JP4563330B2 - Electronic device and authentication data erasure system - Google Patents

Description

  The present invention relates to an electronic device configured to allow use only by a specific person.

  Conventionally, Patent Document 1 below discloses an image forming apparatus that detects and registers a fingerprint, collates the detected fingerprint with the registered fingerprint, and permits a copy operation when they match. (For example, Patent Document 1 below).

In Patent Document 2 below, image data of a user's fingerprint is obtained by a CCD, the image data is stored in a storage unit as fingerprint data, and recognized recognition fingerprint data is registered as registered fingerprint data. Image formation in which the image forming process based on the image forming condition associated with the registered fingerprint data is set to a standby state that can be immediately executed by inputting an arbitrary operation start signal when it is determined that they are the same A device has been proposed.
JP 2000-221851 A JP 2004-37760 A

  As described above, in an image forming apparatus that stores a user's fingerprint, the apparatus may be reused after the apparatus is returned due to expiration of a lease or the like. Even when the image forming apparatus is discarded, there is a possibility that a part for storing fingerprint data after being disassembled may be illegally obtained by another person. In such a case, there is a high possibility that fingerprint data registered in the apparatus will leak out.

  Note that Patent Documents 1 and 2 do not disclose any treatment of fingerprint data registered in the device when the device is returned or discarded due to the expiration of the lease.

  The present invention has been made in view of such a conventional situation, and an object of the present invention is to provide an electronic device and an authentication data erasing system that more reliably prevent the leakage of personal information to the outside.

The invention according to claim 1 is an authentication data acquisition means for acquiring authentication data for identifying a user of the electronic device, a storage means for storing the authentication data acquired by the authentication data acquisition means, An input unit for inputting an instruction to delete the authentication data stored in the storage unit; an erasing unit for deleting the authentication data stored in the storage unit when the instruction is input by the input unit; and a confirmation A change input means for performing input for changing the number of authentication data to be processed, and the change input means from among the authentication data stored in the storage means after erasure of the authentication data by the erasure means the number of authentication data to be input check target, and acquires authentication data again by the authentication data acquisition means is acquired by the authentication data obtaining means Confirmation means for confirming whether or not certificate data is stored in the storage means, and when the confirmation means confirms that the authentication data is not stored in the storage means, the confirmation data is stored in the storage means. And a document output means for outputting a document indicating that the authentication data has been deleted.

The invention according to claim 7 is an authentication data erasing system in which an electronic device and an image forming apparatus are communicably connected via a communication network, and the electronic device identifies a user of the electronic device. Authentication data acquisition means for acquiring authentication data for storage, storage means for storing the authentication data acquired by the authentication data acquisition means, and input for inputting an instruction to erase the authentication data stored in the storage means And an erasing unit for erasing authentication data stored in the storage unit when the instruction is input by the input unit, and a change input unit for performing input for changing the number of authentication data to be confirmed If, after the erase of the authentication data by the erasing unit, from the authentication data stored in the storage means, the check target input by the change input means The number of consisting authentication data, and confirmation means acquires the authentication data again by the authentication data acquisition means, the authentication authentication data acquired by the data acquisition unit checks whether stored in said storage means, Communication means for notifying the image forming apparatus via the communication network that the authentication means has confirmed that the authentication data is not stored in the storage means, and the image forming apparatus comprises: A communication means for receiving a notification from the communication means; and a document output means for outputting a document indicating that the authentication data stored in the storage means has been deleted when the notification by the communication means is received. An authentication data erasing system characterized by the above.

According to these inventions, it is confirmed whether or not the authentication data acquired by the authentication data acquiring unit is stored in the storage unit after erasing the authentication data, and the authentication data is not stored in the storage unit When it is confirmed that the authentication data stored in the storage means is output, a document indicating that the authentication data has been deleted is output. Is notified to the user more reliably. In addition, since a change input unit is provided for performing an input for changing the number of authentication data to be confirmed by the confirmation unit, the number of users to be confirmed depends on the number of users registered in the electronic device. The number of can be set. For example, when the number of users registered in the electronic device is large, the number of users required for the confirmation work is limited so that the time and labor required for the check operation are not large. When the number is small, workability of authentication data erasure confirmation and confirmation of the confirmation are ensured, such as setting all users as users to be confirmed in order to perform confirmation of authentication data erasure more reliably. The number of users to be confirmed can be set in consideration of the balance with gender.

