JP4658878B2 - Image processing device - Google Patents

Description

  The present invention relates to an image processing apparatus that erases image data at the end of image processing.

  The image processing apparatus performs various image processing such as a copy mode, a print mode, a scanner mode, and a facsimile mode. Such an image processing apparatus is connected to a server or a personal computer through a network, and transmits and receives image data. For this reason, there is an increased risk of image data leaking due to unauthorized access or manipulation from outside.

Therefore, the image processing apparatus is equipped with a security function to prevent leakage of image data. For example, as shown in Patent Document 1, when image formation of image data is completed, the image data stored in the hard disk device is immediately erased.
JP 59-050660 A

  By the way, when processing a plurality of image data continuously, if priority is given to erasure of image data, a delay occurs in the processing of the next image data, and the processing efficiency deteriorates. In addition, when priority is given to the processing of the next image data, the previously processed image data remains stored. At this time, if the image processing apparatus stops due to an abnormality such as a power failure or an overcurrent during the processing, the image data remains in a state, which causes a security problem.

  SUMMARY OF THE INVENTION In view of the above problems, an object of the present invention is to provide an image processing apparatus that improves both processing efficiency and security by simultaneously processing and erasing image data.

  In order to achieve the above object, the present invention comprises storage means for storing image data, processing means for processing image data, and erasure means for erasing image data, and the storage means stores image data to be erased. A deletion area is provided, and the erasing unit moves a part of the image data to the deletion area.

  Image data in the deletion area is considered to have been deleted. Therefore, if the erasing unit moves only a part of the image data, the image data is erased. As described above, the apparently erased image data exists in the storage means, but the image data cannot be accessed. Since such erasure only moves the image data to the deletion area, the time required for erasure is short. Therefore, the next image processing can be performed without delay.

  The erasing unit includes a moving unit that moves the management information of the image data to the deletion area, and an invalidating unit that invalidates the image data. Here, the management information is created by the storage means when storing the image data. The image data can be accessed based on this management information. That is, the image data can be read and written based on the management information.

  If the management information is moved to the deletion area by the moving means, the management information cannot be accessed. As a result, the image data cannot be accessed. At this point, the image data still exists in the storage means. The image data is invalidated by invalidation means. As a result, the image data is completely erased.

  Note that the management information stored in the deletion area is deleted when the image data is invalidated by the invalidating means. Here, browsing of the management information stored in the deletion area is prohibited. However, browsing is permitted for those who have specific authority.

  The erasing unit moves the management information of the image data to the deletion area when the processing operation of the processing unit is completed.

  When the processing for the image data is completed, the image data becomes unnecessary. It takes a long time to completely erase the image data. During this time, if an instruction for processing the next image data is input, the processing is delayed. Therefore, the erasing unit immediately moves the management information related to the processed image data to the deletion area after the processing is completed. As a result, the image data is apparently erased, and the processing of the next image data is started without delay.

  The erasing unit checks whether there is management information in the deletion area, and invalidates the image data related to the management information when the management information is in the deletion area. The confirmation timing is when the processing means is not operating or when the image processing apparatus is activated.

  Although the management information is moved to the deletion area by the moving means, the invalidation means may not invalidate the image data. For example, this is a case where the processing by the processing means is performed with priority, and this processing is subsequently performed. In addition, this is a case where the apparatus is stopped due to a power failure or a trouble of the image processing apparatus. In such a case, the image data remains in the storage means without being invalidated.

  Therefore, the erasure unit confirms the presence / absence of management information of the deletion area when the processing unit is not operating or when the apparatus is activated. If there is management information in the deletion area, image data still remains. The invalidating means invalidates the image data. If there is no management information, there is no image data.

  The erasing means preferentially moves the management information of the other image data to the deletion area when receiving an instruction to erase the other image data during invalidation of the image data.

  According to the above configuration, the processing by the processing unit has priority over the invalidation of the image data. When the processing by the processing means is completed, the management information is immediately moved to the deletion area. Therefore, priority is given to the movement of management information even during invalidation.

