JP6840798B2 - Printing device, control method of printing device, and program - Google Patents

Description

The present invention relates to a printing device that prints print data received from an external device.

In recent years, a so-called stationary printing system in which print data transmitted from a PC is retained by a printer or a print server has become widespread. In the reserved printing system, the print data is stored in the hard disk of the printer or a server on the network, and printing of the print data is started in response to a specific operation performed by the user in front of the printer. The reserved printing system is a shared printer in which the printer is connected to a network, and is used when it is desired to prevent others from viewing the output printed matter.

In Patent Document 1, when print data to which identification information is added is received and temporarily stored, and the identification information input from the front panel of the printer and the identification information added to the print data match. The printer that starts printing is disclosed.

Further, in Patent Document 2, when a print job for which confidential printing is specified is received, the print job and user information are accumulated, and then the user is authenticated, and only the print job of the authenticated user is permitted to be printed. The image recording device to be used is disclosed.

Further, Patent Document 3 discloses a printing system in which a printer that receives and prints print data corresponding to an authenticated user from a print server deletes password information from the print data and prints the data.

Japanese Unexamined Patent Publication No. 1-264865 Japanese Unexamined Patent Publication No. 2003-182187 JP-A-2009-223610

However, in the above-mentioned reserved printing, when printing print data that can authenticate the user and requires input of identification information at the time of printing, there are the following problems. That is, if the user is required to input the identification information at the time of printing even though the user has been authenticated, the user's operation becomes extremely complicated.

In addition, if user authentication is required and printing is not performed without user authentication, the unauthenticated user will not even be able to print the retained print data, which is extremely inconvenient. It ends up.

The present invention has been made in view of the above-mentioned problems, and in the reserved printing, it is selectively executed whether to perform the reserved printing after authenticating the user or to perform the reserved printing after having the user enter the password. The purpose is to provide possible means.

In order to achieve the above object, the printing device according to the present invention includes a receiving means for receiving a print job of a first user for which password information is set, and the first user in a state where the first user is logged in to the printing device. When the user's instruction to delete the print job is received, the print job of the first user is deleted without accepting the password information of the print job of the first user, and a second user different from the first user When the erasure instruction of the print job of the first user is received while logged in to the printing device, the print job of the first user is performed according to the reception of the password information set in the print job of the first user. It has an erasing means for erasing .

According to the present invention, in the reservation printing, it is possible to selectively perform the retention printing after authenticating the user or to perform the retention printing after having the user enter the password.

It is an overall view of a network system composed of a multifunction device which is an example of a printing device, and a PC which is an example of an external device. It is a flowchart which shows the process of sending a print job executed by PC. It is a figure which shows an example of the setting screen of the printer driver of a PC. It is a flowchart which shows the process of receiving a print job executed in a multifunction device. It is a flowchart explaining a series of operations when a user's operation is accepted by a multifunction device. It is a flowchart which shows the login process which is executed in a multifunction device. It is a flowchart which shows the process which executes printing which is executed in the multifunction device. It is a flowchart which shows the process of stopping printing which is executed in a multifunction device. Job list for password-protected print jobs. This is an example of the setting screen for enabling the omission setting of password input. It is a flowchart which shows the print stop process in 2nd Embodiment. This is an example of a setting screen for enabling the omission setting of password input in the second embodiment. It is a figure which shows an example of the login screen which is displayed when logging in to a multifunction device.

Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

First, terms that are premised on explaining this embodiment are defined. In the present embodiment, a job for printing print data including a password is referred to as a "print job with a password". The print job with a password is a job that starts printing when the password entered by the user at the time of printing and the password included in the print data match.

Further, in the present embodiment, a print job in which the data to be printed included in the print job with a password is encrypted is referred to as an "encrypted print job with a password".

<First Embodiment>
Hereinafter, embodiments for carrying out the invention will be described with reference to the drawings.

FIG. 1 is an overall view of a network system including a multifunction digital multifunction device (Multifunction Peripheral, hereinafter simply referred to as a “multifunction device”) 1000 and a personal computer (hereinafter, simply referred to as a PC) 2000. In the network system of FIG. 1, the multifunction device 1000 and the PC 2000 are connected to each other so as to be able to communicate with each other via the network 101.

Although not shown in FIG. 1, a plurality of multifunction devices and other PCs may be connected to the network 101 via a relay device such as a switching hub or a router. Further, the network system of FIG. 1 may be connected to the Internet via a router (not shown) connected to the network 101.

In the network system of FIG. 1, unique IP addresses and host names are assigned to the multifunction devices 1000 and PC2000, respectively. Further, the network system of FIG. 1 is assigned a unique domain name indicating a location on the Internet.

In this embodiment, a multifunction device will be described as an example of the printing apparatus. However, if it is a device having a function of executing a print job with a password, an SFP (Single Function Peripheral) may be used instead of the multifunction device.

Further, in the present embodiment, a personal computer (PC) will be described as an example of the external device. However, it does not have to be a personal computer, but may be a device such as a shared desktop computer, a server computer, or a mobile terminal.

Next, the hardware configuration of the multifunction device 1000 will be described.

The control unit 200 connects the scanner 201, which is an image input device, and the printer 202, which is an image output device. Further, the control unit 200 connects to the network 101 or the public line 204 and inputs / outputs information to / from the external device.

The CPU 205 is a processor that controls the entire multifunction device 1000. The RAM 206 is a system work memory for operating the CPU 205, and is also a memory for temporarily storing image data, a user name / password, and the like. The ROM 207 is a boot ROM and stores a system boot program. The HDD 208 is a hard disk drive and stores system software, applications, and image data. In addition, a program for executing the flowchart described later in this embodiment is also stored in the HDD 208. Then, the program stored in the HDD 208 is loaded into the RAM 206 and executed by the CPU 205.

Each step of the flowchart described in this embodiment is realized by the CPU 205 executing the control program stored in the HDD 208. However, a processor other than the CPU 205 may execute each step of the flowchart, or the CPU 205 and the other processor may cooperate to execute each step.

