JP4887843B2 - Image processing apparatus and program - Google Patents

Description

  The present invention relates to an image processing apparatus and a program, and more particularly to an image processing apparatus and a program that can be connected to a network system including a plurality of image processing apparatuses.

  In recent years, it has become common to use image processing apparatuses such as printers, scanners, and facsimile machines connected via a network. When a plurality of image processing apparatuses are connected via a network, in order to further improve the operability of each image processing apparatus, a main user is assigned to each image processing apparatus, and a plurality of image processing apparatuses having the same work group are assigned. The present applicant has already filed patent applications for technologies for grouping and exchanging predetermined information in advance to construct a virtual sub-network (Japanese Patent Application Nos. 2005-160999, 2005-161000, 2005-161001, Japanese Patent Application No. 2005-236931).

JP 2005-209027 A

  When configuring the virtual sub-network, an image processing apparatus (home terminal) to be used mainly is assigned to each user, and the user information and terminal information are stored in advance in the network while storing the user information in the home terminal. It is possible to handle terminals other than the home terminal in the same manner as the home terminal by exchanging via the Internet. However, always being able to access image data stored in other image processing apparatuses connected to the virtual sub-network may cause problems such as information falsification and leakage. While login requires more careful authentication, for example, if the same service is provided when not accessing the virtual sub-network (when logging in to the image processing apparatus alone), the virtual sub-network In the same manner as in the case of accessing, conversely, the operability may be lowered.

  The present invention has been made in view of the above problems, and in configuring a virtual subnetwork, an image processing apparatus in which a user who logs in to the image processing apparatus alone does not feel a decrease in operability, and An object of the present invention is to provide a program that operates on the image processing apparatus.

In order to solve the above problems, an image processing apparatus according to the present invention is an image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network. Sub-network configuration means for exchanging predetermined information by communication with the other image processing apparatus in advance and configuring a virtual sub-network in which each image processing apparatus and a user identifier are associated with each other; A first login receiving unit that receives a login to the network; a second login receiving unit that receives a login to a usage mode that does not access the virtual sub-network ; the first login receiving unit; and the second login receiving unit. Control to log in the user via any one of the means selected by the user And択制control means, a first case where Ru is performed login of the user via the first log receiving means under control of said selection control means, the second under the control of said selection control means in the case via the login receiving means of the second of Ru is performed login of the user of, and a predetermined control method toggle its switching means by the image processing apparatus executes the predetermined control method, the Provided for a user and executed for a service accompanied by an operation input by the user at the time of provision. The switching means provides the predetermined control method, and the image processing apparatus provides the service at that time. Therefore, it is characterized by switching to information corresponding to available information .

In the configuration of the present invention, provided for the user in a first case where the user is directed to log in to the virtual subnetwork and in a second case where the user is directed to log in to the usage mode not accessing the virtual subnetwork. The predetermined control method executed by the image processing apparatus that is executed with respect to the service accompanied by the operation input by the user at the time of the provision is switched to the one corresponding to the information that the image processing apparatus can use for providing the service at that time. With this configuration, when configuring a virtual sub-network, it is possible to prevent a user who logs in to the image processing apparatus alone from feeling a decrease in operability.

As one specific example of the service, the service includes image data transmission processing , and the predetermined control method includes a setting method of the image data transmission destination in the image data transmission processing. it can. More specifically, in the first case, the switching unit sets a user identifier associated with another image processing apparatus acquired by the predetermined information exchange as a transmission destination. in the case of 2, so as to set the destination identifier as a destination, it can be configured to switch the setting of the destination. When using a virtual sub-network, user identifiers and destination information are also exchanged by exchanging information during the configuration of the virtual sub-network, and the information can be used while accessing the virtual sub-network. In such a case, the use of such information is limited, and therefore, setting a transmission destination identifier as a transmission destination is intended to suppress a decrease in operability.

The service comprises the presentation processing to the user of the image data stored in the storage means provided in the image processing apparatus, the predetermined control method selects the image data to be presented to the user by the presentation processing It is also possible to adopt a configuration including a method of More specifically, the switching means presents image data stored in another image processing device that constitutes the virtual sub-network in the first case, and other in the second case. If the method of selecting the image data is switched so as not to present the stored image data in the image processing apparatus, it is possible to suppress the occurrence of security problems when configuring a virtual subnetwork. .

The service includes user authentication processing at the time of login, and the predetermined control method includes an authentication method of a user who performs the login, and the authentication method includes user authentication prepared in advance for authenticating the user. A configuration in which information is used may also be used. More specifically, the switching means switches the user authentication method so that the user authentication information used in the user authentication process is different between the first case and the second case. can do.

In the first case, when the user authentication cannot be performed only with the user authentication information stored in the image processing apparatus, the switching unit stores the user authentication information stored in another apparatus connected via the network. In the second case, the user authentication method is switched so that the user authentication is performed by referring only to the user authentication information stored in the image processing apparatus. You can also.

In the first case, when the user authentication cannot be performed only with the user authentication information registered in the image processing apparatus, the switching unit is configured to register user authentication information registered in another apparatus connected via the network. In the second case, the user authentication method is switched so that the user authentication is performed by referring only to the user authentication information registered in the image processing apparatus. You can also. The image processing apparatus further includes a temporary storage unit that temporarily stores user authentication information referred to when the user authentication is performed, and the temporary storage unit is configured to log out a user who has performed the login, Ru can be configured to erase the user authentication information the temporarily stored.