  The storage means has a data area for storing image data and a directory entry for storing management information, and a deletion area is provided in the data area.

  According to the above configuration, the moving means moves the management information from the directory entry to the deletion area in the data area. The management information has a very small data capacity compared to the image data. Therefore, little time is required for movement within the data area.

  Further, the image data is divided into a plurality of pieces and stored in a data area, and the invalidating means invalidates the image data for each divided unit. According to the above configuration, when the invalidation of one unit is completed during the invalidation of the image data, the invalidation of the next unit can be temporarily suspended if there is an instruction for other processing. As a result, the processing by the processing means is preferentially performed.

  The storage means is divided into a plurality of partitions, and a deletion area is provided in each partition. It takes more time to move data across partitions than to move data within the same partition. If there is a deletion area in each partition, management information can be moved quickly.

  As described above, according to the present invention, it is possible to apparently erase image data by moving management information related to image data to a deletion area. The time for erasing can be shortened, and other processing can be prioritized. Therefore, other processing is not delayed, and processing efficiency is increased. At this time, since the image data is apparently erased, the leakage of data can be prevented without touching the eyes of a third party.

  An image processing apparatus of this embodiment is shown in FIG. This image processing apparatus is a digital multi-function peripheral having a copy mode, a print mode, a scanner mode, and a facsimile mode. The image processing apparatus includes an image reading unit 1 that reads a document and inputs image data, an operation unit 2 that receives user input, an image forming unit 3 that prints input image data, and stores image data. A hard disk device 4 that performs data communication with an external device, a FAX modem 7 that communicates with the facsimile device 6, and a management unit 8 that stores control information and setting information for the entire device. And a device control unit 9 composed of a CPU for controlling the entire apparatus.

  The image reading unit 1 functions as an image data input unit that inputs image data, and includes an image sensor such as a CCD 10 and a document detection sensor 11 that detects a document set on a document table or an automatic document feeder (ADF). . Image data of an image read by the CCD 10 is output to the image forming unit 3.

  As shown in FIG. 1, the operation unit 2 includes an input unit 12 including various input keys and a display unit 13 such as a liquid crystal display. The display unit 13 is a touch panel and also functions as an input unit. The operation unit 2 inputs operation instructions and various settings for the entire apparatus, and displays the input contents and the operation status of the entire apparatus. The operation unit 2 functions as an input unit that receives an input of an operation instruction.

  The image forming unit 3 includes a memory 20 that stores input image data, a printing unit 21 that includes a laser scanning unit, a paper feeding unit 22 that includes a manual feed tray and a cassette tray, and a paper discharge that includes a paper discharge tray. Unit 23, image processing unit 24, and encryption / decryption unit 25.

  As the memory 20, a readable / writable semiconductor memory such as an SDRAM or a flash memory is used. The memory 20 is divided into an area for storing input image data and an area for storing image data for output. Instead of dividing and using one memory 20, two memories 20 may be used for input and output, respectively.

  In the image forming unit 3, the input image data is stored in the memory 20. The memory 20 stores image data by overwriting old image data with new image data. The image data is subjected to image processing such as compression, expansion, and processing by the image processing unit 24 and is stored in the memory 20. The image processed image data is output to the printing unit 21, the hard disk device 4, or the device control unit 9. The printing unit 21 prints an image on a recording sheet supplied from the paper feeding unit 22 based on the image data stored in the memory 20. As described above, the image forming unit 3 functions as a processing unit that processes image data.

  The communication unit 5 is connected to a router, a switching hub, and the like via a LAN cable, and is connected to a network formed by the information processing apparatus 30 such as a personal computer or a server. The network is connected to the Internet via a communication line such as a telephone line network or an optical fiber. The communication unit 5 transmits / receives data to / from the information processing apparatus 30 in the network, and transmits / receives data and electronic mail to / from the external information processing apparatus 30 through the Internet. Further, Internet facsimile communication is performed with the facsimile apparatus 31 through the Internet. The FAX modem 7 is connected to the telephone line network via a telephone line, and performs facsimile communication with the external facsimile apparatus 6.