The operation unit interface 209 is an interface unit with the operation unit 210 having a liquid crystal touch panel, and outputs image data to be displayed on the operation unit 210 to the operation unit 210. Further, the operation unit interface 209 serves to transmit the information input by the user as the system user to the CPU 205 from the keyboard provided in the operation unit 210. The network interface 211 connects to the network 101 to input and output data. The MODEM 212 is connected to the public line 204 to convert a digital signal to an analog signal and the like. SRAM 213 is a non-volatile recording medium capable of high-speed operation. The RTC 214 is a real-time clock, and performs a process of continuously counting the current time even when the control unit 200 is not turned on. The above devices are arranged on the system bus 215.

ImageBusI / F216 is a bus bridge that connects the system bus 215 and the image bus 217 that transfers image data at high speed and converts the data structure. The image bus 217 is composed of a PCI bus or IEEE 1394. The following devices are arranged on the image bus 217.

The RIP unit 218 is a raster image processor, and expands the PDL code into a bitmap image. The device I / F unit 219 connects the scanner 201 or printer 202, which is an image input / output device, to the control unit 200, and performs synchronous / asynchronous conversion of image data. The scanner image processing unit 220 corrects, processes, and edits the input image data. The printer image processing unit 221 performs printer correction, resolution conversion, and the like on the print output image data. The encryption processing unit 222 performs encryption processing of the input data. When the received data (including print data) is encrypted, the decryption processing unit 223 decrypts the encrypted data.

Next, the hardware configuration of the PC2000 will be described. The PC 2000 includes a CPU 26, a main memory 27, a disk 21, a PC operation unit 23, a PC communication unit 25, and a PC display unit 24. The CPU 26 is a processor that controls the operation of the PC 2000. The CPU 26 loads the program stored in the disk 21 into the main memory 27 and executes various processes. Although not shown, the disk 21 stores various programs such as an operating system (OS) and a document creation application. Further, the disk 21 also stores a printer driver program (hereinafter, simply referred to as a printer driver) 22 corresponding to the multifunction device 1000.

The PC communication unit 25 transmits and receives various information to and from other devices connected to the network 101. The PC operation unit 23 is, for example, a mouse or a keyboard, and functions as an input device that receives input from the user. The PC display unit 24 is, for example, a liquid crystal display, and functions as an output device for outputting data processed by the CPU 26.

FIG. 2 is a flowchart illustrating an operation when the PC 2000 transmits a print job with a password to the multifunction device 1000. Each step of the flowchart of FIG. 2 is realized by the CPU 26 executing a program loaded from the disk 21 into the main memory 27.

First, in step S2001 (the notation of the step is omitted in the following description), the PC 2000 receives an instruction from the user to print on the multifunction device 1000 via the PC operation unit 23. Upon receiving this instruction, the CPU 26 activates the printer driver 22 corresponding to the multifunction device 1000, and displays the print setting screen 0301 shown in FIG. 3A on the PC display unit 24.

FIG. 3A is an example of a screen displayed by the printer driver 22 in S2001. In the print setting screen 0301 of FIG. 3A, a check box 0302 for setting whether or not to enable printing with a password is displayed. Further, on the print setting screen 0301, a check box 0303 for setting whether or not to encrypt the data, an OK button 0303, and a cancel button 0304 are displayed.

The check box 0302 is a check box for checking when the password is added to the print job and sent to the multifunction device 1000. When the check box 0302 is checked, the check box 0303 can be further checked. When the check box 0303 is checked, the print data (data to be printed) is encrypted and transmitted to the multifunction device 1000. As the encryption key at this time, a password received from the user on the screen of FIG. 3B described later is used.

Further, on the print setting screen 0301, print settings such as paper size, number of copies to be printed, and presence / absence of stamps can be set, and a print job including these print settings is generated by the printer driver 22. The example of FIG. 3A shows an example in which printing with a password is effective, the paper size for printing is A4, the number of copies to be printed is 1, and printing is set without stamps.

Next, in S2002, the printer driver 22 accepts the user's operation on the print setting screen 0301 and writes the print setting to the RAM (not shown) of the PC 2000. Then, when the pressing of the OK button 0303 indicating that the print job setting is completed is detected, the process proceeds to S2004.

In S2004, the printer driver 22 determines whether or not to generate a print job with a password based on the settings received in S2002.

When the printer driver 22 determines to generate a print job with a password (YES in S2004), the printer driver 22 displays the user name / password input screen shown in FIG. 3 (b) on the PC display unit 24, and also displays the user name / password from the user. Is accepted (S2005). On the other hand, when the printer driver 22 determines that printing with a password is not generated (that is, a normal print job is generated) (NO in S2004), the printer driver 22 generates a print job according to the set print settings and combines the print job with the print data. It is transmitted to the machine 1000 (S2010).

FIG. 3B is a user name / password input screen 0321 displayed in S2005. On the screen of FIG. 3B, the user inputs the user name in the user name input form 0322 and the password in the password input form 0323. The entered user name and password are added to the print job and sent to the multifunction device 1000.

The user name entered in the user name input form 0322 is a user ID (user identifier) for identifying the owner of the print job. The user name is later used for collation between the user logged in to the multifunction device 1000 and the owner of the job (however, in the case of operation in which the user authentication is not performed on the multifunction device 1000, the user name is not used for the above verification). The user name can be changed as needed on the screen of FIG. 3B, but a user name preset in the PC 2000 is input as an initial value.

