JP7238087B2 - JOB PROCESSING DEVICE, CONTROL METHOD AND PROGRAM FOR JOB PROCESSING DEVICE - Google Patents

Description

The present invention relates to a job processing apparatus, a method of controlling the job processing apparatus, and a program.

In an information processing device that can store information using an external storage device such as a hard disk drive (hereinafter referred to as HDD), the received information (hereinafter referred to as data) is stored in the external storage device before being used and processed. Information processors that erase data when completed are known. In such an information processing apparatus, data and location information of the data on the HDD (hereinafter referred to as FAT) are stored on the HDD. When erasing normal data, only the FAT is generally erased, and the data itself remaining on the HDD is not erased. However, in such a state, there is a possibility that residual data can be referenced by removing the HDD from the information processing apparatus, connecting it to a computer (hereinafter referred to as PC) or the like, and analyzing the inside. For this reason, not only the FAT but also the function of overwriting the remaining data area with random numbers, fixed values, etc. to ensure that no data remains has become widely known. For example, Patent Literature 1 discloses an apparatus that can arbitrarily set the number of times of erasing according to the security level, and executes erasing according to the set number of times of erasing.
In recent years, the use of semiconductor storage devices using flash memories, such as solid state drives (hereinafter referred to as SSDs), has increased as external storage devices. Some semiconductor memory devices perform distributed writing called wear leveling in order to extend the life of flash memory in the memory device. A semiconductor memory device that performs wear leveling performs writing by replacing blocks so as to use blocks with a small number of writes as much as possible. Therefore, even if the overwrite processing for the remaining data area as described above is performed, depending on the block replacement control method of wear leveling, the specified area may not be overwritten and data may remain in the block before replacement. Encrypting the data to be stored is effective as means for preventing data leakage to such an external storage device.

Japanese Patent Application Laid-Open No. 2004-153517

In the technique described in Patent Document 1, erasure processing is performed by a method set from a setting screen regardless of the type of external storage device installed in the apparatus. However, in the case of a semiconductor memory device, there is a possibility that data remains in a block after overwrite erasure, as described above. Therefore, if erasure can be set from the setting screen of the device, the user may misunderstand that erasure is possible without leaving any data.

A job processing apparatus according to the present invention is a job processing apparatus that executes a job, and when a nonvolatile storage device connected to the job processing apparatus is a magnetic storage device, an operation setting related to an overwrite deletion function is set by a user. When the non-volatile memory device connected to the job processing device is a semiconductor memory device, the operation setting is changed from the setting that does not perform the overwrite erasure to another overwrite erasure. control means for controlling settings so as not to be changed; execution means for executing jobs; deleting means for deleting data related to the job executed by the executing means from the non-volatile storage device after the job is executed; An erasing function that later overwrites the data area in which the data is stored with different data to make it difficult for the job-related data generated by executing the job to be restored from the non-volatile storage device, which is the magnetic storage device. It is characterized by

According to one aspect of the present invention, it is possible to select an appropriate erasing method suitable for the external storage device and safely manage the external storage device.
According to still another aspect of the present invention, it is possible to prevent the user from erroneously setting data erasure in the case of an external storage device in which the overwrite erasure function is not valid.

3 is a diagram showing an example of the hardware configuration of an MFP; FIG. 2 is an image diagram of the area configuration of a storage device mounted on the MFP; FIG. FIG. 3 is a diagram showing a partition configuration management table of a storage device; FIG. FIG. 10 is a diagram showing an example of a UI screen for setting an erasing method; 4 is a flow chart showing an example of information processing when the MFP is started. 6 is a flow chart showing an example of information processing during printing of the MFP; 7 is a flow chart showing an example of information processing for data erasure setting of the MFP; It is a figure which shows an example of a data management setting screen. FIG. 10 is a diagram showing an example of an execution screen for initializing all data/settings; 6 is a flowchart showing an example of all data erasing processing of the MFP;

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below with reference to the drawings.