  The communication unit 5 and the FAX modem 7 receive and input image data from external devices such as the information processing device 30 and the facsimile devices 6 and 31. That is, they function as image data input means. The communication unit 5 also functions as an input unit because it accepts an operation instruction at the same time when image data is input from an external device. Further, the communication unit 5 and the FAX modem 7 function as a processing unit in order to execute a process of transmitting image data to an external device.

  The device control unit 9 executes a job for the input image data. In other words, in response to an input from the operation unit 2 or a data input from an external device, each unit is controlled based on information stored in the management unit 8 to process the input image data. By executing the job, one of a copy mode, a print mode, a scanner mode, and a facsimile mode is executed according to the input image data, and an image is output in a desired form.

  The hard disk device 4 functions as a storage unit that temporarily stores image data. The encryption / decryption unit 25 performs encryption processing or decryption processing on the image data. When image data is stored in the hard disk device 4, the image data is encrypted by the encryption / decryption unit 25. When the encrypted image data is read from the hard disk device 4, the image data is decrypted.

  The hard disk device 4 has a plurality of clusters 35 for storing data. The device control unit 9 manages the image data stored in the hard disk device 4 based on the file system. As shown in FIG. 2A, the file system includes a system area 37, a directory entry 32, a file allocation table 33 (hereinafter referred to as FAT), and a data area 34. Each of them uses a plurality of clusters 35.

  Here, the system area 37 is an area for storing information such as the format type, the size of the directory entry 32, the size of the cluster 35, the number of the clusters 35, and the like. As shown in FIG. 2B, the directory entry 32 is an area for storing management information related to image data such as the file name of the image data, the attribute of the stored location, the update date and time, the leading cluster number, and the data size. is there. The FAT 33 is a table indicating whether or not the cluster 35 is used, as shown in FIG. The data area 34 is an area for storing image data input from input means such as the image reading unit 1 or the communication unit 5.

  In the file system, image data is stored in one or more clusters 35, and a directory 36 for the image data is created in the directory entry 32. This directory 36 stores image data management information. A subdirectory can be created in the directory 36.

  An erasing unit 26 for erasing image data stored in the hard disk device 4 is provided. The device control unit 9 controls the operation of the erasing unit 26 after processing and outputting the image data. The erasing unit 26 invalidates the image data so that it cannot be read and the original image cannot be reproduced. The image data to be erased is data processed by the processing means or data instructed to be erased by the user or the device control unit 9 or the like.

  Here, in order to achieve both processing and erasing of image data and increase processing efficiency, the erasing means 26 pseudo-erases the image data to shorten the time required for erasing and to process the image data. Prevent delays. Therefore, the device control unit 9 provides the hard disk device 4 with a deletion area 36a for image data to be deleted. The deletion unit stores management information of image data to be deleted in the deletion area 36a. The deletion area 36 a is provided in the data area 34. A directory 36 for the deletion area 36 a is created in the directory entry 32.

  The erasing unit 26 moves a part of the image data to the deletion area 36a. Specifically, it includes a moving unit that moves the management information of the image data to the deletion area 36a, and an invalidating unit that invalidates the image data.

  The moving means moves the directory 36 storing the management information from the directory entry 32 to the deletion area 36a in the data area 34. That is, by deleting the new directory 36 in the deletion area 36a, the deletion area 36a is updated. Here, when searching for image data, the device control unit 9 searches the directory 36 stored in the directory entry 32 as a target. However, the directory 36 stored in the deletion area 36a is not searched. As a result, the image data corresponding to the directory 36 stored in the deletion area 36a is apparently deleted.

  The device control unit 9 prohibits browsing of data stored in the deletion area 36a. However, a person having a specific authority, for example, an administrator of the image processing apparatus can browse the stored data. When it is confirmed that the user has a specific authority by inputting authentication information such as a password, the data stored in the deletion area 36a is displayed on the display unit 13 and can be browsed when the person performs a predetermined operation. It becomes.