The password entered in the password input form 0323 is information necessary when printing is started on the multifunction device 1000 later. That is, the print job to which the password is added (print job with password) is waited in the state of waiting for the password input in the multifunction device 1000, and this password (the password entered by the user in FIG. 3B) is input in the operation unit 210. Printing is started based on what has been done. In this way, the password-protected print job can output the printed matter only to a person who can know the password attached to the job, and can reduce the situation where the printed matter is stolen by a person who does not know the password. .. On the other hand, in the print job with a password, the user inputs the password on the PC2000 side, and the user also inputs the password on the multifunction device 1000 side. Therefore, although the security is maintained, from the user's point of view, the password input work is required in the multifunction device 1000, which is troublesome. Therefore, in the present embodiment, when the user is authenticated when logging in to the multifunction device 1000, the password input can be omitted. This part will be described in detail later. In the present embodiment, the password is input by the user on the screen of FIG. 3B, but the printer driver 22 generates a job-specific password, displays the generated password, and notifies the user. You may do it. Alternatively, the multifunction device 1000 may be requested to generate a password, and the password generated by the multifunction device 1000 may be received and notified to the user.

Returning to the description of FIG. In S2006, the printer driver 22 accepts the user name and password entered by the user via the PC operation unit 23. The user name and password accepted here are the user name input form 0322 and the password input form 0323 displayed on the PC display unit 24 of FIG. 3 (b). Then, the PC operation unit 23 accepts the press of the password-protected print job setting completion button 0324, and proceeds to S2007.

In S2007, the printer driver 22 determines whether or not to encrypt the data to be printed based on the encryption setting received in S2002. If it is determined that the encryption is performed in S2007, the process proceeds to S2009, and if it is determined that the encryption is not performed, the process proceeds to S2008.

In S2008, the printer driver 22 generates a password print job including data (print data) to be printed and a user name / password, and transmits the password print job to the multifunction device 1000. In addition to this, the domain name of PC2000 and other information are included in the print job. The user name is used for collating the user who logged in to the multifunction device 1000 with the owner of the job, and the password is used when starting printing on the multifunction device 1000.

In S2009, the printer driver 22 performs an encryption process on the print data using the password received in S2006 as an encryption key. The encryption method using the password at this time uses an algorithm such as SHA-256. The printer driver 22 combines a print job (encrypted print job with a password) including an encryption flag indicating that the print data is encrypted, the encrypted print data, a user name, and a password. Send to 1000.

In S2010, the printer driver 22 generates a print job including print data and a user name / password as a print job with a password, and transmits the print job to the multifunction device 1000.

The above is the description of the process of transmitting a print job from the printer driver 22 of the PC 2000 to the multifunction device 1000.

FIG. 4 is a flowchart illustrating an operation when the multifunction device 1000 receives a print job. Each step shown in the flowchart of FIG. 4 is realized by the CPU 205 executing the program loaded from the HDD 208 to the RAM 206. The processing of the flowchart of FIG. 4 starts in response to receiving a print job from the PC2000 (or another external device).

In S4001, the CPU 205 receives the print job transmitted from the PC2000 or the like via the network interface 211. Then, the CPU 205 extracts print data and print settings from the received print job.

In S4002, the CPU 205 determines whether the received print job is a print job with a password based on the print settings extracted in S4001. Specifically, it is confirmed whether or not the job password is included in the print job with a password, and if it is included, it is determined that the print job has a password. If it is determined that the received print job is a print job with a password, the process proceeds to S4003. If it is determined in S4002 that the job is not a print job with a password, the process proceeds to S4004.

In S4003, the CPU 205 outputs the received print data to the RIP unit 218. Then, the CPU 205 stores the bitmap image data developed by the RIP unit 218 in the HDD 208 in association with the status of the password input waiting state (S4003). The bitmap image data stored in S4003 is not output to the printer 202 until the job password and the entered password are collated in response to the password input in the operation unit 210. That is, the received password-protected print job is retained here without being printed. Further, in S4003, the domain name, the user name, and the job password included in the print settings are managed in association with the bitmap image data.

When S4002 determines that the print job is not a password-protected print job (that is, it is a normal print job), the CPU 205 outputs the received print data to the RIP unit 218. Then, the CPU 205 outputs the bitmap image developed by the RIP unit 218 to the printer 202. In response to this, the printer 202 prints an image on printing paper based on the output bitmap image data (S4004).

The above is a series of operations when the multifunction device 1000 receives a print job.

In this embodiment, an example of printing without retaining a print job (normal print job) to which a password is not added has been described. However, for example, when the multifunction device 1000 is set to the forced retention mode, the print data may be retained as in the process of S4003 even if the print job does not have a password added.

Although not shown in FIG. 4, in S4003, the CPU 205 confirms whether or not the received print job actually includes the encryption flag, and print data included in the print job. Determine if is encrypted. If it is determined that the encryption flag is included, it means that the print data included in the print job is encrypted with the password. Therefore, the print data cannot be expanded into a bitmap image unless it is decrypted with a password. Therefore, the CPU 205 stores the encrypted print data in the HDD 208 as it is.

On the other hand, when the print job does not include the encryption flag, it means that the print data included in the print job is in plain text. Therefore, the plaintext print data is transferred to the RIP unit 218, the print data is expanded into a bitmap image, and then stored in the HDD 208. In this way, when the print data is not encrypted, the print data is expanded to the bitmap image when the print job with password is received, so that the printed matter is printed after the user goes in front of the multifunction device 1000 and gives a print instruction. The time until the paper is ejected can be shortened.

FIG. 5 is a flowchart showing an operation when printing or canceling a print job with a password. Each step shown in the flowchart of FIG. 5 is realized by the CPU 205 executing the program loaded from the HDD 208 to the RAM 206, as in the case of FIG.

In S5001, the CPU 205 acquires the setting value of the multifunction device 1000 stored in the SRAM 213, and determines whether or not to authenticate the user based on the acquired setting value. The setting of whether or not to enable user authentication shall be registered in advance in the multifunction device 1000 by the system administrator. In addition, the authentication information (user ID / password) of each user used when user authentication is set to be enabled is registered in advance by the system administrator in the multifunction machine 1000 or an authentication server (not shown) on the network. It shall be left.

If it is determined that the user is authenticated in S5001, the process proceeds to S5002 and the login process proceeds. The login process will be described in detail with reference to FIG. 6, but when the user logs in to the multifunction device 1000 by this login process, the information of the logged-in user is written in the RAM 206, and the process shifts to S5004. On the other hand, if it is determined in S5001 that the user is not authenticated, the login process of S5002 is omitted and the process proceeds to S5004.

