JP6448713B2 - Import device, import method - Google Patents

Description

  The present invention relates to a data export / import technique in an image communication apparatus such as a multifunction peripheral or a facsimile machine.

  Various data relating to communication is stored in the image communication apparatus. Such data includes, for example, address book data including destination information of facsimiles and other electronic devices, data related to network settings, and the like. When a plurality of users use the image communication apparatus, the address book data can be managed for each user. In this case, it is also possible to manage the address book data shared openly to a plurality of users and the address book data restricted by the users to be managed by the image communication apparatus.

  When adding an image communication device, there is a method of distributing address book data directly from an existing image communication device to an additional image communication device or via an external device. At that time, the address book data is imported and exported between the image communication apparatuses. However, not all image communication apparatuses support the management of address book data for each user. For example, even if the image communication device that exports the address book data supports the management of address book data for each user, the image communication device that performs the import supports the management of address book data for each user. May not have. In this case, there is a possibility that the destination information of the address book data for which the user to be used is restricted will be disclosed.

  Patent Document 1 discloses an invention of an image communication apparatus that checks whether an image communication apparatus that performs import can manage address book data for each user and exports address book data only when it is possible. Since the import is permitted only when the address book data can be managed for each user, it is possible to prevent the disclosure of the destination information of the address book data whose use is restricted.

JP 2007-81578 A

  On the other hand, import / export of address book data is not always performed directly between image communication apparatuses. For example, a method in which one image communication apparatus exports address book data to a portable medium and the other image communication apparatus imports from the portable medium is also conceivable. In particular, the above method is useful when address book data held in one image communication apparatus is used in a plurality of other image communication apparatuses. In this case, the invention of Patent Document 1 that determines whether the image communication apparatus that imports by the exported image communication apparatus can manage the address book data for each user cannot be applied as it is.

  In order to solve the above-described problem, the present invention mainly provides a technique for preventing address book data managed for each user and restricted for users to be disclosed on an export destination apparatus. Let it be an issue.

Import apparatus of the present invention for solving the aforementioned problems is a import apparatus to import data, a storage unit, the shared area import multiple users have a shared area which is at least accessible storage area Based on the type data added to the data including the destination information that is the target of the import instruction and the receiving unit that receives the import instruction that is instructed as the destination, it is individually used for each user for the data that is the target of the import instruction. Confirmation means for confirming whether the individual data is included , and notifying means for notifying a predetermined warning when it is confirmed that the data targeted for the import instruction includes the individual data. Features.

  According to the present invention, when individual data is instructed to be imported into the shared area, a warning is given to the user that the individual data is shared. Therefore, it is possible to prevent individual data from being shared and disclosed by mistake.

The hardware block diagram of an image communication apparatus. The structural example figure of a data delivery system. FIG. 3 is an exemplary diagram of an address book area. The flowchart showing the processing procedure of the export / import of address book data. FIG. 4 is an exemplary diagram of an authentication screen. FIG. 4 is an exemplary diagram of a process selection screen. The flowchart showing the process sequence of export. FIG. 4 is an exemplary diagram of an export operation screen. FIG. 6 is an exemplary diagram of a header added to an export file. The flowchart showing the processing procedure of import. FIG. 4 is an exemplary diagram of an import operation screen. The flowchart showing the processing procedure of import. The flowchart showing the processing procedure of import. The flowchart showing the processing procedure of import. The illustration of a key ring table. The flowchart showing the processing procedure of import. FIG. 6 is an exemplary diagram of a warning message.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a hardware configuration diagram of the image communication apparatus according to the present embodiment.
The image communication apparatus 1 includes a CPU (Central Processing Unit) 11 and a RAM (Random
Access Memory) 12, storage unit 13, reading unit 15, and communication unit 16. These components are connected to each other so as to be able to perform data communication with each other via a bus 18.

  The CPU 11 controls the overall operation of the image communication apparatus 1 by using the RAM 12 as a work area and reading and executing a program stored in the storage unit 13. In particular, the CPU 11 imports and exports address book data including destination information by executing a program. In addition to the above programs, the storage unit 13 stores exported address book data, authentication information of users who can use the image communication apparatus 1, various setting data of the image communication apparatus 1, and the like. The imported address book data is stored in the storage unit 13.