  The invalidating means overwrites random data or meaningless data on the image data to be erased stored in the data area 34. As a result, the stored image data cannot be read and is invalidated so that the original image cannot be reproduced.

  The invalidation of the image data is performed in units of clusters 35. A plurality of clusters 35 may be combined to form one group and invalidated in units of groups. In any case, when invalidating image data, invalidation is performed for each unit. Thereby, the invalidation means can temporarily invalidate the invalidation after invalidating one unit. Resumes invalidation after interruption.

  In the file system, the hard disk device 4 is divided into a plurality of partitions, and data is managed for each partition. In this case, one deletion area 36a is provided for each partition. As a result, the erasing unit 26 moves the management information within the partition and does not move the management information beyond the partition.

  With the above configuration, the erasing unit 26 performs two-stage erasing. In other words, the management information relating to the image data to be erased is moved to the deletion area 36a in a short time by the moving means which is the first stage so that it is erased in a pseudo manner. The image data related to the management information stored in the deletion area 36a is invalidated by the second processing means which is the second stage. As a result, the image processing apparatus can improve the processing efficiency and improve the security while making the processing and erasure of the image data compatible.

  In principle, the image data is erased when the processing of the image data is completed. That is, the erasing unit 26 does not perform erasing when the processing unit is operating, but performs erasing when the processing unit 26 is not operating. In addition, when the image processing apparatus is activated, the processing means is not operating, so image data is also erased at this time. However, erasing at the time of activation is invalidation of the image data and is performed as part of the initialization of the image processing apparatus.

  In the file system, the deletion area 36a is not provided as a standard. Therefore, the deletion area 36a is created when the image processing apparatus is installed at a predetermined location, when shipped from the factory, or when the OS installed in the image processing apparatus is recovered. As shown in FIG. 3, for example, the case where the image processing apparatus is installed is taken as an example. First, when the image processing apparatus is installed at a predetermined location and the power is turned on, the device control unit 9 is activated (S10). Then, the logical format processing of the hard disk device 4 is performed (S11). At this time, when a person having specific authority, such as an administrator or a service person, performs an operation for setting creation of the deletion area 36a, the device control unit 9 creates the deletion area 36a in the data area 34 (S12). Thereafter, the image processing apparatus enters a standby state (S13).

  Next, the flow from image data processing to erasure will be described with reference to FIGS. For convenience of explanation, the processing of the processing means will be described as a copy mode. The file in the figure indicates the directory 36.

  First, the image reading unit 1 reads image data of a document. As shown in FIG. 4C, the device control unit 9 stores the input image data in the data area. At this time, in the directory entry 32, as shown in FIG. 4A, a directory 36 storing management information related to image data is created. In FAT33, as shown in FIG.4 (b), the content of the cluster 35 which newly stored image data is rewritten. Then, based on an instruction from the user, the image processing unit 24 develops the image data in the memory 20 and performs image processing. Then, the image data is output to the printing unit 21 and the image data is printed.

  When the reading and printing of all the originals are completed, the processing means is deactivated. When the device control unit 9 detects that it is not operating, it instructs the erasing unit 26 to erase the printed image data as shown in FIG. 5 (S30). When the erasing unit 26 receives an image data deletion instruction from the device control unit 9 (S31), the erasing unit 26 executes the moving unit.

  The moving means confirms whether the current state of the invalidating means is waiting (S32). When the invalidating means is on standby, the moving means moves the directory 36 related to the image data to be deleted from the directory entry 32 to the deletion area 36a as shown in FIG. 6A (S33). If the invalidating means is being executed, the moving means changes the operation flag ST2 to be active (S34), and checks whether the invalidating means has been interrupted (S35). Here, the disabling of the disabling means means a state where the disabling of the image data in units of clusters is completed. When the invalidating means is interrupted, the moving means moves the directory 36 related to the image data to be deleted from the directory entry 32 to the deletion area 36a (S36), as shown in FIG. ST2 is changed to standby (S37). Then, the erasing unit 26 proceeds to an invalidating unit that invalidates the image data that is the second stage.

