JP6710176B2 - Image forming apparatus and user authentication method - Google Patents

Description

The present invention relates to an image forming apparatus and a user authentication method, and more particularly, to an image forming apparatus that inputs a user ID and a password to perform user authentication and a user authentication method by the apparatus.

In recent years, various methods have been proposed to improve security in user authentication. Even in an image forming apparatus such as an MFP (digital multi-function peripheral), user authentication is performed using a password or an ID card in order to identify a user who uses the apparatus, and it is restricted so that an unspecified number of people cannot use the apparatus. Is being done. In addition, in order to prevent leakage of image data including confidential information, a password is added to the image data filed inside the device, and if the passwords match, printing of the image data or data transmission to the outside, etc. Are allowed.

Regarding the technology of user authentication, for example, in Patent Document 1, a technology of preventing unauthorized access due to impersonation by a third party is described with respect to user authentication of a client server system. This is because the client-side user authentication unit authenticates the first user with the client-side user ID and the client-side password acquired from the client application. The second user authentication is performed using the corresponding password, and if the authentication is successful, the server-side user authentication unit is configured to perform the third user authentication using the server-side user ID and the server-side password.

JP-A-2002-328899

According to the technique described in Patent Document 1, security can be improved by performing user authentication multiple times. However, in the case of password authentication, in order to prevent the user from forgetting the password, There are cases where this password is a string of numbers that is easy to guess, such as a birthday or a car license plate. With such a numerical string, the password will be known to a third party relatively easily. Also, even if a third party does not know the password, there is a possibility that the properly input numerical string happens to match the password. As described above, in the case of password authentication, the security is not sufficient.

Then, in an image forming apparatus having a filing function, image data including confidential matters is stored. Even in such an image forming apparatus, user authentication is performed by using a password. However, by using the password, even a user who does not have access authority to the image data may be able to access the image data. Therefore, improvement of security is desired from the viewpoint of preventing leakage of confidential data to the outside.

The present invention has been made in view of the above circumstances, and an image forming apparatus capable of preventing leakage of image data and realizing high security with a simple configuration when performing user authentication, and user authentication by the apparatus. The purpose is to provide a method.

According to the invention,
An image forming apparatus including a storage unit for registering image data,
First authentication means for authenticating the user based on the user ID and the login password input by the user;
Whether the user who has been successfully authenticated by the first authenticating unit has access authority to any of the image data registered in the storage unit based on the user ID input by the user Determination means for determining whether or not,
For any of the user is determined to have access to the image data registered in by Ri said storage means to said determining means, for the user ID and the image data input by the user 1 Based on a set of filing passwords associated with one-to-one or many-to-one, to one or more of the image data registered in the storage means, the image data corresponding to the user ID and the filing password. A second authenticating means for authenticating whether or not the user has an access right,
When the determination unit determines that the user has the access authority , the second authentication unit displays an authentication information input screen for inputting the user ID and the filing password from the user, An image forming apparatus is provided in which the authentication information input screen is hidden when the determination unit determines that the user does not have the access authority.
Further, according to the present invention,
A user authentication method by an image forming apparatus having a storage unit for registering image data,
A first authentication step of authenticating the user based on the user ID and the login password entered by the user;
Whether the user who has been successfully authenticated by the first authentication step has access authority to any of the image data registered in the storage unit based on the user ID input by the user A determination step of determining whether or not,
One-to-one correspondence with the user ID and the image data input by the user with respect to the user who is determined to have the access right to any of the image data registered in the storage means in the determining step. Alternatively, based on a set of filing passwords associated with many-to-one, access authority to one or more of the image data registered in the storage means corresponding to the user ID and the filing password. A second authentication step for authenticating whether or not
In the second authentication step, when it is determined in the determination step that the user has the access authority, an authentication information input screen for inputting the user ID and the filing password from the user is displayed, A user authentication method is provided in which the authentication information input screen is hidden when it is determined that the user does not have the access authority in the determination step.

According to the present invention, when the user who uses the image forming apparatus is authenticated, the authentication information input for accessing the image data is input depending on whether or not the authenticated user has the access right to the image data. Since display/non-display of the screen can be controlled, it is possible to prevent leakage of image data and realize high security with a simple configuration.

