen of the operation panel becomes the display state of the basic screen, and upon completion of warm-up confirmation (S9), the job instruction standby state is entered (S10).

  In this state (standby), when the document is placed at the set position of the image reading unit 2 and the copy mode is set for the document, the copy start key 16 is turned on (S11). The image data is electronically scanned by the CCD 2a of the unit 2 and is generated as page data on the memory 6a as image data (S12). Then, the image data is temporarily accumulated from the memory onto the hard disk 12, and management information (FAT data, etc.) regarding the image data stored in the hard disk 12 is managed by the management unit 14 (S13).

  Next, the image data stored in the hard disk 12 is read again as print data on the memory 6a in accordance with the recording timing (S14), and is transferred to the LSU and printed out at the timing with the printer. (S15).

  Then, when it is confirmed that the image data has been printed out by the printer, the management data such as FAT data is updated as the processing is completed (S16), and when the series of print processing is completed, the series of print processing is performed. Image data invalidation processing on the hard disk 12 is executed for the storage area of the used image data (S17). Also at this time, initialization by data invalidation of the hard disk 12 is repeated for the number of invalid times set in advance on the setting screens of FIGS. 8 and 11 (S18).

  This is the end of the description of the basic configuration of the digital multifunction peripheral and the basic processing operation of the security system according to the present embodiment.

-Description of notification processing during data invalidation processing, which is a feature of the present invention-
In the basic processing operation of the security system described above, as shown in FIG. 6, when “image data invalidation processing” is operating, processing for invalidating the current data is performed in the approximate center of the display screen. Is always displayed in a window. However, if the fact that the data is invalidated in this way is always displayed, the problem described in the above [Problems to be Solved by the Invention] occurs.

  Therefore, in starting the invalidation processing of the image data, the digital multi-functional peripheral 1 according to the present embodiment determines whether or not the user related to the invalidated image data is in front of the device. It is configured to accurately guide the invalidation to the user. Hereinafter, specific examples will be described.

[Example 1]
Whether or not the user related to the image data to be invalidated is in front of the device can be determined to some extent according to how the digital multifunction peripheral 1 is used, that is, the operating state.

  For example, when output of a print job being processed is completed in parallel with any user making a new copy reservation, it can be determined that the user related to the print job is not usually in front of the device. . In addition, even when an arbitrary user completes output of a received fax image being processed in parallel with a new copy reservation, the user related to the received fax image is usually in front of the device. It can be judged that it is not. Also, when output of a print job being processed is completed in parallel with any user making a new transmission reservation, it is determined that the user related to the print job is usually not in front of the device. it can. Also, when the output of the received fax image being processed is completed in parallel with a new transmission reservation being made by any user, the user related to the received fax image is usually in front of the device. It can be judged that it is not. Also, when a machine that is waiting for a new job is waiting and a job that is being printed is completed, the machine that is waiting for the machine is usually in front of the device. It can be judged that there is not. Further, when the output of the received fax image during print processing is completed while the machine is waiting for a new job instruction, the machine is still waiting, so the user related to the received fax image is Usually, it can be determined that it is not in front of the equipment. Furthermore, even when it takes time from completion of reading a document to be transmitted to completion of transmission, it can be determined that the user related to the transmitted document is usually not in front of the device.

On the other hand, when a document to be copied is read and printed out, it can be usually determined that the user related to the printed document is in front of the device. Also, when a document to be transmitted is read and image data is transmitted via the network, it can be usually determined that the user related to the image data is in front of the device. Furthermore, when image data sent via the network is held in the device and an output instruction is issued from the image data, it can be usually determined that the user who issued the output instruction is in front of the device.

  As described above, whether or not the user related to the image data to be invalidated is in front of the device can be determined to some extent according to the operation state of the digital multi-function peripheral 1.

Therefore, in the first embodiment, as one method for determining whether or not a user who has input invalidated data can check the liquid crystal panel 4 of the digital multifunction device 1, such a digital multifunction device is used. A table in which determination criteria in consideration of the operation state 1 are set in advance is created, and whether or not to notify that data has been invalidated using this determination criterion table, that is, whether or not to display on the liquid crystal panel 4 is determined. It is set as the structure which determines. That is, it is determined whether or not to display as a notification form. This determination criterion table is stored in an internal memory (not shown) of the device control unit 8.

  FIG. 14 shows an example of the criterion table.

  FIG. 14A shows the display presence / absence set in accordance with the operation mode (copy mode, FAX mode, print mode) of the digital multi-function peripheral 1. Specifically, in the copy mode, since it can be usually estimated that the user related to the copy is in front of the device, the data invalidation process is set to be displayed in this case. Regarding the FAX mode, since it can be usually estimated that the user related to the transmission is in front of the device at the time of transmission, the data invalidation process is set to be displayed in this case. On the other hand, since the FAX reception is often sent suddenly, in this case, it is usually assumed that there is no user related to the FAX reception in front of the device, so that the data invalidation processing is not displayed. It is set. In the print mode, since it can be presumed that the user related to the print data is not present in front of the device, the data invalidation process is set not to be displayed.

