JP7437470B2 - Image forming device and file management method - Google Patents

Description

The present invention relates to an image forming apparatus and a file management method for managing files uploaded to a server.

Many multifunction devices have a scanner function, and document data scanned by this scanner function can be converted into a file and stored in a storage device provided inside or outside the multifunction device. A function called "Scan to URL" is known that notifies a desired user of a URL for accessing an image data file of a scanned document by e-mail (URL notification mail). The user who has received the URL notification email can display or obtain the image data file by selecting the URL written in the email body.

Patent Document 1 discloses a scan email sending device that sends a URL and password for acquiring a scanned document file from a server by email, and allows only the person who receives the email to acquire the file. .

Patent Document 2 states that the URL of the file acquisition website and the URL of the deletion website are sent to the administrator, and only the URL of the file acquisition website is sent to destinations other than the administrator. An information processing apparatus has been disclosed in which a file can be sent and everyone can obtain it, but only an administrator can delete the file.

Patent Document 3 describes a data process in which a different acquisition URL for the same file is sent to each destination by email, and when all users who receive this URL make a file acquisition request, the file is deleted. system is disclosed.

By the way, if the uploaded file is a confidential document, it is necessary to take measures to prevent information leakage.

Since Patent Document 1 only requires the input of a password when accessing a website, there is a risk of information leakage if the URL and password are known to a third party.

Patent Document 2 discloses that regardless of whether the file is acquired, if the administrator accesses the URL of the file deletion website, the file will be deleted.For example, if a file is deleted by mistake, Not only will it be necessary to re-upload the file, but it will also cause a great deal of inconvenience to other users who have not obtained the file.

In Patent Document 3, the file is immediately deleted based on the fact that all users have requested file acquisition, so that the file cannot be acquired again after that. Additionally, files cannot be deleted until all users request to retrieve them, so if there are users who have not retrieved files for a long time, the files will remain uploaded. , the risk of information leakage also increases.

Japanese Patent Application Publication No. 2004-86731 (published on March 18, 2004) Japanese Patent Application Publication No. 2016-63379 (published on April 25, 2016) Japanese Patent Application Publication No. 2009-301329 (published on December 24, 2009)

In order to prevent information leakage, for example, there is a method of authentication using a user ID and password, but there is a problem as to what kind of user ID and password should be used for authentication. It is possible to use the user ID and password that the multifunction device already uses for authentication, but in that case, only the user who has the user ID and password used for authentication will be able to use the Scan to URL function. cannot be used. However, if authentication is not performed, files can be freely obtained as long as the URL is known, so information leakage cannot be prevented much.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide a file management device, a multifunction peripheral, a file management method, and a program, which are enhanced in preventing information leakage due to illegal acquisition of files.

An image forming apparatus according to an aspect of the present disclosure transmits acquisition information for acquiring a file recorded on a recording medium to a specified destination, and receives authentication information transmitted from the specified destination. The image forming apparatus includes a control unit that authenticates the designated destination and acquires the file by comparing the acquisition information with registered authentication information, wherein the control unit authenticates the specified destination and acquires the file by comparing the acquisition information with registered authentication information. When sending to a specified destination, if the specified destination is not associated with any of the registered authentication information, the automatically generated authentication information is sent to the specified destination. The automatically generated authentication information is registered in association with the specified destination, and the automatically generated authentication information is transmitted to the specified destination together with the acquisition information.

Furthermore, when transmitting the acquisition information to the specified destination, the control unit may configure that the specified destination is a destination associated with any of the registered authentication information. In this case, only the acquisition information is sent to the specified destination.

Further, the control unit transmits, as the acquisition information, a URL for accessing the file recorded on the recording medium to the designated destination.

Further, the control unit may transmit information to the specified destination to select whether or not to delete the file recorded on the recording medium after the file is acquired by the specified destination. Send to.

The invention further includes an input unit for transmitting the acquisition information to the specified destination, and the input unit is configured to transmit information recorded on the recording medium after the file is acquired by the specified destination. A selection as to whether or not to delete the file is accepted in advance.

