JP4422168B2 - Image processing device - Google Patents

Description

  The present invention relates to an image processing apparatus having a protection function for a copy of an information medium such as a credit card or a license in which personal information is described.

  Personal information such as a card number, a person's face photo, and a name is written on an information medium such as a credit card, a driver's license, an insurance card, or a passport. Such an information medium is also used to prove an individual's identity. For example, an information medium is copied and a unique image representing personal information is printed on a recording sheet. This recording sheet is used for identification.

  The specific image is recorded as it is on the recording sheet copied from the information medium. Therefore, if a third party obtains this recording sheet, personal information may be leaked and personal information may be misused.

  Patent Document 1 describes a holder capable of masking personal information described in an information medium. When the information medium placed in the holder is copied, the specific image at a predetermined position is hidden and printed.

On the other hand, in an image processing apparatus that copies an information medium, as described in Patent Document 2, it is determined whether the document is a copy-restricted document, and the copy of the document is restricted. In this case, the copy-restricted document is a special document such as a document on which an image is printed with magnetic ink or a document on which a resonance circuit is formed.
JP 2001-231619 A JP 2004-245962 A

  However, in the above-described image processing apparatus, it is not possible to determine that an information medium such as a credit card is a copy-restricted document. Therefore, the specific image read from the surface of the information medium is copied as it is. That is, the image processing apparatus does not have a protect function for preventing leakage of personal information when copying an information medium. In order to prevent unnecessary personal information from being copied, the holder as described above must be used, and the use of the holder causes trouble for the user.

  In view of the above, an object of the present invention is to provide an image processing apparatus capable of preventing leakage of personal information by preventing printing of a unique image representing personal information when copying an information medium.

  The present invention relates to an input unit for inputting an image having a unique image from an information medium, a reading unit that communicates with a storage unit provided in the information medium and reads identification information from the storage unit, and a unique image based on the identification information. A region determining unit that determines a specific region in which an image exists, and a control unit that performs image processing for masking the specific region.

  The identification information includes information about the information medium such as the type of the information medium. By acquiring this identification information, the region determination unit can determine a specific region. Then, by masking the specific area, the unique image representing the confidential information is hidden. That is, when a process such as copying a specific image on the information medium is performed, the specific image is output in a hidden state. Thereby, personal information does not appear in the output image, and personal information does not leak.

  A determination unit that determines the type of the information medium based on the identification information is provided, and the area determination unit determines the specific area based on the type of the information medium. The specific area is determined according to the type of information medium. Therefore, when the type of the information medium is determined, the area determination unit can specify the specific area.

  Here, the storage unit of the information medium includes an IC tag, and the reading unit communicates with the IC tag in a non-contact manner and receives identification information. When the reading unit communicates in a non-contact manner, the identification information can be read by communicating with the IC tag at the same time as inputting the image of the information medium.

  The identification information includes the position information of the specific area, and the area determination unit specifies the presence position of the specific area in the input image based on the position information. By acquiring the position information of the specific area from the identification information, the existence position of the specific area in the input image can be easily specified.

  A display unit that displays the specific area is provided, the specific area displayed on the display unit can be changed, and the control unit masks the changed specific area. The display unit displays the input image. This image includes a unique image. In some cases, the specific area determined by the area determining unit is shifted from the position of the input specific image. Therefore, the specific image is surely hidden by changing the displayed specific area, such as moving or scaling.

  The area determining unit determines a specific area to be masked according to the security level. Based on this, the control unit masks a specific area for all the specific images in the information medium, or masks only a specific area for a part of the specific images. The higher the security level, the more specific areas are masked and the leakage of personal information is strictly prevented. When the security level is low, only some specific areas are masked, and disclosure of unimportant personal information is allowed.

  The security level can be changed after the image is input. When the security level is changed, the area determination unit changes the specific area to be masked. The security level needs to be changed according to the purpose of using the personal information described in the information medium. Since the security level can be changed in this way, only necessary personal information can be obtained.