  According to a second aspect of the present invention, in the electronic device according to the first aspect, the document output means stores authentication data corresponding to some users preset by the confirmation means in the storage means. When it is confirmed that the document has not been output, the document is output.

  According to the present invention, the document is output when it is confirmed that the authentication data corresponding to some users preset by the confirmation unit is not stored in the storage unit. Therefore, since it is not necessary to perform the process for confirming the deletion of the authentication data of all the users by the confirmation unit, the user can perform the process for confirming the deletion of the authentication data without taking much time and effort.

According to a third aspect of the present invention, in the electronic device according to the first or second aspect , at least of before the deletion of the authentication data by the erasing unit and before the output of the document by the document output unit At one point, the electronic device is requested to input preset unique information, and when the input unique information is appropriate, the erasure unit or the document output unit is allowed to execute the process. A unique information authenticating means is provided.

According to the present invention, the electronic device is preset for at least one time point before the erasure unit erases the authentication data and before the document output unit performs the document output. When the input of the unique information is requested and the input unique information is appropriate, the erasure unit or the document output unit is allowed to execute the process. The output of the document by the document output means can be prevented or suppressed from being executed unintentionally.

The invention described in claim 4 is the electronic device according to any one of claims 1 to 3 , further comprising communication means for communicating with another electronic device via a communication network, wherein the communication means includes: In order to output the document to the other electronic device, the confirmation result by the confirmation unit is notified to the electronic device.

  According to this invention, in order to cause the other electronic device to output the document, the confirmation result by the confirmation unit is notified to the electronic device, so that the electronic device cannot execute the notification for some reason. Even so, a document indicating that the authentication data has been deleted is output to the user.

According to a fifth aspect of the present invention, in the electronic device according to any one of the first to fourth aspects, the document output means outputs a document including a signature column for requesting a signature from a user. To do.

  According to the present invention, since the document including the signature field for requesting the signature from the user is output, the fact that the user has confirmed that the authentication data has been deleted can be tangible. .

In the electronic device according to any one of claims 1 to 5 , the authentication data may be biometric information such as data representing a user's fingerprint as in the invention according to claim 6 , or It may be a password or the like.

  According to the present invention, by outputting a document indicating that the authentication data stored in the storage means has been deleted, it is ensured that the authentication data has been deleted when the electronic device is discarded. Since it is notified to the person, the outflow of the authentication data to the outside can be prevented more reliably.

  FIG. 1 is a block diagram showing an electrical configuration of a digital multi-function peripheral which is an embodiment of an electronic apparatus according to the present invention. A multifunction peripheral is an apparatus having a plurality of functions relating to image formation, such as a copying function, a printer function, a facsimile function, and a scanner function.

  The multifunction device 1 includes a scanner unit 11, an image processing unit 21, a printer unit 31, a data memory 36, a control unit 41, an operation panel unit 51, a facsimile communication unit 61, a network I / F unit 71, a parallel I / F unit 72, A serial I / F unit 73 and an HDD (hard disk drive) 74 are provided.

  The scanner unit 11, the image processing unit 21, the data memory 36, the control unit 41, the operation panel unit 51, and the network I / F unit 71 realize a network scanner function for transmitting the captured image data to a predetermined IP address. Is done. The scanner unit 11, the image processing unit 21, the printer unit 31, the data memory 36, the control unit 41, the operation panel unit 51, and the facsimile communication unit 61 realize a facsimile function. Further, a printer function is realized by the image processing unit 21, the printer unit 31, the control unit 41, the operation panel unit 51, the network I / F unit 71 and the parallel I / F unit 72. The scanner unit 11, the image processing unit 21, the printer unit 31, the control unit 41, and the operation panel unit 51 implement a copy function.

