JP7397398B2 - Information processing device, information processing method, and information processing program - Google Patents

Description

The present application relates to a technology for externally storing setting information set in an information processing device.

Patent Document 1 discloses an electronic device that can edit parameter information according to instructions input by a user when writing parameter information stored in a parameter information storage unit to an external memory connected to an interface unit. Equipment is listed.

Japanese Patent Application Publication No. 2005-303845

However, in the electrical device described in Patent Document 1, there is a risk that information that should not be written to the external memory may be written to the external memory due to a user's erroneous operation or the like.

Therefore, an object of the present application is to provide a technology that enables more appropriate management of setting information to be stored in an external storage device.

In order to achieve the above object, the information processing device of the present application includes a storage unit that stores first setting information, a control unit that operates based on the first setting information, and a communication interface, and the CPU 101 is connected to the USB IF 107. If a storage instruction to store the second setting information in the external storage device is received, a request for input of authentication information is output, and in response to a request for input of the administrator password, the input of the administrator password is skipped. When the skip instruction is received, information obtained by removing exclusion information from the first setting information stored in the NVRAM 104 is stored in the USB memory 200 as second setting information.

According to the present application, it becomes possible to more appropriately manage setting information to be stored in an external storage device.

FIG. 1 is a block diagram showing a control configuration of a communication system according to a first embodiment of the present application. 2 is a diagram showing an example of setting information stored in the USB memory shown in FIG. 1. FIG. 2 is a diagram showing an example of a setting screen for configuring the multifunction device shown in FIG. 1 from the PC shown in FIG. 1 using a web browser. FIG. 2 is a diagram showing a table that defines the presence or absence of confidential information and the presence or absence of personal information for each setting group for the multifunction device shown in FIG. 1. FIG. 2 is a diagram showing an example of a shortcut editing screen ((a)) and an example of an administrator password input screen ((b)) displayed on a panel of the multifunction device shown in FIG. 1. FIG. 2 is a flowchart showing the procedure of a first Export process executed by the multifunction device shown in FIG. 1, particularly the CPU. FIG. 7 is a diagram showing an example of a setting screen for configuring the multifunction peripheral according to the second embodiment of the present application from the PC side using a web browser. FIG. 7 is a diagram showing a table that defines the presence or absence of support restriction information for each setting group for a multifunction peripheral according to a second embodiment of the present application. FIG. 7 is a diagram showing an example of a user selection screen ((a)) and an example of a PIN input screen ((b)) displayed on a panel of a multifunction peripheral according to a second embodiment of the present application. 12 is a flowchart showing the procedure of a second Export process executed by the multifunction device, particularly the CPU, according to the second embodiment of the present application. 11 is a flowchart showing a continuation of the second Export process of FIG. 10.

Hereinafter, embodiments of the present application will be described in detail based on the drawings.

(First embodiment)
FIG. 1 shows a control configuration of a communication system 1 according to a first embodiment of the present application. The communication system 1 includes a PC (Personal Computer) 10, a multifunction device 100, and a router 32. Hereinafter, the multifunction device 100 will be referred to as an MFP 100. Note that MFP is an abbreviation for Multifunction Peripheral.

The PC 10 mainly includes a CPU (Central Processing Unit) 12, a storage section 14, a panel 16, a mouse 18, and a communication IF (Interface) 20. The CPU 12, storage unit 14, panel 16, mouse 18, and communication IF 20 are capable of communicating with each other via an input/output port 22.

The communication IF 20 connects the PC 10 to a communication network. Since the communication network is assumed to be a wired or wireless LAN (Local Area Network) in this embodiment, the communication IF 20 is a LANIF (Local Area Network Interface) or a WLAN IF (Wireless LAN Interface). Of course, a wired LAN and a wireless LAN may exist at the same time, and in this case, the communication IF 20 includes both a LAN IF and a WLAN IF. In this embodiment, the PC 10 is interconnected with the MFP 100 via a router 32. This allows the PC 10 to send and receive various data to and from the MFP 100.

The panel 16 has a display surface and displays various information on the display surface. The mouse 18 is used to move a cursor displayed on the display surface of the panel 16, and accepts drag operations, click operations, etc. by the user.

The CPU 12 executes processing according to the control program 26 in the storage unit 14. The control program 26 is a program for causing the MFP 100 to perform scan processing, copy processing, print processing, FAX processing, and the like.