  The security level of the specific image is set according to the type of the information medium, and the area determination unit determines the specific area according to the security level of the specific image. The importance of the personal information described in the information medium differs depending on the type of the information medium. Therefore, a security level is preset for each unique image. The area determination unit determines a specific area to be masked and a specific area that does not need to be masked based on the security level of the specific image.

  An authentication unit for authenticating the user is provided, and a security level is set according to the user. The security level of the authorized user is set high. The area determination unit determines a specific area to be masked according to the security level of the user. If the user has a high security level, the specific area to be masked is reduced. If the user has a low security level, the specific area to be masked is increased to prevent leakage of unnecessary personal information.

  By considering the security level of the user and the security level of the specific image, the specific area can be determined strictly. The area determination unit determines the specific area based on the higher security level of the user security level and the security level of the specific image. Thus, the specific image for the necessary personal information is not hidden, the specific image for the unnecessary personal information is hidden, and personal information can be prevented from leaking unnecessarily.

  When executing the image processing for masking the specific area, the control unit prohibits creation of log information for this processing. In addition, when the image processing for masking the specific area is executed, the control unit prohibits the storage of the image having the input unique image. When this image processing is executed, an image including a specific image is input. When creating log information, an input specific image may be stored as log information. In the filing for saving images, all input images are saved. In this way, storing the specific image may lead to leakage of personal information. Therefore, leakage of personal information can be prevented by prohibiting the creation of log information and filing.

  Here, the information medium is a license or a card having an image representing personal information as a unique image on the surface. The input unit reads the surface of the information medium and inputs an image. When the information medium has images on the front and back surfaces, the input unit reads both surfaces of the information medium and inputs the images. Then, the control unit combines the images on both sides and outputs the two images side by side.

  According to the present invention, when an image including personal information described in an information medium is output by copying the information medium, the specific area for the specific image is masked and the image is output. As a result, the unique image is output in a hidden state, so that personal information cannot be visually recognized, and leakage of unnecessary personal information can be prevented. Then, by using the identification information held by the information medium, it is possible to accurately identify the specific area without being affected by a reading defect at the time of image input, and it is possible to reliably hide the specific image.

  An image processing apparatus of this embodiment is shown in FIG. This image processing apparatus is a multi-function machine that executes a copy mode, a print mode, a scanner mode, and a facsimile mode. The image forming unit 3 for printing, the storage unit 4 for storing the image data, the communication unit 5 for communicating with the external device, the operation panel 6 for input operation, and the processing unit are controlled, and the image according to the mode And a control unit 7 that executes data processing. Further, the image processing apparatus includes a reading unit 8 that communicates with the IC tag T. The processing unit performs processing to output input image data, and includes the image forming unit 3, the storage unit 4, and the communication unit 5.

  As shown in FIG. 2, the image reading unit 2 is disposed above the cabinet 1 and includes a scanner unit 10 and an automatic document feeder 11. The automatic document feeder 11 is provided above the scanner unit 10 and automatically conveys a document in order to read image data of the document.

  A document table 12 made of platen glass is provided on the upper surface of the cabinet 1, and a document cover 13 that covers the document table 12 is provided. The automatic document feeder 11 is integrally mounted on the document cover 13. The document cover 13 can be freely opened and closed. When the document cover 13 is in a closed state, the document is conveyed by the automatic document conveyance unit 11. When the document cover 13 is open, the document can be placed on the document table 12. Opening / closing of the document cover 13 is detected by a cover opening / closing sensor. A document size detection sensor for detecting the size of the document placed on the document table 12 is also provided.

  A reading unit 8 is provided below the document table 12. The reading unit 8 is a reader / writer, and performs wireless communication without contact with a document with an IC tag T placed on the document table 12. The reading unit 8 reads information stored in the storage unit of the IC tag T or writes information in the storage unit. By performing non-contact communication in this way, communication can be performed wherever the IC tag T is on the document table 12.

  When a document is set on the document set tray 15 of the automatic document feeder 11, the document detection sensor 16 detects that the document has been set. Then, on the operation panel 6, copy conditions such as the size of the recording sheet to be printed and the scaling ratio are input. Thereafter, reading of the image of the document is started by an input operation of the start key.