FIG. 1 is a diagram showing a configuration example of an image forming apparatus according to an embodiment of the present invention. 2 is a block diagram for functionally explaining the image forming apparatus shown in FIG. 1. FIG. It is a figure which shows an example of the user registration table used for the user authentication process by a 1st authentication means. It is a figure which shows an example of an image data registration table. It is a figure which shows an example of the image data list displayed according to a user's access level. FIG. 9 is a flowchart for explaining an example of a user authentication method by the image forming apparatus of the present invention. It is a figure which shows an example of the user authentication screen in 1st user authentication. It is a figure which shows the state in which the user ID and the password were input into the user authentication screen shown in FIG. It is a figure which shows an example of an authentication completion screen. It is a figure which shows an example of an authentication error screen. It is a figure which shows an example of the password input screen in a 2nd user authentication. It is a figure which shows an example of the screen which displayed the message for notifying a user that there is no access authority. FIG. 9 is a flowchart for explaining an example of a process of registering image data in the image forming apparatus according to the present invention. FIG. 6 is a diagram for explaining an example of a process of registering image data from a user's PC in the image forming apparatus.

Preferred embodiments of an image forming apparatus of the present invention and a user authentication method by the apparatus will be described below with reference to the accompanying drawings.

FIG. 1 is a diagram showing a configuration example of an image forming apparatus according to an embodiment of the present invention, in which 1 denotes an image forming apparatus. The image forming apparatus 1 is a digital color type image forming apparatus, and is roughly divided into an image reading unit 100 and an image forming unit 200. The image forming apparatus 1 may be a copying machine, a printer, or an MFP (digital multi-function peripheral), but has a filing function for image data.

The image reading unit 100 includes a document table 105, an optical scanner unit 120, and a double-sided automatic document feeder (RADF) 130. A document to be read is placed on the document table 105. The scanner unit 120 is arranged below the document table 105, and reads an image of a document placed on the document table 105. The RADF 130 is arranged above the document table 105, and sequentially conveys the document to be read to the document table 105.

The scanner unit 120 further includes a first scanning unit 122, a second scanning unit 124, an optical lens 126, and a CCD (Charge Coupled Device) line sensor 128. The first scanning unit 122 reciprocates along the lower surface of the document table 105. At this time, the first scanning unit 122 moves at a predetermined scanning speed while maintaining a constant distance with respect to the lower surface of the document table 105. The first scanning unit 122 includes an exposure lamp that exposes the surface of the original image, and a first mirror that polarizes a reflected light image from the original in a predetermined direction.

The second scanning unit 124 includes a second mirror and a third mirror for guiding the reflected light image from the document, which is polarized by the first mirror in the first scanning unit 122, toward the CCD line sensor 128. The optical lens 126 reduces the reflected light image from the document deflected by the second lens and the third lens in the second scanning unit 124, and forms the reduced light image at a predetermined position on the CCD line sensor 128. ..

The CCD line sensor 128 sequentially photoelectrically converts the formed optical image and outputs it as an electric signal. The CCD line sensor 128 is a three-line color CCD capable of reading a black-and-white image or a color image and outputting line data obtained by color separation into R (red), G (green), and B (blue) color components. .. The read image data converted into an electric signal by the CCD line sensor 128 is further transferred to an image processing unit 150 (FIG. 2) described later and subjected to image processing in a predetermined procedure.

The image forming unit 200 is roughly composed of a paper feeding unit, an image generating unit, and a paper discharging unit. A paper feed cassette 211 and a manual feed tray 250 are provided in the paper feed unit. Although one sheet feeding cassette 211 is illustrated in FIG. 1, there may be a plurality of sheet feeding cassettes. A paper transport path is formed between the paper feed cassette 211, the image generation unit, and the paper discharge unit. The paper transport path is formed by the operation of the transport roller 251, and the paper P is transported to the transfer transport belt mechanism 213. Here, a pair of registration rollers 212 is arranged on the downstream side of the sheet feeding cassette 211 and on the upstream side of the image forming unit in the sheet conveying path. The registration roller 212 adjusts the timing of guiding the paper P to the image generation unit (transfer/conveying belt mechanism 213).

