JP4460514B2 - Data processing device - Google Patents

Description

  The present invention relates to a data processing apparatus that stores input image data and performs processing on image data such as printing, image communication, and facsimile communication.

  In recent years, data processing apparatuses having a copy function for electronically scanning and reading an image of a document and copying the image data have become more complex. For example, a network printer function connected to a network such as a LAN, receiving image data from an information processing apparatus such as a personal computer, and printing the image, a network scanner function transmitting the read image data to the information processing apparatus, and a network And a facsimile function for transmitting / receiving image data to / from an external facsimile apparatus via a telephone line.

  The multifunctional data processing apparatus includes a storage device that temporarily stores input image data. There are various types of storage devices such as those composed of a semiconductor memory and those composed of a magnetic storage medium such as a hard disk device, and a large amount of image data and a plurality of jobs can be processed efficiently.

  In a data processing device, a semiconductor memory that can be read and written at high speed is used as a local memory for storing image data to be processed, and a hard disk device is used to temporarily store image data for processing. The input image data is subjected to image processing such as compression on the local memory, and this image data is temporarily stored in the hard disk device. When the order of processing comes, the stored image data is read out, image processing such as decompression is performed on the local memory, and desired processing such as printing, image communication, and facsimile communication is performed, Is output.

When data having confidentiality is processed by such a data processing device, as described in Patent Document 1, for example, as a security function, when processing is completed, image data in the hard disk device is erased, Overwrite with random data. Further, as described in Patent Document 2, the erasing operation is performed a plurality of times. As a result, the image data stored in the hard disk device becomes completely unreadable and invalidated.
JP-A-9-284572 JP 2004-7059 A

  By the way, in a local memory using a volatile memory, new image data is overwritten and stored on old image data. When the power supply to the local memory is cut off, the image data is deleted. However, when the data processing apparatus is used for 24 hours, since the power supply is always kept on, the image data is always stored in the local memory.

  Here, when an error occurs in the data processing device due to noise or erroneous detection of the document, the image data cannot be normally input, or it is erroneously determined that the image data has not been input. May be. At this time, the old image data stored in the local memory is not overwritten and the processing is performed as it is. For example, if confidential image data remains stored, there is a problem that the image is printed, which gives the user a sense of security concerns.

  Therefore, in view of the above, an object of the present invention is to provide a data processing apparatus that can reliably invalidate confidential image data stored in a local memory and prevent leakage of confidential information when an abnormality occurs.

  The present invention relates to storage means for storing image data input during processing of image data, invalidation means for invalidating image data stored in the storage means, and whether the input image data is confidential And a control means for operating the invalidation means so as to preferentially invalidate the image data when the image data has confidentiality.

  When the processing of the input image data is completed, the image data stored in the storage means that is a local memory is invalidated. At this time, the invalidating unit operates first on a part of the storage area in which the confidential image data is stored in the storage area of the storage unit in which the image data is stored. This preferentially invalidates the confidential data that is part of the image data. Therefore, even if the operation of the invalidating means is interrupted and the image data remains without being invalidated, the confidential data is surely invalidated, so that the confidential data is not leaked to the outside.

  The image data is divided and stored in a plurality of storage areas in the storage means. The control means operates the invalidation means for the storage area where the confidential image data is stored. After the confidential data is preferentially invalidated, the invalidation is performed on the storage area in which the non-confidential image data is stored.

  When image data having confidentiality is stored in a plurality of storage areas, the determination unit sets priorities in order from storage areas having image data with high confidentiality. The control means invalidates the storage areas having image data with high confidentiality in order according to the priority order. Since highly sensitive image data is invalidated earlier, security can be relieved.

  Specifically, the image data is input in units of pages, and the determination unit determines whether the image data is confidential for each page. Then, the control means operates the invalidation means on a page basis. Therefore, invalidation is preferentially performed on the storage area corresponding to the confidential page.