  In the automatic document feeder 11, each document on the document set tray 15 is pulled out one by one by the pickup roller 17. The document passes through between the separating plate 18 and the transport roller 19 and is sent to the document table 12. The document is transported in the sub-scanning direction on the document table 12 and discharged to the document discharge tray 20. The document discharge tray 20 is provided with a document discharge sensor to detect the presence or absence of a document on the document discharge tray 20.

  The scanner unit 10 includes a first reading unit 21 and a second reading unit 22. A reading area is formed on one side of the document table 12 and passes through the reading area when the document is conveyed on the document table 12. Below the reading area, the first scanning unit 23 of the first reading unit 21 is positioned, and the surface (lower side) of the document is read.

  When the document is transported to the document table 12 by the automatic document transport unit 11, the first scanning unit 23 is moved to the reading position and positioned, and the second scanning unit 24 is also positioned at a predetermined position. The surface of the document is irradiated from below the document table 12 by the exposure lamp of the first scanning unit 23. Reflected light from the document is guided to the imaging lens 25 by the respective reflection mirrors of the first and second scanning units 23 and 24. The reflected light of the document is condensed on the CCD 26 by the imaging lens 25. An image on the surface of the document is formed on the CCD 26. As a result, the image on the surface of the conveyed document is read.

  Further, the second reading unit 22 reads the back surface (upper side surface) of the document. The second reading unit 22 is disposed above the document table 12 and has an LED that irradiates the back side of the document, an exposure lamp array having a fluorescent lamp, a self-focal lens array that collects reflected light of the document for each pixel, and a cell. A contact image sensor (CIS) that photoelectrically converts reflected light from a document received through a fock lens array and outputs an analog image signal is provided. As a result, the image on the back side of the conveyed document is read.

  When a document is placed on the document table 12, the first reading unit 21 reads an image on the surface of the document. The first and second scanning units 23 and 24 move in the sub-scanning direction while maintaining a predetermined speed relationship with each other. The document on the document table 12 is exposed by the first scanning unit 23, and reflected light from the document is guided to the imaging lens 25 by the first and second scanning units 23 and 24. An image of the original is formed on the CCD 26 by the imaging lens 25.

  When the image on one or both sides of the document is read in this way, the image data on one or both sides of the document is input to the control unit 7. The control unit 7 includes an image processing unit, and performs various types of image processing on the image data by the image processing unit. This image data is output to the image forming unit 3.

  The image forming unit 3 prints a color image or a monochrome image on a recording sheet based on the input image data. The image forming unit 3 includes a laser scanning unit 30, four image stations 31, an intermediate transfer belt unit 32, a fixing device 33, and a conveying device 34.

  Each image station 31 forms a color image corresponding to each color of black, cyan, magenta, and yellow. Each image station 31 includes a photosensitive drum 35, a developing device 36, a charging device 37, a cleaning device 38, and a charge eliminating device (not shown).

  The photosensitive drum 35 is rotationally driven in one direction, the cleaning device 38 cleans the residual toner on the surface of the photosensitive drum 35, and the neutralization device neutralizes the surface of the photosensitive drum 35. The charging device 37 uniformly charges the surface of the photosensitive drum 35.

  The laser scanning unit 30 modulates laser light based on image data input from an image reading unit or the like, and repeatedly scans the surface of the photosensitive drum 35 in the main scanning direction with this laser light, thereby generating an electrostatic latent image. It is formed on the surface of the photosensitive drum 35. The developing device 36 supplies toner to the surface of the photosensitive drum 35 to develop the electrostatic latent image, and forms a toner image on the surface of the photosensitive drum 35.

  The intermediate transfer belt unit 32 includes an intermediate transfer belt 40, an intermediate transfer roller 41, a transfer belt cleaning device 42, and a tension mechanism 43. The intermediate transfer belt 41 is disposed above each photosensitive drum 35, is wound around the driving roller 44 and the driven roller 45, and rotates in the direction of arrow B.