  The first login accepting unit is configured to always accept an input to switch to the virtual subnetwork when the user who has logged in via the second login accepting unit can log in to the virtual subnetwork. If so, the operability is further improved.

Note that the program according to the present invention is a program that operates in an image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network. Predetermined information exchange is performed by communicating with a device in advance, and a sub-network configuration process that configures a virtual sub-network in which each image processing device and a user identifier are associated with each other and a login to the virtual sub-network are accepted Selected by the user among a first login acceptance process, a second login acceptance process for accepting a login to a usage mode that does not access the virtual sub-network, and the first login acceptance process and the second login acceptance process Control to log in the user via any one of And択制control process, a first case where Ru is performed login of the user via the first login acceptance processing based on the control by the selection control processing, the second under the control of said selection control process in the case via the login acceptance processing a second login is Ru performed of the user of said predetermined control method by the image processing apparatus executes to perform a toggle its switching process, the predetermined control method, Provided for the user and executed with respect to a service accompanied by an operation input by the user at the time of provision. The switching process provides the predetermined control method, and the image processing apparatus then provides the service. It is characterized by switching to information corresponding to available information .

  The program here includes not only a program that can be directly executed by a processor such as a CPU, but also a program in a source program format, a compressed program, an encrypted program, and the like. The program according to the present invention may be distributed to the market while being recorded on various recording media, or may be supplied to the market via various networks such as the Internet.

  According to the image processing apparatus of the present invention, when configuring a virtual sub-network, there is an effect that it is possible to prevent a user who logs in to the image processing apparatus alone from deteriorating operability.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
(Embodiment 1)
(1) Configuration of Image Processing System FIG. 1 is a diagram for explaining the configuration of an image processing system in an embodiment of the present invention. The image processing system 1 is configured by connecting MFPs (Multi Function Peripherals) 100, 100A, 100B, 100C, and the like to a network 500. In the present embodiment, a case where MFPs 100, 100A, 100B, and 100C have the same configuration and function will be described. Therefore, the MFP 100 will be described as an example unless otherwise specified.

  The MFP 100 is an image processing apparatus that integrates functions such as copying, network printing, scanner, FAX, and document server. Sometimes called a multifunction device. In this embodiment, an MFP will be described as an example. However, as long as the apparatus has a function of processing an image, for example, a scanner, a printer, a facsimile, a personal computer that generates image data, or the like can be used. .

  The network 500 of the present embodiment is a local area network (LAN), and the connection form may be wired or wireless. The network 500 is not limited to a LAN, but may be a wide area network (WAN) such as the Internet, a network using a general public line, or the like.

  In the present embodiment, the work groups set in MFP 100, MFP 100A, and MFP 100B are the same, and virtual sub-network 501 is configured by these three MFPs. The number of image processing apparatuses such as MFPs included in the image processing system 1 and the number of image processing apparatuses constituting the virtual sub-network 501 are arbitrary. For the configuration method of the virtual sub-network, etc., refer to the contents of other patent applications filed by the applicant of the present application described as the background art.

(2) Configuration of MFP 100 FIG. 2 is a block diagram illustrating an example of a hardware configuration of MFP 100. FIG. 3 is a diagram illustrating an example of the appearance of the MFP 100. As shown in FIG. 2, the MFP 100 includes a CPU 20, a ROM 21 in which a program executed by the CPU 20 is recorded, a RAM 22 for loading the program to be executed and for storing data during the program execution, and nonvolatile data. A hard disk drive (HDD) 23 for storing data and a communication interface (IF) 16 for connecting the MFP 100 to the network 500. An operation unit 11 and a display unit 12 are further connected to the CPU 20. Further, the scanner unit 13, the printer unit 14, the document feeder 17, the paper feeding device 18, and the FAX processing unit 24 operate under the control of the CPU 20.

  The CPU 20 loads an image processing program recorded in the ROM 21 or the like into the RAM 22 and executes it. The recording medium for storing the image processing program is not limited to the ROM 21 and may be a rewritable nonvolatile semiconductor memory such as a flash ROM. In addition, various disks such as flexible disks, MO, MD, and DVD, IC cards (including memory cards), and the like can be used as appropriate. When a rewritable nonvolatile memory such as a flash ROM is used, the image processing program can be updated by downloading a program from an information processing apparatus such as another MFP that can be connected via the network 500.

  The operation unit 11 is an input device such as various buttons and a touch panel for receiving an operation input by a user of the MFP 100. As the display unit 12, for example, a liquid crystal display device, an organic EL display panel, or the like can be used. If a touch panel made of a transparent member is provided as one of the operation units 11, an instruction to a button displayed on the display unit 12 can be detected by placing the touch panel on the display unit 12.

  The scanner unit 13 photoelectrically reads an image such as a photograph, a character, a picture, or a chart drawn on a document, and generates digital image data (here, density data representing RGB or black density). The image data obtained in this way is used for printing in the printer unit 14. Alternatively, it is converted into a file in a format such as TIFF, PDF, JPEG, etc. and stored in the hard disk 23. The image file can be transmitted to another MFP via the communication interface 16, or can be faxed via the fax processing unit 24. The document feeder 17 is provided on the upper part of the main body of the MFP 100 (see FIG. 3), and is used to sequentially send one or more originals to the scanner unit 13.