  Further, the determination unit divides each page into a plurality of data areas, and determines whether the image data is confidential for each data area. In an area smaller than the page, the confidentiality of the image data is determined. That is, the confidential data itself can be extracted, not the image data including the confidential data. Then, the control means invalidates the data area in which the confidential image data is stored. Thereby, the confidential data itself can be preferentially invalidated.

  A plurality of data input means for inputting image data are provided, and the determination means determines whether the image data is confidential for each data input means. Depending on the input destination of the image data, only image data having no confidentiality may be handled. In such a case, it is not necessary to determine whether the image data is confidential. When image data is input from an input destination corresponding to this, normal invalidation is performed without determining the presence or absence of confidentiality.

  According to the present invention, confidential image data stored in the local memory is preferentially invalidated. Therefore, even if an abnormal situation occurs such that the invalidation operation is interrupted, the confidential data is not output because the confidential data does not remain in the local memory. Confidential leakage can be prevented, and security in the data processing apparatus is improved.

  A data processing apparatus of this embodiment is shown in FIG. The data processing apparatus is a digital multi-function peripheral having a copy mode, a printer mode, a scanner mode, and a facsimile mode, and includes an image reading unit 1 that reads a document and inputs image data, an operation unit 2 that receives user input, An image forming unit 3 that prints image data, a hard disk device 4 that stores image data, a communication unit 5 that communicates with an external device, a FAX modem 7 that communicates with a facsimile device 6, and the entire apparatus A management unit 8 that stores control information, setting information, and the like, and a device control unit 9 that controls the entire apparatus are provided.

  The image reading unit 1 functions as a data input unit that inputs image data, and includes an image sensor such as a CCD 1a and a document detection sensor 1b that detects a document set on a document table or an automatic document feeder (ADF). Image data read by the CCD 1 a is output to the image forming unit 3.

  The operation unit 2 includes an input unit 2a composed of various input keys and a display unit 2b such as a liquid crystal display. The operation unit 2 operates the entire apparatus and inputs various settings, and displays the input contents and the operation status of the entire apparatus. Is done.

  The image forming unit 3 includes a local memory 10 that is a storage unit that stores image data, a printing unit 3a including a laser scanning unit, and a paper feeding unit 3b. As the local memory 10, a readable / writable semiconductor memory such as an SDRAM or a flash memory is used. The local memory 10 stores image data by overwriting old image data with new image data. The printing unit 3 a prints an image on a recording sheet supplied from the paper feeding unit 3 b based on the image data stored in the local memory 10.

  In the image forming unit 3, the input image data is stored in the local memory 10, and image processing such as compression, expansion, and processing of the image data is performed on the local memory 10, and the image data subjected to the image processing is printed in the printing unit 3a. The data is output to the hard disk device 4 or the device control unit 9. The local memory 10 is divided into an area for storing input image data and an area for storing image data for output. Instead of dividing and using one local memory 10, two local memories 10 may be used for input and output, respectively.

  The hard disk device 4 is storage means for temporarily storing image data for processing. When image data is stored in the hard disk device 4, the image data is encrypted as necessary.

  The communication unit 5 is connected to a router, a switching hub, and the like via a LAN cable, and is connected to a network formed by the information processing apparatus 11 such as a personal computer or a server. The network is connected to the Internet via a communication line such as a telephone line network or an optical fiber. The communication unit 5 transmits / receives data to / from the information processing apparatus 11 in the network, and transmits / receives data to / from the external information processing apparatus 12 and the facsimile apparatus 13 through the Internet. The FAX modem 7 is connected to the telephone line network via a telephone line, and performs facsimile communication with the external facsimile apparatus 6. Accordingly, since image data is input through the communication unit 5 and the FAX modem 7, these also function as data input means.

  When there is an input from the operation unit 2 or a data input from an external device, the device control unit 9 controls each unit based on information stored in the management unit 8 and processes the input image data. That is, any one of a copy mode, a printer mode, a scanner mode, and a facsimile mode is executed on the input image data, and the input image data is output in a desired form.