Note that the storage unit 14 is configured by combining a RAM (Random Access Memory), a ROM (Read Only Memory), a flash memory, an HDD (Hard Disk Drive), a buffer included in the CPU 12, and the like. The storage unit 14 also includes a data storage area 28 . The data storage area 28 is an area for storing scan data acquired from the MFP 100, data necessary for executing the control program 26, and the like.

The MFP 100 includes a CPU 101, a ROM 102, a RAM 103, and an NVRAM (Non-Volatile RAM) 104.

The CPU 101 controls the entire MFP 100, and in this embodiment, it controls the print engine 111 and the reading engine 112 via an engine IF (Interface) 110 according to setting information. Note that the setting information, engine IF 110, print engine 111, and reading engine 112 will be described later.

ROM 102 is a memory that stores a control program executed by CPU 101. The CPU 101 reads a control program stored in the ROM 102 and executes various processes.

The RAM 103 is a memory that temporarily stores image data and the like. The RAM 103 is also used as a storage area for temporarily storing data, signals, etc. used when the CPU 101 executes a control program, or as a work area for data processing.

NVRAM 104 is a nonvolatile memory that stores setting information and the like.

The MFP 100 also includes a panel 105 and keys 106.

Panel 105 is a touch panel in this embodiment, and various screens are displayed on panel 105 depending on the state of MFP 100. The user can perform an input operation by pressing an input button (not shown) on the screen.

The key 106 is a hard key, that is, a key formed by hardware. In this embodiment, keys 106 include a stop key (not shown).

The stop key is a key that is pressed when canceling various operations or terminating various settings.

In addition to the stop key, items belonging to the key 106 include a power switch, a reset switch (both not shown), and the like.

Furthermore, the MFP 100 includes a USB (Universal Serial Bus) IF 107 and a communication IF 108.

The USBIF 107 is an IF (Interface) for connecting an external USB device, and in this embodiment, the USB memory 200 is connected. A USB memory is sometimes referred to as a USB flash memory or a USB flash drive.

Communication IF 108 connects MFP 100 to a communication network. As described above, in this embodiment, the MFP 100 and the PC 10 are connected to each other via the router 32.

MFP 100 also includes an engine IF 110. A print engine 111 and a reading engine 112 are connected to the engine IF 110.

The print engine 111 is an engine for printing an image on a sheet, and employs an electrophotographic method, an inkjet method, a thermal method, or the like.

The reading engine 112 is an engine for reading images from a document, and includes a CCD (Charge Coupled Device), a CIS (Contact Image Sensor), and the like.

The engine IF 110 is a control circuit for controlling the print engine 111 and the reading engine 112, and the CPU 101 controls the print engine 111 and the reading engine 112 via the engine IF 110.

The engine IF 110 includes a first engine IF (not shown) for controlling the print engine 111 and a second engine IF (not shown) for controlling the reading engine 112. The first engine IF outputs a control signal to the print engine 111, outputs image data to the print engine 111, etc. based on instructions from the CPU 101. The second engine IF outputs a control signal to the reading engine 112 and inputs image data from the reading engine 112 based on instructions from the CPU 101.

Furthermore, MFP 100 includes an image processing circuit 120.

The image processing circuit 120 includes a first image processing circuit (not shown) and a second image processing circuit (not shown). The first image processing circuit rasterizes image data related to a print job. The rasterized image data is temporarily stored in the RAM 103 and output to the print engine 111. The second image processing circuit processes the image data read from the document by the reading engine 112 into digital data. The image data processed into digital data is transmitted to the outside via the communication IF 108, or is supplied to the print engine 111 and output onto a sheet. The image data read from the document by the reading engine 112 is temporarily stored in the RAM 103 and output to the second image processing circuit. Here, in this embodiment, "reading" may be referred to as "scanning".

The CPU 101, ROM 102, RAM 103, NVRAM 104, panel 105, key 106, USB IF 107, communication IF 108, engine IF 110, and image processing circuit 120 are interconnected by a bus 130.

The MFP 100 of this embodiment exports setting information via the USB memory 200. The export starts when the user connects the USB memory 200 to the USB IF 107 while pressing the stop key. Then, the export is completed when the CPU 101 stores the setting information stored in the NVRAM 104 into the USB memory 200.

FIG. 2 is a diagram showing an example of setting information 210 stored in the USB memory 200. Setting information 210 shown in FIG. 2 is, for example, exported setting information stored in the NVRAM of another MFP (not shown) different from MFP 100. When exporting the setting information 210 to the USB memory 200, in this embodiment, it is actually stored in JSON (JavaScript (registered trademark) object notation) format. In FIG. 2, for ease of viewing, the notation is different from the JSON format for convenience. Of course, the storage format of the setting information is not limited to this, and may be in other formats such as, for example, CSV (Comma-Separated Values) format.