  According to this criterion table, when the digital multi-function peripheral 1 is operating in the copy mode, the data invalidation processing message shown in FIG. 6 is displayed when the copy data invalidation processing is performed after the copying is completed. . When the digital multi-function peripheral 1 is operating in the FAX transmission mode, a message for data invalidation processing shown in FIG. 6 is displayed when transmission data invalidation processing is performed after FAX transmission. Further, when the digital multi-function peripheral 1 is operating in the FAX reception mode, the data invalidation processing message shown in FIG. 6 is not displayed even if reception data invalidation processing is performed after FAX reception. Further, when the digital multi-function peripheral 1 is operating in the print mode, the data invalidation processing message shown in FIG. 6 is not displayed even if the print data invalidation processing is performed after printing is completed.

  FIG. 14B shows an example of a table in which the determination criteria shown in FIG.

  Specifically, regarding the copy mode, if the copy mode occurs due to an interrupt, it can be assumed that the user related to the copy is usually in front of the device at the end of the copy. Is set to display data invalidation processing. On the other hand, when the copy mode is reserved, it can be presumed that there is usually no user related to the copy at the end of the reserved copy. In this case, the data invalidation process is not displayed. It is set as follows. In addition, regarding the FAX mode, at the time of memory transmission, it can be presumed that there is usually no user related to the memory transmission at the end of the memory transmission, so in this case, the data invalidation processing is not displayed. It is set as follows. On the other hand, in the case of confidential reception, since the data output instruction is performed from the operation panel of the device, in this case, it can be estimated that the user related to the confidential reception is in front of the device. Is set to be displayed. As for the print mode, since it can be estimated that the user related to the print data is not in front of the device in the normal print mode, the data invalidation process is set not to be displayed. On the other hand, in the hold print mode, data output is instructed from the operation panel of the device. In this case, it can be estimated that the user related to the hold print is in front of the device. The process is set to be displayed.

  According to this determination criterion table, when the digital multi-function peripheral 1 in other processing is operating in the copy mode due to an interrupt, the data invalidation shown in FIG. Displays the message of the conversion process. In addition, when the digital multifunction peripheral 1 executes the reserved copy mode, even if the copy data invalidation process is performed after the copy is completed, the message of the data invalidation process shown in FIG. 6 is not displayed. When the digital multi-function peripheral 1 executes the memory transmission mode, even if the memory transmission data is invalidated after the memory transmission, the data invalidation processing message shown in FIG. 6 is not displayed. When the digital multi-function peripheral 1 executes the confidential reception mode, a message for data invalidation processing shown in FIG. 6 is displayed when print data invalidation processing is performed after completion of printing. When the digital multi-function peripheral 1 executes the normal print mode, the data invalidation processing message shown in FIG. 6 is not displayed even if the print data invalidation processing is performed after printing is completed. When the digital multi-function peripheral 1 executes the direct print mode, a message for data invalidation processing shown in FIG. 6 is displayed when print data invalidation processing is performed after completion of printing.

  As described above, by determining whether or not the data invalidation process is displayed according to the operation state of the digital multi-function peripheral 1, it is possible to accurately guide the data invalidation process to related users. . On the other hand, if another user operates the operation unit 4 to perform a setting operation during such data invalidation processing, the data invalidation processing message is not displayed. It does not interfere with the input operation by the user.

  FIG. 14C shows the display presence / absence set according to the image data input path, not the operation mode. Specifically, when the image data is input from the image reading unit (scanner) 2, it can be estimated that the user is in front of the device. In this case, the data invalidation process is set to be displayed. is doing. In addition, when image data is input from an infrared communication unit (not shown) of the communication unit 10, it can be estimated that the user is in the vicinity of the device. In this case, the data invalidation process is set to be displayed. ing. Furthermore, when image data is input from a card reader (not shown), it can be estimated that the user is in front of the device. In this case, the data invalidation process is set to be displayed. On the other hand, if the input is made from an external device such as the external PC 35 via the network 41, it can be estimated that the user is not in front of the device. In this case, the data invalidation process is set not to be displayed. Yes.

  According to this determination criterion table, when image data is input from the scanner, a message for data invalidation processing shown in FIG. 6 is displayed when the image data invalidation processing is performed after processing of the read image data. indicate. When image data is input from the infrared communication unit, a message for data invalidation processing shown in FIG. 6 is displayed when the image data invalidation processing is performed after processing the input image data. . When image data is input from a card reader, a message for data invalidation processing shown in FIG. 6 is displayed when the image data invalidation processing is performed after processing of the input image data. On the other hand, when the image data is input via the communication unit 10, even if the image data invalidation processing is performed after the processing of the input image data, the data invalidation processing message shown in FIG. Do not show.