  The operation panel unit 51 is used for a user to perform operations related to a copy function, a printer function, a facsimile function, a scanner function, and the like, and gives an operation command (command) by the user to the control unit 41. The operation panel unit 51 includes a display unit 52 having a touch panel and the like, and an operation key unit 53 having a start key, a numeric keypad, and the like. The display unit 52 includes a touch panel unit capable of color display combining a touch panel and an LCD (Liquid Crystal Display), etc., displays various operation screens and enables input operations. At this time, information on user selection, transmission destination selection, transmission setting, and the like is displayed, and operation buttons for inputting various operation commands by the user touching the part are displayed. The operation key unit 53 is used for inputting various instructions such as a copy execution start instruction or a facsimile transmission start instruction by the user.

  The scanner unit 11 optically acquires a document image and generates image data. The scanner unit 11 includes an exposure lamp 12 and a CCD (charge coupled device) 13. The scanner unit 11 irradiates the document with the exposure lamp 12 and receives the reflected light with the CCD 13, thereby reading the document image and outputting image data corresponding to the read image to the image processing unit 21. The scanner unit 11 may be capable of reading not only a monochrome document but also a color document or a photo document.

  The image processing unit 21 performs various image processing on the image data. For example, the image processing unit 21 performs predetermined correction processing such as level correction and γ correction, image data compression or expansion processing, enlargement or reduction processing on image data obtained by being read by the scanner unit 11. Various image processing (processing processing) is performed. The image processing unit 21 includes an image memory 22 and stores processed image data or the like in the image memory 22 or outputs the image data to the printer unit 31, the facsimile communication unit 61, the network I / F unit 71, or the like.

  The printer unit 31 receives original image data read by the scanner unit 11, image data received from an external personal computer or the like via the network I / F unit 71, and received from an external facsimile apparatus by the facsimile communication unit 61. An image corresponding to image data such as fax data is printed on a predetermined recording sheet. The printer unit 31 includes a paper transport unit 32 having a paper feed cassette and paper feed rollers, an intermediate transfer body roller, a photosensitive drum, an image forming unit 33 having an exposure device and a developing device, and a transfer unit 34 having a transfer roller. In addition, a fixing unit 35 having a fixing roller and the like is included. Specifically, the paper transport unit 32 transports the recording paper to the image forming unit 33, the image forming unit 33 forms a toner image corresponding to the image data, and the transfer unit 34 transfers the toner image to the recording paper. The fixing unit 35 fixes the toner image on the recording paper to form an image.

  The data memory 36 is a storage means for preliminarily storing a destination button name and facsimile number for abbreviated button registration at the time of facsimile communication, and a table of user fingerprint data and name data, which will be described later. An IP address of a transmission destination when used as a network scanner is also stored in advance. These stored contents can be appropriately rewritten by the control unit 41 by an input operation to the operation panel unit 51.

  The control unit 41 stores a RAM (Random Access Memory) and a ROM (Read Only Memory) that store a program that defines the operation of the CPU in a CPU (Central Processing Unit) (not shown), and temporarily. Peripheral devices such as a storage unit such as a RAM for storing data are included. As a result, the control unit 41 controls the entire multifunction device 1 in accordance with the instruction information received by the operation panel unit 51 and the like and the detection signals from the sensors provided in various parts of the multifunction device 1. More specifically, the control unit 41 functions as a scanner controller 42, a facsimile controller 43, a printer controller 44, and a copy controller 45.

  A program for realizing the above-described functions by being read by a computer as the control unit 41 is stored in a non-volatile and large-capacity external storage device such as the HDD 74 and is appropriately transferred to the main storage device such as the RAM. By doing so, it is also possible to provide execution by the CPU. The program can be supplied through a recording medium such as a ROM or a CD-ROM, or can be supplied through a transmission medium such as a network connected to the network I / F unit 71. The transmission medium is not limited to a wired transmission medium, and may be a wireless transmission medium. The transmission medium includes not only a communication line but also a relay device that relays the communication line, for example, a communication link such as a router.

  When the program is supplied through the ROM, the ROM in which the program is recorded is mounted on the control unit 41 so that the program can be executed by the CPU. When the program is supplied through a CD-ROM, the CD-ROM reader can be connected to, for example, the parallel I / F unit 72 and transferred to the RAM or HDD 74 for execution by the CPU. it can. When the program is supplied through a transmission medium, the program received through the network I / F unit 71 can be transferred to the RAM or the HDD 74 for execution by the CPU.