  The reading unit 15 has a scanner function, optically reads a document, and converts it into image data. The communication unit 16 communicates with an external device via the network 2. When the image communication apparatus 1 functions as a network scanner or a facsimile, the image data of the document read by the reading unit 15 is transmitted to an external device. The communication unit 16 transmits / receives address book data when exporting / importing address book data. The CPU 11 controls the operation of each component of the image communication apparatus 1 for this series of operations.

FIG. 2 is a configuration example diagram of a data distribution system including such an image communication apparatus 1. The image communication apparatus 1 is connected to the other image communication apparatus 1 and the electronic device 3 via the network 2 so as to be able to perform data communication.
The electronic device 3 is an information processing apparatus such as a personal computer, and is an HTTP (HyperText).
A remote user interface (remote UI) of the image communication apparatus 1 can be accessed using the Transfer Protocol. For this purpose, the electronic device 3 includes a display device and an input device, and the image communication device 1 can be remotely managed using these devices.

  When the address book data is distributed from the first image communication apparatus 1 to the second image communication apparatus 1, the first image communication apparatus 1 becomes an export apparatus and exports the address book data. Further, the second image communication apparatus 1 becomes an import apparatus, and imports the exported address book data. At this time, the exported address book data may be temporarily stored in the electronic device 3 and then imported from the electronic device 3. Alternatively, the first image communication apparatus 1 may export the address book data to a portable medium (not shown), and the second image communication apparatus 1 may import the exported address book data.

  FIG. 3 is an illustration of an address book area that is a storage area in which the address book data of the storage unit 13 is stored. In the address book area 301, a shared address book area 302 and an individual address book area 303 are provided.

The shared address book area 302 is a shared area in which address book data (hereinafter referred to as “shared address book data”) that is shared data that can be used by a plurality of users of the image communication apparatus 1 is stored.
The individual address book area 303 is an individual area in which address book data (hereinafter referred to as “individual address book data”), which is individual data with restrictions on users to be used, is stored. In the example of FIG. 3, individual address book data including destination information individually used by user A and user B is stored separately for user A's address book area and user B's address book area. The destination information included in the address book data that can be used individually by the user includes an identifier and password information that are authentication information for authenticating the user by another image communication apparatus or electronic device specified by the destination information. Is included.

  When the image communication apparatus 1 functions as a network scanner or a facsimile, the image data of the document read by the reading unit 15 is transmitted to the transmission destination specified by the destination information included in the shared address book data and the individual address book data. .

  FIG. 4 is a flowchart showing a processing procedure when address book data is exported or imported by the image communication apparatus 1. This process is a process in which the user operates the electronic device 3 and causes the image communication apparatus 1 to perform the operation using the remote UI.

  When the electronic device 3 accesses the image communication device 1 through the remote UI after the image communication device 1 is activated, the CPU 11 of the image communication device 1 displays a UI screen as illustrated in FIG. 5 on the display device of the electronic device 3. . This UI screen is an authentication screen for the image communication apparatus 1 to perform user authentication, and a user registered in the image communication apparatus 1 inputs an ID (identification) and a password for identifying itself. (S101). The CPU 11 authenticates the user with the ID and password input from the authentication screen (S102).

  After authenticating the user (S102: Y), the CPU 11 displays a UI screen as illustrated in FIG. 6 on the display device of the electronic device 3. This UI screen is a process selection screen 401 for selecting a process to be executed by the image communication apparatus 1, and can instruct address book data export, import, and logout (S103). The process selection screen 401 is displayed on the display device of the electronic device 3 until any selection item is selected (S104: N, S106: N, S108: N, S103).

When the “Export” button 402 is selected from the process selection screen 401, the CPU 11 exports the address book data (S104: Y, S105).
When the “Import” button 403 is selected from the process selection screen 401, the CPU 11 imports the address book data (S104: N, S106: Y, S107).
When a “logout” button 404 is selected from the process selection screen 401, the CPU 11 performs logout processing (S104: N, S106: N, S108: Y), and ends the export or import of address book data.