In S5004, the CPU 205 acquires the set value of the multifunction device 1000 stored in the SRAM 213, and determines whether or not the user has been authenticated by the multifunction device 1000. This determination is made by referring to the set value used for the processing in S5001. That is, when the set value acquired from SRAM 213 indicates that the user is authenticated, since the user has already been authenticated in S5002, YES is determined in S5004. On the other hand, if the set value acquired from SRAM 213 does not indicate that the user is authenticated, S5004 determines NO.

In S5005, the CPU 205 confirms the display conditions of the job list. For example, the CPU 205 acquires the filtering setting of the job list from the SRAM 213, and determines whether to display all the print jobs or only the print job owned by the logged-in user based on the filtering setting. The filtering setting is a setting for determining the instruction range for printing or canceling a job in the print job list 9002. When the filtering setting is enabled, only the print job of the logged-in user is displayed in the print job list 9002. Therefore, when the filtering setting is enabled, the logged-in user can only start printing a print job with his / her own password. On the other hand, when the filtering setting is invalid, all the print jobs stored in the HDD 208 while waiting for the password input are displayed in the print job list 9002. Therefore, the logged-in user can start printing not only his own print job but also a print job submitted to the multifunction device 1000 by another person. That is, in the present embodiment, a user different from the user who submitted the job can log in to the multifunction device 1000 and receive the printed matter related to the job. (However, since print jobs are restricted by a password, the user who receives the print job must know this password, as a matter of course).

In S5005, the authority of the authenticated user is confirmed, the print job of all users is displayed if the user has the administrator authority, and only the job of the logged-in user is displayed if the user does not have the administrator authority. It may be displayed.

In S5006, the CPU 205 acquires the user name of the logged-in user from the RAM 206, and also acquires the user name (user ID) of the print job managed in the password input waiting state. As will be described later in FIG. 6, when the login process is completed, a login context including a user name that identifies the logged-in user is written in the RAM 206. The CPU 205 identifies the logged-in user based on the login context written in the RAM 206. Then, in S5006, the CPU 205 displays the job list of the password-protected print job including the user name matching the user name of the logged-in user on the operation unit 210.

In S5007, the CPU 205 displays a list of all password-protected print jobs stored in the HDD 208 of the multifunction device 1000 in the password input waiting state on the operation unit 210.

FIG. 9 is a screen example of the job list displayed in S5006 or S5007. The print job list 9002 is a list of print jobs with a password stored in the multifunction device 1000. However, when displaying the list of print jobs in S5006, only the print jobs owned by the logged-in user are displayed.

The print button 9003 is a button for instructing the start of printing of the selected print job. The cancel button 9004 is a button for canceling the printing of the selected print job.

In addition, the print job list 9002 displays the selection status of the print job, the reception number, the reception time of the print job, the print job name, the name of the user who submitted the print job (that is, the owner of the print job), and the status of the job.

In the example of FIG. 9, five print jobs with passwords are displayed in the print job list 9002, and the print job with password of reception number 0001 is selected. FIG. 9 shows an example in which four unencrypted print jobs with passwords are displayed as reception numbers 0001 to 0004 in the print job list 9002. Further, the reception number 0005 in the print job list 9002 of FIG. 9 is an encrypted print job with a password, and the encrypted display mark 9006 is displayed on the print job list 09002 as an example.

The type of job displayed in the print job list 9002 is only the print job with a password, but a normal print job can also be displayed on this screen.

In S5010, the CPU 205 receives from the user the selection of the print job to be operated from the print job list 9002 displayed in S5006 or S5007. When the print job to be operated is selected, the selection presence / absence check box 9005 corresponding to the selected job is checked and the selected state is entered. When at least one of the jobs displayed in the print job list 9002 is selected, the stop button 9004 and the print button 9003 can be operated. Then, in S5010, the CPU 205 further receives the operation of the stop button 9004 or the print button 9003 from the operation unit 210. For example, when the user wants to print the selected print job, he / she presses the print button 9003 to instruct printing. On the other hand, if you want to stop the execution of the print job, press the stop button 9004. In S5010, it is determined whether the received instruction is printing or cancellation, and if it is determined that printing is performed, the process proceeds to the printing process of FIG. 7 (S5011). On the other hand, if it is determined that the process is discontinued, the process proceeds to the discontinuation process shown in FIG. 8 (S5012).

The overall operation when the user logs in to the multifunction device 1000 and uses the reserved printing function has been described above.

Next, FIGS. 6 and 6 show a detailed description of the process (S5002) at the time of logging in to the multifunction device 1000, a detailed description of the print process (S5010) of the password-protected print job, and a detailed description of the print stop process (S5012). 7. This will be described with reference to FIG.

FIG. 6 is a flowchart illustrating details of the login process executed in S5002 of FIG.

In S6001, the CPU 205 displays a login screen on the operation unit 210.

FIG. 13 is an example of the login screen displayed in S6001. This example is an example of logging in by the keyboard authentication method. On the login screen, the user name input form 1301, the password input form 1302, the login button 1303, and the guest login button 1304 are displayed together with the above message.

When logging in after user authentication, the user inputs the user name and password in the user name input form 1301 and the password input form 1302, respectively, and presses the login button. On the other hand, when logging in as a guest user, the guest user presses the guest login button without entering the user name and password. However, a simple character string such as "Guest" may be entered as authentication information when logging in as a guest.

In S6002, the CPU 205 confirms whether the login button 1303 is pressed or the guest login button 1304 is pressed, and determines whether or not the logged-in user logs in as a guest user. If it is determined to log in as a guest user, the process proceeds to S6006, and if it is determined that the login is not performed, the process proceeds to S6002.

Next, the CPU 205 acquires the authentication information received via the login screen in S6002. The input authentication information is written to the RAM 206 via the operation unit interface 209.

