JP6520277B2 - Information processing apparatus and program - Google Patents

Description

  The present invention relates to an information processing apparatus and program.

  Conventionally, in an image forming apparatus having a printer function and a scanner function, data (scan job data) transmitted from a user terminal (scan data) and data read by the scanner function (scan data) are converted into a file format and stored in an internal storage unit It is possible to save the data in the data storage unit) and transfer the saved file to another user terminal via the communication network. In recent years, an image forming apparatus connectable to a plurality of communication networks such as an intranet and the Internet has also been proposed (for example, Patent Document 1). In an image forming apparatus connectable to a plurality of communication networks, for example, communication used by a specific user via a communication network (for example, an intranet) built available in a local area or communication built available to the public It can be used by unspecified users via a network (for example, the Internet).

JP, 2011-16284, A

  However, in an image forming apparatus connectable to a plurality of communication networks, for example, when a highly confidential file is transferred to the outside through a publicly available communication network, confidential information leaks to unspecified users. There is a fear.

  An object of the present invention is to provide, in an information processing apparatus connectable to a plurality of communication networks, an information processing apparatus and a program capable of preventing information leakage of a file stored in a data storage unit.

An information processing apparatus according to claim 1 of the present invention is an information processing apparatus including a plurality of communication interfaces individually connected to each of a plurality of communication networks, and is used when files are stored in a data storage unit. First determining means for determining the communication interface, adding means for adding identification information of the communication interface determined by the first determining means to the file, and the communication added to the file by the adding means When changing means for changing the identification information of the interface according to the user's operation, receiving means for receiving a transfer request for the file stored in the data storage unit, and when the transfer request is received by the receiving means a second determination means for determining the communication interface via the said off by said applying means A first identification information granted the communication interface yl, which is determined by the second determination means, based on the second identification information of the communication interface via the transfer request for the file, of the file And transfer control means for executing or prohibiting transfer.

The information processing apparatus according to claim 2 of the present invention, in the structure according to claim 1, wherein the transfer control means, when the first identification information and the second identification information indicates the same said communication interface, When the file transfer is performed via the communication interface via the transfer request, and the first identification information and the second identification information indicate different communication interfaces, the communication interface via the transfer request Prohibit the transfer of the file via

The information processing apparatus according to claim 3 of the present invention, in the structure according to claim 1, wherein the plurality of communication interfaces are connected individually to each of the plurality of communication networks security levels are different from each other, a first communication interface Is connected to the first communication network, and the second communication interface is connected to the second communication network of a security level lower than the security level of the first communication network, and the transfer control means is configured to transmit the first identification information When the first communication interface is indicated, transfer of the file is performed via the first communication interface via the transfer request, and transfer of the file via the second communication interface via the transfer request is performed. Prohibit the first identification information from the second communication If showing a face, the transfer of the file via the first communication interface in which the transfer request has traversed, and executes the transfer of the files over the second communication interface, wherein the transfer request has traversed.

The information processing apparatus according to claim 4 of the present invention, in the structure according to claim 1, permission of transfer of the file to be determined by a combination of the first identification information and the second identification information is set in advance There is.

A program according to claim 5 of the present invention determines a computer having a plurality of communication interfaces individually connected to each of a plurality of communication networks, the communication interface through which a file is stored in a data storage unit First judging means for giving the identification information of the communication interface judged by the first judging means to the file, the user's operation of the identification information of the communication interface given to the file by the giving means Changing means for changing in response to the request, receiving means for receiving a transfer request for the file stored in the data storage unit, determining the communication interface through which the transfer request is received by the receiving means second determining means, and, assigned to the file by the application means Wherein the first identification information of a communication interface that, the determined by the second determination means, based on the second identification information of the communication interface via the transfer request for the file, performs the transfer of the file Or it is a program for functioning as a transfer control means to prohibit. This program may be stored in a computer readable information storage medium such as a CD-ROM or a DVD-ROM.

According to the configurations of claims 1 and 5 of the present invention, in the information processing apparatus connectable to a plurality of communication networks, information leakage of the file stored in the data storage unit is prevented. Also, transfer of the file is executed or prohibited based on the identification information of the communication interface. Furthermore, it is possible to change the first identification information added to the file input to the data storage unit according to the user's operation.