<Embodiment 1>
(Hardware configuration)
FIG. 1 is a diagram showing an example of the hardware configuration of the MFP 100. As shown in FIG. In this embodiment, an MFP will be described as an example of an information processing apparatus, but an apparatus other than an MFP may be used as an information processing apparatus. An MFP is an example of an image forming apparatus.
The MFP 100 internally includes a controller unit 216 , printer section 211 , scanner section 213 , operation section 207 , and storage devices 217 and 218 . A controller unit 216 is connected to a LAN and inputs and outputs image data and device information.
The printer unit 211 is a device that prints raster image data on paper. The method includes an electrophotographic method using a photoreceptor drum or a photoreceptor belt, and an inkjet method in which ink is ejected from a minute nozzle array to directly print an image on paper. The printer unit 211 starts print processing according to an instruction from the CPU 201 . The printer unit 211 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected. As an additional function of the printer unit 211, there is a finishing function. The finishing mechanism is called a finisher or the like. Finishing mechanisms include mechanisms for collating, stapling, and folding printed products.
The scanner unit 213 is a device that illuminates an image on a paper document and scans it with a CCD line sensor to convert it into an electrical signal as raster image data. A scanner unit 213 performs a reading operation of a document sheet under the control of the CPU 201 in response to a reading start instruction from the operation unit 207 by the user.
The operation unit 207 has an LCD, and a touch panel sheet is pasted on the LCD. When an operation screen is displayed and a key in the displayed screen is selected (touched with a finger or the like), The position information is transmitted to the CPU 201 via the operation unit interface 206 . The operation unit 207 also includes various operation keys (hardware keys) such as a start key, a stop key, an ID key, and a reset key.

The storage devices 217 and 218 are non-volatile storage devices, and can be mounted with solid state drives (hereinafter referred to as SSD) that are semiconductor storage devices or hard disk drives (hereinafter referred to as HDD) that are magnetic disk devices. Image data and system data used by MFP 100 are stored in the storage device. A plurality of nonvolatile storage devices can be connected, and the storage device (STORAGE) 218 can be expanded as an option. The storage device 218 is used for mirroring data stored in the storage device (STORAGE) 217, or as an expansion area.
A controller unit 216 is a device that controls the MFP 100 . The controller unit 216 includes a CPU 201, a RAM 202, a ROM 203, a disk controller (DISK CONTROLLER) 204, a network interface (Network I/F) 205, an operation unit interface (PANEL I/F) 206, and an image bus interface (IMAGE BUS I/F). 208. These units are connected to system bus 219 . The controller unit 216 also has a raster image processor (RIP) 209 , a printer interface 210 , a scanner interface 212 and an image processing section 214 . These units are connected to an image bus 215 for transferring image data.

A CPU 201 is a processor that controls the MFP 100 . A RAM 202 is a system network memory for the operation of the CPU 201, a program memory for recording programs, and an image memory for temporarily recording image data. A ROM 203 stores a system boot program and various control programs. The disk controller 204 controls writing and reading data from the system bus 219 to the storage devices 217 and 218 .
An operation unit interface 206 is an interface unit with an operation unit (PANEL) 207 and outputs data to be displayed to the operation unit 207 . The operation unit interface 206 transmits information input by the user from the operation unit 207 to the CPU 201 .
A network interface 205 connects to a LAN and performs data input/output with a PC or other external devices.
The image bus interface 208 is a bus bridge that connects the system bus 219 and the image bus 215 and converts the data structure. The image bus 215 is configured with a PCI bus or IEEE1394. A raster image processor 209 develops the print data into a bitmap image. The printer interface 210 connects the printer unit 211 and the controller unit 216, and performs synchronous/asynchronous conversion of image data. A scanner interface 212 connects the scanner unit 213 and the controller unit 216, and performs synchronous/asynchronous conversion of image data. An image processing unit 214 corrects, processes, and edits input image data, and performs printer correction, resolution conversion, and the like on print output image data. The image processing unit 214 also rotates image data, and performs compression/decompression processing such as JPEG for multilevel image data and JBIG, MMR, MH for binary image data.
The CPU 201 implements the functions of the MFP 100 and the processing of flowcharts in FIGS.