FIG. 7 is a flowchart showing an export processing procedure.
When the export is started, the CPU 11 of the image communication apparatus 1 displays the UI screen illustrated in FIG. 8 on the display device of the electronic device 3. This UI screen is an export operation screen 501 for performing an export operation (S201). On the export operation screen 501, the user designates the address book data of the export source, inputs a password, and instructs to start the export.

  The CPU 11 confirms whether or not the export source address book data indicating from which address book data the destination information to be exported is acquired is specified on the export operation screen 501 (S202). Export source address book data can be selected from a drop-down list, and shared address book data or individual address book data can be designated as the export source address book data. When specifying individual address book data, only individual address book data that can be used by a user who has been authenticated on the authentication screen can be specified.

  After specifying the export source address book data (S202: Y), the CPU 11 checks whether or not a password is entered in the “password entry field” of the export operation screen 501 (S203). This password is used to generate an encryption key for encrypting password information included in the destination information of the address book data of the export source. If the password information included in the destination information is exported in plain text, there is a risk of information leakage. For this purpose, an encryption key is generated using the input password, and the password information included in the destination information is encrypted using this encryption key to prevent information leakage.

After inputting the password (S203: Y), the CPU 11 checks whether “export start” is instructed from the export operation screen 501 (S204).
The CPU 11 displays the export operation screen 501 on the display device of the electronic device 3 until the address book data of the export source is designated, a password is input, and an export start instruction is given.

When there is an export start instruction (S204: Y), the CPU 11 generates an export file for storing destination information included in the address book data to be exported (S205).
After generating the export file, the CPU 11 checks whether the address book data of the export source is individual address book data (S206). In the case of individual address book data, the CPU 11 adds a header which is type data indicating individual address book data to the export file (S206: Y, S207). FIG. 9 is an example of such a header to be added.

  After adding the header or when the export source address book data is shared address book data, the CPU 11 generates an encryption key using the password entered from the password entry field (S208).

  After generating the encryption key, the CPU 11 writes the destination information included in the address book data of the export source in the export file. First, the CPU 11 confirms whether destination information to be exported remains in the export source address book data (S209). When the destination information remains, the CPU 11 acquires the destination information from the address book data of the export source (S209; Y, S210). The CPU 11 checks whether or not password information is included in the acquired destination information (S211). When the password information is included, the CPU 11 encrypts the password information included in the destination information using the encryption key (S211: Y, S212).

After the password information is encrypted or when the password information is not included, the CPU 11 outputs the destination information to the export file (S213). After outputting all the destination information included in the export source address book data to the export file, the CPU 11 transmits the export file to the electronic device 3 (S209: N, S214).
As described above, the export of the address book data from the image communication apparatus 1 to the electronic device 3 is completed. The export file may be directly transmitted to another image communication apparatus 1 that performs import.

FIG. 10 is a flowchart showing the import processing procedure.
When the import is started, the CPU 11 of the image communication apparatus 1 displays the UI screen illustrated in FIG. 11 on the display device of the electronic device 3. This UI screen is an import operation screen 601 for performing an import operation (S301). The CPU 11 accepts a user's designation of a file to be imported (hereinafter referred to as “import file”), designation of an import destination address book area 301, input of a password, and an import start instruction from the import operation screen 601. The import file is an export file exported from another image communication apparatus. The password is used to generate a decryption key for decrypting encrypted password information included in the import file.

The CPU 11 checks whether or not the import file, the import destination address book area 301, and the password have been input on the import operation screen 601 (S302, S303, S304). After these inputs, it is confirmed whether or not “import start” is instructed (S305).
The CPU 11 displays the import operation screen 601 on the display device of the electronic device 3 until the import file, the import destination address book area 301, and the password are input and there is an import start instruction.

  When there is an instruction to start importing (S305: Y), the CPU 11 acquires the import file from the electronic device 3 and confirms whether or not the import file has been created in a file format that can be used by the image communication apparatus 1. (S306). If it is not created in a usable file format, the CPU 11 displays a warning on the import operation screen 601 that the designated import file is an invalid file format (S306: N, S307). Thereafter, the CPU 11 returns to the display state of the import operation screen 601 and causes the user to designate an import file again (S301).