  The data processing apparatus includes invalidation means 14 for invalidating image data in the local memory 10 and the hard disk device 4. The device control unit 9 controls the operation of the invalidating unit 14. Invalidation of image data means that random or meaningless data is overwritten or erased so that the stored image data cannot be read and the original image cannot be reproduced. Is to do. Accordingly, the invalidating unit 14 invalidates the image data by erasing the old image data by overwriting or erasing the data in the local memory 10. For the hard disk device 4, the image data is invalidated by overwriting or erasing.

  Next, the operation when each mode is executed will be described. First, in the copy mode, image data of a document read by the image reading unit 1 is output as a copy from the image forming unit 3. Specifically, the image of the original set at the reading position is read by the CCD 1a. The image data output from the CCD 1a is completed as an output image on the local memory 10, and is once transferred to the hard disk device 4 and stored. When there are a plurality of documents, the reading and storing operations are repeated.

  Thereafter, based on the processing contents instructed from the operation unit 2, the image data stored in the hard disk device 4 is sequentially read out at an appropriate timing and sent to the local memory 10. Then, the image data is transferred from the local memory 10 to the printing unit 3a at the timing of writing to the printing unit 3a, and the image is printed on the recording sheet.

  Similarly, when printing a plurality of read image data, the image data is stored in the hard disk device 4 in units of pages as output images, and sent from the hard disk device 4 to the local memory 10 in accordance with the output mode. The image data in the local memory 10 is repeated for the number of output sheets, and transferred to the printing unit 3a in accordance with the writing timing to the printing unit 3a.

  In the printer mode, the image data output from the information processing apparatuses 11 and 12 is output from the image forming unit 3. That is, the image data from the information processing apparatuses 11 and 12 is received by the communication unit 5. The device control unit 9 sends the input image data to the local memory 10, develops it as page data as output image data, and temporarily stores it in the hard disk device 4. Then, the image data is sent from the hard disk device 4 to the local memory 10 and transferred to the printing unit 3a in the same manner as in the copy mode, and an image is printed.

  In the scanner mode, the image data of the document read by the image reading unit 1 is communicated to any information processing apparatuses 11 and 12 through a network. In other words, the image data output from the CCD 1 a is completed as an output image on the local memory 10 and temporarily stored in the hard disk device 4. Then, the image data is sent from the hard disk device 4 to the local memory 10, and the device control unit 9 establishes communication with the transmission destination in the network instructed via the operation unit 2, and the target transmission from the communication unit 5. Send the image data first. Further, the image data is transmitted to the external information processing apparatus 12 and the facsimile apparatus 13 from the network via the network by the communication unit 5. The device control unit 9 transmits image data from the FAX modem 7 to the facsimile apparatus 6 through the telephone line 6 by the same operation in the facsimile mode.

  As described above, when processing the image data input from the data input means, the image data is stored in the local memory 10. The device control unit 9 operates the invalidation unit 14 for the local memory 10 when the processing of the image data is completed.

  As shown in FIG. 2, the device control unit 9 confirms that the new image data is not stored in the local memory 10 and determines that the processing is completed. That is, the device control unit 9 functions as an input / output monitoring unit. The input / output monitoring unit measures the time until the next data input by a timer, and whether or not image data is input from the data input means or output depending on whether or not the data is input within a certain time, for example, 1 minute. Therefore, whether or not image data is input from the hard disk device 4 is confirmed. Note that the presence or absence of input of image data may be confirmed based on the presence or absence of a document on the document table or the document reading unit 1. As described above, by making a time lag of a certain time from when the image data is not stored in the local memory 10 until it is determined that the processing is completed, erroneous determination can be eliminated. For example, it takes a longer time to read image data from the hard disk device 4 than to read from the semiconductor memory. Therefore, it is erroneously determined that there is no input of image data even though it is still being read from the hard disk device 4, and the invalidating means 14 operates. However, providing a time lag eliminates erroneous determination and prevents the invalidating means 14 from operating erroneously.