Further, the paper P may be fed from the manual feed tray 250. The paper P placed on the manual feed tray 250 is carried to the transfer/transport belt mechanism 213 by the transport rollers 251. Here, the manual feed tray 250 is provided with a paper sensor 400 that detects the presence or absence of paper. The sheet sensor 400 detects the presence or absence of a sheet placed on the manual feed tray 250 and the length of the sheet, and is used for detecting a standard sheet size.

In the present embodiment, the case where the manual feed tray 250 is used as a method for feeding the paper P as the manual feed paper will be described, but the same applies to the case where the paper feed cassette 211 is used.

The image generating unit includes four image forming stations Pa, Pb, Pc, Pd, and a transfer/conveying belt mechanism 213 arranged on the opposite side of the image forming stations Pa, Pb, Pc, Pd with the paper conveying path interposed therebetween. ing.

The image forming stations Pa, Pb, Pc, and Pd have substantially the same structure. The image forming stations Pa, Pb, Pc and Pd are provided with photoconductor drums 222a to 222d as image carriers. Further, chargers 223a to 223d, laser beam scan units 227a to 227d, developing devices 224a to 224d, transfer dischargers 225a to 225d, and cleaning devices 226a to 226d are arranged around the photosensitive drums 222a to 222d. ..

The chargers 223a to 223d uniformly charge the peripheral surfaces of the photoconductor drums 222a to 222d. The laser beam scan units 227a to 227d include polygon mirrors 240a to 240d, fθ lenses 241a to 241d, mirrors 242a to 242d, and mirrors 243a to 243d. The laser beam scan units 227a to 227d form electrostatic latent images on the peripheral surfaces of the photoconductor drums 222a to 222d based on the image data input from the image reading unit 100. The developing devices 224a to 224d supply a developer to the electrostatic latent images formed on the peripheral surfaces of the photoconductor drums 222a to 222d to form a developer image. The transfer dischargers 225a to 225d transfer the developer images formed on the peripheral surfaces of the photoconductor drums 222a to 222d to the paper P on the paper transport path. The cleaning devices 226a to 226d remove the developer remaining on the photoconductor drums 222a to 222d.

The transfer/transport belt mechanism 213 includes a drive roller 214, a driven roller 215, and a transfer/transport belt 216 stretched around a plurality of rollers including these rollers. The transfer/transport belt mechanism 213 guides the paper P to the downstream side of the paper transport path while electrostatically attracting the paper P to the transfer/transport belt 216 rotating counterclockwise in the figure.

A fixing device 217, a switching gate 218, and a paper discharge roller 219 are arranged downstream of the transfer/transport belt mechanism 213 in the paper transport path. The fixing device 217 fixes the unfixed developer image that is attached to the paper P and is fixed on the paper P. The switching gate 218 switches the conveyance direction of the paper P. Specifically, the switching gate 218 selectively switches the sheet P conveyed through the sheet conveyance path to either the sheet discharge roller 219 or the switchback conveyance path 221. The paper discharge roller 219 discharges the paper P to the outside of the image forming apparatus 1. A paper discharge tray 220 for accommodating the paper P discharged from the paper discharge rollers 219 is arranged outside the image forming apparatus 1.

FIG. 2 is a block diagram for functionally explaining the image forming apparatus 1 shown in FIG. The image forming apparatus 1 includes a CPU 10, a ROM 20, a RAM 30, an operation panel 40, a communication unit 70, a network I/F 80, an image reading unit 100, and an image forming unit 200.

The CPU 10 is a control unit that realizes each function by reading and executing various programs and data stored in the ROM 20. It should be noted that the CPU 10 can realize various functions by programs, and for example, the functions of the image processing unit 150 described later may be realized by the CPU 10.

In the image reading unit 100, the scanner unit 120, the image storage unit 160, and the image reading control unit 170 are connected to the image processing unit 150. The image data read by the scanner unit 120 is processed by the image processing unit 150 and temporarily stored in the image storage unit 160. Then, when the reading of the original is completed, it is output to the RAM 30. The image storage unit 160 is composed of an HDD (hard disk drive) or the like, and image data is filed in the image storage unit 160. The scanner unit 120, the image processing unit 150, and the image storage unit 160 function under the control of the image reading control unit 170.

The image forming unit 200 is a functional unit that forms and outputs an image of the read image data. The image forming unit 200 prints the read image data on the paper P and outputs it from the image forming apparatus 1.