(storage device configuration)
FIG. 2 is an image diagram of the area configuration of the storage device 217 mounted on the MFP 100. As shown in FIG.
The entire storage area 220 of the storage device 217 is divided into several areas (partitions) and used for different purposes. As an example, the MFP 100 divides the storage device 217 into a system area 221, an application area 222, a temporary data area 223, an image data processing area 224, a box data area 225, and a log data area 226 for use. System area 221 stores resource data such as programs and languages for operating MFP 100 . The application area 222 is an area used to store expansion software additionally installed in the MFP 100 and to store data generated and acquired by the expansion software. Temporary data area 223 is an area for storing data that is temporarily generated in order for MFP 100 to operate. The image data processing area 224 is an area for temporarily storing the image processing result of the data to be printed. A box data area 225 is an area for reusing image data of scanned originals and image data received via the network interface 205 . The log data area 226 is an area for storing logs of the operation status of the MFP 100 and the execution results of printing and scanning.
The storage device 217 stores data for various purposes as described above. Data is temporarily stored as a file in the image data processing area 224 when the MFP 100 performs a printing operation, but when the printing process is completed, the file becomes unnecessary and is deleted. If only the file system erasing process is executed here, only the management data relating to the file will be erased, and the file data will remain on the storage device 217 . In this embodiment, erasing processing for overwriting the data portion of a file with specific data will be described.

(Storage device configuration management table)
FIG. 3 is a diagram showing a partition configuration management table of the storage device 217 shown in FIG.
In FIG. 3, the partition configuration management table 300 has No. , CLEARFlag, CLEARLogic, PartitionLabel, PartitionSize, and Usage. The CPU 201 holds and manages the partition configuration management table in the storage device 217 . Also, the CPU 201 reads and uses the partition configuration management table from the storage device 217 at startup. How to use it will be described later. No. is an administrative serial number that identifies the partition. CLEARFlag is a flag indicating whether or not the partition is to be overwritten when deleting files on the partition. If it is "0", it indicates not to overwrite. If it is "1", it indicates overwriting. Here, overwriting erasure means not only erasing the file system, but also erasing from the storage device 217 by overwriting the file data area on the storage device 217 by a method described later. The value of CLEARFlag is determined in advance according to the purpose of the corresponding partition, and "1" is defined for a partition containing important data such as image data or temporary data or confidential data. FIG. 3 shows that the temporary data area 223, the image data processing area 224, and the box data area 225 are to be overwritten. CLEARLogic indicates an erasing method of overwriting erasing, "0" means not overwriting erasing, "1" means writing zero data once, "2" means writing random data once, and " 3” indicates that random data is written three times. CLEARLogic is set by the user in the manner described below. The erasing method is not limited to this, and the number of times of writing and data to be written may be settable.
PartitionLabel is a character string for identifying a partition by name. PartitionSize indicates the size of the corresponding partition in MB. Usage is auxiliary information and indicates what kind of data is stored in the partition.