According to the configuration of claim 2 of the present invention, for example, the file input to the data storage unit via the first communication interface is permitted to be transferred via the first communication interface, and is transferred via the second communication interface Is prohibited.

According to the configuration of claim 3 of the present invention, transfer of files input to the data storage unit via the communication network with high security level is prohibited via the communication network with low security level.

According to the configuration of claim 4 of the present invention, a file transfer rule is set in advance.

FIG. 1 is an overall configuration diagram of an image forming system according to an embodiment of the present invention. FIG. 2 is a functional block diagram of the image forming apparatus according to the present embodiment. It is a schematic diagram which shows the structure of a data storage part. An example of file information registered in the data information DB is shown. It is a table which shows an example of a transfer rule. It is a table which shows an example of a transfer rule. FIG. 2 is an operation flowchart of the image forming apparatus according to the present embodiment. It is a table which shows an example of a transfer rule. An example of file information registered in the data information DB is shown. It is a table which shows an example of a transfer rule. An example of file information registered in the data information DB is shown.

  One embodiment of the present invention will be described below using the drawings. The information processing apparatus of the present invention may be a general computer or an image forming apparatus. Hereinafter, an image forming apparatus will be described as an example.

  FIG. 1 is an overall configuration diagram of an image forming system (information processing system) according to the present embodiment. As shown in the figure, the image forming system 100 includes an image forming apparatus 10 and user terminals 20a and 20b used by a user. The image forming apparatus 10 and the user terminal 20a are mutually connected via a first communication network 30a, and the image forming apparatus 10 and the user terminal 20b are mutually connected via a second communication network 30b. The number of user terminals is not limited. That is, the number of user terminals connected to the first communication network 30a and the number of user terminals connected to the second communication network 30b may be one or more, respectively. . Here, for convenience, two user terminals 20a and 20b connected to the first communication network 30a and the second communication network 30b are shown. Hereinafter, when describing functions common to the user terminals 20a and 20b, it will be referred to as "user terminal 20", and when describing functions common to the first and second communication networks 30a and 30b, "communication network 30". ".

  The first communication network 30a and the second communication network 30b are communication networks independent of each other, and are not connected to each other. Here, the first communication network 30a is a communication network with a relatively high security level (secure), and the second communication network 30b is a communication network with a relatively low security level (non-secure). Suppose there is. The communication network with a high security level is, for example, an intranet such as a company LAN, and the communication network with a low security level is, for example, the Internet. An intranet is, for example, a network configured to be available to specific users in, for example, a local area (such as a company), and the Internet is, for example, a network configured to be available to a large number of unspecified users in the public. The types of communication networks to which the image forming apparatus 10 can connect are not limited to the above, and may be three or more. Also, each communication network may have different security levels or may be the same. For example, in the case where the security levels of the respective communication networks are the same, within one company, the first communication network 30a is a network built exclusively for the first division, and the second communication network 30b is the second business. It can also be a network built exclusively for the department. That is, the image forming apparatus 10 has a configuration connectable to a plurality of communication networks independent of each other.

  The user terminal 20 is a terminal device connected to the communication network 30 and used by a user. The user terminal 20 performs data communication with the image forming apparatus 10 via the communication network 30 based on the user's operation. Thus, for example, the user terminal 20 transmits a file such as document data (e.g., print job data), transmits a print command, or the like to the image forming apparatus 10 according to the user's operation. The image data (for example, scan data) read by the apparatus 10 is acquired (received). The user terminal 20 incorporates software such as a browser and an electronic mail client. The user terminal 20 is, for example, an information terminal device such as a personal computer, a PDA (Personal Digital Assistant), a smartphone, or the like. The device connected to the communication network 30 is not limited to the user terminal 20, and may be another image forming apparatus, a server, or the like.

  The image forming apparatus 10 has a general multifunction peripheral function such as a copy function, a scanner function, and a fax function. The image forming apparatus 10 according to the present embodiment may be an apparatus having at least one of the functions described above. Description of these functions is omitted because they are well known.