The ROM 20 stores programs and data necessary for the operation of the image forming apparatus 1. The RAM 30 is a volatile memory that temporarily stores image data and the like. The image read by the image reading unit 100 is output to and stored in the RAM 30.

The operation panel 40 includes a display unit 50 and an operation unit 60, and is a functional unit used when the user operates the image forming apparatus 1. The display unit 50 can perform a necessary display for the user, and is configured by, for example, an LCD (Liquid Crystal Display) or the like. The operation unit 60 is a functional unit that receives input of commands and settings from the user. For example, it is composed of various operation buttons and a touch panel.

The communication unit 70 is composed of an antenna group for communicating with an ID card 71 owned by each user, detects this when the ID card 71 approaches, and stores the authentication information (user ID) stored in the ID card 71. , Password, etc.) can be read.

The network I/F 80 is a communication interface that connects to an information processing device such as a PC (personal computer) used by a user via a communication line such as a LAN (Local Area Network).

A main characteristic part of the present invention is to prevent leakage of image data and realize high security with a simple configuration when performing user authentication. As a configuration for this, the image forming apparatus 1 includes an image storage unit 160 corresponding to a storage unit for registering image data, a first authenticating unit for authenticating a user who uses the image forming apparatus 1, and an authenticated user. In contrast to the above, a determination unit that determines whether or not the user has access authority to the image data, and a second authentication unit that authenticates the user who accesses the image data based on the determination result by the determination unit. When the determination unit determines that the user has access authority, the second authentication unit displays an authentication information input screen (screen of FIG. 11 described later) for inputting the user authentication information, and the determination unit When it is determined that the user does not have the access authority, the authentication information input screen is hidden. The first authenticating unit and the second authenticating unit are realized by the CPU 10 and the display unit 50, and the judging unit is realized by the CPU 10.

Specifically, a program for causing a computer to execute the first authenticating unit, the determining unit, and the second authenticating unit is stored in the ROM 20 or the image storage unit 160, and the CPU 10 loads the program in the RAM 30 when the program is executed. Each of the above means can be realized by reading and executing.

FIG. 3 is a diagram showing an example of a user registration table used for user authentication processing by the first authentication means. This user registration table can be stored in the ROM 20 or the image storage unit 160. As described above, the user who uses the image forming apparatus 1 needs to be registered as a user in advance, and as the user information, for example, a user name, an ID code (corresponding to the user ID), a password, a group name to which the user belongs ( A group ID), an electronic mail address (not shown), a mobile phone number, etc. are registered. When the user who uses the image forming apparatus 1 inputs the user ID and the password, the first authentication unit refers to the user registration table in FIG. 3, and if there is the corresponding user ID and password, the user ID and the password are input. The user who inputs the password is authenticated as a user who can use the image forming apparatus 1.

In addition, the first authentication means, when registering the image data in the image storage unit 160, performs user authentication of the user who registers the image data. Then, the first authentication means identifies the group ID of the group to which the user belongs from the user registration table of FIG. 3 based on the user ID input at the time of user authentication. For example, if the user ID is the user A of “12345”, the group ID is specified as “group A”. The image storage unit 160 registers the user ID and group ID of the user authenticated by the first authentication means in association with the image data. The image data registration table at this time is shown in FIG.

The image data registration table of FIG. 4 is stored in the ROM 20 or the image storage unit 160. The user can register the image data created by the PC or the image data read by the image forming apparatus 1 in the image forming apparatus 1. At this time, the image data is registered in association with, for example, a registered file name, a registered user name, a user ID, a password, a group name to which the registered user belongs, and a filing password described later. Then, the determination means refers to this image data registration table to determine whether or not there is an access right to the image data registered in the image storage unit 160, the user ID or group of the user authenticated by the first authentication means. It can be determined based on the ID.

For example, when the user ID of the user authenticated by the first authentication means is registered in the image data registration table, it is determined that this user has the access authority to the image data, while the user ID Is not registered in the image data registration table, it is determined that this user has no access authority to the image data. In the example of FIG. 4, it is determined that users A, B, C, and D have access authority, and users other than users A, B, C, and D have no access authority. At this time, when the second authentication means determines that the user does not have the access right by the determination means and hides the authentication information input screen shown in FIG. 11 described later, as shown in FIG. 12 described later, A message for notifying the user that there is no access authority is displayed on the display unit 50.