  When the device control unit 9 determines that the processing is completed, the device control unit 9 causes the invalidation unit 14 to execute a data erasure task. As a result, the image data in the local memory 10 is erased, that is, the stored image data is invalidated so that it cannot be read.

  In addition, when new image data is input during the execution of the data erasure task, the device control unit 9 interrupts the execution, and resumes the data erasure task when the processing of the input image data is completed. The execution state of the data erasure task is monitored, and the monitoring information is stored and managed in the management unit 8.

  Here, a series of operations from the processing of the image data to the invalidation of the image data will be described with reference to FIG. First, image data is input from the data input means. Image data is input in units of pages and temporarily stored in the local memory 10. The image data subjected to the image processing is stored in the hard disk device 4. If there is next image data, the local memory 10 is overwritten and the image processed image data is stored in the hard disk device 4.

  When all the image data is input and stored in the hard disk device 4, image data output processing is performed according to the designated mode. Image data is read from the hard disk device 4 and developed in the local memory 10. Instructed processing is performed on the image data, and output by printing, transmission, or the like. This output process is performed for each page.

  As shown in FIG. 4, for the processing of the input image data, information regarding this processing is created and collected as a job management table. The job management table is stored in the management unit 8. The job management table includes a status flag for the job. The status flag is set to any of processing completion, processing, data erasure completion, data erasing, and erasure interruption. The status flag indicates the progress of processing of the input image data and the data erasure status.

  When all the image data is output, the process is completed. When new image data is input, the next process is started. When there is no input of image data, it is determined whether there is no output of image data, and it is determined that the processing is completed. Thereafter, the data erasure task is started after a predetermined time has elapsed. For example, after the jobs 002 and 003 shown in FIG. 4 are completed, the data erasure task is executed. By executing this task, the image data stored in the local memory 10 is invalidated.

  During execution of the data erasure task, it is monitored whether there is input / output of image data to the local memory 10. If there is no input / output of image data, the data erasure task is executed as it is. When all the image data in the local memory 10 is erased, the task is terminated.

  When there is input / output of image data, the data erasure task is interrupted. Processing of the image data is performed, and when this processing is completed, the data erasure task is resumed. When resuming, erasure is performed from the point of interruption. In this way, the data erasure task is performed between the processing of the image data, and the image data stored in the local memory 10 can be constantly invalidated.

  When invalidating the image data stored in the local memory 10, the confidential image data is preferentially invalidated in order to improve security. That is, the device control unit 9 includes a determination unit that determines whether the input image data is confidential. When the image data has confidentiality, the device control unit 9 preferentially invalidates a part of the image data. Perform a data erasure task.

  After the processing of the input image data is completed, the image data stored in the local memory 10 is invalidated. At this time, the device control unit 9 extracts confidential image data from the stored image data, and first executes a data erasure task on the area where the image data is stored. In this way, confidential image data is preferentially invalidated.

  Image data is input in units of pages. In one job, the image data is composed of one page or a plurality of pages. The determination means determines whether the image data has confidentiality for each page. This determination is made based on the presence / absence of an image such as a drawing, a photograph, or a graph, the presence / absence of a specific character such as “top secret”, “important”, or “confidential”, and the presence / absence of an image such as an imprint or signature. Note that the above-described images and characters are discriminated from the change in density of pixels, colors, and the like by analyzing image data. The determination unit determines that there is confidentiality when such an image or character is included.

  In the local memory 10, the image data is divided into a plurality of storage areas 20 for each page and stored. For example, as shown in FIG. 5, if the local memory 10 has a storage capacity for two pages at A3, if the input image data is A4 size, four pages of image data are stored. Each area 20 is stored. Address information such as how many pages of image data are stored in what storage area 20 is created at the time of storage, and the address information is managed by the management unit 8. The device control unit 9 recognizes a page including confidential image data from the determination result, and determines a storage area 20 to be preferentially invalidated from the address information.