  The hardware configuration of the image forming apparatus 10 is also shown in FIG. The image forming apparatus 10 includes a control unit 101, a display unit 102, an input unit 103, a storage unit 104, a reading unit 105, a data storage unit 106, an output unit 107, and a communication unit 108. The image forming apparatus 10 may include an operation unit, a power switch, and the like. The control unit 101 includes a CPU (Central Processing Unit), and executes various arithmetic processing and controls each unit of the image forming apparatus 10 based on a program stored in the storage unit 104. Details of the control unit 101 will be described later.

  The display unit 102 is configured by a display device such as a liquid crystal display, and displays a result of information processing by the control unit 101 and the like. The input unit 103 is configured by an input device such as a touch panel or a button key, and receives an operation input from a user. The input unit 103 may be displayed on the display unit 102 as an electronic input device. The input unit 103 functions as a user interface (UI). The storage unit 104 is, for example, an information recording medium such as a ROM, a RAM, and a hard disk, and is an information recording medium that holds a program executed by the control unit 101. The storage unit 104 also operates as a work memory of the control unit 101, for example. Note that various memories are applicable as the storage unit 104. For example, the storage unit 104 may be realized by a storage device such as a semiconductor memory. Further, the program and various data described as being stored in the storage unit 104 in the present embodiment may be acquired from an external device via the communication unit 108 or may be acquired from an external storage medium. You may The storage unit 104 may be provided outside the image forming apparatus 10 and connected to the image forming apparatus 10 via a network.

  The reading unit 105 is configured by a scanner or the like. The reading unit 105 reads information of an object as, for example, image information (image data) by optically scanning an object such as a paper medium.

  The data storage unit 106 receives document data and image data input (sent) to the image forming apparatus 10 from the outside (user terminal 20) via the communication network 30, and electronic data (image of the image read by the reading unit 105 (image Save data etc. in file format. That is, in the data storage unit 106, print job data, scan data and the like are stored in a file format. Similar to the storage unit 104, the data storage unit 106 is configured of, for example, an information recording medium such as a ROM, a RAM, or a hard disk. The data storage unit 106 may be included in the storage unit 104 or may be provided outside the image forming apparatus 10 and connected to the image forming apparatus 10 via a network. For example, the data storage unit 106 may be configured by a data server connected to the network via the communication unit 108.

  The output unit 107 is configured by a printing unit or the like for forming an image on a medium such as a sheet. For example, when the user performs a print instruction operation, the output unit 107 prints (outputs) image data and the like on a paper medium based on the processing of the control unit 101.

  The communication unit 108 includes a plurality of communication interfaces independent of one another according to a plurality of communication networks, and performs data communication with a plurality of user terminals 20. For example, the communication unit 108 includes a first communication interface 108 a and a second communication interface 108 b. The first communication interface 108a is connected to a first communication network 30a (for example, an intranet), and the second communication interface 108b is connected to a second communication network 30b (for example, the Internet). Each communication interface is individually configured by, for example, a NIC (Network Interface Card) or the like. Although FIG. 1 shows an example in which the communication unit 108 includes two communication interfaces 108a and 108b, the number of communication interfaces included in the communication unit 108 corresponds to the number of communication networks, and 2 The number is not limited to one and may be three or more.

  FIG. 2 is a functional block diagram of the image forming apparatus 10. As illustrated in FIG. 2, the control unit 101 functionally includes a data acquisition unit 201, a first interface determination unit 202, an identification information addition unit 203, a transfer request reception unit 204, a second interface determination unit 205, and A transfer control unit 206 is included. These functions are realized by the control unit 101 executing a program stored in the storage unit 104.

  The data acquisition unit 201 is data (for example, print job data) transmitted (input) from the user terminal 20 to the image forming apparatus 10 via the communication network 30, or data of an image read by the reading unit 105 (for example, scan data). To get In addition, the data acquisition unit 201 stores the acquired data in a file format in the data storage unit 106. When the data storage unit 106 is connected to the image forming apparatus 10 via a network, the data acquisition unit 201 stores the acquired data (file) in the data storage unit 106 via the communication unit 108.