  The printer unit 14 prints an image read by the scanner unit 13, an image data image transmitted from an information processing apparatus such as another MFP, a received FAX image, etc. on a recording sheet such as paper or film. To do. The paper feeding device 18 is provided at the lower part of the main body of the MFP 100 and is used to supply a recording sheet suitable for an image to be printed to the printer unit 14. The recording sheet on which the image is printed by the printer unit 14 is discharged to a paper discharge tray 19 (see FIG. 3).

  The communication interface 16 includes a device for exchanging data with other MFPs via the network 500 and a device for performing FAX transmission / reception via a telephone line. As the communication interface 16, for example, a NIC (network interface card), TA (terminal adapter), or the like can be used.

(3) Configuration of Virtual Subnetwork 501 In virtual subnetwork 501 in the present embodiment, in each of MFPs 100, 100A, and 100B, users who mainly use it are set in advance. Therefore, each of MFPs 100, 100A, and 100B stores registered user information for registering users who are mainly used. The registered user information will be described later, but includes at least a user identifier for identifying the user.

  In the present embodiment, the MFP in which the registered user information of the user is stored is referred to as “home terminal”. For example, if registered user information of user “David” is stored in MFP 100, the home terminal of user “David” is MFP 100. Note that the registered user information is stored in each of MFPs 100, 100A, and 100B in order to improve operability by preliminarily defining users to be used in advance, and for registered users who do not store registered user information. Use is not prohibited.

  In the present embodiment, MFP 100C is assumed to have a different work group from other MFPs, and therefore is not recognized as an image processing apparatus constituting virtual sub-network 501. That is, when configuring the virtual sub-network 501 in the present embodiment, work group information is exchanged by broadcast packets, and the virtual sub-network is configured by image processing apparatuses in the same work group.

  Here, it is assumed that MFP 100A and 100B are already connected to network 500 and virtual sub-network 501 is configured, and MFP 100 is newly connected to network 500. The MFP 100 needs to be set with apparatus identification information for identifying the MFP 100 and the above-described registered user information. When device identification information and registered user information are set in MFP 100, MFP 100 transmits the device identification information and registered user information to other MFPs 100A and 100B. Thereby, the virtual sub-network 501 is constructed in the MFPs 100, 100A, 100B.

  Hereinafter, specific processing contents when the virtual sub-network 501 is constructed will be described using the MFP 100 as an example. FIG. 4 is a flowchart for explaining processing contents of the newly connected MFP 100 and other MFPs.

  Prior to the construction of the virtual sub-network 501, terminal information is first registered in the MFP 100 (S101). The terminal information includes device identification information for identifying MFP 100 and a work group name. The device identification information is preferably location information in the network 500 assigned to the MFP 100, and for example, an IP address can be used. Next, registered user information of a user who uses MFP 100 as a home terminal is input to MFP 100 (S102). When a plurality of users use MFP 100 as a home terminal, registered user information of each of the plurality of users is input.

  The registered user information includes a user identifier for identifying the user. The user identifier may be unique information for each user, such as a user ID consisting of characters or symbols, a user name, and the user name is used as the user identifier in the present embodiment. The registered user information includes personal information for each user in addition to the user identifier. The user personal information is information related to the user and includes, for example, accompanying information, address book, panel setting information, authentication information, and history information. When the virtual sub-network 501 is configured, the user personal information can be logged in to access the virtual sub-network 501 and operate other MFPs in the same manner as the home terminal, improving operability. Used to make it.

  The terminal information and the registered user information are input by the operation of the operation unit 11 by the user. Specifically, an input screen for terminal information and an input screen for registered user information are displayed on the display unit 12, and the user operates the operation unit 11 according to these screens to input terminal information and registered user information. The terminal information is normally registered by the terminal manager, whereas the registered user information is usually input by the user.

  Thereafter, it is determined whether or not the initial setting in the MFP 100 has been completed (S103). If the initial setting has not been completed, the process returns to step S101. If the initial setting has been completed (S103: YES), the work group name is transmitted by broadcast to other terminals other than the MFP 100 (S104).

  When the other terminal connected to the network 500 such as the MFP 100A receives the work group name transmitted from the MFP 100 (S201: YES), it is determined whether or not the work group name is the same as the work group name set in the own device. (S202: YES), the terminal information set to the own device and the registered user information are transmitted to the MFP 100 (S203). Since MFP 100C has a different work group name, MFP 100C does not transmit its own terminal information or the like to MFP 100. In this way, the virtual sub-network 501 is constructed between terminals having the same workgroup name.

  On the MFP 100 side, information transmitted from terminals (MFP 100A, MFP 100B) in the same work group is received (S105), and user data is generated (S106). Then, the terminal information registered in the MFP 100 and the registered user information in the initial setting are transmitted (S107). On the other terminal (MFP 100A, MFP 100B) side, when the terminal information transmitted from the MFP 100 and the registered user information are received (S204: YES), user data is generated and added (S205). In this embodiment, user data respectively generated in MFP 100 and other terminals is a collection of terminal information and user identification information of MFPs 100, 100A, and 100B, and includes terminal information and user identifiers for each terminal. . User data generated in each MFP is stored in the hard disk. Through the above processing, the same user data is stored in MFPs 100, 100A, and 100B.