The setting information 210 is stored in the USB memory 200 with a file name of, for example, "backup.json."

The setting information 210 shown in FIG. 2 includes MFP installation location: Team1, MFP user contact information: team1@mail.co.jp, MFP IP (Internet Protocol) address: 123.456.123.456, and mail server IP address: 123.123.123.456, including scan settings, copy settings, model name, and serial number.

The scan settings are settings for processing related to the reading engine 112, and include display name: ScanToMike, scan transmission settings: file://server1/share, scan resolution: 300dpi, duplex scan: On, and color: On. There is.

The display name is information for displaying the setting name on the MFP panel.

The scan transmission setting is a destination when image data related to a scanned image is transmitted from the communication IF 108 to the communication network. The scan transmission settings are not limited to the URL shown in FIG. 2, but may also be an IP address or an email address.

"Double-sided scan: On" means to enable the setting to scan images from both sides of the document, and "Double-sided scan: Off" means to disable the setting to scan images from both sides of the document. This means setting the image to be scanned from only one side.

"Color: On" means enabling the setting to read color images from the original, and "Color: Off" means disabling the setting to read color images from the original and setting to read monochrome images from the original. It means to do.

The CPU 101 displays "ScanToMike" as the setting name on the panel 105 based on "Display name: ScanToMike". Here, the setting information shown in FIG. 2 that is associated with “display name: ScanToMike” refers to setting information related to settings that the user can select from a plurality of settings on the panel 105. However, the present invention is not concerned with the above, and may be setting information related to settings that are fixedly set in the MFP. Fixed means, for example, that the user is restricted or not allowed to select other settings.

The CPU 101 transmits image data related to the image read by the reading engine 112 to file://server1/share based on "scan transmission setting: file://server1/share". The CPU 101 controls the reading engine 112 based on "scan resolution: 300 dpi" to read the image at a resolution of 300 dpi. The CPU 101 controls the reading engine 112 based on "Double-sided scan: On" to read images from both sides of the document. Based on "color: On", the CPU 101 controls the reading engine 112 to read color images from both sides of the document.

The copy settings are settings for processing related to the reading engine 112 and print engine 111, and include display name: Copy1, scan resolution: 200 dpi, duplex scan: On, color: On, and duplex printing: On.

"Color: On" means to enable the setting to form a color image on the sheet, "Color: Off" means to disable the setting to form a color image on the sheet and form a monochrome image on the sheet. This means that the settings are set as follows.

"Double-sided printing: On" means to enable the setting to form images on both sides of the sheet, and "Double-sided printing: Off" means to disable the setting to form images on both sides of the sheet. This means that the setting is to form an image on only one side.

The CPU 101 controls the print engine 111 based on the copy setting "color: On" to form a color image on a sheet. The CPU 101 controls the print engine 111 to form images on both sides of the sheet based on the copy setting "Double-sided printing: On".

FIG. 3 shows an example of a setting screen 16a for configuring the MFP 100 from the PC 10 side. When a web browser is started on the PC 10 and the IP address of the MFP 100 is entered, a web page with links to various management functions is displayed on the browser. The management functions include, for example, basic settings, address book settings, fax settings, copy settings, print settings, scan settings, administrator settings, and network settings. In order to perform administrator settings and network settings, authentication using an administrator password is required, and in order to perform other settings, authentication using a general user password is required. Note that all settings can be made if authentication is performed using the administrator password. FIG. 3 shows an example of the copy setting screen 16a for performing copy settings, and shows a state in which the user selects the Copy tab 16a4 after performing authentication using the administrator password.

In the copy settings, multiple settings such as resolution (Quality), density (Density), and contrast (Contrast) can be made. That is, the copy settings form a setting group consisting of a plurality of settings that can be set in the copy function, and are assigned to the copy tab 16a4. Other settings groups, specifically, General settings, Address Book settings, Fax settings, Print settings, Scan settings, Administrator settings, and Network settings. Settings (Network) are also assigned to the General tab 16a1, Address Book tab 16a2, Fax tab 16a3, Print tab 16a5, Scan tab 16a6, Administrator tab 16a7, and Network tab 16a8, respectively, and by selecting any of the tabs, You can transition to the settings screen for the corresponding settings group.