  Here, when confidential image data is stored in the plurality of storage areas 20, the device control unit 9 determines the level of confidentiality of the image data by the determination unit. Based on the determination result, the priority order is set in the storage area 20, and the image data in each storage area 20 is invalidated in order according to the priority order. The device control unit 9 determines the priority according to the level of confidentiality. The higher the confidentiality, the higher the priority. That is, when the image data of the first page has confidentiality, it is determined that the confidentiality of the first page is the highest. Also, the more images and characters that are the criteria for determining the confidentiality, the higher the confidentiality, and the priority is set according to the number of images and characters.

  As shown in FIG. 5, the image data of the second page is stored in the first storage area 20 of the local memory 10, and then the first page in the second storage area 20, the fourth page in the third storage area 20, Assume that image data of the third page is stored in the fourth storage area 20.

  When the input image data is not confidential, the data erasure task is executed sequentially from the first storage area 20 as shown in (a). When the image data of the first page has confidentiality, as shown in (b), first, a data erasure task is executed for the second storage area 20, and thereafter, each of the first, third, and fourth items in order. A data erasure task is executed for the storage area 20. When the image data of the first page and the third page have confidentiality, as shown in (c), the priority order is first set, the top first page is given the highest priority, and the second storage area 20 is stored. Then, the data erasure task is executed, and then the data erasure task is executed for the fourth storage area 20, and thereafter, the data erasure task is executed for each storage area 20 in the order of the third and fourth storage areas. .

  As described above, when the image data has confidentiality, the image data related to confidentiality is first invalidated. Therefore, when the image data stored in the local memory 10 is invalidated, even if new image data is input and the invalidation is interrupted, the confidential image data is invalidated. At this time, even if an abnormal situation occurs in the data processing apparatus, since the confidential memory image data is not stored in the local memory 10, it is possible to prevent a problem such as outputting a confidential image, and to improve security for the user. Don't give you anxiety.

  In the above, the presence / absence of confidentiality of the image data is determined for each page, and the image data is invalidated for each page. However, as shown in FIG. 6, the storage area 20 in which the confidential image data is stored. Only a part of the area may be preferentially invalidated. That is, the determination unit of the device control unit 9 divides one page into a plurality of data areas 21 and determines whether or not the image data is confidential in each data area 21. As the division into the data area 21, the data area 21 for each image is set in the page in accordance with the type of image such as characters, drawings, photographs, and graphs. Alternatively, one page is equally divided to set the matrix data area 21.

  When the data area 21 having confidentiality is determined, the position of the data area 21 in the storage area 20 is specified based on the address information, and the image data stored in the data area 21 is invalidated. Thereafter, a normal data erasure task is executed. When there are a plurality of identified data areas 21, priority is set in descending order of confidentiality, and the data areas 21 are invalidated in order.

  By the way, the input image data is not always confidential. For example, in the facsimile mode, an image is printed on a recording sheet based on the input image data and output. In this case, the image has an opportunity to be seen by a third party, and it cannot be said that the image data is confidential. Therefore, in the processing of the image data, it is possible to arbitrarily determine whether or not the image data is confidential and set it to be invalidated preferentially. As shown in FIG. 7, a confidential data invalidation setting screen is displayed on the display unit, and a necessary item is selected by the input unit.

  Image data processing includes a copy mode, a printer mode, and a facsimile mode, which are set for each mode. Since the data input means differs depending on each mode, it is determined whether or not to determine confidentiality with reference to the input destination of the image data. For example, when the copy mode and the printer mode are selected, it is determined whether or not the image data is confidential when these modes are executed. When the facsimile mode is executed, it is not determined whether the image data is confidential, and preferential invalidation is not executed.