  In the present embodiment, terminal information is registered and registered user information is input in the initial setting process executed by MFP 100. However, MFP 100 is already connected to network 500, and a user is added. In this case, the same process as the initial setting process is executed. In this case, the terminal information registration process in step S101 is not necessary.

  The initial setting process is not limited to when the MFPs 100, 100A, and 100B are connected to the network 500, and may be executed after the MFPs 100, 100A, and 100B are turned on, or executed at predetermined time intervals. You may make it do. In this way, for example, the MFP 100 can acquire the registered user information of the user newly registered in the other MFPs 100A and 100B and store the latest user data. In this case, instead of the initial setting processing in steps S101 to S103 of MFP 100 shown in FIG. 4, the transmission of registered user information is requested to terminals having the same work group name, such as other MFPs 100A and 100B.

  In response to this transmission request, the other MFPs 100A and 100B execute the processing shown in FIG. 4 and transmit the registered user information stored in its own hard disk in response to the transmission request received from the MFP 100. Thus, even if the registered user information stored in other MFPs 100A and 100B is changed, user data is generated from the changed registered user information and stored in hard disk 23 of MFP 100.

  FIG. 5 is a diagram for describing registered user information and user data. FIG. 5A is a diagram illustrating an example of registered user information registered in the MFP 100, and FIG. 5B is a diagram illustrating an example of registered user information registered in the MFP 100A. FIG. 5C illustrates an example of registered user information registered in the MFP 100B. FIG. 5D shows an example of user data.

  The registered user information according to the present embodiment includes a number, a user identifier, and user personal information. The user personal information includes accompanying information, an address book, panel setting information, authentication information, and history information. The accompanying information is information unique to each user, such as a department name to which the user belongs, an e-mail address assigned to the user, face image data obtained by photographing the user's face, and the like.

  The address book is information in which destination information registered and transmitted by the user is collected, and includes, for example, a user identifier, an e-mail address, a facsimile number, and the like of the destination user. An initial setting of the transmission method for each registered user (for example, designation of whether the transmission method as the initial setting is an e-mail or a FAX transmission) may be included.

  The panel setting information is screen information customized by the user. The authentication information is information used for user authentication at the time of login to the virtual sub-network 501, and here, a password is used. In MFP 100 and the like according to the present embodiment, login when using virtual sub-network 501 and login to the MFP alone can be performed separately, and authentication information used for login to virtual sub-network 501 is as follows. The password used when logging into the MFP alone is managed separately.

  In the case of logging in to the virtual sub-network 501, face image data can be used as authentication information. For biometric authentication, fingerprint information, voiceprint, iris, vein pattern, etc. are used as authentication information. The history information is data generated in the MFPs 100, 100A, 100B when the user instructs the MFPs 100, 100A, 100B to execute processing, and includes the contents of the instructions. The content of the instruction includes, for example, an e-mail transmission, a transmission destination, and a transmission content if the instruction is an e-mail transmission processing instruction. Note that the user data shown in FIG. 5D includes a number, a user identifier, and device identification information of the home terminal.

  As described above, in MFPs 100, 100A, and 100B having the same work group name, the same user data is generated and stored. Thereby, a virtual sub-network 501 composed of MFPs 100, 100A, and 100B is formed. When the virtual sub-network 501 is formed, a user who uses any one of the MFPs 100, 100A, and 100B as a home terminal can be specified based on the user data. Therefore, a user other than the home terminal can be selected using the user data. When the user operates, the user personal information recorded in the home terminal can be taken into the terminal.

(4) Login to the virtual sub-network 501 and login to the MFP alone In order to use the virtual sub-network 501 as described above, a login operation is required. Specifically, the login operation is to input user identification information. However, always allowing login to the virtual sub-network 501 is that confidential information is stored in another MFP 100A, for example. In some cases, this may lead to a decrease in security.

  Therefore, in the present embodiment, by changing the forms of provision of various services between login to the virtual sub-network 501 and login to a single unit such as the MFP 100 when login to the virtual sub-network 501 is not intended. To improve the operability. FIG. 6 is a diagram showing an example of an initial screen displayed on the display unit 12 when a virtual subnetwork is constructed in the MFP 100 or the like according to the present embodiment. This initial screen is displayed, for example, when the MFP 100 is powered on. When a user logs in to the virtual sub-network 501 and uses a service using information input when the virtual sub-network 501 is constructed or image information stored in another MFP configuring the virtual sub-network 501 Presses the “Virtual Subnetwork Login” button 210.

  On the other hand, there is a case where the user logs in to the MFP 100 alone, such as when the user does not intend to access the virtual sub-network login 501 or when the registered user information is not registered in any MFP. In this case, the “login to this MFP alone” button 220 is pressed. When the button 220 is pressed, a user authentication process for logging in to the MFP alone is executed. FIG. 7 is a diagram illustrating an example of a user authentication screen displayed on the display unit 12 when the button 220 is pressed.

  The user can log in to the MFP 100 alone by inputting the user name and password on the screen as shown in FIG. FIG. 8 is a diagram showing an example of the contents of a user authentication table that is provided individually for each MFP 100, 100A, and 100B when logging in to the MFP alone. The user with the user name “David” can set a password different from the password for logging in to the virtual sub-network 501.