The partition configuration management table 300 of FIG. 3 is obtained when the CPU 201 executes file deletion, and is used to specify the deletion method. More specifically, when the file descriptor of the file to be erased specifies the area in which the file exists, the CPU 201 uses the partition configuration management table 300 to specify what erasing method should be used to erase the area. .
As described above, CLEARLogic in the partition configuration management table 300 can be designated by the CPU 201 based on user operation via the operation unit 207 of the MFP 100 . FIG. 4 is a diagram showing an example of a UI screen for setting an erasing method. The UI screen in FIG. 4 is displayed on the operation unit 207 by the CPU 201 . The UI screen in FIG. 4 is an example when an HDD is installed as the storage device 217 in the MFP 100 . When receiving the setting of the data management menu, the CPU 201 displays a data management setting screen 400 shown in FIG. 4A, when the data erasure setting is selected, the CPU 201 displays the data erasure setting screen 410 in FIG. 4B on the operation unit 207. FIG. In FIG. 4B, "ON/OFF of data erasure" 411 is an item for setting whether or not to overwrite data. FIG. 4C shows a UI screen 420 displayed on the operation unit 207 when "ON/OFF of data deletion" 411 is selected. On the UI screen 420, "ON" or "OFF" can be set, and "ON" indicates that overwriting is to be performed. "Deletion timing setting" 412 is an item for setting the timing of overwriting data, and "during job processing" or "after job processing" can be selected. “Job processing” indicates that when the MFP 100 executes a job such as printing, files that become unnecessary while the job is being executed are overwritten and erased each time. "After job processing" indicates that when the MFP 100 executes a job such as printing, the files are not deleted during execution of the job, but are collectively overwritten and erased after the job is completed. If "after job processing" is selected, the use of the CPU 201 for overwrite erasure processing during job execution can be restricted, so that the job execution processing can be completed quickly. "Erase mode setting" 413 is an item for setting an erasing method when executing data overwrite erasure. FIG. 4(d) shows a UI screen 430 displayed on the operation unit 207 when "erasure mode setting" 413 is selected. At 430, "write 0 data once", "write random data once", and "write random data three times" can be set.
The CLEARLogic of the partition configuration management table 300 is set to "0" when "OFF" is set on the UI screen 420. FIG. If "ON" is set on the UI screen 420 and "Write 0 data once" is set on 430, "1" is set, and if "Write random data once" is set, "2" is set. If "write random data 3 times" is set, "3" is set.

(Information processing at startup of MFP 100)
Next, information processing when the MFP 100 is started will be described with reference to FIG.
In S<b>1001 , when the MFP 100 is activated, the CPU 201 acquires information on the storage device 217 via the disk controller 204 . The CPU 201 acquires information on the storage device 217, such as the manufacturer name, model number, capacity, number of rotations, and the like. Here, the number of revolutions indicates the number of revolutions per minute of the media in the storage device. In the case of HDD, a value such as 7200 is acquired as the number of revolutions. Since a semiconductor storage device such as an SSD does not rotate, a value indicating non-rotating media is obtained. In other words, by acquiring the rotational speed value, the CPU 201 can determine whether the storage device 217 mounted on the MFP 100 is an HDD or an SSD. The number of revolutions is an example of the type information of the nonvolatile storage device.
Next, in S1002, the CPU 201 reads the partition configuration management table 300 shown in FIG. 3 from the storage device 217, and makes settings for each partition. In setting the partition, the CPU 201 resets CLEARLogic of the read partition configuration management table 300 according to the device configuration.

In S1003, the CPU 201 acquires CLEARFlag of the partition configuration management table 300 and determines whether or not the partition is the target of erasure. If the CPU 201 determines that the partition is not to be erased, the process proceeds to S1005, and if it is determined that the partition is to be erased, the process proceeds to S1004.
In S1005, the CPU 201 sets CLEARLogic to "0".
In S1004, the CPU 201 determines whether or not the device mounted on the MFP 100 is a semiconductor memory device, based on the rotational speed information of the storage device 217 acquired in S1001. If the CPU 201 determines that it is a semiconductor memory device, it proceeds to S1005, and if it determines that it is not a semiconductor memory device, it proceeds to S1003 to confirm the next partition.
In S1005, the CPU 201 sets CLEARLogic to "0". If it is determined not to be a semiconductor memory device, the process advances to S1003 to confirm the next partition.
The CPU 201 terminates this process when confirmation of all partitions is completed.