In S6004, the CPU 205 authenticates the user based on the authentication information acquired in S6002. User authentication may be performed by the multifunction device 1000 itself, or an external authentication server on the network such as an active directory or an LDAP server may be used. When the compound machine 1000 itself performs user authentication, the HDD 208 has an authentication database, and the entered user name and password are collated with the authentication database to perform user authentication. When an external authentication server authenticates a user, it issues an authentication request including the acquired authentication information to the authentication server and receives the result of successful or unsuccessful authentication.

User authentication includes user authentication using an IC card. An authentication method such as fingerprint authentication or face authentication may be used.

When it is determined that the user authentication is successful (YES in S6004), the CPU 205 permits the user to log in, stores the login context acquired in S6002 and including the user name in the RAM 206 (S6006), and ends the process of FIG. To do. The login context includes information such as login time and expiration date in addition to the user name. When logged in with the authority of the guest user, the RAM 206 stores information indicating that the user is a guest user.

When it is determined in S6004 that the user authentication has failed, the CPU 205 displays an error on the operation unit 210, prohibits the user from using the multifunction device 1000, and returns to S6002.

The details of the login process have been explained above.

FIG. 7 is a flowchart for explaining the main operation of the present embodiment, and corresponds to the printing process of S5011 of FIG.

First, in S7001, the CPU 205 acquires the password input omission setting (see FIG. 10) of the multifunction device 1000 from the SRAM 213, and determines the operation mode of the multifunction device 1000. Specifically, if the password input omission setting acquired from SRAM 213 is valid, the multifunction device 1000 operates in a mode in which the user can omit the password input (hereinafter referred to as "password input omission mode"). Judge that it is inside. On the other hand, if the set value acquired from SRAM 213 is invalid, it is determined that the multifunction device 1000 is operating in a mode that requires the user to input a password (hereinafter referred to as "password input required mode"). .. If it is determined in S7001 that the password input is omitted mode, the process proceeds to S7002, and if it is determined that the password input required mode is in operation, the process proceeds to S7009.

FIG. 10 is a setting screen for performing a password input omission setting. This setting screen 10001 is displayed on the operation unit 210 by the CPU 205. When the enable button 10002 or the disable button 10003 of the setting screen 10001 is selected by the system administrator and the OK button 1004 is selected, the CPU 205 indicates whether to enable or disable the password input and writes the set value to the SRAM 213.

In S7002, the CPU 205 acquires the encryption flag of the print job with the password instructed to print from the HDD 208. Then, the CPU 205 determines whether the encryption flag of the print job with the password instructed to print is valid (that is, whether the print data is encrypted) (S7003).

When it is determined in S7003 that the print data is encrypted, the print data cannot be decrypted unless the password is accepted from the user even during the operation in the password input omission mode. Therefore, the process proceeds to S7009, and the CPU 205 displays the password input screen and accepts the password input from the user. On the other hand, if it is determined that the print data is not encrypted, the process proceeds to S7004.

In S7004, the CPU 205 acquires the set value of the multifunction device 1000 stored in the SRAM 213 and determines whether or not the user authentication has been completed. This determination is made by referring to the set value used for the processing in S5001 of FIG. That is, when the set value acquired from SRAM 213 indicates that the user is authenticated, since the user has already been authenticated in S5002, S7004 determines YES and proceeds to S7005. On the other hand, if the set value acquired from SRAM 213 does not indicate that the user is authenticated, S7004 determines NO and proceeds to S7009.

In S7005, the CPU 205 acquires the login context stored in the RAM 206 and confirms the authority of the authenticated user.

In the present embodiment, three types of authority, an administrator, a general user, and a guest user, are set as the authority of the logged-in user. However, this is just an example. These privileges are registered in advance by the user authentication management application of the multifunction device 1000.

A user with administrator authority has the authority to operate the management settings of the multifunction device 1000, and only the user with administrator authority can set the password input omission setting and the setting of whether or not to authenticate the user in this embodiment. To do. A user who has the authority of a general user can operate items other than the management settings and various functions of the multifunction device 1000. In the functions and settings provided by the multifunction device 1000, the guest user can operate only the general users and below, and has the following features. That is, when the multifunction device 1000 is logged in as a guest user, no matter who logs in, the multifunction device 1000 is treated as a mere guest. Therefore, even if a user having the authority of a guest user logs in to the multifunction device 1000, the multifunction device 1000 cannot identify an individual.

Returning to the description of FIG. When the CPU 205 determines that the authority of the authenticated user is the guest user authority (YES in S7005), the process proceeds to S7009. If it is determined that the authority of the authenticated user is another authority (that is, administrator authority or general user authority) (NO in S7005), the process proceeds to S7007.

In S7007, the CPU 205 determines whether the print job instructed to print is the job of the authenticated user by confirming whether the user name of the print job selected in S5010 matches the user name of the logged-in user. To do. If the user name of the print job and the user name of the logged-in user do not match (NO in S7007), the CPU 205 displays a password input screen (not shown) on the operation unit 210 and accepts the password input from the user (S7009). ).

If the CPU 205 determines in step S7007 that the password-protected print job and the user name of the logged-in user match, the CPU 205 prints the job without accepting the password input (S7008). That is, when the password input omission setting is valid, a print job with a password of one's own (that is, a print job owned by an authenticated user) can be printed without accepting the password input. As a result, the user can reduce the trouble of entering the password when printing the print job with the password.

In the above process, when the password input omission setting is valid and the login user is a guest user, the multifunction device 1000 always requires the password input at the time of printing. Since the guest user cannot identify an individual, it is not possible to determine which password-protected print job is his or her multifunction device. Therefore, even if the password input omission setting is valid, when the guest user gives a print instruction for a print job with a password, the password input is always required.

In step S7012, the CPU 205 compares the password received from the user via the operation unit 210 with the password of the print job with a password, and if it is determined that they match, the process proceeds to S7013.

If it is determined in step S7012 that the passwords do not match, an error screen indicating that the passwords do not match is displayed on the operation unit 210 (S7014).