  Next, a login operation to the virtual subnetwork 501 when the “virtual subnetwork login” button 210 is pressed on the initial screen shown in FIG. 6 will be described. Hereinafter, a terminal (any one of MFPs 100, 100A, and 100B) on which the virtual subnetwork user performs a login operation is referred to as an operation terminal. Here, in order to simplify the description, a case where a user with a user identifier “Julie” (the home terminal is MFP 100A) performs a login operation on MFP 100 will be described. In this case, MFP 100 becomes an operation terminal.

  FIG. 9 is a flowchart illustrating an example of a flow of processing executed in the operation terminal and the home terminal according to the present embodiment. The flowchart on the left side of the figure shows the flow of input processing on the operation terminal side, and the flowchart on the right side shows the flow of user user personal information management processing on the home terminal side. In the login operation to the virtual sub-network 501 in the present embodiment, first, the user name of the user with the user identifier “Julie” is input on the MFP 100 as the operation terminal (step S301). If a user name has been input (S301: YES), the process proceeds to step S302, and if not, a standby state is entered. That is, on the operation terminal side, first, the process from step S302 is executed on condition that a user name as an example of a user identifier is input.

  In step S302, it is determined from the input user identifier whether the operation terminal is the user's home terminal. That is, the user identifier stored in the hard disk 23 of the operation terminal is searched using the user identifier, and the device identification information stored in association with the user identifier is the device identification information assigned to the own device. Judge whether or not. If it is the user's home terminal, the process proceeds to step S305, and if not, the process proceeds to step S303. Here, since MFP 100 is not the home terminal of the user with the user identifier “Julie”, the process proceeds to step S303.

  In step S303, the home terminal of the user with the user identifier “Julie” is requested to transmit user personal information. This transmission request includes at least a user identifier. Therefore, the user identifier is transmitted using the device identification information of the home terminal, here, the IP address of MFP 100A.

  On the other hand, in MFP 100A as the home terminal, it is determined whether or not a transmission request for user personal information has been received (step S401). If a transmission request is received, the process proceeds to step S402, and if not, the process ends. In step S402, the registered user information stored in the hard disk of MFP 100A is searched using the user name included in the received transmission request, and the user personal information stored in association with the user identifier is extracted. . Then, the extracted user personal information is transmitted to the operation terminal that has transmitted the transmission request (step S403).

  The operation terminal is in a standby state until the user personal information is received from the home terminal in response to the transmission request for the user personal information transmitted in step S303 (S304: NO). When the user personal information is received, step S306 is received. (S304: YES). If the operation terminal matches the home terminal (S302: YES), the registered user information stored in hard disk 23 of MFP 100, which is the operation terminal, is searched and stored in association with the input user identifier. The user personal information is read (S305). In step S306, the user personal information read in step S305 or the user personal information received in step S304 is set for the login user and stored in the RAM 22.

  Next, the login user is prompted to input authentication information by screen display or voice output, and is set in a standby state until the authentication information is input (S307: NO). If the authentication information is input (S307: YES), the input authentication information is compared with the authentication information of the user personal information stored in the RAM 22 in step S306, and if both match, the authentication is OK (S308). : YES) In the present embodiment, if the two do not match (S308: NO), the process returns to step S301.

  The user authentication process (S309) may be executed on the home terminal. In this case, both the user identifier and the authentication information are input in step S301, and the user identifier and the authentication information are combined and transmitted to the home terminal in step S303. In step S402, MFP 100A as the home terminal compares authentication information in the extracted user personal information with authentication information included in a transmission request from the operation terminal, and determines whether authentication is OK. In step S403, the determination result is transmitted to the operation terminal.

  As described above, according to the present embodiment, when the virtual sub-network is configured by switching the user authentication method between the login to the virtual sub-network 501 and the login to the MFP alone, the security is reduced. It prevents the invitation.

(5) Switching of Destination Setting Service Hereinafter, the processing of the flowchart of FIG. 9 will be further described. When user authentication to the virtual sub-network 501 is OK on the operation terminal side and login is permitted (S308: YES), panel display processing is executed on the operation terminal side (S309). FIG. 10 is a flowchart illustrating an example of the contents of the panel display process.

  In the panel display process in the state of logging in to the virtual sub-network 501, a screen customized according to the panel setting information included in the user personal information is displayed on the display unit 12 (S501). In the panel display processing, it is normal to determine the screen to be displayed according to the panel setting information. For example, when logging in to the MFP alone, the panel setting information set in advance at the time of shipment is referred to. In the state where the user is logged in to the virtual network 501, the display screen is determined by switching to the panel setting information included in the user personal information.

  For example, on the copy screen, the copy screen displayed according to the copy information of the initially set panel setting information is switched to the copy information included in the panel setting information of the user personal information, and the copy screen is displayed according to the switched copy information. . The copy information is, for example, print condition setting information such as the magnification “equal magnification”, the number of copies “2”, and the sort “valid”.

  At this time, MFP 100A that is the home terminal may not have the function that MFP 100 that is the operation terminal has, for example, the case where the sorter is attached to MFP 100A but not to MFP 100. Even if sort “valid” is displayed on the copy screen, the MFP 100 does not have a sort function, so the copy screen and the function that can be executed by the MFP 100 become inconsistent. For this reason, in the copy screen, of the information included in the panel setting information, the display mode is set to other display in order to indicate that it is impossible to accept instructions for functions that cannot be realized by the operation terminal. Make it different. The display mode for indicating that it is impossible to accept an instruction can lower the density of a display related to sorting as compared to other displays, for example.