When the import file is in a usable format, the CPU 11 checks whether a header indicating that the destination information included in the import file is that of the individual address book data is added to the header of the import file (S306). : Y, S308).
When the header is added, the CPU 11 checks whether or not the destination address book area 301 is the shared address book area 302 (S308: Y, S309). In the case of the shared address book area 302, the CPU 11 warns that the destination information exported from the individual address book area 303 may be stored in the shared address book area 302 and made public (S309: Y, S310). After the warning, the display returns to the display state of the import operation screen 601 and the user is made to specify the import file and the destination address book area 301 again (S301).

  When the header is not added (S308: N), or when the import destination is the individual address book area 303 (S309: N), the CPU 11 generates a decryption key using the password input in step S304. (S311).

  After generating the decryption key, the CPU 11 writes the destination information included in the import file into the address book area 301 of the import destination. First, the CPU 11 confirms whether destination information to be imported remains in the import file (S312). If the destination information remains, the CPU 11 acquires the destination information from the import file (S313). The CPU 11 checks whether or not password information is included in the acquired destination information (S314). When the password information is included, the CPU 11 decrypts the password information included in the destination information using the decryption key (S314: Y, S315).

  After the password information is decrypted or when the password information is not included in the destination information, the CPU 11 writes the destination information in the designated address book area 301 (S316). The CPU 11 ends the import by writing all the destination information included in the file to be imported into the designated address book area 301 (S312: N).

  As described above, the individual address book data is warned so as not to be stored in the shared address book area 302, and is prevented from being disclosed. Also, password information can be encrypted and decrypted with a password so that the password information is not accidentally disclosed at the time of export or import.

[Second Embodiment]
FIG. 12 is a flowchart illustrating an import processing procedure according to the second embodiment. This is different from the first embodiment in the case where the destination information of the import file is exported from the individual address book data and the import destination is the shared address book area 302. Since the configuration of the image communication apparatus 1 and other processes are the same as those in the first embodiment, description thereof will be omitted.

  If the import destination is the shared address book area 302 in step S309 (S309: Y), the CPU 11 of the image communication apparatus 1 deletes the identifier and password information included in the destination information of the import file (S401). After deleting the identifier and password information, the CPU 11 writes the destination information included in the import file into the import destination shared address book area 302.

  In the second embodiment, when the shared address book area 302 is designated as an import destination, such information is not disclosed in order to delete the identifier and password information included in the destination information.

[Third Embodiment]
13 and 14 are flowcharts showing the import processing procedure according to the third embodiment. This is different from the first embodiment in the case where the destination information of the import file is exported from the individual address book data and the import destination is the shared address book area 302. Since the configuration of the image communication apparatus 1 and other processes are the same as those in the first embodiment, description thereof will be omitted.

In the third embodiment, the identifier and password information included in the destination information of the import file are stored in a table of the storage unit 13 (hereinafter referred to as “key ring table”). FIG. 15 is an illustration of a key ring table. The CPU 11 extracts the identifier and password information from the destination information including the identifier and password information, stores the identifier and password information in the key ring table in association with the destination information.
In the example of FIG. 15, the destination information is information that identifies an electronic device that is a communication target. The identifier is information for identifying the user with the electronic device. The password information is authentication information used when a user is authenticated by the electronic device. The key ring table is associated with an ID (“user 1” in FIG. 15) that is a user identifier for identifying the user in the image communication apparatus 1, and can be used only for the user with this ID. This ID is the same as the ID input from the authentication screen of FIG.

  When the import destination is the shared address book area 302 in step S309 in FIG. 13 (S309: Y), the CPU 11 generates a decryption key for decrypting the password information using the password input in step S304. (S501 in FIG. 14). After generating the decryption key, the CPU 11 writes the destination information included in the import file into the import destination shared address book area 302. First, the CPU 11 confirms whether destination information to be imported remains in the import file (S502). If the destination information remains, the CPU 11 acquires the destination information from the import file (S502: Y, S503). The CPU 11 checks whether password information is included in the acquired destination information (S504). When the password information is included, the CPU 11 decrypts the password information included in the destination information using the decryption key (S504: Y, S505). After decryption, the CPU 11 registers the identifier and password information in the key ring table in association with the destination information (S506). After registration in the key ring table, the CPU 11 deletes the identifier and password information from the destination information (S507).