  The scanner controller 42 controls the operation of each unit used to realize the scanner function. The facsimile controller 43 controls the operation of each unit used to implement the facsimile function. The printer controller 44 controls the operation of each unit used for realizing the printer function. The copy controller controls the operation of each unit used for realizing the copy function.

  The facsimile communication unit 61 includes an encoding / decoding unit (not shown), a modulation / demodulation unit (not shown), and an NCU (Network Control Unit) (not shown), and an image of a document read by the scanner unit 11. Data is transmitted to another facsimile apparatus via a telephone line or an Internet line, and image data transmitted from another facsimile apparatus is received. The encoding / decoding unit compresses / decodes image data to be transmitted and expands / decodes received image data. The modem unit modulates the compressed / decoded image data into an audio signal. Or the received signal (audio signal) is demodulated into image data. The NCU controls connection with a facsimile machine as a transmission destination via a telephone line.

  The network I / F unit 71 uses a network interface (for example, 10 / 100base-TX) or the like to control transmission / reception of various data to / from a user side server connected via the network. When one or more terminal devices (not shown) such as a personal computer are connected to the network, the network I / F unit 71 controls transmission / reception of various data to / from these terminal devices. For example, the network I / F unit 71 transmits document image data read by the scanner unit 11 to the terminal device, and receives image data sent from the terminal device for printing by the printer unit 31.

  The parallel I / F unit 72 uses a high-speed bidirectional parallel interface (for example, IEEE1284 compliant) or the like to transmit print data from an external device or the like by parallel transmission in which data is transmitted in units of a plurality of bits using a plurality of signal lines. It is something to receive. The serial I / F unit 73 uses a serial interface (for example, RS-232C) or the like, and receives various data from an external device or the like by serial transmission that sequentially transmits data bit by bit using a single signal line. To do.

  The HDD 74 stores image data read by the scanner unit 11, image data transmitted via a network, an output format set for the image data, and the like. The image data stored in the HDD 74 is not only used in the multifunction device 1 but also confirmed by the terminal device via the network I / F unit 71 or transferred to a predetermined folder of the terminal device. Or used in the terminal device.

  In the multifunction machine 1, various functions are realized by combining the above-described functions. For example, as the scanner function, a PC transmission function, an E-mail transmission function, a FAX transmission function, or the like may be realized. Here, the PC transmission function is a function for directly transmitting image data read from a document to an arbitrary terminal device or the like via a network. The E-mail transmission function transmits image data read from a document as an attached file of an e-mail directly to, for example, an SMTP server (not shown) via a network, and from the SMTP server to an arbitrary external terminal device via the network This is a function for transmitting image data read from a document as an attached file of the e-mail by transmitting the e-mail to the e-mail. The FAX transmission function is a function for directly transmitting image data read from a document to an arbitrary facsimile machine or the like via a telephone line or the like.

  By the way, the multifunction device 1 of the present embodiment is configured to limit the users of the multifunction device 1 to users registered in the multifunction device 1 in advance. That is, the user is registered with the fingerprint data of the user and, for example, name data, and fingerprint data input by the user using a fingerprint reading unit 75 described later is registered in advance. Only when it exists in the registration list, the user is allowed to use the multifunction device 1. In the following description, the fingerprint data and the name data are collectively referred to as personal data.

  In the multifunction device 1 having such a configuration, if the disposal of the multifunction device 1 is performed in a state where the personal data is registered in the multifunction device 1, the personal data may flow out to the outside. In this embodiment, in order to prevent the leakage of personal data, the personal data erasing function and a function for notifying the user that the erasing of the personal data is completed in a document format are provided.

  In order to realize the above functions, the multifunction device 1 includes a fingerprint reading unit 75, and the control unit 41 includes a fingerprint data registration unit 46, an authentication unit 47, an erasing unit 48, a confirmation unit 49, and a list. The generator 50 is functionally included.

  The fingerprint reading unit 75 includes an unillustrated CCD (charge coupled device) that reads a user's fingerprint as image data (hereinafter referred to as fingerprint data), and outputs the acquired fingerprint data to the control unit 41. . The multifunction device 1 has a registration mode for registering a new user in the multifunction device 1, and a function use mode for using the facsimile function of the multifunction device 1, and the multifunction device 1 normally has the function. When the usage mode is set and a specific operation of the operation panel unit 51 is performed, the registration mode is set. The fingerprint reading unit 75 outputs the fingerprint data to the authentication unit 47 when the fingerprint data is acquired in the function use mode, and outputs the fingerprint data to the fingerprint data registration unit 46 when the fingerprint data is acquired in the registration mode. To do.