  The panel display process includes display of another service providing screen in addition to the display of the copy screen exemplified above. For example, it includes an address book display that is displayed when a transmission destination (other MFP user, facsimile, e-mail, network printer, file server, groupware server) is designated. In the panel display process, when a destination is designated, the address book included in the user personal information stored in the RAM 22 in step S306 in the flowchart of FIG.

  FIG. 11 is a diagram illustrating an example of a screen displayed on the display unit 12 for setting a transmission destination in a state where the user is logged in to the virtual network 501. In the example shown in the figure, an image file list display area 121 and a destination list display area 122 are provided on the display unit 12, and a file designated in the image file list display area 121 (in the example shown in FIG. The file “jpg” is selected.) can be selected from the user names displayed in the destination list display area 122 and designated. That is, when logged in to the virtual network 501, the destination setting can be specified by the user name.

  As described above, when the user logs in to the virtual network 501, the destination can be set only by specifying the user name. The user personal information exchanged between the MFPs 100, 100A, and 100B for the user registered in the virtual network 501 is possible. This is because the address book information is included. Therefore, for example, when the login user to the MFP 100 alone similarly designates the transmission destination by specifying the user name, the user name is entered and then the individual MFP is inquired and the same is used. This must be done for all MFPs belonging to the domain, and it takes a lot of time to complete the destination setting.

  In the present embodiment, when logging in to the MFP alone, for example, when setting the transmission destination of image data obtained by reading a document with the scanner unit 13, the state where the user is logged in to the virtual network 501. By using different setting methods, operability deterioration is prevented. FIG. 12 is a diagram illustrating an example of a transmission destination setting screen when logging in to the MFP alone. As in the past, the transmission method and the transmission destination are designated.

  The screen of FIG. 12 includes a destination information input box 300, a button for specifying a transmission method, that is, a button 310 to be pressed when specifying transmission by e-mail as the transmission method, and FTP (File Transfer) as the transmission method. A button 320 to be pressed when specifying (protocol) and a button 330 to be pressed when specifying FAX transmission as a transmission method are provided.

  When the e-mail button 310 is pressed, the user inputs a mail address in the transmission destination information input box 300 as transmission destination information. When the FTP button 320 is pressed, the user inputs an IP address as transmission destination information in the transmission destination information input box 300. When the FAX transmission button 330 is pressed, the user inputs a FAX number as transmission destination information in the transmission destination information input box 300.

  Returning to the flowchart of FIG. 10, when the user logs in to the virtual network 501, when the function of the MFP 100 as the operation terminal is executed in response to the panel display (S501), the history information is based on the execution result. Generated. This history information is added to the history information of the user personal information stored in the RAM 22 of the MFP 100 that is the operation terminal (step S502).

  In subsequent step S503, it is determined whether or not a logout instruction has been issued. If there is a logout instruction, the process proceeds to step S506. Until there is a logout instruction, operation acceptance by the user (S507) and panel display (S501) based on the instruction by the login user “Julie” are repeatedly executed. The logout instruction in this embodiment is (1) when a logout button (not shown) arranged on the operation unit 11 or displayed on the display unit 12 is pressed (S503), (2) an operation terminal. Either an instruction to turn off the power of MFP 100 is input (S504), or (3) an operation input is not performed for a predetermined time after logon (S505).

  When there is a logout instruction, the screen displayed on the display unit 12 is set as an initial screen, all parameters (including panel setting information) set in the MFP 100 are set to initial values (S506), and the flowchart of FIG. Return. Then, it is determined whether or not the user personal information stored in the RAM 22 has been changed by the panel display process (S310). Normally, the user personal information is often changed because history information is added as a result of some operation, but when the user personal information is not changed, such as when logging out without any operation (S310). : NO), the user personal information stored in the RAM 22 of the operation terminal is deleted (S314), and the process is terminated. By performing the information erasing process in this way, it is possible to enhance security, such that the personal information of the previously logged-in user is not used for the next logged-in user. In this case, it is preferable to notify logout to the home terminal (represented by a connector C in FIG. 9).

  The user personal information may be changed not only by changing the history information but also by changing the setting contents of the copy screen display via the panel display. In this case, the panel setting information of the user personal information is changed. Also, the address book can be changed via the panel display. For example, adding a new destination, changing or deleting an existing destination. Changing the address book changes the address book of the user personal information.

  If the user personal information has been changed (S310: YES), it is determined whether or not it is the login user's home terminal (S311). If it is the home terminal (S311: YES), the home terminal (in this case, the operation terminal) The personal user information stored in the MFP 100 is changed (S312).

  If the operation terminal is not a home terminal (S311: NO), an instruction to change user personal information is transmitted to the home terminal (in this case, MFP 100A) (S313). This change instruction includes the user identifier “Julie” of the logged-in user and the changed user personal information.

  MFP 100A, which is a home terminal, determines whether or not a change instruction for changing user personal information has been received (S404). When the transmission request is received (S404: YES), the registered user information stored in the hard disk is rewritten using the user identifier and the changed user personal information included in the received change instruction (405). More specifically, the user personal information of the registered user information including the user identifier included in the change instruction among the registered user information stored in the hard disk of MFP 100A is rewritten to the user personal information included in the change instruction.