  The data storage unit 106 may include a plurality of data storage areas (folders). FIG. 3 is a schematic view showing a configuration example of the data storage unit 106. As shown in FIG. Each data storage area is configured to be able to store a plurality of files. Each data storage area may be associated with one or more user terminals 20. Also, for example, the data storage area A may store data received from the user terminal 20, and the data storage area B may store data read by the reading unit 105.

  The first interface determination unit 202 (first determination unit) determines (specifies) the type of the communication interface through which the file is stored in the data storage unit 106 (input). For example, the first interface determination unit 202 refers to an identifier (interface identifier) assigned to each communication interface, and the file passes through any communication interface of the first communication interface 108a and the second communication interface 108b. Then, it is determined whether it has been input to the data storage unit 106. A well-known method can be adopted as the determination method of the communication interface.

  The identification information attachment unit 203 (attachment unit) attaches (associates) identification information of the communication interface determined by the first interface determination unit 202 to the file stored in the data storage unit 106. Further, the identification information adding unit 203 associates the information of the file and the identification information of the communication interface with each other and registers the information in the data information DB 401.

  For example, when the data acquisition unit 201 receives data from the user terminal 20 via the communication interface, the identification information attachment unit 203 may specify the file name of the data (file), the identification information of the communication interface passed, and the date and time of reception. Various file information is registered in the data information DB 401 in association with the data (file) stored in the data storage unit 106. The identification information of the communication interface may be, for example, “NIC1” indicating the first communication interface 108 a and “NIC2” indicating the second communication interface 108 b. FIG. 4 shows an example of file (received data) information registered in the data information DB 401.

  The transfer request reception unit 204 (reception unit) receives a transfer request (access) of a file stored in the data storage unit 106 to an external device from the user terminal 20 or the input unit 103 (UI) of the image forming apparatus 10 Do. Specifically, for example, when the user A selects (accesses) the file stored in the data storage unit 106 (file name “P-A001”) to transmit to a certain user terminal 20, the transfer request is made. The receiving unit 204 receives the transfer request.

  The second interface determination unit 205 (second determination unit) determines (specifies) the type of communication interface via which the transfer request reception unit 204 receives a transfer request for the file stored in the data storage unit 106. Do. For example, based on the interface identifier, the second interface determination unit 205 determines whether the transfer request has been received by the transfer request reception unit 204 via which of the first communication interface 108 a and the second communication interface 108 b. Determine As a method of determining the communication interface, a known method can be employed as in the case of the first interface determining unit 202.

  The transfer control unit 206 is a second interface determination unit 205 corresponding to the identification information (“NIC1”, “NIC2”) of the communication interface added to the file of the data storage unit 106 by the identification information addition unit 203 and the file. The transfer of the file is executed or prohibited based on the identification information (“NIC1”, “NIC2”) of the communication interface through which the transfer request determined by the above has been determined. Specifically, the transfer control unit 206 executes or prohibits the transfer of the file in accordance with the transfer rule determined by the identification information. The transfer rule is registered in the transfer rule database (transfer rule DB) 402. The transfer rule is set in advance by the administrator. FIG. 5 is a table showing an example of the transfer rule.

  For example, when the identification information of the communication interface assigned to the file to be transferred is “NIC1”, the transfer control unit 206 determines that the identification information of the communication interface passed when the transfer request is received is “NIC1”. Executes the transfer, and prohibits the transfer if the identification information of the communication interface passed through when the transfer request is received is "NIC2". That is, transfer of the file to which “NIC1” is attached is permitted via the first communication interface 108a of “NIC1”, and transfer of the file via “NIC2” second communication interface 108b is prohibited.

  Also, for example, when the identification information of the communication interface attached to the file to be transferred is “NIC2”, the transfer control unit 206 determines that the identification information of the communication interface passed when the transfer request is received is “NIC1”. In the case, the transfer is prohibited, and the transfer is executed if the identification information of the communication interface through which the transfer request is received is “NIC2”. That is, transfer of the file to which “NIC2” is attached is permitted via the second communication interface 108b of “NIC2”, and transfer of the file via “NIC1” is prohibited.