  In addition, it is set for each page whether or not the determination of confidentiality is performed. A page for which confidentiality is to be determined can also be set. For example, the page is selected from a confidential page, a top page, and a drawing page. Note that the confidential page is a page including a logo in an image or a page having a background image.

  When a confidential page is selected, the presence or absence of a logo or a background pattern is determined. If there is any confidential page, it is determined that the confidential page has confidentiality. When the first page is selected, it is always determined that the first page has confidentiality. When a drawing page is selected, the presence / absence of a drawing, a photograph, and a graph is determined.

  Furthermore, as a criterion for the presence / absence of confidentiality, it is possible to set whether to include a drawing, a photograph, or a graph as an image. For example, if a drawing is selected, it is determined that a page including the drawing has confidentiality. The same applies to photographs and graphs.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. The storage means for temporarily storing image data is not limited to a hard disk device, and a recording medium such as a non-volatile memory, an optical disk, a magnetic disk, or a magneto-optical disk that can be removed from the apparatus main body may be used.

  The data processing apparatus may be a multi-function machine having a copy mode and a facsimile mode, or may be a dedicated machine having only a single mode such as a copier, a printer, or a facsimile machine.

  Even when two local memories are used for input and output, respectively, the invalidating means is individually operated for each local memory. Further, the hard disk device may be invalidated simultaneously with the invalidation of the local memory.

1 is a diagram showing a schematic configuration of a digital multi-function peripheral that is an embodiment of a data processing apparatus of the present invention. Control block diagram for image data invalidation Flow chart from processing to deletion of input image data The figure which shows the job management table regarding the process of the input image data The figure which shows the order | rank of the storage area of a local memory, and the image data invalidation of each storage area The figure which shows the data area which has the confidentiality in the storage area of a local memory Figure showing the confidential data invalidation setting screen

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading part 2 Operation part 3 Image formation part 4 Hard disk apparatus 5 Communication part 7 FAX modem 8 Management part 9 Equipment control part 10 Local memory 14 Invalidation means 20 Storage area 21 Data area

Claims (6)

A plurality of data input means for inputting image data according to the mode to be executed, and the image data input during the processing of the image data are divided into a plurality of storage areas, and the old image data is overwritten and stored with the new image data. Storage means, invalidation means for invalidating the image data stored in each storage area of the storage means for each storage area when no new image data is input , and confidentiality of the input image data Determination means for determining the presence or absence of the image data, and control means for operating the invalidation means to preferentially invalidate the storage area in which the image data is stored when the image data has confidentiality,
The control means monitors the input of the image data to the storage means, and when no image data is input, starts the invalidation. Upon invalidation, the determination means refers to the data input means that has input the image data, Judgment is made on whether or not confidentiality is to be determined. When image data is input from a data input means corresponding to a mode for processing only non-confidential image data, the determination means The control means executes normal invalidation that invalidates in order from the first storage area, and image data is input from the data input means corresponding to the mode for processing confidential image data. When the determination means determines whether the input image data is confidential, the control means performs preferential invalidation when the image data is confidential, and when the image data is not confidential , A data processing device and performing invalidation of normal. The image data is input in units of pages, the storage means stores the image data in a plurality of storage areas for each page, a page for which the confidentiality is determined is set, and the determination means is the set target page The data processing apparatus according to claim 1, wherein each of the pages is determined for each page. When the image data having confidential is stored in the plurality of storage areas, the control means of claim 1, wherein that they would turn disabled from the storage area having highly confidential image data Data processing device. 3. The data processing apparatus according to claim 2, wherein the control unit invalidates the storage area in the storage unit corresponding to the confidential page. 2. The data according to claim 1, wherein the image data is input in units of pages, and the determination unit divides each page into a plurality of data areas and determines whether the image data is confidential for each data area. Processing equipment. 6. The data processing apparatus according to claim 5 , wherein the control means invalidates the data area in which confidential image data is stored.

Images