(Print processing of MFP 100)
Next, in order to explain the data overwriting process of the MFP 100, information processing during printing will be explained using FIG.
In S<b>2001 , the CPU 201 receives print job data via the network interface 205 .
In step S<b>2002 , the CPU 201 stores the received print job data in the temporary data area 223 of the storage device 217 .
Further, in S2003, the CPU 201 reads the temporarily stored print job data from the storage device 217, and the raster image processor 209 generates bitmap data.
In S2004, the CPU 201 transmits the generated bitmap data to the printer unit 211 via the printer interface 210 to print.
After printing is completed, in S2005, the CPU 201 deletes the received data stored in the storage device 217 in S2002.

In S<b>2006 , the CPU 201 identifies the storage area from the file descriptor of the data to be deleted, and uses the partition configuration management table 300 to determine whether or not the data is to be overwritten. Here, since the received data is stored in the temporary data area 223, the value of CLEARLogic for the temporary data area 223 is acquired. If the acquired value is "0", the CPU 201 deletes only the management area of the file system without overwriting, and ends the processing of the flowchart shown in FIG. On the other hand, if the acquired value is "1" or more, the CPU 201 proceeds to S2007.
In S2007, the CPU 201 overwrites the target area using a predetermined erasing method.
If the storage device 217 mounted on the MFP 100 is a semiconductor storage device, as shown in the processing flow at startup in FIG. 5, the value of CLEARLogic is "0", so no overwrite processing is performed.

(Data erasure setting process of MFP 100)
Next, information processing for data erasure setting of the MFP 100 will be described with reference to FIG.
First, in S<b>3001 , the CPU 201 receives a data management screen display request via the operation unit interface 206 .
Next, in S3002, the CPU 201 determines whether or not the mounted device is a semiconductor memory device. The CPU 201 acquires information on the number of revolutions of the storage device 217 acquired in S1001 of FIG. 5, and determines whether or not it is a semiconductor storage device. The CPU 201 stores in the RAM 202 or the like the result of determining that the mounted device is a semiconductor memory device in the startup processing flow of FIG. may If the CPU 201 determines that it is not a semiconductor memory device, it proceeds to S3003, and if it determines that it is a semiconductor memory device, it proceeds to S3006.
In S3003, the CPU 201 displays the data management setting screen 400 in FIG. Furthermore, upon receiving a data erasure setting request via the data management setting screen 400 , the CPU 201 displays a data erasure setting screen 410 on the operation unit 207 . The processing of S3003 is an example of display control.
In S<b>3004 , the CPU 201 accepts a request to turn data erasure ON/OFF or change the erasure mode setting via the data erasure setting screen 410 .
In S<b>3005 , the CPU 201 stores the set values in the partition configuration management table 300 held in the storage device 217 .
In S3006, the CPU 201 displays the data management setting screen 450 shown in FIG. The "data deletion menu" is not displayed on the data management setting screen 450 shown in FIG. 8, and the user cannot change the data deletion setting. The processing of S3006 is an example of display control.

As described above, in the MFP 100 of the first embodiment, the display of the data management setting screen is switched according to the type of the installed storage device. As a result, it is possible to prevent the user from erroneously setting data erasure when a storage device in which the overwrite erasure function is not valid is installed. Also, by confirming the type of storage device installed at startup and resetting the overwrite-erase setting, the overwrite-erase function can be performed appropriately.