  After deleting the identifier and password information, or when the password information is not included in the destination information, the CPU 11 writes the destination information in the designated shared address book area 302 (S508). The CPU 11 finishes the import by writing all the destination information included in the import file into the shared address book area 302 (S502: N).

  In the third embodiment, since the identifier and password information included in the destination information are deleted, the information is not disclosed. Also, all identifiers and password information included in the import file are registered in the key ring table. Since only the authenticated user can confirm the key ring table, the key ring table is not disclosed to other users.

[Fourth Embodiment]
FIG. 16 is a flowchart illustrating an import processing procedure according to the fourth embodiment. The first embodiment is different from the first embodiment by importing the destination information when the user grants permission after warning that the destination information is disclosed. Since the configuration of the image communication apparatus 1 and other processes are the same as those in the first embodiment, description thereof will be omitted.

  When the import destination is the shared address book area 302 in step S309, the CPU 11 displays a warning on the import operation screen 601 that the destination information may be disclosed (S309: Y, S310).

At the time of warning, the CPU 11 displays a warning message 701 as illustrated in FIG. 17 on the import operation screen 601. The warning message 701 confirms the continuation of the import to the user while warning the possibility of disclosure of the identifier and password information. In the warning message 701, an “import execution” button 702 and an “import cancel” button 703 are prepared. When the “import execution” button 702 is selected by the user, the destination information is imported assuming that the user has permitted the disclosure of the destination information (S601: Y, S312).
If the “import cancel” button 703 is selected by the user, the display returns to the import operation screen 601 on the assumption that the user has not permitted the disclosure of the destination information (S601: N, S301).

  In the fourth embodiment, the destination information is disclosed only when the user permits the disclosure of the destination information. It is possible to import destination information flexibly according to the user's judgment.

[Other Embodiments]
In the above embodiment, the image communication apparatus 1 has been described as having a scanner function, a network communication function, and a facsimile function. However, the image communication apparatus 1 may have a print function, a copy function, and the like. In addition, the present invention can also be applied to an image communication apparatus having only a part of these multiple functions.

  The present invention is also realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, etc.) of the system or apparatus reads the program code. It is a process to be executed. In this case, the program and the storage medium storing the program constitute the present invention.

Claims (6)

An import device for importing data ,
Storage means in which a plurality of users having shared area which is at least accessible storage area,
A receiving unit configured to the shared area accepts the import instruction instructed as the destination,
Confirmation means for confirming whether the data to be the target of the import instruction includes individual data individually used for each user, based on the type data added to the data including the destination information to be the target of the import instruction;
A notification means for notifying a predetermined warning when it is confirmed that the individual data is included in the data targeted for the import instruction,
Import device. When the data to be the import instruction the type data is not added, with respect to the shared area, characterized by further comprising an import means for writing data to be the import instruction,
The import apparatus according to claim 1. The storage means further includes an individual area that is a storage area provided for each user,
When the accepting unit accepts an import instruction in which the individual area is designated as an import destination, it is confirmed that the individual data is included based on the type data added to the data that is the target of the import instruction. In this case, the data processing apparatus further includes an import unit that writes data that is a target of the import instruction to the individual area without notifying the warning .
The import apparatus according to claim 1. A method executed by an import device having storage means for importing data ,
In the storage means, a plurality of users to form a covalent area is at least accessible storage area,
When receiving the import instruction that the shared area is designated as a destination,
Based on the type data added to the data including the destination information that is the target of the import instruction, it is confirmed whether the data that is the target of the import instruction includes individual data that is individually used for each user. When it is confirmed that the individual data is included in the data to be instructed, a predetermined warning is notified by a predetermined notification means ,
Import method. The import device is
When the data to be the import instruction the type data is not added, with respect to the shared area, and writes the data subject to said import instruction,
The import method according to claim 4. The import device is
In the storage means, an individual area which is a storage area provided for each user is further formed,
When it is confirmed that the individual data is included based on the type data added to the data that is the target of the import instruction when receiving the import instruction instructed by the individual area as the import destination, Write the data subject to the import instruction to the individual area without notifying the warning ,
The import method according to claim 5.

Images