  In the process of moving the directory 36, the image data itself is not moved or invalidated in the data area 34, as shown in FIGS. 4B and 6B. The data of FAT33 is not updated. Further, as shown in FIGS. 4B and 6C, only the directory 36 which is the deletion area 36a is updated in the data area 34.

  Next, the erasing unit 26 invalidates the image data related to the management information stored in the deletion area 36a. As shown in FIG. 7, first, a deletion instruction is given from the device control unit 9 (S40). When receiving the image data deletion instruction from the device control unit 9 (S41), the erasing unit 26 executes the invalidating unit. The invalidating means changes the operation flag ST during execution (S42). Then, it is confirmed whether the moving means is being executed (S43). If the moving means is on standby, the image data to be erased is invalidated (S44). When the moving means is being executed, the operation flag ST of the invalidating means is changed to interrupted (S45), and it is confirmed whether the moving means has been on standby (S46). When the moving unit is on standby, the invalidating unit changes the operation flag ST to be executed (S47), and invalidates the image data to be erased (S44).

  Then, the invalidating means checks whether all the image data to be erased has been invalidated (S48). When the invalidation of the image data is completed, the operation flag ST of the invalidating means is changed to standby (S49), and the standby state is entered. Further, the erasing unit erases the directory 36 for the image data to be erased moved to the deletion area 36a, and updates the deletion area 36a. Along with this, the FAT 33 is also updated.

  If the invalidation of the image data has not been completed, it is checked again whether the moving means is being executed (S43). If the moving means is on standby, the invalidation is performed as it is. If the moving means is being executed, the operation flag ST of the invalidating means is changed to interrupted (S45), and it is confirmed whether the moving means is on standby (S46). Continue the invalidation. This cycle is performed until the image data to be erased is invalidated. When the invalidation is completed, the operation flag ST of the invalidating means is changed to standby (S49), and the standby state is entered.

  When the erasing unit 26 receives an instruction to erase another image data while invalidating the image data, the erasing unit 26 preferentially moves the management information of the other image data to the deletion area 36a. That is, the invalidation means interrupts invalidation when receiving an instruction to erase another image data while invalidating the image data to be erased. In this case, when the currently invalidated cluster 35 ends, the next cluster 35 is temporarily inactivated. During this time, image data processing is performed. When this process ends, the moving means moves the management information of the image data to the deletion area 36a. That is, priority is given to moving management information related to another image data to be erased to the deletion area 36a rather than invalidating the image data. When this movement is completed and the image data is not processed, the invalidation means resumes the invalidation that has been interrupted.

  Thus, during the invalidation of the previous image data, priority is given to the movement of the management information associated with the subsequent image data processing. The subsequent image data is also apparently deleted, and the image data cannot be accessed. It is possible to solve the security problem that image data remains accessible when recovered from an abnormal time. In particular, when processing image data continuously, before starting the processing of the next image data, the management information of the previously processed image data can be moved to the deletion area 36a and apparently deleted. The time required for this movement is shorter than the time for invalidating the image data. As a result, image data processing can be performed without delay.

  As described above, normally, erasure is performed continuously after processing of image data. However, the device control unit 9 operates the erasing unit 26 as necessary to execute erasure of the image data. In other words, the management information is moved to the deletion area 36a by the erasing means 26, and then the image data is invalidated. However, although the management information is moved to the deletion area 36a, the image data is not invalidated and may remain. For example, when an abnormal situation such as a power failure or an error occurs, the image processing apparatus stops. At this time, if the image data is invalid, this operation is stopped and the image data remains. This is a security problem. Therefore, the device control section 9 operates the erasing means 36 when it is activated after the occurrence of an abnormal situation to invalidate the image data.

  As shown in FIG. 6, when the power of the image processing apparatus is turned on (S20), the device control unit 9 confirms with the erasure means 26 whether or not there is management information to be erased in the deletion area 36a. (S21). The erasing means 26 confirms whether there is management information in the deletion area 36a (S22). If there is no management information, the fact is transmitted to the device control unit 9.