Further, in a file management method according to an aspect of the present disclosure, a computer transmits acquisition information for acquiring a file recorded on a recording medium to a specified destination, and transmits the information from the specified destination. A file management method that authenticates the specified destination and acquires the file by comparing authentication information sent to the specified destination with registered authentication information, the method comprising: If the specified destination is not associated with any of the registered authentication information, the automatically generated authentication information is sent to the specified destination. and registering the automatically generated authentication information together with the acquisition information to the designated destination.

According to the present invention, prevention of information leakage due to illegal acquisition of files is strengthened.

FIG. 1 is a functional block diagram of a multifunction peripheral according to a first embodiment of the present invention. 1 is a conceptual cross-sectional view of a multifunctional device according to a first embodiment of the present invention. FIG. 3 is a diagram showing an example of a screen displayed on the display unit of the multifunction peripheral when uploading a file in the first embodiment of the present invention. FIG. 3 is a conceptual diagram for explaining the operation of the first embodiment of the present invention. FIG. 7 is another conceptual diagram for explaining the operation of the first embodiment of the present invention. FIG. 2 is a schematic diagram showing email used in the first embodiment of the present invention. FIG. 2 is a schematic diagram showing an input screen used in the first embodiment of the present invention. FIG. 7 is yet another conceptual diagram for explaining the operation of the first embodiment of the present invention. FIG. 3 is a schematic diagram showing another email used in the first embodiment of the present invention. FIG. 7 is a schematic diagram showing still another email used in the first embodiment of the present invention. FIG. 7 is a schematic diagram showing another input screen used in the first embodiment of the present invention. FIG. 7 is yet another conceptual diagram for explaining the operation of the first embodiment of the present invention. 3 is a flowchart for explaining the operation of the first embodiment of the present invention. FIG. 7 is a diagram showing data related to an image data file, which is used in the third embodiment of the present invention. FIG. 7 is a schematic diagram showing e-mail used in the third embodiment of the present invention. FIG. 7 is a schematic diagram showing a screen for opening a file used in the third embodiment of the present invention. FIG. 7 is a schematic diagram showing a screen for deleting files used in the third embodiment of the present invention. 7 is a flowchart showing a file management operation of a multifunction peripheral according to a third embodiment of the present invention. 12 is another flowchart showing the file management operation of the multifunction peripheral according to the third embodiment of the present invention. 12 is yet another flowchart showing the file management operation of the multifunction peripheral according to the third embodiment of the present invention. 12 is yet another flowchart showing the file management operation of the multifunction peripheral according to the third embodiment of the present invention. FIG. 7 is a schematic diagram showing another email used in the third embodiment of the present invention. FIG. 7 is a schematic diagram showing still another email used in the third embodiment of the present invention. FIG. 7 is a schematic diagram showing still another email used in the third embodiment of the present invention.

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the drawings.

[First embodiment]
The first embodiment relates to a multifunction peripheral 800 including an image reading device. 1 and 2 show the configuration of a multifunction device 800.

As shown in FIGS. 1 and 2, the multifunction device 800 includes a document reading device 820 that reads an image on a document, a multifunction device main body (image forming unit main body) 830 that forms an image on a sheet, a document reading device 820, and a multifunction device 830 that forms an image on a sheet. An operation panel section 850 for operating the machine main body 830, an arithmetic processing section 840 for controlling the document reading device 820 and the multifunction device main body 830 based on operations by the operation panel section 850, and image information via various public lines. It includes a transmitting/receiving section 860 for transmitting and receiving data, an interface 870 for making a wired or wireless connection with a computer, a file management section 880, and an external storage section 890.

Note that, as shown in FIG. 1, the arithmetic processing unit 840 may be individually connected to other parts, or all of these may be connected via a bus.

The operation panel section 850 is a touch panel display consisting of a display section 852 and an input section 854, and displays various information and buttons according to the mode of the multifunction device 800.

The transmitting/receiving unit 860 can transmit images read by the document reading device 820 and images stored in the storage device, and can receive images from the outside. Interface unit 870 is connected to a personal computer via a network. A personal computer connected to the multifunction device 800 can utilize the functions of the multifunction device for data that it can manage. In addition to using the document reading device 820 alone for image reading and the multifunction device main body 830 alone for image formation, it is also possible to use these devices in conjunction to copy images.