FIG. 4A shows a table that defines the presence or absence of confidential information and the presence or absence of personal information for each setting group. The administrator settings (Administrator) include confidential information, and the confidential information included in the administrator settings may include, for example, the administrator password. Further, the network settings (Network) also contain confidential information, and examples of the confidential information included in the network settings include the user ID and authentication password of the mail server. Furthermore, although the address book setting (Address Book) includes personal information, examples of the personal information included in the address book setting include an e-mail address, address, and name.

FIGS. 4(b) and 4(c) show tables in which administrator permission settings are added to the table in FIG. 4(a). While the table in FIG. 4(b) is, for example, the initial state at the time of factory shipment, the table in FIG. 4(c) shows that the administrator has changed the address book settings from "prohibited" to "allowed". ” shows the changed settings. Note that how to use the table in FIG. 4 will be explained when the first Export process in FIG. 6 is explained.

Note that a shortcut setting (Short Cut) is included in the setting group of the table in FIG. A shortcut is one in which a plurality of settings are assigned to one shortcut, and by simply pressing that one shortcut, the plurality of assigned settings can be set at once.

FIG. 5A shows an example of the shortcut setting screen 105a displayed on the panel 105. As shown in FIG. 5A, the configuration is such that a maximum of six shortcuts can be registered for one tab 105a1. Since eight tabs are provided, a maximum of 48 shortcuts can be registered in this embodiment.

FIG. 5B is a diagram showing an example of the administrator password input screen 105b displayed on the panel 105. The timing at which the administrator password input screen 105b is displayed will be explained when the first Export process in FIG. 6 is explained.

FIG. 6 is a flowchart showing the procedure of the first Export process executed by the MFP 100, particularly the CPU 101. Hereinafter, in the description of each processing procedure, a step will be denoted as "S".

In FIG. 6, first, the CPU 101 determines whether or not the USB memory 200 is detected (S1). As described above, the export of the setting information starts when it is detected that the USB memory 200 is connected to the USB IF 107 while the user presses the stop key. Therefore, the determination in S1 is made based on detecting not only that the USB memory 200 is connected to the USB IF 107 but also that the stop key has been pressed.

If it is determined in S1 that the USB memory 200 has not been detected (S1: NO), the CPU 101 returns the process to S1.

On the other hand, if it is determined in S1 that the USB memory 200 has been detected (S1: YES), the CPU 101 displays the administrator password input screen 105b shown in FIG. 5(b) (S2).

Next, the CPU 101 determines whether the user has performed input skipping (S3). Skip input is performed by the user pressing the SKIP button 105b1 on the administrator password input screen 105b. Therefore, the determination in S3 is made based on whether or not the SKIP button 105b1 has been pressed.

If it is determined in S3 that the input has been skipped (S3: YES), the CPU 101 acquires the setting information of the first setting group (S4). At this time, the first setting group is determined with reference to the table shown in FIG. 4(c). In the table of FIG. 4C, the first setting group is the basic settings (General), so the CPU 101 acquires the setting information included in the basic settings.

Next, the CPU 101 determines whether the acquired setting group includes confidential information (S5). A determination as to whether confidential information is included is also made with reference to the table in FIG. 4(c). Since the basic settings do not include confidential information, the determination at S5 is "NO".

If it is determined in S5 that confidential information is not included (S5: NO), the CPU 101 determines whether personal information is included in the acquired setting group (S6). Whether or not personal information is included is also determined with reference to the table in FIG. 4(c).

If it is determined in S6 that personal information is not included (S6: NO), the CPU 101 temporarily outputs the acquired setting information of the setting group (S7). Here, "temporary output" means storing in a temporary area (not shown) temporarily provided in the RAM 103.

Next, after acquiring the setting information of the next setting group (S8), the CPU 101 determines whether there is no next setting group (S9). Since the next setting group is the address book setting (Address Book), the CPU 101 acquires the setting information of the address book setting in S8, and determines in S9 that there is the next setting group (S9: NO). .

In the determination at S9, if it is determined that there is the next setting group (S9: NO), the CPU 101 returns the process to the above S5 and repeats the processes from S5 to S9.

On the other hand, if it is determined in S5 that the acquired setting group includes confidential information (S5: YES), the CPU 101 determines whether export permission is set (S10). In this determination, if it is determined that the export permission setting has been made (S10: YES), the CPU 101 advances the process to the above S7 and temporarily outputs the configuration information of the acquired configuration group. The export permission setting for the address book settings, that is, the administrator permission setting, has been changed from "prohibited" to "permitted" in the table of FIG. 4(c), so the CPU 101 determines "YES" in S10. do.