If the group ID of the user authenticated by the first authentication means is registered in the image data registration table, it is determined that this user has the access authority to the image data, while the group ID If is not registered in the image data registration table, it may be determined that this user is not authorized to access the image data. In the example of FIG. 4, since the users A, B, C, and D all belong to the “group A”, it is determined that they have access authority. On the other hand, in the case of a user (referred to as user E) who is registered in the user registration table of FIG. 3 and not registered in the image data registration table of FIG. 4, if user E belongs to “group A”, this “ Since the group A" is registered in the image data registration table by another user, it is determined that the user E also has the access authority to the image data. The group to which the user E belongs can be specified from the user registration table shown in FIG.

When the determination unit determines that the user has access authority, the second authentication unit causes the display unit 50 to display an authentication information input screen (FIG. 11) for inputting the authentication information of the user, and the second authentication unit Perform user authentication. The password used for the second user authentication may be the same as the password used for the first user authentication, but a different password may be set for filing access. In the example of FIG. 4, the password used for the second user authentication is set as a “filing password” separately from the password used for the first user authentication. By changing the password in this way, the security level can be further improved.

This "filing password" can be given for each image data or for each image data when the image data is registered. When the “filing password” is given to each of a plurality of image data, for example, a common password may be given to each group to which the user belongs. In the example of FIG. 4, a common password is given to a plurality of image data registered by the users of "group A". In this case, in the second user authentication, when the user A inputs the user ID "12345" and the filing password "○○○○○", all the image data associated with "group A" as the belonging group You can display a list.

Here, when the user is authenticated by the second user authentication, the display unit 50 displays a list of image data accessible by this user, but various ways of displaying the image data list can be considered. For example, in FIG. 4, as the image data accessible by the user A, only “data001” and “data002” registered by the user A may be displayed. In this case, the image data having the user ID “12345” of the user A is searched from the image data included in the image data registration table of FIG. 4, and the result is displayed. Therefore, the image data of users other than the user A are not displayed.

Further, all “data001” to “data005” associated with the “group A” to which the user A belongs may be displayed. In this case, the image data having the group ID “group A” of the user A is searched from the image data included in the image data registration table of FIG. 4, and the result is displayed. Therefore, the image data of other users in the same group as the user A are also displayed. The user may set in advance in the image forming apparatus 1 whether this image data list is displayed in units of users or groups.

In the image data registration table shown in FIG. 4 described above, both the user ID and the group ID are associated with the image data, but only one of these associations may be made. This can be done by the user's instruction when registering the image data. When the image forming apparatus 1 is set to display the image data list on a group-by-group basis, only the user ID is associated with the image data of a certain user, and the group ID is not associated. It is possible not to display the image data of the user in the image data list of the user.

For example, in FIG. 4, it is assumed that the group ID “group A” is not associated with “data001” and “data002” registered by the user A. When the user B displays the image data list in units of groups, the image data having the group ID “group A” of the user B is searched. Will not be searched because is not associated with. Therefore, “data001” and “data002” registered by the user A are not displayed in the image data list of the user B. The same applies to the other users C and D.

Further, the access level to the image data may be given to the user ID used for user authentication by the second authentication means. In the second authentication means, when the determination means determines that the user has the access right and the authentication information input screen is displayed, the access level to the image data is based on the user ID input in the authentication information input screen. And a list of image data accessible by the user is displayed according to the determined access level.

In FIG. 4, a case where the same user ID is used for the first user authentication and the second user authentication will be described. For example, if the highest digit of the user ID is "1", it means that the manager is a manager or above, and if the number is "5", it means that the employee is a general employee. Define it. In the example of FIG. 4, it can be seen from the user ID that user A is a manager and users B to C are general employees. The second authentication means determines the access level to the image data based on the above user ID. More specifically, the user A has a user ID of “12345” and the highest digit is “1”, so it is determined that the access level is high, while the user B has a user ID of “54321”. ", and the highest digit is "5", it is determined that the access level is low. Here, it is assumed that the image data registered by the user A includes confidential matters.