  If there is management information in the deletion area 36a, the invalidating means invalidates the image data corresponding to the management information (S23). When the deletion operation is completed, this is transmitted to the device control unit 9. And the apparatus control part 9 permits use of a file system (S24). Then, the operation flag of the processing unit and the operation flag of the erasing unit 26 are changed to standby (S25). The image processing apparatus enters a standby state (S26).

  Thus, the image data remaining in the hard disk device 4 without being invalidated can be completely erased at the time of startup. Accordingly, if image data remains without being invalidated when the image processing apparatus becomes operable, this image data may be read out. The problem cannot happen.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. The image processing apparatus may be a multi-function machine having a copy mode and a print mode, or may be a dedicated machine having only a single mode such as a copier, a scanner, or a printer.

  The erasing unit is intended for erasing data of the hard disk device, but uses a non-volatile memory, a removable disk such as a DVD or a CD as the storage unit, and the erasing unit erases image data stored in these.

  Also, the management information in the deletion area may be confirmed not only when the image processing apparatus is activated, but when the power of the image processing apparatus is turned off or when the image processing apparatus is changed to the energy saving mode, for example.

  Further, for convenience of explanation, the explanation of the operation of the erasing means is explained in the copy mode, but this is not particularly limited. For example, it may be during image processing in facsimile mode or scanner mode.

The figure which shows schematic structure of the image processing apparatus of this invention 2A and 2B are diagrams for explaining a file system in a hard disk device, in which FIG. 1A is an overall configuration diagram, FIG. 1B is a diagram showing the contents of a directory entry, and FIG. Flow chart when creating a deletion area It is a figure for demonstrating the file system at the time of memorize | storing image data, (a) is a figure which shows the content of a directory entry and a deletion area, (b) is a figure which shows the content of a file relocation table, (c) is data Diagram showing the contents of the area Flow chart for moving management information to the deletion area It is a figure for demonstrating the file system after moving management information, (a) is a figure which shows the contents of a directory entry and a deletion area, (b) is a figure which shows the contents of a file relocation table, (c) is data Diagram showing the contents of the area Flow chart for invalidating image data Flow chart for erasing image data at startup

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading part 2 Operation part 3 Image formation part 4 Hard disk apparatus 5 Communication part 9 Device control part 12 Input part 13 Display part 21 Printing part 26 Erasing means

Claims (9)

A storage unit for storing image data; a processing unit for processing the image data; and an erasing unit for erasing the image data. The storage unit is provided with a deletion area for erasing image data. A moving means for moving the management information of the image data to the deletion area, and an invalidating means for invalidating the image data,
When processing image data continuously, the erasing means moves management information of the previously processed image data to the deletion area before processing of the next image data is started. Image processing device. 2. The image processing apparatus according to claim 1 , wherein the erasing unit moves the management information to the deletion area when the processing operation of the processing unit is completed. The image processing apparatus according to claim 2 , wherein browsing of management information stored in the deletion area is prohibited. Erasing means, the image processing apparatus according to claim 1 or 2, characterized in that to check if there is management information deletion area. The erasing unit performs confirmation when the processing unit is not operating or when the image processing apparatus is started, and invalidates image data corresponding to the management information when there is management information in the deletion area. The image processing apparatus according to claim 4 . When the erasure unit receives an instruction to erase the subsequent image data while invalidating the previous image data, the erasure unit preferentially moves the management information of the subsequent image data to the deletion area, and the movement ends. and, when the processing of the image data is not performed, the image processing apparatus according to claim 1 or 2, wherein the resume disabling earlier image data. The storage means has a data area for storing image data and a directory entry for storing management information,
The image processing apparatus according to claim 1, wherein when a deletion area creation setting operation is performed, the deletion area is created in the data area . The image data is divided into a plurality of parts and stored in the data area.
The image processing apparatus according to claim 7 , wherein the invalidating unit invalidates the image data for each divided unit. The storage means is divided into a plurality of partitions,
The image processing apparatus according to claim 7 , wherein a deletion area is provided in each partition.

Images