On the other hand, if it is determined in S10 that the export permission setting has not been made (S10: NO), the CPU 101 advances the process to S8, and acquires the setting information of the next setting group.

On the other hand, if it is determined in S6 that the acquired setting group includes personal information (S6: YES), the CPU 101 advances the process to S10 above. Since the process of S10 has been described above, its explanation will be omitted.

In this way, the processes of S5 to S10 are performed for all the setting groups included in the table of FIG. When the acquisition of the setting information is completed (S9: YES), the CPU 101 determines whether or not there is temporary output information (S11). In this judgment, if it is determined that there is temporary output information (S11: YES), the CPU 101 edits the temporary output information into export information and stores it in the USB memory 200 (S12). 1 Export processing ends. Here, "export information" is information converted into the above JSON format.

In this way, if the administrator password is skipped without being entered, it is possible to export configuration information for configuration groups from which configuration groups containing at least one of confidential information and personal information have been excluded from all configuration groups. can. The administrator can select and set whether or not to exclude them.

On the other hand, if it is determined in S11 that there is no temporary output information (S11: NO), the CPU 101 skips S12 and ends the first Export process.

On the other hand, if it is determined in the above S3 that input skipping has not been performed (S3: NO), the CPU 101 inputs the administrator password input by the user from the administrator password input screen 105b in FIG. 5(b) above. , for example, into a predetermined area (not shown) of the RAM 103 (S20). Then, when the user presses the OK button 105b2 in the administrator password input screen 105b in FIG. 5(b), the CPU 101 verifies the input administrator password (S21) and determines whether the verification is OK (S22).

If it is determined in S22 that the verification is not OK (S22: NO), the CPU 101 returns the process to S20.

On the other hand, if it is determined in S22 that the verification is OK (S22: YES), the CPU 101 temporarily outputs the setting information of all setting groups (S23), and then advances the process to S11 above. In this case, since it is determined in S11 that there is temporary output information (S11: YES), the CPU 101 edits the temporary output information into export information and stores it in the USB memory 200 (S12). .

In this way, once the administrator password is entered and verification is determined to be OK, configuration information for all configuration groups can be exported, regardless of whether confidential or personal information is included. can.

As described above, the MFP 100 of this embodiment includes the NVRAM 104 that stores first setting information, the CPU 101 that operates based on the first setting information, and the USBIF 107.

When the CPU 101 receives a storage instruction to store the second setting information in the USB memory 200 connected to the USB IF 107, the CPU 101 outputs an administrator password input request, and responds to the administrator password input request. , when a skip instruction to skip inputting the administrator password is received, information obtained by removing exclusion information from the first setting information stored in the NVRAM 104 is stored in the USB memory 200 as second setting information.

Here, "outputting an administrator password input request" corresponds to displaying the administrator password input screen 105b of FIG. 5(b) on the panel 105 in this embodiment. However, the present invention is not limited to this, and includes, for example, transmitting screen information for displaying an input field for inputting authentication information on the external device to an external device such as the PC 10 or a mobile terminal (not shown). . As the transmission IF, for example, a wireless IF such as NFC (Near Field Communication), Bluetooth (registered trademark), WiFi, or wireless LAN, or a wired IF such as wired LAN can be used.

In this way, in the MFP 100 of this embodiment, it is possible to more appropriately manage the setting information stored in the USB memory 200.

Incidentally, in this embodiment, the MFP 100 is an example of an "information processing device." NVRAM 104 is an example of a "storage unit". The CPU 101 is an example of a "control unit". The USBIF 107 is an example of a "communications interface." The USB memory 200 is an example of an "external storage device." The administrator password is an example of "authentication information."

Further, the excluded information includes at least one of confidential information and personal information.

This can prevent information that should not be written from being written to the USB memory 200.

Further, the confidential information includes authentication information.

Further, the personal information includes address book information.

Further, the exclusion information can be set with the authority of an administrator who can store all of the first setting information in the USB memory 200.

This makes it possible to more appropriately manage the setting information stored in the USB memory 200.

(Second embodiment)
Next, a communication system according to a second embodiment of the present application will be described.

The communication system of this embodiment differs from the communication system 1 of the first embodiment only in a part of the control processing, so the hardware thereof is that of the communication system 1, that is, the same as that of FIG. The hardware described above will be used, and the same code "1" will be used. Further, the reference numerals of each component will be the same as those shown in FIG. 1.