  As described above, by determining whether or not the data invalidation processing is displayed according to the input path of the image data to the digital multifunction peripheral 1, the data invalidation processing is accurately guided to the related users. Is possible.

[Modification 1]
In the first embodiment, the determination whether or not the user related to the image data to be invalidated is in front of the device is performed using the determination criterion table, but this determination is only an estimation and is not necessarily accurate. There are cases where it cannot be said. In contrast, in the first modification, Ru Tei and this determines that more accurate.

That is, in the first modification, as one of the techniques for the user who has input the data to determine whether in the vicinity of the device, the user who has input the data identification identifying whether present in the vicinity of the equipment The device control unit 8 is configured to determine a notification form (presence / absence of display) to the user based on the identification result of the identification unit.

Specifically, in the first modification , an RFID tag carried by each user is used as the identification means. That is, by storing user information in the RFID tag in advance, it is determined whether or not the person in front of the device is a user related to the invalidated data. In this case, it is necessary to provide the digital multifunction device 1 with a tag reader that reads the user information of the RFID tag by wireless communication, and to input the user information read by the tag reader to the device control unit 8. is there. In addition, the user information stored in the RFID tag needs to be stored in an internal memory (not shown) of the device control unit 8 or the like. Here, the user information is identification information of a device such as a personal computer used by the user. Since the image data transmitted to the digital MFP 1 is also added with identification information of the transmission source device, the device control unit 8 reads the identification information added to the image data and the RFID tag. By comparing with the identification information, it is determined whether or not the user who entered the data is in the vicinity of the device . As a result, when it is determined that the user who entered the data is in the vicinity of the device, the data invalidation processing message shown in FIG. 6 is displayed when the corresponding data invalidation processing is performed. On the other hand, when it is determined that the user who has input the data is not in the vicinity of the device, the data invalidation processing message shown in FIG. 6 is not displayed even if the corresponding data invalidation processing is performed.

In this way, it is possible to directly determine whether or not the user who has input the data is in the vicinity of the device and determine whether or not to display the data invalidation process, so that the data invalidation process is related to It is possible to reliably guide only to the person. On the other hand, if another user operates the operation unit 4 to perform a setting operation during such data invalidation processing, the data invalidation processing message is not displayed. It does not interfere with the input operation by the user.

[Example 2]
Example 1 and Modification 1, the notification form, whether to display a message, not the but was either by, in the second embodiment, if it is determined not to display in the first embodiment and the modification 1 Is an embodiment premised on displaying a message in the same manner. In this case, since it is confusing that the display form in the case where it is determined that the display is performed in the first embodiment and the modification 1 and the case where it is determined that the display is not performed is exactly the same, in the second embodiment, this display form is devised. ing.

That is, in the second embodiment, on whether the user entered data is not either in front of the device, and to switch the display time of the message. Specifically, when it is determined that the user who entered the data is in front of the device, the message display time is 5 seconds, for example, and it is determined that the user who entered the data is not in front of the device The display time is 1 second, for example. As a result, the user who has input the data can reliably confirm that the data has been invalidated. Further, even when a person who is not a user who has input data is operating the operation unit 4 of the device, the message is displayed for a moment, so that the input operation is hardly hindered.

[Example 3]
In the third embodiment, as another contrivance of the display form, the size of the display screen for displaying a message to the user is switched depending on whether the user who has input the data is in front of the device. More specifically, when it is determined that the user who has input the data is in front of the device, for example, as shown in FIG. To display. On the other hand, if it is determined that the user who has input the data is not in front of the device, the message display screen size is reduced and displayed at the corner of the liquid crystal panel, as shown in FIG. As a result, the user who has input the data can clearly confirm that the data has been invalidated. In addition, when a person who is not a user who has input data is performing an input operation on the device, it is only displayed in a small corner in the operation panel 4, so that the input operation is not hindered.

[Example 4]
In the fourth embodiment, as a further contrivance of the display form, the display form of the display screen for displaying a message to the user can be switched depending on whether the user who entered the data is in front of the device. It is. Specifically, when the user who has input data is in front of the device, the brightness of the message display window is displayed brightly, the message is displayed in a prominent color (red, etc.), or the display window is operated The display form is such that it is displayed at the center of the screen of the panel 4. On the other hand, if the user who has input the data is not in front of the device, the brightness of the message display window is displayed darkly, the message is displayed in an inconspicuous color (such as gray), or the display window is displayed on the operation panel 4. Display in the corner of the screen. As a result, the user who has input the data can clearly recognize that the data is invalidated. In addition, when a person who is not a user who has input data is operating the device, it is displayed inconspicuously on the screen of the operation panel 4, so that the user who is inputting data is less likely to be confused.