  Thereby, the change of the user personal information performed by MFP 100 as the operation terminal can be reflected in the registered user information stored in MFP 100A as the home terminal. Therefore, even when the MFP 100, 100A, or 100B is next logged in to the virtual sub-network 501, panel display processing is executed based on the changed user personal information. If an instruction to turn off the power is input (see S504 in FIG. 10), the MFP 100, which is an operation terminal, does not immediately turn off the power but instead executes the processing up to S314 in FIG. Disconnect.

(Modification)
Although the embodiment of the present invention has been described above, the content of the present invention is not limited to the specific examples described in the embodiment, and for example, the following modifications may be implemented. it can.

  (1) In the above-described embodiment, the user personal information is erased from the RAM 22 when logging out on the operation terminal (S314 in FIG. 9), but temporarily stored in the hard disk 23 and the same user logs in again. In such a case, the temporarily stored personal user information may be read out. For example, when a predetermined time elapses due to a sudden meeting or the like and the logout process is performed (see S505 in FIG. 10), a quick return can be achieved. In this case, if the user personal information temporarily stored is deleted after a predetermined time set longer than the above S505, the security weakening can be prevented.

  (2) In the above embodiment, as a specific example of switching the service provision mode between the case of login to the virtual sub-network 501 and the case of login to the MFP alone, user authentication and image data transmission at the time of login are described. However, the switching process is not limited to these, and information exchange is performed via the network when the virtual subnetwork is configured, and user personal information for each user is included in the exchanged information. (The content of user personal information is not limited to the above.) In the case of login to a single MFP, in principle, information is not exchanged with an image processing apparatus such as another MFP via a network. Depending on the conditions, there are various cases where switching the service provision form contributes to improving the operability for the user.

  For example, when displaying a list of image data as illustrated in FIG. 11, images stored in each MFP with the same work group name can be presented in a situation where the user logs in to the virtual sub-network 501. In this case, not only the image stored in the home terminal, but also the image waiting for transmission to the home terminal or the logged-in user, or the image temporarily stored in another MFP can be presented. is there. When it is not preferable to present all images stored in all MFPs constituting the virtual sub-network 501, for example, it is possible to present only when the owner name of the image file matches the user name.

  On the other hand, when the user logs in to the MFP alone, it is assumed that the user is assumed to be used within the range of the MFP itself, so images stored in other MFPs in the virtual sub-network 501 are not presented. By presenting only the images that exist in the MFP that has logged in as a single unit, it is possible to select images more easily and improve operability in addition to preventing security degradation due to extra presentation. To do.

  (3) Even when logging in to the MFP alone, it may be necessary to log in to the virtual sub-network 501. In order to deal with such a case, even when logged in to the MFP alone, for example, in the case of a user registered in the virtual sub-network 501, a button for jumping to the login screen for the virtual sub-network is displayed on the display unit 12. It is preferable to display the above. FIG. 13 is a diagram illustrating an example of a display mode of the display unit 12 in this case. As shown in the figure, even when logged in to the MFP alone, as long as the logged-in user is a user who can log in to the virtual subnetwork to which the MFP belongs, the display unit 12 is instructed to switch to the virtual subnetwork login. If the button 340 to be displayed is always displayed, the operability is further improved. When the button 340 is pressed, the authentication process described with reference to FIG.

  (4) In the above embodiment, switching of a screen used for user authentication and switching of user authentication information between the case of login to the MFP alone and the case of login to the virtual sub-network 501 have been described. Various other methods of switching the authentication method are conceivable, including the case where the authentication server is used.

  For example, in the case of login to the virtual sub-network 501, if user authentication cannot be performed only with the user authentication information stored in the own device, other devices (including other terminals and authentication servers) connected via the network The user authentication is also performed by referring to the user authentication information stored in (.), And when logging in to the MFP alone, the user authentication is performed by referring only to the user authentication information stored in the own machine. The authentication method can be switched.

  In the case of login to the virtual sub-network 501, if user authentication cannot be performed only with the user authentication information registered by the own device, the user authentication information registered by another device connected via the network is also referred to. In the case of login to the MFP alone, the user authentication method can be switched so that the user authentication is performed by referring only to the user authentication information registered in the own machine. .

  The present invention can be applied to an image processing apparatus such as an MFP.

It is a figure for demonstrating the structure of the image processing system in embodiment of this invention. 2 is a block diagram illustrating an example of a hardware configuration of MFP 100. FIG. 2 is a diagram illustrating an example of the appearance of an MFP 100. FIG. 10 is a flowchart for explaining processing contents of MFP 100 and another MFP newly connected. It is a figure for demonstrating registration user information and user data. 6 is a diagram showing an example of an initial screen displayed on the display unit 12 when a virtual sub-network is constructed in the MFP 100 or the like. FIG. 6 is a diagram illustrating an example of a user authentication screen displayed on the display unit 12 when a button 220 is pressed (when logging into an MFP alone). FIG. 6 is a diagram illustrating an example of the contents of a user authentication table when logging into an MFP alone. FIG. It is a flowchart which shows an example of the flow of the process performed in an operation terminal and a home terminal. It is a flowchart which shows an example of the content of a panel display process. 6 is a diagram illustrating an example of a screen displayed on the display unit 12 for setting a transmission destination in a state where the user is logged in to the virtual network 501. FIG. FIG. 6 is a diagram illustrating an example of a transmission destination setting screen when logging into an MFP alone. It is a figure which shows an example of the display mode of the display part 12 at the time of making it display on the display part 12 the button which jumps to the login screen to a virtual subnetwork.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 Operation part 12 Display part 121 Image file list display area 122 Transmission destination list display area 13 Scanner part 14 Printer part 16 Communication interface 17 Document feeder 18 Paper feeder 19 Tray 20 CPU
21 ROM
22 RAM
23 Hard Disk Drive (HDD)
24 FAX processing unit 100 to 100C MFP
210 Virtual subnetwork login designation button 220 Login designation button for MFP alone 250A User identifier input box 260A Password input box 300 Destination information input box 340 Virtual subnetwork login switching instruction button 500 Network (LAN)
501 Virtual subnetwork