Similar to FIG. 3 above, FIG. 7 shows an example of the setting screen 16b for configuring the MFP 100 from the PC 10 side. FIG. 7 shows an example of the administrator setting screen 16b for performing administrator settings, and shows a state in which the user selects the Administrator tab 16b7 after performing authentication using the administrator password.

In the communication system 1 of the first embodiment, the administrator can set permissions for a setting group that includes at least one of confidential information and personal information, regardless of the user. In contrast, the communication system 1 of this embodiment is different in that permission settings can be made for each user for a specific setting group. However, the specific setting group is not limited to a setting group that includes at least one of confidential information and personal information, as in the communication system 1 of the first embodiment.

FIG. 8 shows a table that defines whether or not there is support restriction information for each setting group. As shown in Figure 8, fax settings (Fax), copy settings (Copy), print settings (Print), and scan settings (Scan) have information that restricts the corresponding functions, so each user can be restricted or allowed.

As shown in FIG. 7, restrictions and permissions on functions for each user are performed by checking or deleting checkboxes provided for each user and each function. For example, in the case of User1, the print setting (Print) checkbox is not marked, so export of the print setting information is permitted.

Note that although the USB settings are not defined as a setting group in the table of FIG. 8, this is only done this way for convenience; even if they are defined as a setting group in the table of FIG. good. Here, "Direct Print" is a function to print files in the USB memory 200 directly with the MFP 100 without going through the PC 10. Furthermore, “Scan to” is a function for storing scan data acquired by the scan function in the USB memory 200.

FIG. 9A shows an example of the user selection screen 105c displayed on the panel 105. Further, FIG. 9(b) shows an example of a PIN (Personal Identification Number) input screen 105d displayed on the panel 105. Note that how to use each screen 105c, 105d, etc. will be explained together with the explanation of the second Export process in FIGS. 10 and 11.

10 and 11 show the procedure of the second Export process executed by the MFP 100 of this embodiment, particularly the CPU 101.

In FIG. 10, first, the CPU 101 determines whether a login start operation has been performed (S31). Here, there are two types of "login start operation" in this embodiment. One is the operation of displaying the administrator password input screen 105b shown in FIG. 5(b) on the panel 105. The other operation is to display the user selection screen 105c shown in FIG. 9(a) on the panel 105.

If it is determined in S31 that there is no login start operation (S31: NO), the CPU 101 returns the process to S31.

On the other hand, if it is determined in S31 that a login start operation has been performed (S31: YES), the CPU 101 inputs a login ID (Identification)/password (S32). However, on the administrator password input screen 105b, the CPU 101 does not request the input of the login ID. Therefore, in this case, in the process of S32, the CPU 101 inputs the administrator password input by the user into, for example, a predetermined area (not shown) of the RAM 103. On the other hand, on the user selection screen 105c, pressing either of the user selection buttons 105c1 or 105c2 corresponds to inputting a login ID. In response to pressing either the user selection button 105c1 or 105c2, the CPU 101 displays the PIN input screen 105d shown in FIG. 9(b) above on the panel 105. Then, when the user inputs a PIN from the PIN input screen 105d, the CPU 101 inputs the PIN into a predetermined area of the RAM 103.

Next, the CPU 101 executes authentication (S33), and determines whether the authentication is OK (S34). Note that the process of S33 is triggered by pressing the OK button 105b2 on the administrator password input screen 105b, as described above, and when the OK button 105d1 is pressed on the PIN input screen 105d.

If it is determined in S34 that the authentication is not OK (S34: NO), the CPU 101 returns the process to S32.

On the other hand, if it is determined in S34 that the authentication is OK (S34: YES), the CPU 101 determines whether or not the USB memory 200 is detected in the same manner as in S1 above (see FIG. 6). (S35). Similar to the determination in S1, the determination in S35 is also based on detecting not only that the USB memory 200 is connected to the USB IF 107 but also that the stop key has been pressed.

If it is determined in S35 that the USB memory 200 has not been detected (S35: NO), the CPU 101 ends the second Export process.

On the other hand, if it is determined in S35 that the USB memory 200 has been detected (S35: YES), the CPU 101 determines whether the administrator has logged in (S36).

If it is determined in S36 that the administrator has not logged in (S36: NO), the CPU 101 displays an export access authentication code input screen on the panel 105 (S37). The export access authentication code is an authentication code that allows configuration information of all configuration groups to be exported without authentication using an administrator password. Note that the access authentication code input screen has the same screen configuration as the administrator password input screen 105b shown in FIG. 5(b) above. That is, the export access authentication code input screen includes an authentication code input field, a keyboard, a SKIP button, and an OK button.