  According to the above example, for example, in one company, the first communication network 30a connected to the first communication interface 108a is a network built exclusively for the first business unit and connected to the second communication interface 108b. If the second communication network 30b is a network built exclusively for the second division, the file stored in the data storage unit 106 from the user terminal 20 in the first division is the user in the first division. Transfer (transmission) to the terminal 20 is permitted, and transfer (transmission) to the user terminal 20 in the second division is prohibited. Similarly, the file stored in the data storage unit 106 from the user terminal 20 in the second business unit is permitted to be transferred to the user terminal 20 in the second business unit, and is transferred to the user terminal 20 in the first business unit. It is forbidden. This can reduce the risk of file information leakage.

  Further, in the above configuration, the transfer control unit 206 may execute or prohibit the transfer of the file in consideration of the security level of the communication network corresponding to the communication interface. FIG. 6 is a table showing an example of transfer rules in consideration of the security level of the communication network. Here, the case where the security level of the first communication network 30a is higher than the security level of the second communication network 30b is shown.

  For example, when the identification information of the communication interface assigned to the file to be transferred is “NIC1”, the transfer control unit 206 determines that the identification information of the communication interface passed when the transfer request is received is “NIC1”. Executes the transfer, and prohibits the transfer if the identification information of the communication interface passed through when the transfer request is received is "NIC2". That is, transfer of the file to which “NIC 1” is assigned is permitted via the first communication network 30a having a high security level, and transfer via the second communication network 30b having a low security level is prohibited.

  Further, for example, when the identification information of the communication interface attached to the transfer target file is “NIC2”, the transfer control unit 206 indicates that the identification information of the communication interface passed when the transfer request is received is “NIC1”. The transfer is executed for both the case and “NIC2”. That is, the transfer of the file to which “NIC 2” is attached is also performed via any communication network 30 a, 30 b. This makes it possible to prevent confidential documents with high security levels from being transmitted to the outside via communication networks with low security levels. For this reason, the risk of information leakage can be reduced. In addition, since a document with a low security level (for example, a shared document) can be transmitted via any communication network regardless of the security level, the convenience can be improved. The security level is not limited to two levels ("high" and "low"), and may be three levels ("high", "medium", "low") or more.

  FIG. 7 is an operation flowchart of the image forming apparatus 10. An example of the operation (file transfer processing) of the image forming apparatus 10 will be described with reference to FIG.

  First, the data acquisition unit 201 acquires data (file) transmitted from the user terminal 20 to the image forming apparatus 10 (S101). The data acquisition unit 201 stores the acquired data in the data storage unit 106. Next, the first interface determination unit 202 determines the type of the communication interface through which (when the file is stored in the data storage unit 106) (S102). Here, the first interface determination unit 202 determines whether the communication interface is the first communication interface 108 a or the second communication interface 108 b.

  Next, the identification information addition unit 203 adds the identification information of the communication interface determined by the first interface determination unit 202 to the file stored in the data storage unit 106 (S103). For example, when the communication interface through which the data passes is the first communication interface 108a, the identification information adding unit 203 adds identification information "NIC1" to the file of the data, and the communication interface through which the data passes is the first. In the case of the second communication interface 108b, the identification information adding unit 203 adds identification information "NIC2" to the file of the data.

  Next, the transfer request receiving unit 204 receives a transfer request for the file stored in the data storage unit 106 from the user terminal 20 or the input unit 103 of the image forming apparatus 10 (S104).

  Next, the second interface determination unit 205 determines the type of communication interface through which the transfer request reception unit 204 receives the transfer request (S105). Here, the second interface determination unit 205 determines whether the communication interface corresponding to the transfer request is the first communication interface 108 a or the second communication interface 108 b.

  Next, the transfer control unit 206 determines the identification information (“NIC1”, “NIC2”) of the communication interface assigned to the file, and the identification information (“NIC1”) of the communication interface through which the transfer request corresponding to the file passes. , “NIC 2”), according to a predetermined transfer rule (S106), the transfer of the file is executed (S107) or prohibited (S108).

  The image forming apparatus 10 can reduce the risk of information leakage of the file stored in the data storage unit 106, for example, by the above processing. Further, by setting the transfer rule, the unified rule can be applied to all the files stored in the image forming apparatus 10. Therefore, the configuration of the apparatus is simplified as compared with the configuration in which transfer control is performed for each file. can do. In addition, setting omission for each file can be prevented.