  The intermediate transfer roller 41 is disposed to face the photosensitive drum 35 with the intermediate transfer belt 40 interposed therebetween, and a transfer bias voltage is applied thereto. The toner image on the surface of the photosensitive drum 35 is transferred to the intermediate transfer belt 40 by applying a voltage having a polarity opposite to that of the toner by the intermediate transfer roller 41. The toner images of the respective colors are laminated on the intermediate transfer belt 40, and a combined multi-color toner image is formed.

  The transfer roller 41 is disposed in pressure contact with the intermediate transfer belt 40, and a voltage having a polarity opposite to that of the toner is applied. The toner image on the intermediate transfer belt 40 is transferred by the transfer roller 46 to a recording sheet conveyed between the transfer roller 46 and the intermediate transfer belt 40. The toner remaining on the intermediate transfer belt 40 is removed by the transfer belt cleaning device 42.

  The toner image transferred to the recording sheet is heated and pressurized by the fixing device 33 and fixed on the recording sheet, and an image is formed on the recording sheet. The recording sheet on which the image is printed in this manner is discharged to a discharge tray 50 provided in the upper part of the cabinet 1.

  The transport device 34 transports the recording sheet from the sheet cassette 51 or the manual feed tray 52 along the transport path 53. The conveyance path 53 passes between the intermediate transfer belt 40 and the transfer roller 46, passes through the fixing device 33, and reaches the discharge tray 50.

  The transport device 34 includes a pickup roller 54, a transport roller 55, a registration roller 56, and a discharge roller 57. The recording sheets in the sheet cassette 51 or the manual feed tray 52 are sent one by one to the transport path 53, transported through the transport path 53, and discharged to the discharge tray 50. During the conveyance of the recording sheet, an image is printed on the recording sheet. In addition, a switchback conveyance path 58 is provided for duplex printing. The recording sheet after fixing passes through the switchback conveyance path 58 by the conveyance roller 55 and is conveyed between the intermediate transfer belt 40 and the transfer roller 46. The recording sheet printed on both sides passes through the fixing device 33 and is discharged to the discharge tray 50.

  The operation panel 6 is provided in the scanner unit 10 and includes an operation unit 60 and a display unit 61. The operation unit 60 includes various operation keys. The display unit 61 includes a liquid crystal display and is a touch panel. Touch keys are formed in the operation screen displayed on the display unit 61, and these also function as operation keys.

  The communication unit 5 includes a communication interface, and the communication interface is connected to a network such as a LAN or a WAN. A plurality of external devices are connected to the network. The external device is another image processing device, an information processing device such as a personal computer, or a server. The network is connected to the Internet from a router through a communication line such as a telephone line or an optical fiber. The communication unit 5 can communicate with an external device through a network using a predetermined communication protocol. The image processing apparatuses can also communicate with each other. Communication within the network may be wired or wireless. An image processing system is formed by these image processing devices and external devices.

  The communication unit 5 includes a modem device. A telephone line is connected to the modem device. The image processing apparatus can perform facsimile communication. The image processing apparatus can also perform data communication by Internet facsimile through a network. Furthermore, the communication unit 5 includes a communication terminal and a communication card for wireless communication. A storage medium such as a USB memory or an IC card is connected to the communication terminal, and the communication unit 5 transmits / receives data to / from the storage medium. In addition, data is transmitted and received by wireless communication with a communication terminal such as a mobile phone or PDA through a communication card.

  The storage unit 4 includes a hard disk device. The storage unit 4 stores image data input from the image reading unit 2 or image data input from the communication unit 5. The input image data is temporarily stored in an image memory such as a DRAM, subjected to image processing and encryption processing, and then transferred from the image memory to the storage unit 4. Further, when image data is read from the storage unit 4, the image data is subjected to image processing and decoding processing and stored in an image memory. Thereafter, the image data is output to the outside by printing, data transmission, and facsimile communication according to the processing to be executed.

  The storage unit 4 includes a management table 62, and information necessary for operating the image processing apparatus such as control information, setting information, and user authentication information of the image processing apparatus is stored in the management table 62. When these pieces of information are created and changed, the information in the management table 62 is updated. The management table 62 may be provided in a non-volatile memory different from the storage unit 4.