Next, the CPU 101 determines whether the user has skipped input in the same manner as in S3 above (S38). In this determination, if it is determined that the input has been skipped (S38: YES), the CPU 101 acquires the restriction information of the logged-in user (S51 in FIG. 11). For example, if the logged-in user is "User2" in FIG. 7, the restricted information for the logged-in user is "checked" in the checkboxes related to the print function, scan function, and fax function. In other words, export of print settings (Print), scan settings (Scan), and fax settings (Fax) is restricted.

Next, the CPU 101 obtains the setting information of the first setting group in the same manner as in S4 above (S52). At this time, the first setting group is determined with reference to the table in FIG. In the table of FIG. 8, the first setting group is the basic settings (General), so the CPU 101 acquires the setting information included in the basic settings.

Next, the CPU 101 determines whether the functions related to the acquired setting group are restricted (S53). This determination is made based on the login user restriction information acquired in S51 above. Since the functions related to basic settings are not restricted from being exported, the determination in S53 is "NO".

If it is determined in S53 that the functions related to the setting group are not restricted (S53: NO), the CPU 101 temporarily outputs the acquired setting information of the setting group in the same manner as in S7 above (S54). ), the process advances to S55.

On the other hand, if it is determined in S53 that the function related to the setting group is restricted (S53: YES), the CPU 101 skips S54 and advances the process to S55.

In S55, the CPU 101 acquires the setting information of the next setting group in the same manner as in S8 above. Then, the CPU 101 determines whether or not there is a next setting group in the same manner as in S9 described above (S56). Since the next setting group is the address book setting (Address Book), the CPU 101 acquires the setting information of the address book setting in S55, and determines that there is the next setting group in S56 (S56: NO). .

If it is determined in S56 that there is a next setting group (S56: NO), the CPU 101 returns the process to S53 and repeats the processes in S53 to S56.

As the process progresses and the CPU 101 obtains the fax settings (Fax) in S55, the function related to the fax settings is restricted from being exported, so the judgment in S53 is "YES", and the CPU 101 skips S54. Skip to obtain the setting information of the next setting group, that is, the copy setting information (Copy). Since the functions related to the copy settings are not restricted from export, the determination in S53 is "NO", and the CPU 101 temporarily outputs the setting information of the copy settings in S54.

On the other hand, if it is determined in S56 that there is no next setting group (S56: YES), the CPU 101 advances the process to S57. The processes in S57 and the subsequent S58 are the same as the processes in S11 and S12, respectively, so the description thereof will be omitted.

For example, assume that User2 logs in. As mentioned above, the restriction information for User2 is that the check boxes related to the print function, scan function, and fax function are checked, that is, the print settings (Print) , export of scan settings (Scan) and fax settings (Fax) is restricted. Therefore, since export of copy settings (Copy) is not restricted, when the second Export process ends, although setting information of copy settings is exported, setting information of other settings such as print settings is not exported. Specifically, for example, setting information obtained by excluding the scan setting from the setting information 210 shown in FIG. 2 is stored in the USB memory 200.

On the other hand, if it is determined in the above S36 (see FIG. 10) that the administrator has logged in (S36: YES), the CPU 101 temporarily outputs the setting information of all setting groups in the same manner as in the above S23. (S40). Then, the CPU 101 advances the process to S57 (see FIG. 11).

On the other hand, if it is determined in S38 that input skipping is not performed (S38: NO), the CPU 101 performs export access authentication (S41), and determines whether the authentication is OK (S42). . In this determination, if it is determined that the authentication is OK (S42: YES), the CPU 101 advances the process to the above S40. On the other hand, in this determination, if it is determined that the authentication is not OK (S42: NO), the CPU 101 returns the process to the above S37.

As described above, when the CPU 101 of the MFP 100 of the present embodiment receives a login ID specifying one of the registered users, the CPU 101 displays the PIN input screen 105d on the panel 105, and prompts the PIN input screen 105d to display the PIN input screen 105d. is received, it is determined whether or not the authentication is successful based on the PIN, and when it is determined that the authentication is successful, the state of the MFP 100 is transitioned from the logout state to the login state, and after the transition to the login state, the skip instruction is accepted. If so, exclude information is selected based on the user's login authority.