  The fingerprint data registration unit 46 stores (registers) in the data memory 36 the fingerprint data input from the fingerprint reading unit 75 and the name data input by a specific operation of the operation panel unit 51 in association with each other. is there. As shown in FIG. 2, the data memory 36 stores a table in which fingerprint data read by the fingerprint reading unit 75 is associated with registrant name data, and a specific operation of the operation panel unit 51 is stored. As a result, the table is output on a recording sheet as a registration list as shown in FIG.

  When the fingerprint data is input from the fingerprint reading unit 75, the authentication unit 47 performs an authentication process for determining whether the fingerprint data is registered in the data memory 36. The fingerprint data is stored in the data memory 36. If the fingerprint data is not registered in the data memory 36, the user is allowed to use the multifunction device 1. Is prohibited.

  The erasing unit 48 erases the fingerprint data in the data memory 36 in response to a specific operation on the operation panel unit 51. When the erasure process by the erasure unit 48 is completed, a notification sound for notifying the completion may be output by a sound output unit (not shown).

  After the fingerprint data erasure process by the erasure unit 48 is completed, the confirmation unit 49 requests the registrant whose name data is registered in the data memory 36 to input the fingerprint data and the name data. When fingerprint data and name data are input, it is confirmed whether the fingerprint data is registered in the data memory 36 or not.

  At that time, especially when there are a large number of registered users, it is time-consuming and troublesome to impose fingerprint data input on each user to perform confirmation processing for deleting fingerprint data. Become. Therefore, in order to reduce time and effort required for the input operation of the fingerprint data, in the present embodiment, some of the registrants registered in the multifunction device 1 (for example, two or three people) Alternatively, when the erasure confirmation of the fingerprint data of half of all registrants is taken, a registration list indicating that the fingerprint data of all registrants has been erased is printed out. When the confirmation unit 49 confirms that the fingerprint data of a predetermined registrant is not registered in the data memory 36, the confirmation unit 49 notifies the list generation unit 50 of the confirmation result.

  When receiving the notification of the confirmation result from the confirmation unit 49, the list generation unit 50 causes the printer unit 31 to print out the stored contents related to the personal data in the data memory 36 via the printer controller 44. is there.

  FIG. 4 is a diagram showing a registration list generated by the list generation unit 50 after the fingerprint data erasing process by the erasure unit 48. By this registration list, the fingerprint data column corresponding to the registrant name column is displayed. Since nothing is printed, it is possible to notify the user in a document format that the fingerprint data related to all registrants has been deleted. The user can visually check this list and confirm that the fingerprint data related to all registered users registered in the multi-function device 1 has been erased.

  FIG. 5 is a flowchart showing the fingerprint data erasing process in the multi-function device 1.

  As shown in FIG. 5, when an operation for instructing the deletion of fingerprint data is input through operation panel unit 51 (YES in step # 1), control unit 41 collects personal data stored in data memory 36 at once. Erase (step # 2).

  Next, when the fingerprint is read by the fingerprint reading unit 75 and fingerprint data is input from the fingerprint reading unit 75 to the control unit 41, the control unit 41 determines whether the fingerprint data is registered in the data memory 36. An authentication process to be determined is executed (step # 4). If registered (YES in step # 5), an input to instruct to erase fingerprint data is requested again (step # 6). On the other hand, if not registered (NO in step # 5), it is determined whether or not the fingerprint data erasure confirmation process has been completed for all registrants to be confirmed (step # 7).

  If the erasure confirmation is not completed (NO in step # 7), the control unit 41 returns to the process of step # 3, whereas if the erasure confirmation process is completed (YES in step # 7). Then, a registration list as shown in FIG. 4 is printed out (step # 8).