  The control unit 7 includes a microcomputer having a CPU, a ROM, and a RAM. The CPU reads a control program stored in the ROM into the RAM and executes the control program. Each unit operates according to the control program. When image data is input from an input unit such as the image reading unit 2 or the communication unit 5, the print mode is set based on input information from the operation unit 60 or processing conditions included in header information of image data input from an external device. Any one of a copy mode, a scanner mode, and a facsimile mode is executed. In addition, the control program includes a browser and mail software, and the control unit 7 performs data communication with an external device or transmits / receives an e-mail using a communication protocol such as a TCP / IP protocol.

  The control unit 7 temporarily stores the input image data in the storage unit 4 when performing each mode. Further, the control unit 7 executes a filing mode in which the input image data is stored in the storage unit 4 and managed. The stored image data is re-output according to the instructed process.

  The output image data is erased from the storage unit 4 according to an instruction from the control unit 7. At the time of this erasure, the image data is invalidated so that it cannot be restored by overwriting the image data with random data. In this way, invalidation of image data is prevented by performing invalidation processing and further encryption processing.

  Here, personal information is described in information media such as a credit card, a driver's license, an insurance card, and a basic resident register card. For example, in a credit card, as shown in FIG. 3, a card number, an expiration date, and a name are written on the front surface, and a signature is written on the back surface. In the cash card, as shown in FIG. 4, a card number and a name are written on the surface. In the insurance card, as shown in FIG. 5, the expiration date, symbol, name, date of birth, etc. are written, and the address is written on the back. The insurance card shown in FIG. 6 also includes a symbol, name, date of birth, etc. on the surface. The name, date of birth, address, and permanent address of the driver's license are printed on the front. In your passport, your name, date of birth, address, and photo of your face are listed.

  As described above, in various information media, specific images are formed as images representing personal information on the front surface and the back surface. And the specific area | region which is an area | region where a specific image exists is prescribed | regulated by each information medium. A plurality of unique images are formed on the information medium, and there are a plurality of specific areas.

  The information medium has an IC tag T. The IC tag T is embedded in or pasted on the information medium. Identification information relating to the information medium is stored in the storage unit of the IC tag T. This identification information indicates the type of information medium.

  This image processing apparatus has a protection function that prevents personal information from being leaked unnecessarily when an image on an information medium is processed. That is, as shown in FIG. 1, when an image having a specific image is input from the information medium by the input unit, an area determination unit 63 that determines a specific area and a determination unit 64 that determines the type of the information medium are provided. The operation of the area determination unit 63 and the determination unit 64 is controlled by the control unit 7. The control unit 7 performs image processing for masking a specific area when the input image is subjected to image processing and output.

  The determination unit 64 acquires the identification information of the information medium through the reading unit 8 and determines the type of the information medium. The size of the information medium is defined according to its type. In the management table 62, information medium management information relating to the size of various information media, the form of a specific image, and the position of a specific area is stored in advance. When the image reading unit 2 reads the information medium, the determination unit 64 recognizes the outer periphery of the information medium from the input image and calculates the size of the information medium. At this time, the control unit 7 recognizes that the image of the information medium has been input, and operates the reading unit 8. The reading unit 8 communicates with the IC tag T of the information medium, and outputs the read identification information to the determination unit 64. Note that the reading unit 8 may emit radio waves constantly or intermittently so that the IC tag T can always communicate.

The control unit 7 executes a protect function in response to the input of the image on the information medium. The determination unit 64 refers to the information medium management information and determines the type of the information medium based on the acquired identification information. Further, the determination unit 64 extracts a specific image from the input image, and recognizes the form and the position of the specific image on the input image.
The area determination unit 63 determines a specific area based on the type of information medium. The type of information medium and the specific area correspond to each other. The area determination unit 63 refers to the information medium management information and specifies a specific area in the determined information medium. Here, the position of the outer periphery is known from the input image of the information medium. The specific area is at a fixed position with respect to the outer periphery. Therefore, the area determination unit 63 can determine the position of the specific area in the input image.