<Embodiment 2>
In the first embodiment, settings for overwrite processing when deleting data temporarily stored during execution of a job such as printing have been described. In the second embodiment, processing settings for erasing all data stored in the MFP 100 when the MFP 100 is discarded will be described.
FIG. 9 shows a UI screen for setting an erasing method for erasing all data stored in the MFP 100 . The UI screen in FIG. 9 is displayed on the operation unit 207 by the CPU 201 . The UI screen of FIG. 9 is displayed on the operation unit 207 of the MFP 100 when "initialize all data/settings" is selected on the data management setting screen 400 shown in FIG. 4A.
FIG. 9A is an execution screen 900 for “initialize all data/settings” when an HDD is installed as the storage device 217 in the MFP 100 . On the execution screen 900, the user can select a method of erasing data from a plurality of methods. On the execution screen 900, the user can select "write 0 data once", "write random data once", "write random data three times", and "write random data nine times". When one of the erasing methods is selected on the “initialize all data/settings” execution screen 900 and “execute” is selected, the CPU 201 erases the data stored in the storage device 217 . That is, the target system area and data area are overwritten and filled with predetermined numbers or random data. This effectively makes existing data unreadable.
FIG. 9B is an execution screen 910 for “initialize all data/settings” when an SSD is installed as the storage device 217 in the MFP 100 . The user cannot select the data erasing method on the execution screen 910 . When “execute” is selected on the “initialize all data/settings” execution screen 910 , the CPU 201 erases the data stored in the storage device 217 .
The screen displayed on the operation unit 207 when "initialize all data/settings" is selected on the data management setting screen 400 shown in FIG. 9A or 9B is determined based on the determination whether the storage device 217 is a semiconductor memory device.

All data erasure processing of MFP 100 will be described with reference to FIG.
In S<b>4001 , the CPU 201 accepts a request to erase all data via the operation unit interface 206 . At this time, the CPU 201 also acquires information on the data erasing method shown in FIG.
Upon receiving the all data erasure request, in S4002 the CPU 201 acquires the partition configuration management table 300 and executes erasure processing for each partition.
First, in S4003, the CPU 201 acquires CLEARFlag of the partition configuration management table 300, and determines whether the partition is to be erased. When the CPU 201 determines that the partition is not to be erased, the CPU 201 proceeds to confirm the next partition. On the other hand, when the CPU 201 determines that the data is to be erased, the process proceeds to S4004.
In S4004, the CPU 201 deletes all data of the target partition.
Next, in S4005, the CPU 201 determines whether or not the device mounted on the MFP 100 is a semiconductor memory device. If the CPU 201 determines that it is a semiconductor memory device, it proceeds to confirm the next partition. On the other hand, when the CPU 201 determines that it is not a semiconductor memory device, the process proceeds to S4006.
In S4006, the CPU 201 performs data overwriting processing on the entire target partition according to the erasing method acquired in S4001. In the present embodiment, a method in which data is not overwritten in the case of a semiconductor memory device has been described. However, the CPU 201 may perform an erasing method suitable for a semiconductor memory device, such as erasing using a "SecureErase" command, on the entire target partition. "SecureErase" is a technique for physically erasing almost all sectors in an SSD. Also, if both the OS and the SSD support the TRIM command, the erasing process may be performed by executing the TRIM command. The TRIM command can specify an entire block, which is a physical memory area having multiple pages, and physically erase data in the block.

As described above, in the MFP 100 of the second embodiment, the display of the all data deletion screen is switched according to the type of the installed storage device. As a result, it is possible to prevent the user from erroneously setting data erasure when a storage device in which the overwrite erasure function is not valid is installed. Also, when erasing data, the type of the storage device installed is checked, and the physical data erasing method including the overwrite erasing method is automatically determined, so that an appropriate erasing function can be performed.

<Other embodiments>
The present invention supplies a program that implements one or more functions of the above-described embodiments to a system or device via a network or storage medium. It can also be realized by a process in which one or more processors in the computer of the system or device reads and executes the program. It can also be implemented by a circuit (for example, ASIC) that implements one or more functions.

Although one example of the embodiment of the present invention has been described in detail above, the present invention is not limited to such a specific embodiment.
As for the hardware configuration of the MFP 100, a plurality of CPUs may exist, and the plurality of CPUs may execute processes based on programs stored in a ROM, storage device, or the like. Also, as the hardware configuration of the MFP 100, a GPU (Graphics Processing Unit) may be used instead of the CPU.