  As described above, in response to a specific operation on the operation panel unit 51, after the fingerprint data in the data memory 36 is erased at once, the fingerprint data and the registrant whose name data is registered in the data memory 36 are stored. When the input of the name data is requested and the fingerprint data and the name data are input, it is checked whether or not the fingerprint data is registered in the data memory 36, and when it is confirmed that the data is not registered, the registration list Therefore, the user can visually check this registration list and confirm that the fingerprint data related to all the users registered in the multi-function device 1 has been erased. As a result, it is possible to more reliably prevent fingerprint data from leaking outside.

  In addition, among the plurality of registrants registered in the multi-function device 1, the registration list is printed out when the erasure confirmation of the fingerprint data of some registrants is obtained. In the case where it exists, it is possible to avoid or suppress the time and effort required for each registrant by performing the confirmation operation for deleting the fingerprint data.

  This case includes modifications described in the following [1] to [6] in addition to the above embodiment or instead of the above embodiment.

  [1] In the first embodiment, the fingerprint data is erased all at once, but the name data remains in the data memory 36. Therefore, in order to prevent leakage of personal data to the outside more securely, when the confirmation that the registrant's fingerprint data determined in advance by the confirmation unit 49 is not registered in the data memory 36 is completed, the erasure unit 48 The name data in the data memory 36 may be erased collectively. In this case, the registration list generated by the list generation unit 50 is such that the name data of the registrant is also blank in the registration list shown in FIG.

  [2] In the first embodiment, a mark indicating that fingerprint data is registered is not printed in the column corresponding to the registrant name, thereby indicating that the erasure of fingerprint data has been completed. However, the present invention is not limited to this, and as shown in FIG. 6, characters or marks indicating completion of erasure of fingerprint data such as “erase” may be printed in the column corresponding to the registrant name. .

  Alternatively, as shown in FIG. 7, it is possible to assume a form in which a sentence such as “all fingerprint data has been deleted” is printed out instead of the registration list.

  [3] In the first embodiment, when the erasure confirmation of personal data is completed for all registrants to be confirmed, a registration list as shown in FIG. 4 is printed out. Before the process and before the registration list generation process by the list generation unit 50, the user or a serviceman who is present in the confirmation process for deleting the fingerprint data is unique to the MFP 1 When an input of a personal identification number is requested and an appropriate personal identification number is input by a specific operation of the operation panel unit 51, the deletion process or the printout of the registration list is performed. It is possible to prevent or suppress the printing output of the registration list from being executed unexpectedly.

  Further, when the number of registrants related to the authentication data to be confirmed can be changed by a specific operation of the operation panel unit 51, the number of registrants to be confirmed is determined according to the number of registrants registered in the multifunction device 1. The number of registrants can be set.

  That is, when the number of registrants registered in the multifunction device 1 is large, the number of registrants to be confirmed is reduced from the viewpoint of reducing the time and effort required for inputting the fingerprint data as described above. If the number of registrants (including one) is limited and the number of registrants registered in the multifunction device 1 is small, all registrants will be able to confirm the deletion of personal data more reliably. The number of registrants registered in the multi-function device 1 is set in consideration of the balance between the erasure confirmation of personal data and the certainty of the erasure confirmation. Accordingly, the number of registrants to be confirmed can be set.

  [4] In the first embodiment, fingerprint data is used as personal data used to limit the user of the multifunction device 1 to registered users. However, the present invention is not limited to this. Other biological information such as data and retina data may be used, and for example, a password may be used.

  [5] A user signature field may be provided in the registration list. As a result, after the user confirms that the personal data has been securely erased, the sign-in form is saved by the take-off destination (take-out agent, etc.) of the multi-function device 1 so that the personal data is stored. It can be used to prevent troubles when leaked. Specifically, even if a leak occurs, it can be proved that the leak has occurred in another route, not by the removed multifunction device 1.

  [6] In the first embodiment, the multi-function device 1 is described as an example of the electronic device. However, the present invention is not limited to the multi-function device 1 being an electronic device. The image forming apparatus may be a facsimile machine that forms an image based on image information transmitted from the printer, a printer that executes an image forming process based on image information from an external device such as a computer, or the like. Furthermore, this case is not limited to the image forming apparatus as described above, but can also be applied to an electronic device such as a personal computer.

  Further, when the electronic device is communicably connected to an image forming apparatus capable of printing output via a communication network, the state of the electronic device is in a state where printing cannot be performed due to some factor (for example, failure). In some cases, the image forming apparatus may print out a registration list as shown in FIG.