  In the control unit 7, the image processing unit performs image processing for masking the specific region by filling the specific region with a solid image or overwriting another image.

  The image data that has been subjected to such image processing is output to the image forming unit 3, and an image in which the unique image is hidden is printed and output to the outside. Instead of printing, the image data may be output to the external device by data communication by outputting the image data to the communication unit 5. In the external device, an image in which the unique image is hidden is displayed or printed.

  As described above, when an information medium in which a unique image such as personal information is read is read by the image processing apparatus, an image in which the unique image is not known is output. Therefore, even if a third party tries to copy the information medium and take out the personal information, the unique image for the personal information is output while being hidden, so that leakage of the personal information can be prevented.

  In addition, the image processing apparatus has a function of reading images from the front and back surfaces of the information medium, combining the images on the front and back surfaces, and outputting them in one page. Here, this function is referred to as a card shot function. When the card shot function is instructed, the control unit 7 automatically executes the above protect function. As a result, two images in which the unique images are hidden as shown in FIG. 7 are output side by side on one page. In the case of an information medium having an image only on one side, when the card shot function is executed, an image on one side is output on one page.

  Here, there is a case where a person concerned including the person copies the information medium for the identity confirmation. In order to cope with such a case, the area determination unit 64 determines a specific area according to the security level. As a result, the determined specific area is masked. When the security level is high, the specific area to be masked increases, and when the security level is low, the specific area to be masked decreases.

  The image processing apparatus includes an authentication unit 65 that authenticates a user, and a security level is set according to the user. When authentication information such as ID information, password, and biometric information is input, the authentication unit 65 identifies the user based on these information. Then, the user is authenticated based on user information registered in advance. In the user information, the security level for each user is registered. The security level of the user with high authority is high, and the security level of the user with low authority is low. Depending on the level of the security level, processing on the input image is restricted.

  A security level is also set for the specific image. The personal information described in the information medium includes information that causes a problem when leaked and information that does not cause a problem even if leaked. The security level is raised as the unique image for the important personal information. Therefore, a security level is determined for each unique image of the information medium, and a security level for each unique image is set in advance in the information medium management information. Whether to mask is determined according to the level of the security level.

  The area determination unit 64 determines a specific area according to the security level of the user and the security level of the specific image. That is, the area determination unit 64 compares the security level of the user with the security level of the specific image, and determines a specific area to be masked based on the higher security level. Thereby, when there are a plurality of specific images on the information medium, a part of the specific images is selected according to the security level, and the specific area for the specific image is set as a specific area to be masked. On the other hand, the specific areas for the remaining unselected special images are not masked.

  The operation when the card shot function is performed will be described with reference to FIG. Here, it is assumed that the credit card is copied. First, the user operates the image processing apparatus and inputs ID information and authentication information. The authentication unit 65 confirms these pieces of information and authenticates the user (S1). Based on the user information, the security level of the user is specified (S2). If the user is not a registered user, the user is not authenticated, and the use of the image processing apparatus is restricted to limited operations.

  The user places the credit card on the document table 12 and selects the card shot function by the operation unit 60 (S3). By operating the start key, the image reading unit 2 reads the surface of the credit card. The user turns over the credit card and places it on the document table 12. By operating the start key, the image reading unit 2 reads the back side of the credit card.

  The reading unit 8 communicates with the IC tag T and receives identification information. The determination unit 64 determines the type of information medium based on the identification information (S4). This identifies the credit card.

  If it is determined that it is a credit card, the area determining unit 63 confirms the position of the specific area in the credit card based on the information medium management information, assigns the position to the input image, A specific area is specified (S5).

  The area determination unit 63 reads the security level of the user from the user information (S6). Also, the security level of the specific image is read from the information medium management information. Then, the area determination unit 63 compares both security levels (S7).

  When the security level of the user is higher than the security level of the specific image, processing corresponding to the security level of the user is performed. That is, when the security level of the user is high, since the user has authority such as an administrator, the control unit 7 does not mask the specific area and outputs the input to the image forming unit 2 The image is printed as it is (S10).