  Here, the files stored in the data storage unit 106 include files to which identification information of the communication interface is not added. For example, when the data storage unit 106 is provided in the image forming apparatus 10, the file (scan data) of the image read by the reading unit 105 is directly stored in the data storage unit 106 without passing through the communication interface. Therefore, identification information of the communication interface is not given to the scan data. In this case, for example, as shown in FIG. 8, it is possible to set a rule that prohibits transfer via any communication interface.

  In the above case, the user may set identification information, and the transfer control unit 206 may control the transfer of the file based on the transfer rule set by the user. Preferably, the setting of identification information by the user can be performed by the input unit 103 of the image forming apparatus 10. Thus, for example, a user who can directly operate the image forming apparatus 10 can transfer the file of the data storage unit 106 to a desired transfer destination.

  Further, the identification information adding unit 203 may add the identification information of the communication interface to the file stored in the data storage unit 106 based on the user's instruction. Specifically, when transmitting a file from the user terminal 20 to the image forming apparatus 10, the user of the user terminal 20 sets permission for file transfer on the operation screen.

  For example, the user permits both transfer via the first communication network 30a connected to the first communication interface 108a and transfer via the second communication network 30b connected to the second communication interface 108b. In this case, “Shareable” is selected on the above operation screen. The data acquisition unit 201 receives, from the user terminal 20, a file (data) and the content of the operation (here, “shareable”) by the user. The identification information adding unit 203 adds identification information of the communication interface to the file stored in the data storage unit 106 based on the content of the operation. Here, the identification information adding unit 203 adds “shared” (“NIC1”, “NIC2”) to the file (for example, “PA002”). FIG. 9 shows an example of file (received data) information registered in the data information DB 401. The transfer control unit 206 executes or prohibits the transfer of the file according to the transfer rule corresponding to the file. Here, for example, as shown in FIG. 10, in the transfer rule registered in the transfer rule DB 402, when the identification information of the communication interface passed through when the transfer request is received is “NIC1” or “NIC2”. In both cases, a rule to execute (permit) transfer is set. Thereby, when the user wants to share the file among the user terminals, it is possible to execute the transfer process according to the user's request. Therefore, the convenience of the image forming apparatus 10 can be improved. When the user selects “not shareable” on the operation screen displayed on the user terminal 20, the files stored in the data storage unit 106 are those of the communication interface determined by the first interface determination unit 202. Identification information may be given (see FIG. 4).

  Further, the identification information adding unit 203 adds identification information of the communication interface to the file stored in the data storage unit 106 based on the user's instruction input to the input unit 103 (UI) of the image forming apparatus 10. May be For example, for the scan data of the image read by the reading unit 105, the user may select “NIC1”, “NIC2” or “sharing” of the identification information in the input unit 103. The identification information adding unit 203 adds the identification information selected by the user to the scan data.

  Further, the identification information adding unit 203 may have a function of changing the identification information of the communication interface registered in the data information DB 401 based on the user's instruction. That is, the identification information addition unit 203 may have a function as an identification information change unit (change unit). For example, when the user performs an operation of changing the identification information “NIC1” of the communication interface already assigned to the file having the file name “P-A001” to “NIC2” on the operation screen of the user terminal 20, The identification information adding unit 203 changes “NIC1” to “NIC2”. FIG. 11 illustrates an example of changed information (file name “PA001”) in the data information DB 401. Thereby, the transfer destination terminal of the file can be changed according to the user's request.

  In the above description, the communication interface through which the file is stored in the data storage unit 106, and the communication interface through which the transfer request is received by the transfer request reception unit 204 is determined. The image forming apparatus 10 according to the present embodiment is not limited to this. For example, when the image forming apparatus 10 determines the type of communication network through which the file is stored in the data storage unit 106, and when the transfer request is received by the transfer request reception unit 204. A second communication network determination unit may be included to determine the type of communication network that has passed through. In this case, the identification information attachment unit 203 attaches the identification information of the communication network determined by the first communication network determination unit to the file. Further, the transfer control unit 206 is configured to transmit the first identification information of the communication network attached to the file by the identification information attachment unit 203 and the second communication network determined by the second communication network determination unit corresponding to the file. The transfer of the file is executed or inhibited based on the identification information. Thereby, the same effect as the effect described above can be obtained.