FIG. 5 is a diagram showing an example of the image data list according to the access level of the user. In the case of the user A determined to have a high access level, as shown in FIG. 5A, all image data associated with “group A” is displayed, while the user determined to have a low access level In the case of B, as shown in FIG. 5B, among the image data associated with “group A”, the image data registered by the user A is hidden and the other image data is displayed. Thus, by displaying the filed image data according to the job title, access to the image data including confidential matters can be restricted, so that the security can be enhanced.

FIG. 6 is a flow chart for explaining an example of the user authentication method by the image forming apparatus 1 of the present invention. FIG. 6A is a flow for explaining an example of the first user authentication process, and FIG. 6B is a flow for explaining an example of the second user authentication process.

In FIG. 6A, first, the image forming apparatus 1 displays a user authentication screen (initial screen) as shown in FIG. 7 on the display unit 50, and prompts the user to input the user ID and password. It is determined whether the user has input the user ID and the password using the operation unit 60 or the ID card 71 (step S1), and as shown in FIG. 8, the user ID and the password are input on the user authentication screen. When the determination is made (in the case of YES), the image forming apparatus 1 performs user authentication based on this (step S2). If it is determined in step S1 that the user ID and password are not input (NO), the process shifts to the standby state in step S1.

Next, the image forming apparatus 1 determines whether or not the user authentication is successful (step S3), and if the user authentication is successful (YES), the image forming apparatus 1 displays the authentication completion screen shown in FIG. Is displayed (step S4). Further, in step S3, when the user authentication is not successful (in the case of NO), the screen shown in FIG. 10 is displayed, and an authentication error display such as “Enter registered ID and password” is displayed. The operation is performed (step S5), and a standby state is entered in step S1.

As described with reference to FIG. 6A, when the user authentication is successfully performed by the first user authentication process, the screen shown in FIG. 9 is displayed, and the second user authentication process described below with reference to FIG. I do. In FIG. 9, the operation unit 60 includes a function selection button 61 for selecting a printer function, a fax/image transmission function, a copy function, a filing button 62 for accessing image data, and a number button. It is composed of a ten-key group 63, an all cancel button 64, a color copy start button 65, and a monochrome copy start button 66.

In FIG. 6B, the image forming apparatus 1 determines whether the filing button 62 shown in FIG. 9 has been pressed by the user (step S11), and when it is determined that the filing button 62 has been pressed (YES). ), the attribute data of the filed image data is read from the image data registration table of FIG. 4 (step S12), and the user attribute is read from the user registration table of FIG. 3 (step S13). Then, the image forming apparatus 1 determines whether or not the user can access the image data (step S14). This can be determined by, for example, whether or not the user ID of the user or the group ID to which the user belongs is registered in the image data registration table of FIG. If it is not confirmed in step S11 that the filing button 62 has been pressed (NO), the standby state is entered in step S11.

Then, when determining in step S14 that the user can access the image data (YES), the image forming apparatus 1 displays a password input screen as shown in FIG. 11 (step S15). If it is determined in step S14 that the user is not able to access the image data (NO), the password input screen shown in FIG. 11 is hidden, and as shown in FIG. A message for notifying the user is displayed (step S16), the process returns to step S11, the screen shown in FIG. 9 is displayed, and the process waits for an input instruction of other processing.

Next, the image forming apparatus 1 determines whether or not the user ID and password of the user are input on the password input screen shown in FIG. 11 (step S17), and when the user ID and password of the user are input ( If YES), it is determined based on the image data registration table of FIG. 4 whether the passwords match (step S18). If the user's user ID and password are not input in step S17 (NO), the process shifts to the input waiting state in step S17.

Then, in step S18, when determining that the passwords match each other (YES), the image forming apparatus 1 displays the image data list accessible by the user, and ends the series of processes. The user can access the image data displayed in the image data list and perform printing or data transmission. If it is determined in step S18 that the passwords do not match (in the case of NO), the process returns to step S11, the screen shown in FIG. 9 is displayed, and the process waits for input of other processing. After accessing the image data displayed in the image data list and performing printing or data transmission, it is desirable to press the all cancel button 64 in FIG. As a result, the image forming apparatus 1 resets a series of processes and displays the initial screen shown in FIG. 7, so that the image data displayed in the image data list is displayed to a third party other than the user while the user is not present. Can be prevented from being used.

In this way, when the user who uses the image forming apparatus 1 is authenticated, an authentication information input screen for accessing the image data depending on whether or not the authenticated user has the access right to the image data. Since the display/non-display of can be controlled, it is possible to prevent leakage of image data and realize high security with a simple configuration.