  In the first embodiment, the image forming apparatus is exemplified as an application target apparatus of the present invention. However, in the case of an electronic apparatus such as a scanner that does not include the printer unit 31 (image forming unit), When the electronic device is communicably connected to an image forming apparatus capable of printing out via a communication network, the image forming apparatus may be caused to print out a registration list as shown in FIG. Good.

1 is a block diagram illustrating an electrical configuration of a digital multi-function peripheral that is an embodiment of an electronic apparatus according to the present invention. It is a figure which shows the table which matched the fingerprint data read by the fingerprint reading part, and the registrant's name data. It is a figure which shows the registration list output on a recording paper. It is a figure which shows the registration list produced | generated by the list production | generation part after the fingerprint data erasure | elimination process by an erasure | elimination part. 6 is a flowchart illustrating an erasing process of the fingerprint data in a multifunction machine. It is a figure which shows other embodiment of this invention. It is a figure which shows other embodiment of this invention. It is a figure which shows other embodiment of this invention.

Explanation of symbols

1 MFP 36 Data Memory 41 Control Unit 46 Fingerprint Data Registration Unit 47 Authentication Unit 48 Deletion Unit 49 Confirmation Unit 50 List Generation Unit 75 Fingerprint Reading Unit

Claims (7)

Authentication data acquisition means for acquiring authentication data for identifying a user of the electronic device;
Storage means for storing authentication data acquired by the authentication data acquisition means;
Input means for inputting an instruction to erase the authentication data stored in the storage means;
When the instruction is input by the input means, erasure means for erasing the authentication data stored in the storage means;
A change input means for performing an input for changing the number of authentication data to be confirmed;
After the authentication data is erased by the erasure means , the authentication data acquisition means authenticates by the number of authentication data to be confirmed input by the change input means from among the authentication data stored in the storage means. Re-acquisition data, and confirmation means for confirming whether the authentication data acquired by the authentication data acquisition means is stored in the storage means;
And a document output means for outputting a document indicating that the authentication data stored in the storage means has been deleted when the confirmation means confirms that the authentication data is not stored in the storage means. An electronic device characterized by that.   The document output means outputs the document when it is confirmed that authentication data corresponding to some users preset by the confirmation means is not stored in the storage means. The electronic device according to claim 1. Requests input of preset unique information to the electronic device at least one time point before the deletion of the authentication data by the deletion unit and before the output of the document by the document output unit 3. The electronic device according to claim 1, further comprising a unique information authentication unit that permits the erasure unit or the document output unit to execute processing when the input unique information is appropriate. . Comprising communication means for communicating with other electronic devices via a communication network;
The communication means, the other in order to output the document to the electronic device, the electronic device according to any one of claims 1 to 3 and notifies the confirmation result of said confirmation unit to the electronic equipment. The document output means, electronic device according to any one of claims 1 to 4 and outputs a document including a signature field for requesting a signature to the user. The authentication data, electronic apparatus according to any one of claims 1 to 5, characterized in that the data representing the fingerprint of the user. An authentication data erasing system in which an electronic device and an image forming apparatus are communicably connected via a communication network,
The electronic device is
Authentication data acquisition means for acquiring authentication data for identifying a user of the electronic device;
Storage means for storing authentication data acquired by the authentication data acquisition means;
Input means for inputting an instruction to erase the authentication data stored in the storage means;
When the instruction is input by the input means, erasure means for erasing the authentication data stored in the storage means;
A change input means for performing an input for changing the number of authentication data to be confirmed;
After the authentication data is erased by the erasure means , the authentication data acquisition means authenticates by the number of authentication data to be confirmed input by the change input means from among the authentication data stored in the storage means. Re-acquisition data, and confirmation means for confirming whether the authentication data acquired by the authentication data acquisition means is stored in the storage means;
Communication means for notifying the image forming apparatus via the communication network that the confirmation means has confirmed that the authentication data is not stored in the storage means,
The image forming apparatus includes:
A communication means for receiving a notification from the communication means;
An authentication data erasure system comprising: a document output unit that outputs a document indicating that the authentication data stored in the storage unit is erased when the notification by the communication unit is received.

Images