  When the security level of the specific image is higher than the security level of the user, the area determination unit 63 determines a specific area to be masked (S8). Then, the control unit 7 performs image processing for masking the specific area (S9), and the image forming unit 2 prints an image (S10).

  Here, the specific area is determined so as to mask the specific area for all the unique images of one credit card. Instead of this, the region determination unit 63 can determine whether to mask each unique image and determine a specific region.

  The area determination unit 63 determines the specific area to be masked and the specific area not to be masked by comparing with the security level of the user for each specific image. In response to this determination, the control unit 7 masks some of the specific areas and does not mask the remaining specific areas. For example, the specific area for the specific image representing the card number is masked, and the specific area for the specific image representing the expiration date is not masked. Alternatively, the specific area for the last four digits of the card number is masked, and the specific areas for other card numbers are not masked. Even if the security level of the specific image is the same, the specific area to be masked differs depending on the user. In the case of a user with a high security level, the specific area for the name is masked, whereas for the user with a low security level, the specific area for the card number as well as the name is masked.

  In this way, the specific area for each unique image is individually masked according to the security level, so that a part of the unique image is output in a hidden state. Therefore, it is possible to provide personal information necessary for identity verification and the like, and unnecessary personal information is kept secret, and personal information can be prevented from leaking unnecessarily.

  By the way, even if it is the same kind of information medium, the number of digits of a card number may differ, for example, and a name and an address may be long. In such a case, the specific area for the actual unique image may be larger than the specific area defined in advance. Therefore, the area determination unit 63 can change the specific area.

  When the specific area in the input image is specified, an area setting screen is displayed on the display unit 61 as shown in FIG. On this screen, a specific image and a specific area are displayed, and a change key is also displayed. Each specific area can be moved and enlarged / reduced on the display unit 61. When one specific area is selected, the specific area is moved and enlarged / reduced by operating the change key. However, the change of the specific area is restricted. The movement amount, the enlargement rate, and the reduction rate are limited within predetermined ranges. By limiting the amount of change in this way, it is possible to prevent the specific image in the specific area from protruding from the specific area that has been changed.

  When the change of the specific area is completed, the area determination unit 63 updates information regarding the position of the specific area in the input image. The control unit 7 performs image processing for masking the changed specific area. Therefore, by changing the specific area so as to match the specific image, the specific image can be surely hidden and leakage of personal information can be prevented.

  In addition, the security level of the specific image can be changed. A security level is set in advance for each unique image on the information medium. However, depending on the user's request, it may be necessary to hide the specific image or to display the specific image.

  Therefore, after the image is input, the control unit 7 changes the security level of the specific image according to a user instruction. A security level setting screen is displayed on the display unit 61 as shown in FIG. On this screen, a specific image and a specific area are displayed, and a security level key is also displayed. The plurality of security level keys correspond to each specific area. The user selects one specific area and selects an arbitrary security level. The control unit 7 temporarily changes the security level of the specific image corresponding to the specific area. The area determination unit 63 determines whether to mask a specific area based on the security level of the changed specific image and the security level of the user.

  By increasing the security level of the unique image, specific areas that are not normally masked are masked. On the contrary, by lowering the security level of the specific image, a specific area that is normally masked is not masked. Therefore, the specific image can be hidden as necessary, and unnecessary personal information can be prevented from leaking.

  It should be noted that the change of the security level is preferably limited to users having a certain security level or higher. For example, it is limited to users having a security level equal to or higher than the security level of the specific image. If all users can change the security level, the third party's information medium's unique image can be copied without hiding it, which poses a security problem. Therefore, such a problem can be eliminated by limiting. In the above description, the security level is temporarily changed. However, since a normal change is a setting change, an authorized user performs the change. With this change, the information medium management information is updated.

  When the input image is processed in the image processing apparatus, the control unit 7 creates log information for the processing and stores it in the storage unit 4. The log information is added with the input image, and the image data of the specific image is stored. However, from the viewpoint of protecting personal information, when the card shot function is executed, the control unit 7 prohibits the creation of log information.