1 is an overall configuration diagram illustrating an outline of an electrical configuration of a digital multifunction peripheral according to an embodiment of the present invention and a connection relationship with peripheral devices. It is explanatory drawing which shows the structure of an operation part. It is explanatory drawing of the screen displayed on the liquid crystal panel of FIG. 2, and has shown the normal state. FIG. 3 is an explanatory diagram of a screen displayed on the liquid crystal panel of FIG. 2 and shows a state in which an icon indicating that “image data invalidation processing” is operable is displayed. It is explanatory drawing of the screen displayed on the liquid crystal panel of FIG. 2, and has shown the version information display screen. FIG. 4 is an explanatory diagram of a screen displayed on the liquid crystal panel of FIG. 2 and shows an “image data invalidation processing” operation screen. FIG. 4 is an explanatory diagram of a screen displayed on the liquid crystal panel of FIG. 2 and shows an “image data invalidation processing” operation status confirmation screen. It is explanatory drawing of the screen displayed on the liquid crystal panel of FIG. 2, and has shown the detailed setting display screen. It is explanatory drawing of the screen displayed on the liquid crystal panel of FIG. 2, and has shown the invalidity confirmation screen. It is explanatory drawing of the screen displayed on the liquid crystal panel of FIG. 2, and has shown the data invalidation work progress status display screen. FIG. 4 is an explanatory diagram of a screen displayed on the liquid crystal panel of FIG. 2 and shows an “all data area invalid count” setting screen. It is a flowchart explaining the flow of a process at the time of copy mode. It is a flowchart explaining the flow of a process at the time of copy mode. (A)-(c) is explanatory drawing which shows an example of the criteria table. It is explanatory drawing which shows the example which devised the display form of a message depending on whether the user who input data is in front of an apparatus.

1 Digital MFP

2 Image reading unit 4 Operation unit (display panel)
4a input unit 4b display unit 6 image forming unit 6a memory 6b printing unit 8 device control unit 9 FAX modem 10 communication unit 12 hard disk (HD)
14 Management Unit 16 Start Key 17 Clear All Key 18 Clear Key 22 Numeric Keypad 23a, 23b, 23c Switching Key for Each Mode 24 User Setting Key 31 Facsimile Device 32, 33 Terminal Device 34 Internet FAX
35 External PC
41 Network 42 Telephone network 43 Internet

Claims (7)

In an image data processing apparatus comprising image data processing means for processing input image data and data invalidation means for invalidating data that has been processed,
Informing means for informing that the data is invalidated by the data invalidating means ;
A determination that a criterion for determining whether or not a user who has input the invalidated data is in a state of being able to check the notification means is preset based on the operation mode of the device or the input path of image data A reference table,
The notification means, by referring to the criteria table, the user who has input the data to be invalidated by the data invalidating means determines whether or not ready to check the notification means, the determination An image data processing apparatus that determines a notification form to a user based on a result . The notification means is configured to display a display time when it is determined that the user is not in front of the device based on a determination result of whether or not the user who has input the data is in a state in which the user can check the notification means. image data processing apparatus according to claim 1 which a user, wherein Rukoto change the display time to be shorter than the display time when it is determined that in front of the device. When the notification means determines that the user is in front of the device based on the determination result of whether or not the user who has input the data is in a state in which the notification means can be confirmed , the size of the display screen The image data processing apparatus according to claim 1 , wherein when the user determines that the user is not in front of the apparatus, the display screen size is switched so as to reduce the size of the display screen . The notification means displays the brightness brightly when it is determined that the user is in front of the device based on the determination result of whether or not the user who has input the data is in a state where the user can confirm the notification means. Or display in a conspicuous color or display in the center of the screen, and if the user determines that it is not in front of the device, either display the brightness lightly or display it in an inconspicuous color or display in the corner of the screen image data processing apparatus according to claim 1, characterized in that switching the display mode so that Kano display. A first mode in which image data input via the communication means is received and image data input via the communication means are temporarily stored in the apparatus, and a subsequent output instruction from the user And a second mode for starting processing according to
In the case of the second mode, the notification means notifies that the data is invalidated, and in the case of the first mode, the notification means does not notify that the data is invalidated. The image data processing apparatus according to claim 1 . As an input path for image data, an input path via a scanner or an input path via communication means is provided.
The notification means notifies that the data is invalidated when the input path is through the scanner, and does not notify that the data is invalidated when the input path is through the communication means. The image data processing apparatus according to claim 1 . The image data processing apparatus according to claim 1 , wherein a display screen for guiding information related to the apparatus to a user and a display screen for information necessary for an operation instruction to the apparatus are a common screen .

Images