FIG. 13 is a flowchart for explaining an example of a process of registering image data in the image forming apparatus 1 according to the present invention. First, the image forming apparatus 1 determines whether or not the user is permitted to use the image forming apparatus 1 when the user ID and the password are input on the user authentication screen shown in FIG. 7 (step S21). Yes (step S22). When the use of the image forming apparatus 1 is permitted (in the case of YES), the document is placed on the document table and the reading process is performed (step S23), and it is determined whether the reading of the document is completed (step S24). .. If the use of the image forming apparatus 1 is not permitted in step S22 (NO), the process returns to step S21 to enter the waiting state for the user ID and password.

Next, in step S24, when the reading of the document is completed (YES), the image forming apparatus 1 inputs the registered file name for the image data of the read document according to the operation of the user (step S25). .. In step S24, when the reading of the document is not completed (in the case of NO), the process returns to step S23 to repeat the process. Then, the image forming apparatus 1 inputs the filing password (filing password) used for the second user authentication according to the operation by the user (step S26), and uses this filing password together with the user ID, the group ID, and the like in the image data. Is registered in association with (step S27).

FIG. 14 is a diagram for explaining an example of a process of registering image data in the image forming apparatus 1 from a user's PC, and in the figure, 90 denotes a printer driver screen. In the flow described in FIG. 13 described above, the image data read by the image forming apparatus 1 is registered in the image forming apparatus 1. However, by transmitting the image data from the user's PC, the image data is transferred to the image forming apparatus 1. You may register at. In this case, the user sets a user ID, a password, etc. on the printer driver screen 90 of the PC, transmits the image data to the image forming apparatus 1, and registers the image data. The registration file name of the image data is set in advance on the PC. The processing after the transmission of the image data is the same as the method by the image reading described in FIG. 13, but the image forming apparatus 1 authenticates the user with the user ID and password transmitted from the PC, and the authentication is successful. The image data is registered in. If the authentication fails, the fact may be notified to the PC.

DESCRIPTION OF SYMBOLS 1... Image forming apparatus, 10... CPU, 20... ROM, 30... RAM, 40... Operation panel, 50... Display section, 60... Operation section, 61... Function selection button, 62... Filing button, 63... Numeric keypad group, 64 ...All cancel button, 65... Color copy start button, 66... Monochrome copy start button, 70... Communication section, 71... ID card, 80... Network I/F, 90... Printer driver screen, 100... Image reading section, 105... Document table, 120... Scanner section, 122... First scanning unit, 124... Second scanning unit, 126... Optical lens, 128... CCD line sensor, 130... Double-sided automatic document feeder (RADF), 150... Image processing section, 160... Image storage section, 170... Image reading control section, 200... Image forming section, 211... Paper feed cassette, 212... Registration roller, 213... Transfer conveyor belt mechanism, 214... Driving roller, 215... Followed roller, 216... Transfer Conveyor belt 217... Fixing device, 218... Switching gate, 219... Paper ejection roller, 220... Paper ejection tray, 221... Switchback conveyance path, 222... Photosensitive drum, 223... Charger, 224... Developing device, 225... Transfer discharging device, 226... Cleaning device, 227... Laser beam scanning unit, 240... Polygon mirror, 241... f.theta. lens, 242, 243... Mirror, 251... Conveying roller, 250... Manual feed tray, 400... Paper sensor.

Claims (9)