In step S7013, the CPU 205 acquires the encryption flag of the password-protected print job, and determines whether or not the print-instructed job is the password-protected encrypted print job. When it is determined that the job instructed to print is not an encrypted print job with a password (NO in S7013), printing of the print job with a password is executed (S7008).

If it is determined that the job is an encrypted print job with a password (YES in S7013), in S7015, the CPU 205 decrypts the encrypted print data using the password received in S7009, and outputs the decrypted print data to the RIP unit 218. To do. The RIP unit 218 develops the output print data into a bitmap image. After that, the printer 202 prints the image on the printing paper based on the bitmap image data output from the RIP unit 218.

The operation of the printing process of FIG. 7 has been described above. According to the present embodiment, even when the user cannot omit the password input of the password-protected print job, the password-protected print job can be executed by inputting the password as in the conventional case. By this process, in a multifunction device in which the password input omission function is enabled and the job list filtering setting is invalid, it is possible to print a password print job other than oneself by inputting a password, which can improve convenience.

Next, the process of canceling the print job with a password will be described with reference to the flowchart of FIG.

FIG. 8 is a flowchart illustrating the cancellation process of S5012 of FIG.

In S8001, the CPU 205 acquires the setting of the multifunction device 1000 stored in the SRAM 213, and determines whether or not the user authentication has been completed in the multifunction device 1000. If it is determined that the user has not been authenticated (NO in S8001), the CPU 205 deletes the data of the print job with the password instructed to be canceled from the HDD 208 (S8004). If it is determined that the user has been authenticated, the CPU 205 acquires the user name of the print job with the password instructed to cancel and the user name of the logged-in user (S8002).

Next, the CPU 205 determines whether the user name of the password-protected print job instructed to cancel and the user name of the logged-in user match (S8003). If it is determined that the password-protected print job and the user name of the logged-in user match (YES in S8003), the CPU 205 erases the data of the password-protected print job instructed to be canceled from the HDD 208 (S8004), and proceeds to S8005.

In S8005, the CPU 205 deletes the password-protected print job selected to be canceled from the print job list 09002 displayed on the operation unit 210. Then, the print job cancellation process of FIG. 8 is completed.

When it is determined that the password-protected print job and the user name of the logged-in user do not match (NO in S8003), the CPU 205 displays an error screen on the operation unit 210 indicating that the execution of the selected print job cannot be stopped. The print job cancellation process of FIG. 8 is completed.

The first embodiment has been described above. According to the first embodiment, when an authenticated user gives an instruction to execute a print job with a password, control is performed so that printing can be started without inputting a password included in the print job.

Further, according to the first embodiment, it is controlled so that even an unauthenticated user can instruct printing of a reserved print job. (However, when the unauthenticated user instructs the job to be executed, it is controlled so that printing can be started after prompting for the password). This control reduces the burden of password input work for authenticated users, and enables printing with a single authentication by user authentication at login. Further, for an unauthenticated user, printing can be started on condition that a password is input, so that convenience can be improved.

Further, according to the first embodiment, security can be maintained by always requesting the input of a password when a print instruction is received without user authentication.

Further, according to the first embodiment, the user who logs in to the multifunction device can execute a print job with a password of another person (as long as he / she knows the password of the job), so that the convenience of the multifunction device can be improved. Can be improved.

<Second embodiment>
Next, the second embodiment will be described. In the first embodiment, regarding the process of canceling the password-protected print job (see FIG. 8), the multifunction device can cancel only the password-protected print job of the logged-in user. In the second embodiment, in order to further improve convenience, even a print job with a password other than the logged-in user can be canceled if the correct password is input. In the second embodiment, this function is referred to as a "cancellation password input function".

In the second embodiment, in a multifunction device having a password input function at the time of cancellation, an instruction to cancel a print job with a password of oneself or another person is given according to the presence or absence of user authentication management and the role conditions of the user who logged in to the multifunction device. The control in the case of a password will be described.

The control of the cancellation process of the password-protected print job executed by the multifunction device 1000 in the second embodiment will be described in detail with reference to FIGS. 11 and 12. In the embodiment, the parts not described such as the configuration of the multifunction device, the transmission process of the print job with the password of the printer driver, the login process of the multifunction device, the print process of the print job with the password, and the reception process of the print job are not described in the first. It is the same as the embodiment of.

In the process of FIG. 11 in the second embodiment, the processes of steps S11006 to S11015 are added to the process of FIG. 8 of the first embodiment. This added process is related to the control in which the password setting at the time of cancellation is effective, and the details will be described later. The processing of steps S11001 to S11005 of the flowchart shown in FIG. 11 in the present embodiment is the same as the processing of steps S8001 to S8005 described in the flowchart of FIG. 8 of the first embodiment. Further, the processes of FIGS. 5, 6 and 7 are the same as those of the first embodiment.

Hereinafter, the portion of the first embodiment that is changed from the second embodiment will be described.

In step S11006, the CPU 205 acquires the stop password input setting of the multifunction device 1000 from the SRAM 213, and determines whether the stop password input setting of the multifunction device 1000 is valid.

FIG. 12 is a password-protected print function setting screen 12001 according to the second embodiment, which is displayed on the operation unit 210. The password-attached reservation printing function setting screen 12001 has a password input omission setting and a password input setting at the time of cancellation. The password input omission setting is the same as that of FIG. 10 of the first embodiment, and in FIG. 12, the setting of the password input function at the time of cancellation is added in addition to FIG. In this embodiment, this is referred to as "password input setting at the time of cancellation". The password input setting at the time of cancellation in FIG. 12 will be described.

The password input setting at the time of cancellation is set by the password input setting valid button 12006 at the time of cancellation and the password input setting invalid button 12007 at the time of cancellation in the reserved printing function setting screen 12001 with a password. The user selects either the cancel password input setting enable button 12006 or the cancel password input setting invalid button 12007 via the operation unit 210. The cancel password input setting includes the settings of the cancel password input setting enable button 12006 and the cancel password input setting invalid button 12007. The changed password input setting at the time of cancellation is saved in SRAM 213 by the CPU 205 by selecting the reserved print function setting button 12004 with a password.