The document reading device 820 includes an automatic document feeding unit SPF (Single Pass Feeder) 824 that automatically feeds the document, and a reading device main body 822 that reads the image of the document. Note that, in addition to the components shown in FIG. 2, the document reading device 820 also includes components shown in FIG. 1 although not shown in FIG. Further, as shown in FIG. 1, the reading device main body 822 is equipped with a document table 826.

File management section 880 manages reading and writing of image data files of documents read by document reading device 820 into external storage section 890 . The file management unit 880 also manages image data written in the external storage unit 890 in accordance with a request from an external device connected via the transmitting/receiving unit 860 or an external device or device connected via the interface 870. Files can be sent to those external devices. Further, the file management unit 880 stores images uploaded from external devices in accordance with requests from external devices connected via the transmitting/receiving unit 860 or external devices or devices connected via the interface 870. Data files can be written to external storage 890. In the present invention, a file such as an image data file to be written to the external storage section 890 can be input from inside the multifunction device (for example, the document reading device 820) or from outside the multifunction device (for example, connected via the transmitting/receiving section 860). Input from an external device connected via the interface 870 or an external device connected via the interface 870 is referred to as uploading.

The file management unit 880 is configured by a computer program. A URL corresponding to the IP address of the server that manages the file management section 880, the folder in which the computer program is located, and the name of the program is assigned to the computer program that is the file management section 880. By specifying this URL, the file management section 880 can be accessed, and by using the argument following the URL, the external storage section 890 under the management of the file management section 880 can be accessed.

Note that the file management section 880 and the external storage section 890 may be included in an external device connected to the multifunction device 800. The external device may be connected to a local IP network or a global IP network. Further, even if the file management unit 880 remains included in the multifunction device 800, it may manage a storage device provided outside the multifunction device 800 in the same manner as the external storage unit 890. Further, the file management section 880 may manage an external storage section 890 provided in another multifunction device 800 connected via a network.

The multifunction device main body 830 includes a sheet feeding section 10 that feeds sheets, a manual feeding section 20 that can manually feed sheets, and a sheet feeding section 10 that feeds sheets manually. It includes an image forming section 30 that forms an image.

The sheet feeding section 10 includes a sheet stacking section 11 that stacks sheets, and a separation feeding section 12 that separates and feeds the sheets stacked on the sheet stacking section 11 one by one. The sheet stacking section 11 includes an intermediate plate 14 that rotates around a rotating shaft 13, and the intermediate plate 14 rotates and lifts the sheet upward when feeding the sheet. The separation and feeding section 12 includes a pickup roller 15 that feeds the sheet lifted by the intermediate plate 14, and a pair of separation rollers 16 that separates the sheets fed by the pickup roller 15 one by one. .

The manual feed section 20 includes a manual feed tray 21 on which sheets can be stacked, and a separation feed section 22 that separates and feeds the sheets stacked on the manual feed tray 21 one by one. The manual tray 21 is rotatably supported by the multifunction device main body 830, and when manually feeding, sheets can be loaded by fixing it at a predetermined angle. The separation and feeding section 22 includes a pickup roller 23 that feeds the sheets loaded on the manual tray 21, and a separation roller 24 and a separation pad 25 that separate the sheets fed by the pickup roller 23 one by one. We are prepared.

The image forming unit 30 includes four process cartridges 31Y to 31K that form yellow (Y), magenta (M), cyan (C), and black (K) images, photoreceptor drums 740Y to 740K, which will be described later. an exposure device 32 that exposes the surface of the photoreceptor drums 740Y to 740K, a transfer section (transfer means) 33 that transfers the toner images formed on the surfaces of the photoreceptor drums 740Y to 740K onto the sheet, and a fixing section 34 that fixes the transferred toner images on the sheet. It is equipped with. Note that the alphabet letters (Y, M, C, K) added at the end of the symbols indicate the respective colors (yellow, magenta, cyan, black).

Each of the four process cartridges 31Y to 31K is configured to be removable from the multifunction device main body 830, and is replaceable. Note that the four process cartridges 31Y to 31K have the same configuration except that the colors of the images they form are different, so only the configuration of the process cartridge 31Y that forms a yellow (Y) image will be explained, and the configuration of the process cartridges 31M to 31K will be explained. 31K will be omitted.