An image forming apparatus including a storage unit for registering image data,
First authentication means for authenticating the user based on the user ID and the login password input by the user;
Whether the user who has been successfully authenticated by the first authenticating unit has access authority to any of the image data registered in the storage unit based on the user ID input by the user Determination means for determining whether or not,
For any of the user is determined to have access to the image data registered in by Ri said storage means to said determining means, for the user ID and the image data input by the user 1 Based on a set of filing passwords associated with one-to-one or many-to-one, to one or more of the image data registered in the storage means, the image data corresponding to the user ID and the filing password. A second authenticating means for authenticating whether or not the user has an access right,
When the determination unit determines that the user has the access authority , the second authentication unit displays an authentication information input screen for inputting the user ID and the filing password from the user, An image forming apparatus, wherein the authentication information input screen is hidden when the determination unit determines that the user does not have the access authority. The first authenticating means authenticates the user based on whether or not the set of the user ID and the login password input by the user is registered in the user registration table,
The determination unit is based on whether or not the user ID input by the user is registered in the image data registration table for the user who has been successfully authenticated by the first authentication unit. Determine whether you have access to any of the image data registered in,
The second authentication means, to the user who is determined to have access to any of the image data registered in by Ri said storage means to said determining means, input by the user the One or more image data registered in the storage means based on whether a set of a user ID and the filing password is registered in the image data registration table, wherein the user ID and the filing password are Authenticate whether or not you have access to the one that corresponds to
The user registration table holds user IDs and login passwords for each user to log in to the image forming apparatus in association with each other,
The image data registration table includes a user ID for identifying the identification information of each image data registered in the storage unit, and a user ID for allowing a user who is permitted to access the image data to log in to the image forming apparatus. The image forming apparatus according to claim 1, wherein the image forming apparatus holds the file in association with a filing password for accessing the. Any one of the determination means registered in the storage means based on a group ID corresponding to the user ID input by the user for the user who has been successfully authenticated by the first authentication means. Determine whether or not to have the access right to the image data,
The second authentication means, to the user who is determined to have access to any of the image data registered in by Ri said storage means to said determining means, input by the user the Based on a set of the group ID and the filing password corresponding to the user ID, the group ID and the filing password corresponding to the user ID are one or more of the image data registered in the storage unit. The image forming apparatus according to claim 1, wherein authentication is performed regarding whether or not the user has an access right to the corresponding one. The first authenticating means authenticates the user based on whether or not the set of the user ID and the login password input by the user is registered in the user registration table,
The determination means is based on whether or not a group ID corresponding to the user ID input by the user is registered in the image data registration table for the user who has been successfully authenticated by the first authentication means. And determines whether or not the user has an access right to any of the image data registered in the storage means,
The second authentication means, to the user who is determined to have access to any of the image data registered in by Ri said storage means to said determining means, input by the user the based on whether the set of the group ID and the filing password corresponding to the user ID is registered in the image data registration table, an the image data one or more registered in the storage means, wherein Authenticates whether or not there is an access authority to the group ID corresponding to the user ID and the corresponding filing password,
The user registration table holds user IDs, login passwords, and group IDs for each user to log in to the image forming apparatus in association with each other.
The image data registration table is a group corresponding to a user ID for allowing a user who is permitted to access the image data, the identification information of each image data registered in the storage unit, to log in to the image forming apparatus. The image forming apparatus according to claim 3, wherein the image forming apparatus holds the ID and a filing password for accessing the image in association with each other. The image forming apparatus according to any one of claims 1 to 4, wherein the first authentication unit performs authentication by a card. When the determination unit determines that the user does not have the access right and hides the authentication information input screen, a unit for displaying a message for notifying the user that the access right does not exist is further provided. The image forming apparatus according to claim 1, further comprising: An access level to the image data is given to a user ID used for user authentication by the second authentication means, and the second authentication means determines that the user has access authority by the determination means. When the authentication information input screen is displayed, the access level to the image data is determined based on the user ID input on the authentication information input screen, and the user determines the access level according to the determined access level. The image forming apparatus according to claim 1, wherein a list of accessible image data is displayed. A user authentication method by an image forming apparatus having a storage unit for registering image data,
A first authentication step of authenticating the user based on the user ID and the login password entered by the user;
Whether the user who has been successfully authenticated by the first authentication step has access authority to any of the image data registered in the storage unit based on the user ID input by the user A determination step of determining whether or not,
One-to-one correspondence with the user ID and the image data input by the user with respect to the user who is determined to have the access right to any of the image data registered in the storage means in the determining step . Alternatively , based on a set of filing passwords associated with many-to-one, access authority to one or more of the image data registered in the storage means and corresponding to the user ID and the filing password. A second authentication step for authenticating whether or not
In the second authentication step, when it is determined in the determination step that the user has the access authority, an authentication information input screen for inputting the user ID and the filing password from the user is displayed, The user authentication method, wherein the authentication information input screen is hidden when it is determined in the determination step that the user does not have the access authority. 9. The user authentication method according to claim 8, wherein in the first authentication step, card authentication is performed.

Images