As described above, according to each of the above-described embodiments, it is possible to prevent the user from erroneously setting data erasure in the case of an external storage device in which the overwrite erasure function is not valid.

100 MFPs
201 CPUs

Claims (12)

A job processing device that executes a job,
When the nonvolatile storage device connected to the job processing device is a magnetic storage device, control is performed to allow a user to change operation settings related to an overwrite erasure function, and the job processing device is connected to the job processing device. a control means for controlling the operation setting not to be changed from the setting of not performing the overwrite erasure to another overwrite erasure setting when the present nonvolatile memory device is a semiconductor memory device ;
an execution means for executing a job;
Regardless of whether the nonvolatile storage device is the magnetic storage device or the semiconductor storage device, the data relating to the job executed by the execution means stored in the nonvolatile storage device is transferred to the above job after the job is executed. and deletion means for deleting from non-volatile storage ;
The overwrite-delete function overwrites the data area storing the data with different data after the data is deleted by the deleting means, and the job-related data generated by executing the job is the magnetic storage device. A job processing apparatus characterized by an erasing function that makes it difficult to restore from the nonvolatile storage device. 2. The job processing apparatus according to claim 1, wherein said job processing apparatus is a printing apparatus, and said job is a print job. 3. The job processing apparatus according to claim 1, further comprising determination means for determining whether the connected nonvolatile memory device is a semiconductor memory device. 4. The job processing apparatus according to claim 3, wherein said judgment means judges whether or not it is a semiconductor memory device based on information obtained from said connected nonvolatile memory device. 5. The job processing apparatus according to claim 4, wherein said judgment means judges whether or not it is a semiconductor memory device based on information indicating the number of revolutions obtained from said nonvolatile memory device. When the non-volatile storage device connected to the job processing device is a magnetic storage device, the control means provides a first display item for displaying an operation setting screen for performing operation settings related to the overwrite erasure function. is displayed on the first setting screen, and the first setting screen is displayed when the nonvolatile storage device connected to the job processing device is a semiconductor storage device. 6. The job processing apparatus according to any one of claims 1 to 5, wherein the first setting screen that does not include the first display item is displayed when an operation to do so is received. 7. The job processing apparatus according to claim 6, wherein the operation setting screen includes a display item for setting whether or not to enable the overwrite deletion function. 8. The job processing apparatus according to claim 6, wherein the operation setting screen includes a display item for setting timing for overwriting data. 9. The job processing apparatus according to any one of claims 6 to 8, wherein the operation setting screen includes display items relating to designation of an overwrite erasure method when executing overwrite erasure of data. The first setting screen has a second display for displaying a delete screen for accepting an operation for initializing all data regardless of the type of nonvolatile storage device connected to the job processing device. 10. A job processing apparatus according to any one of claims 6 to 9, wherein items are displayed. A control method for a job processing device that executes a job, comprising:
When the nonvolatile storage device connected to the job processing device is a magnetic storage device, control is performed to allow a user to change operation settings related to an overwrite erasure function, and the job processing device is connected to the job processing device. a control step of controlling such that the operation setting is not changed from the setting of not performing the overwrite-erase to another overwrite-erase setting when the present non-volatile memory device is a semiconductor memory device;
an execution process for executing the job;
Regardless of whether the non-volatile storage device is the magnetic storage device or the semiconductor storage device, the data related to the job executed in the execution step stored in the non-volatile storage device is stored after the job is executed. and a deletion step of deleting from the non-volatile storage device ,
The overwrite-delete function overwrites the data area in which the data is stored with different data after the data is deleted in the deletion step, and the job-related data generated by executing the job is stored in the magnetic storage device. A control method for a job processing apparatus, characterized by an erasing function that makes it difficult to restore from a certain nonvolatile storage device. A program for causing a computer to execute the method for controlling the job processing apparatus according to claim 11 .

Images