  Thus, log information is not created when an image on the information medium is processed. Further, the input image data of the information medium is deleted from the storage unit 4 and the memory when the processing is completed. Therefore, the image data of the specific image does not remain in the image processing apparatus. Therefore, personal information described in the information medium never flows out of the image processing apparatus.

  In addition, when the card shot function is executed, the control unit 7 prohibits execution of the filing mode in which the input image data is stored in the storage unit 4. Also by this, the image data of the specific image is not stored, and personal information can be prevented from leaking from the image processing apparatus.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. The identification information stored in the IC tag may include not only the type of information medium but also the position information of the specific area. When the reading unit reads the position information from the IC tag, the region determination unit specifies the position of the specific region in the input image. Acquiring position information in this way speeds up the process and allows the position of the specific area to be determined accurately.

  Furthermore, the identification information may include authentication information of the owner of the information medium. By reading the input authentication information from the IC tag and comparing the authentication information, it can be confirmed whether the owner is operating. When a third party is operating, the security level is increased and the range to be masked is increased. Thereby, leakage of personal information due to unauthorized use can be prevented.

Control block diagram of image processing apparatus of the present invention The figure which shows the schematic whole structure of an image processing apparatus. Diagram showing the front and back of a credit card The figure which shows the front and back of the cash card Illustration showing the front and back of the insurance card Illustration showing the surface of an insurance card The figure which shows the picture where the personal information of the credit card was hidden and outputted Flow chart showing the procedure of the card shot function Figure showing the setting screen for changing a specific area Figure showing the security level change setting screen

Explanation of symbols

2 image reading unit 3 image forming unit 4 storage unit 6 operation panel 7 control unit 8 reading unit 63 area determining unit 64 discriminating unit 65 authentication unit T IC tag

Claims (14)

An input unit that inputs an image having a unique image from an information medium, a reading unit that communicates with a storage unit provided in the information medium and reads identification information from the storage unit, and a specification that a specific image exists based on the identification information An area determination unit that determines an area and a control unit that performs image processing for masking the specific area, and when the control unit executes image processing for masking the specific area, prohibiting the creation of log information for this process An image processing apparatus. The image processing apparatus according to claim 1, further comprising: a determination unit configured to determine the type of the information medium based on the identification information, wherein the region determination unit determines the specific region based on the type of the information medium. The image processing apparatus according to claim 2, wherein the specific area is determined according to a type of the information medium, and the area determination unit specifies the specific area from the type of the information medium. The image processing apparatus according to claim 1, wherein the storage unit of the information medium includes an IC tag, and the reading unit communicates with the IC tag in a non-contact manner and receives identification information. The image processing apparatus according to claim 1, wherein the identification information includes position information of a specific area, and the area determination unit specifies an existing position of the specific area in the input image based on the position information. The image processing apparatus according to claim 1, further comprising: a display unit that displays the specific region, wherein the specific region displayed on the display unit can be changed, and the control unit masks the changed specific region. The image processing apparatus according to claim 1, wherein the area determination unit determines a specific area to be masked according to a security level. 8. The image processing apparatus according to claim 7, wherein the security level can be changed after the image is input. 8. The image processing apparatus according to claim 7, wherein the security level of the specific image is set according to the type of the information medium, and the area determination unit determines the specific area according to the security level of the specific image. The image processing apparatus according to claim 7, further comprising an authentication unit that authenticates a user, wherein a security level is set according to the user. The security level of the specific image is set according to the type of information medium, and the area determination unit determines the specific area based on the higher security level of the user security level and the security level of the specific image. The image processing apparatus according to claim 10. The image processing apparatus according to claim 1, wherein the control unit prohibits the storage of the image having the input unique image when executing the image processing for masking the specific area. The image processing apparatus according to claim 2, wherein the information medium has an image representing personal information as a specific image on the surface, and the input unit reads the surface of the information medium and inputs the image. The information medium has images on the front and back surfaces, the input unit reads both sides of the information medium and inputs the images, and the control unit combines the images on both sides and outputs the two images side by side. The image processing apparatus according to claim 2.

Images