Claims (12)

An image processing apparatus that can be connected to a network and can communicate with at least one other image processing apparatus connected to the network,
Subnetwork configuration means for exchanging predetermined information with the other image processing apparatus in advance by communication and configuring a virtual subnetwork in which each image processing apparatus and a user identifier are associated with each other,
First login accepting means for accepting login to the virtual sub-network;
A second login accepting means for accepting a login to a usage mode that does not access the virtual sub-network;
A selection control means for performing control to log in the user via any one selected by the user among the first login acceptance means and the second login acceptance means;
A first case where the user logs in via the first login acceptance means based on the control by the selection control means, and via the second login acceptance means based on the control by the selection control means. Switching means for switching a predetermined control method executed by the image processing apparatus in a second case where the user is logged in.
The predetermined control method is provided for the user, and is executed with respect to a service accompanied by an operation input by the user at the time of the provision,
The switching means switches the predetermined control method to one corresponding to information available for the image processing apparatus to provide the service at that time. The service includes image data transmission processing,
The image processing apparatus according to claim 1, wherein the predetermined control method includes a setting method of a transmission destination of the image data in the transmission processing of the image data. The switching means is
In the first case, a user identifier associated with another image processing apparatus acquired by the predetermined information exchange is set as a transmission destination,
The image processing apparatus according to claim 2, wherein in the second case, the transmission destination setting method is switched so as to set a transmission destination identifier as the transmission destination. The service includes a process of presenting image data stored in a storage unit provided in an image processing apparatus to the user,
The image processing apparatus according to claim 1, wherein the predetermined control method includes a method of selecting image data presented to the user by the presentation process. The switching means is
In the first case, the image data stored in another image processing device constituting the virtual sub-network is presented,
The image processing apparatus according to claim 4, wherein in the second case, a method for selecting the image data is switched so as not to present the image data stored in another image processing apparatus. The service includes a user authentication process at the time of login,
The predetermined control method includes an authentication method of a user who performs the login,
The image processing apparatus according to claim 1, wherein the authentication method uses user authentication information prepared in advance to authenticate the user. The switching means is
The user authentication method is switched so that the user authentication information used in the user authentication process is different between the first case and the second case.
The image processing apparatus according to claim 6. The switching means is
In the first case, when the user authentication cannot be performed only with the user authentication information stored in the image processing apparatus, the user is also referred to by referring to the user authentication information stored in another apparatus connected via the network. Authenticate,
8. The user authentication method according to claim 6, wherein in the second case, the user authentication method is switched so that user authentication is performed by referring only to user authentication information stored in the image processing apparatus. Image processing apparatus. The switching means is
In the first case, when the user authentication cannot be performed only with the user authentication information registered in the image processing apparatus, the user is also referred to with the user authentication information registered in another apparatus connected via the network. Authenticate,
8. The method according to claim 6, wherein in the second case, the user authentication method is switched so that user authentication is performed with reference to only user authentication information registered in the image processing apparatus. Image processing apparatus. The image processing apparatus further includes temporary storage means for temporarily storing user authentication information referred to when the user authentication is performed,
The image processing apparatus according to claim 8, wherein the temporary storage unit erases the temporarily stored user authentication information after the logged-in user logs out. The first login accepting means includes:
Users logged in through the second login reception unit, when the possible log in to a virtual sub-networks, from claim 1, characterized in that receiving constantly input to switch to log in to the virtual sub-network 10 An image processing apparatus according to any one of the above. A program that is connectable to a network and that operates in an image processing apparatus that can communicate with at least one other image processing apparatus connected to the network,
Subnetwork configuration processing for exchanging predetermined information with the other image processing apparatus in advance by communication and configuring a virtual subnetwork in which each image processing apparatus and a user identifier are associated with each other,
A first login acceptance process for accepting a login to the virtual sub-network;
A second login acceptance process for accepting a login to a usage mode that does not access the virtual sub-network;
A selection control process for controlling the user to log in through either one of the first login acceptance process and the second login acceptance process selected by the user;
The first case where the user is logged in via the first login acceptance process based on the control by the selection control process, and the second login acceptance process based on the control by the selection control process. In a second case where the user is logged in, a switching process for switching a predetermined control method executed by the image processing apparatus is executed.
The predetermined control method is provided for the user, and is executed with respect to a service accompanied by an operation input by the user at the time of the provision,
The switching process switches the predetermined control method to one corresponding to information available for the image processing apparatus to provide the service at that time.

Images