Returning to the description of the process of FIG. If the CPU 205 determines in step S11006 that the password input setting at the time of cancellation is invalid, the process proceeds to step S11001. If the CPU 205 determines in step S1106 that the password input setting at the time of cancellation is valid, the process proceeds to step S11007.

In step S11007, the CPU 205 acquires the settings of the multifunction device 1000 held in the SRAM 213, and determines whether the multifunction device 1000 manages user authentication. In step S11007, when the CPU 205 determines that the multifunction device 1000 does not manage the user authentication, the CPU 205 displays a password input screen on the operation unit 210 and accepts the password input from the user (S11011). Then, the process proceeds to step S11012.

In step S11012, the CPU 205 acquires the password from the print job with the password instructed to cancel. Next, the process proceeds to step S11013.

In step S11013, the CPU 205 compares the password input to the user via the operation unit 210 with the acquired password of the print job with a password. Next, the process proceeds to step-up S11014.

In step S11014, when the CPU 205 determines that the password entered by the user and the password of the print job with the password match, the CPU 205 cancels the print job with the password instructed to cancel (S11004). Then, the process proceeds to step S11005.

In step S11014, when the CPU 205 determines that the password input to the user and the password of the acquired print job with a password do not match, the operation unit 210 displays a password mismatch information screen (not shown here) (S11015). .. Then, the CPU 205 ends the process of canceling the print job with a password.

If the CPU 205 determines in step S11007 that the multifunction device 1000 manages user authentication, the process proceeds to step S11008.

In step S11008, the CPU 205 acquires the role of the user logged in to the multifunction device 1000 and determines which role it is. If it is determined in step S11008 that the logged-in user is a general user, the CPU 205 acquires the user information of the password-protected print job instructed to stop and the user information of the logged-in user (S11009).

Then, the CPU 205 determines whether the user information of the password-protected print job instructed to be canceled and the user information of the logged-in user match (S11010). In step S11010, when the CPU 205 determines that the user information of the password-protected print job instructed to be canceled and the user information of the logged-in user match, the CPU 205 cancels the password-protected print job instructed to be canceled (S11004). Next, the process proceeds to step S11005.

By the above process, when the user authenticates the multifunction device for which the password input setting at the time of cancellation is valid, the print job with his / her own password can be canceled without inputting the password. .. As a result, the user can reduce the time and effort required for authentication when the print job with his / her password is canceled for the multifunction device for which the password input setting at the time of cancellation is valid.

If the logged-in user is determined to be an administrator user in step S11008, the CPU 205 cancels the password-protected print job instructed to cancel (S11004). Then, the process proceeds to step S11005.

In the above process, if the logged-in user has the role of administrator for the multifunction device for which the password input setting at the time of cancellation is valid, the multifunction device does not have to enter the password even if it is not the print job with the password of the logged-in user. Printing is being stopped. In the present embodiment, since it is assumed that the administrator deletes the job of another person's multifunction device that is no longer needed for managing the multifunction device, any print job with a password can be canceled.

If the logged-in user is determined to be a guest user in step S11008, the CPU 205 displays a password input screen on the operation unit 210 and accepts the password input from the user (S11011).

In the above process, when the login user is a guest user, the multifunction device always requires the password input at the time of cancellation for the multifunction device for which the password input setting at the time of cancellation is valid. Since the guest user cannot identify an individual, it is not possible to determine which password-protected print job is his or her multifunction device. Therefore, even if the password input setting at the time of cancellation is valid, when the guest user gives an instruction to cancel the print job with a password, the password is always required to be input.

The second embodiment has been described above. According to the second embodiment, for a multifunction device in which the password input setting at the time of cancellation is valid, the authentication work by password input is reduced, so that the time and effort when printing the user's password-protected print job can be reduced. Becomes feasible.

(Other Examples)
In the first embodiment, the setting for omitting the password input has been described as being performed by the system administrator via the screen of FIG. However, the password input omission setting may be automatically determined according to the setting related to user authentication. For example, when the user authentication setting is disabled, the enable button 10002 on the setting screen 10001 in FIG. 10 cannot be selected (for example, the enable button 10002 is shaded and displayed), and the password is forcibly entered. It may operate in the required mode. In this case, the CPU 205 determines whether or not to authenticate the user by referring to the set value stored in the SRAM 213. Then, when the CPU 205 determines that the user is not authenticated, the password input omission setting is automatically invalidated. By doing so, it is possible to reduce the load of the setting work of the system administrator.

The timing of user authentication is not limited to login. For example, when the multifunction device is a device that provides functions such as copying, scanning, and printing, it is conceivable to switch whether or not user authentication is required for each function (this is called function-based authentication). In the case of a device that authenticates by function in this way, user authentication is performed when trying to use the print function, and when this user authentication is performed, the password input omission setting is automatically enabled. You may do it.

In the present embodiment, it is determined whether or not the password input can be omitted depending on whether or not the print job with the password to be operated is the job of the logged-in user. However, it is also possible to determine whether or not the password input can be omitted by other methods. For example, it may be determined whether or not the password input can be omitted depending on whether or not the logged-in user is a user having administrator authority. In this case, the password input is omitted in the case of a user having administrator authority, and the password input is required in the case of a general user or a guest user.

Further, the password input may be omitted for the users of the group (or department) to which the logged-in user belongs. For example, even if the group ID (or department ID) of the logged-in user and the group ID specified from the user name included in the print job to be operated are acquired and they match, the password input is omitted. Good.

In the present embodiment, it has been described that the password is input at the time of printing after the user selects the job. However, it can also be done before selecting a job. In this case, the password entered by the user can be received, and the print job including the received password can be specified and printed. That is, since one or a plurality of print jobs matching the entered password are automatically specified and printed, it is not necessary for the user to select the job. It is also possible to automatically identify and print only the print job of the authenticated user who has the same password as the print job.