  The determination of the type of communication network can be performed by the following known method. For example, the first communication network determination unit and the second communication network determination unit perform a connection test (for example, a connection test by Ping) as to whether the communication interface can connect to a specific communication destination on the Internet, and this connection is made. If the test is successful, the type of communication network connected to the communication interface is determined to be the Internet. In addition, the first communication network determination unit and the second communication network determination unit perform a connection test as to whether or not the communication interface can connect to a specific communication destination on the intranet, and when the connection test succeeds, the communication is performed. Determine the type of communication network connected to the interface as an intranet. Also, the first communication network determination unit and the second communication network determination unit may determine the type of communication network connected to the communication interface based on the IP address assigned to the communication interface. The IP address is assigned by a DHCP server (not shown) connected via a communication network (Internet or intranet).

  100 image forming system 10 image forming apparatus 20 user terminal 30a first communication network 30b second communication network 101 control unit 102 display unit 103 input unit 104 storage unit 105 reading unit 106 data storage unit , 107 output unit 108 communication unit 108 a first communication interface 108 b second communication interface 201 data acquisition unit 202 first interface determination unit 203 identification information attachment unit 204 transfer request reception unit 205 second interface determination Part, 206 transfer control part, 401 data information DB, 402 transfer rule DB.

Claims (5)

An information processing apparatus comprising a plurality of communication interfaces individually connected to each of a plurality of communication networks, the information processing apparatus comprising:
First determining means for determining the communication interface through which the file is stored in the data storage unit;
Assigning means for assigning the identification information of the communication interface determined by the first determination means to the file;
Changing means for changing the identification information of the communication interface given to the file by the giving means according to the user's operation;
Receiving means for receiving a transfer request for the file stored in the data storage unit;
A second determination unit that determines the communication interface through which the transfer request is received by the reception unit;
Based on the first identification information of the communication interface assigned to the file by the assignment means , and the second identification information of the communication interface via the transfer request for the file determined by the second determination means Transfer control means for executing or prohibiting the transfer of the file;
An information processing apparatus comprising: The transfer control means
When the first identification information and the second identification information indicate the same communication interface, transfer of the file via the communication interface via the transfer request is performed.
When the first identification information and the second identification information indicate different communication interfaces, the transfer of the file via the communication interface via the transfer request is prohibited.
The information processing apparatus according to claim 1, characterized in that. The plurality of communication interfaces are individually connected to each of a plurality of communication networks having different security levels,
The first communication interface is connected to the first communication network, and the second communication interface is connected to the second communication network with a security level lower than the security level of the first communication network,
The transfer control means
When the first identification information indicates the first communication interface, transfer of the file is performed via the first communication interface via the transfer request, while the second communication interface via the transfer request is Prohibit the transfer of the file via
When the first identification information indicates the second communication interface, transfer of the file via the first communication interface via the transfer request, and transmission via the second communication interface via the transfer request Execute the transfer of the file
The information processing apparatus according to claim 1, characterized in that. Permit or no transfer of the file, which is determined by a combination of the first identification information and the second identification information, is set in advance.
The information processing apparatus according to claim 1, characterized in that. A computer comprising a plurality of communication interfaces individually connected to each of a plurality of communication networks;
First determining means for determining the communication interface through which the file is stored in the data storage unit;
An assigning unit that assigns the identification information of the communication interface determined by the first determining unit to the file;
Changing means for changing the identification information of the communication interface given to the file by the giving means according to the user's operation;
Receiving means for receiving a transfer request for the file stored in the data storage unit;
A second determination unit that determines the communication interface through which the transfer request is received by the reception unit;
Based on the first identification information of the communication interface assigned to the file by the assignment means , and the second identification information of the communication interface via the transfer request for the file determined by the second determination means Transfer control means for executing or prohibiting the transfer of the file;
Program to function as.

Images