In this manner, in the MFP 100 of this embodiment, setting permission can be granted for each user for a specific setting group. This makes it possible to more appropriately manage the setting information stored in the USB memory 200.

Incidentally, the login ID is an example of "user information." The PIN input screen 105d is an example of a "request for input of user authentication information." The display on the panel 105 is an example of "output". The PIN is an example of "user authentication information."

Further, the exclusion information includes setting values of functions whose use is restricted by the user associated with the login.

Further, the function is at least one of a print function, a scan function, a copy function, and a FAX function.

Note that the present invention is not limited to the above embodiments, and various changes can be made without departing from the spirit thereof.

(1) In each of the above embodiments, the MFP 100 has been described as an example of an information processing apparatus, but the information processing apparatus is not limited to the MFP 100, and may be a standalone printer, scanner, or copy machine.

(2) In each of the above embodiments, the CPU 101 has been described as an example of the control unit, but the control unit may include a CPU and a dedicated circuit. Examples of the dedicated circuit include ASIC (Application Specific Integrated Circuit) and FPGA (Field Programmable Gate Array).

(3) In each of the above embodiments, the USBIF 107 is used as an example of the communication interface, but the present invention is not limited to this, and a wireless interface such as an NFC interface or a Bluetooth interface may be used as the communication interface. Furthermore, SDIO (Secure Digital Input/Output) may be employed as the communication interface. In these cases, the external storage device is a device that has an interface that corresponds to the communication interface that is employed.

(4) In each of the above embodiments, the unit to be excluded is a setting group, but the unit is not limited to this, but it may be a smaller unit, for example, one setting group may be divided into multiple groups, and each division unit may be used. . In addition, on the other hand, it may be done in a more general unit, for example, a plurality of setting groups are combined into one group, and each group after the grouping is performed.

100 MFPs
101 CPU
102 ROM
103 RAM
104 NVRAM
105 Panel 105b Administrator password input screen 105c User selection screen 105d PIN input screen 106 Key 107 USBIF
110 Engine IF
111 Print engine 112 Reading engine 120 Image processing circuit 200 USB memory

Claims (11)

a storage unit that stores first setting information;
a control unit that operates based on the first setting information;
a communication interface;
Equipped with
The control unit includes:
When receiving a storage instruction instructing to store the second setting information in an external storage device connected to the communication interface, outputting a request for inputting authentication information;
If a skip instruction to skip inputting the authentication information is received in response to the authentication information input request, information obtained by removing exclusion information from the first setting information stored in the storage unit is used as the second setting information. , stored in the external storage device,
Information processing device. The excluded information includes at least one of confidential information and personal information,
The information processing device according to claim 1. the confidential information includes the authentication information;
The information processing device according to claim 2. The personal information includes address book information;
The information processing device according to claim 2 or 3. The exclusion information can be set with the authority of an administrator who can store all of the first setting information in the external storage device.
The information processing device according to any one of claims 1 to 4. The control unit includes:
If user information indicating one of the registered users is received, a request for input of user authentication information is output,
If user authentication information is accepted in response to the user authentication information input request, determine whether or not authentication is successful based on the user authentication information;
When determining that the authentication is successful, transitioning the state of the information processing device from a logout state to a login state;
If the skip instruction is received after the transition to the login state, selecting the exclusion information based on restriction settings preset for the user who has successfully authenticated ;
The information processing device according to any one of claims 1 to 5. The exclusion information includes setting values of functions that are restricted from being used by the user who has successfully authenticated .
The information processing device according to claim 6. The function is at least one of a print function, a scan function, a copy function, and a FAX function.
The information processing device according to claim 7. The communication interface is a USB (Universal Serial Bus) communication interface,
the external storage device is a USB memory;
The information processing device according to any one of claims 1 to 8. When receiving a storage instruction to store the second setting information in an external storage device connected to a communication interface of the information processing device, outputting a request for inputting authentication information;
When a skip instruction to skip inputting the authentication information is received in response to the authentication information input request, information obtained by removing exclusion information from the first setting information stored in the storage unit of the information processing device is stored in the second setting information. storing it in the external storage device as setting information;
Information processing method. an information processing device including a storage unit that stores first setting information; and a communication interface;
an output process of outputting an input request for authentication information when a storage instruction for storing the second setting information in an external storage device connected to the communication interface is received;
If a skip instruction to skip inputting the authentication information is received in response to the authentication information input request, information obtained by removing exclusion information from the first setting information stored in the storage unit is used as the second setting information. , storage processing for storing in the external storage device,
An information processing program that executes.

Images