It should be noted that whether or not to authenticate the user and whether or not to enable the password omission setting may be selectively (exclusively) set. For example, if the user authentication is set, the password omission setting is automatically disabled, and if the user authentication is not set, the password omission setting is automatically enabled. May be good. In addition, the setting for omitting the password and the setting for user authentication may be switched according to an instruction from the system administrator.

In the present embodiment, the password is accepted from the user in both the case where the authenticated user and the owner of the print job are different and the case where the print instruction is accepted without user authentication. (If NO in step 7004 of FIG. 7 and NO in step S7007). However, the present embodiment also includes a form in which a password is accepted from a user only in one of these cases. That is, the present embodiment also includes a form in which a password is accepted from a user only when a print instruction is received without user authentication, and a form in which a password is received only when the authenticated user and the owner of the print job are different. Is done.

The object of the present invention is also achieved by performing the following processing. That is, a program in which a storage medium in which a program code of software that realizes the functions of the above-described embodiment is recorded is supplied to a system or device, and a computer (or CPU, MPU, etc.) of the system or device is stored in the storage medium. This is the process of reading the code. In this case, the program code itself read from the storage medium realizes the function of the above-described embodiment, and the program code and the storage medium storing the program code constitute the present invention.

1000 Multifunction device 2000 Personal computer 205 CPU
206 RAM
207 ROM
208 HDD
210 Operation unit 201 Scanner 202 Printer

Claims (17)

It ’s a printing device,
A receiving unit for accepting an print job of the first user password information is set,
When receiving the deletion instruction of the print job of the first user in a state in which the first user logs in to the printing apparatus, the printing of the first user without accepting the password information of the print job of the first user Clear the job, when receiving the deletion instruction of the print job of the first user in a state of a different second user logs into the printing apparatus from said first user, is set to the print job of the first user and erasing means erase the print job of the thus the first user accepts the said password information,
A printing apparatus characterized by having. The printing device according to claim 1, wherein the second user is not the administrator of the printing device. When receiving the deletion instruction of the print job of the first user in a state where the second user logs into the printing apparatus, according to reception of the first said password information different from the password information set in the print job of the user The printing apparatus according to claim 1 or 2, further comprising a notification means for notifying an error. It has a first setting means for setting whether or not to input the password information of the print job when erasing the print job.
If the first setting means is effective, the erasing means, when the second user accepts the deletion instruction of the print job of the first user while logged into the printing device, of the first user printing apparatus according to any one of claims 1 to 3, wherein also erase the print job of the first user in accordance with reception of the password information set in the print job. Said erasing means, wherein when receiving a deletion instruction of the print job of the first user with the first user logs in to the printing apparatus, the password information of the print job before Symbol first user regardless of the set The printing apparatus according to claim 4, wherein the printing job is deleted without accepting. The erasing means
When receiving the deletion instruction of the print job of the first user in a state wherein the administrator that is different from the first user and the second user logs into the printing apparatus, the password information of the print job of the first user The printing apparatus according to any one of claims 1 to 5, wherein the printing job is deleted without accepting. A second setting unit to set whether to login authentication using user authentication information,
In the setting for not performing the login authentication, when the erasing means receives the deletion instruction of the print job of the first user, the first user follows the reception of the password information set in the print job of the first user. printing apparatus according to any one of claims 1 to 6, wherein also erase the print job of the user. Any one of claims 1 to 7, wherein the print job is stored in the storage area and has a display means for displaying a screen on which a user logged in to the printing device can select a print job. The printing apparatus described in the section. The printing device according to claim 8, wherein the screen is a screen on which a printing job related to a user different from the user logged in to the printing device can also be selected. It ’s a printing device,
A receiving unit for accepting an print job of the first user password information is set,
A comparison means for comparing the first user name of the first user who has logged in to the printing device with the second user name included in the print job that has received the erase instruction.
Luo said second user name and the first username is determined to be the same user name by the comparing means, and erases the print job received the deletion instruction,
A user name and the second user name and the first user names are different by said comparing means, and, et al that the first user is determined not to be the administrator set to the print job of the first user printing apparatus characterized by having a deletion means you erase the print job of the first user in accordance with reception of the password information. When receiving the deletion instruction of the print job of the first user in a state where the second user logs into the printing apparatus, according to reception of the first said password information different from the password information set in the print job of the user The printing apparatus according to claim 10, further comprising a notification means for notifying an error. It has a first setting means for setting whether or not to input the password information of the print job when erasing the print job.
If the first setting means is effective, the erasing means, when said second user name and the first username is determined to be the same user name by the comparing means, the deletion instruction Clear the print job accepted, a user name and the second user name and the first user names are different by said comparing means, and, when the first user is determined not to be the administrator, the first the printing apparatus according to claim 11, wherein also erase the print job of the first user according to reception of 1 said password information set in the print job of the user. When the first user is determined to be the administrator by the comparing means, said erasing means, wherein, characterized in that erasing the print job without accepting password information of the print job of the first user Item 2. The printing apparatus according to any one of Items 10 to 12. It has a second setting means for setting whether to perform login authentication using user authentication information.
In setting is not performed the login authentication, the erasing means, when receiving the deletion instruction of the print job of the first user, the first according to reception of the password information set in the print job of the first user printing apparatus according to any one of claims 10 to 13, characterized in also erase the print job of the user. Any one of claims 10 to 14, wherein the print job is stored in the storage area and has a display means for displaying a screen on which a user logged in to the printing device can select a print job. The printing apparatus described in the section. The printing device according to claim 15, wherein the screen is a screen on which a printing job related to a user different from the user logged in to the printing device can also be selected. A step of accepting an print job of the first user password information is set,
When receiving the deletion instruction of the print job of the first user in a state in which the first user logs in to the printing apparatus, the step of eliminating the print job without accepting password information of the print job of the first user And
When receiving the deletion instruction of the print job of the first user in a state where the second user different from the first user logs in to the printing apparatus, the set in the print job of the first user of the password information The process of erasing the print job of the first user according to the acceptance, and
A method for controlling a printing apparatus, which comprises.

Images