The process cartridge 31Y includes a photosensitive drum 740Y as an image carrier, a charger 741Y that charges the photosensitive drum 740Y, a developing device 742Y that develops an electrostatic latent image formed on the photosensitive drum 740Y, and a photosensitive drum 742Y that develops an electrostatic latent image formed on the photosensitive drum 740Y. and a drum cleaner for removing toner remaining on the surface of the body drum 740Y. The developing device 742Y includes a developing device main body (not shown in detail) that develops the photosensitive drum 740Y, and a toner cartridge (not shown in detail) that supplies toner to the developing device main body. The toner cartridge is configured to be removably attached to the developing device main body, and when the stored toner runs out, it can be removed from the developing device main body and replaced.

The exposure device 32 includes a light source (not shown) that irradiates laser light, a plurality of mirrors (not shown) that guides the laser light to photoreceptor drums 740Y to 740K, and the like. The transfer unit 33 includes an intermediate transfer belt 35 that carries the toner images formed on the photoreceptor drums 740Y to 740K, and a primary transfer roller that primarily transfers the toner images formed on the photoreceptor drums 740Y to 740K to the intermediate transfer belt 35. 36Y to 36K, a secondary transfer roller 37 that secondarily transfers the toner image transferred to the intermediate transfer belt 35 onto a sheet, and a belt cleaner 38 that removes toner remaining on the intermediate transfer belt 35. The intermediate transfer belt 35 is stretched around a driving roller 39a and a driven roller 39b, and is pressed against the photosensitive drums 740Y to 740K by primary transfer rollers 36Y to 36K. The secondary transfer roller 37 nips the intermediate transfer belt 35 with a drive roller 39a, and transfers the toner image carried by the intermediate transfer belt 35 onto the sheet at the nip portion N. The fixing unit 34 includes a heating roller 34a that heats the sheet, and a pressure roller 34b that presses against the heating roller 34a.

The operation panel section 850 includes a display section 852 that displays predetermined information, and an input section 854 through which a user inputs instructions to the document reading device 820 and the multifunction device main body 830. In this embodiment, the operation panel section 850 is arranged on the front side of the reading device main body 822. Note that the front side corresponds to the front side of the paper in FIG. 1, and the back side corresponds to the back side of FIG.

As shown in FIG. 1, the arithmetic processing unit 840 operates the control unit 50 that drives and controls the sheet feeding unit 10, the manual feeding unit 20, the image forming unit 30, and the document reading device 820, and the control unit 50 that operates the control unit 50. The storage unit 60 stores various programs and various information used by the control unit 50. The storage unit 60 can store images read by the document reading device 820 and images received by the transmitting/receiving unit 860. The arithmetic processing unit 840 integrates and controls the operations of the sheet feeding unit 10, manual feeding unit 20, image forming unit 30, and document reading device 820 based on the user's operation on the operation panel unit 850, Form an image on the sheet.

Next, the image forming operation (image forming control by the arithmetic processing unit 840) by the multifunction peripheral 800 configured as described above will be described. In the present embodiment, the image forming section 30 forms an image of the read document fed by the automatic document feeding section 824 and read by the reading device main body 822 on a sheet fed by the sheet feeding section 10. An image forming operation will be explained as an example.

When an image formation start signal is transmitted by the user's input to the input section 854 of the operation panel section 850, the original to be read placed on the automatic document feeding section 824 by the user is automatically moved toward the original reading position. The document is fed, and the image is read by the reading device main body 822 at the document reading position.

When the image of the document is read by the reading device main body 822, the exposure device 32 irradiates a plurality of laser beams corresponding to each of the photoreceptor drums 740Y to 740K based on the image information of the read document. At this time, the photoreceptor drums 740Y to 740K are charged in advance by the chargers 741Y to 741K, respectively, and by being irradiated with the corresponding laser beams, the electrostatic latent is generated on the photoreceptor drums 740Y to 740K. An image is formed. Thereafter, the electrostatic latent images formed on the photoreceptor drums 740Y to 740K are developed by the developing devices 742Y to 742K, and yellow (Y), magenta (M), and cyan (C) are formed on the photoreceptor drums 740Y to 740K. ) and black (K) toner images are formed. The toner images of each color formed on the photoreceptor drums 740Y to 740K are superimposed and transferred to the intermediate transfer belt 35 by the primary transfer rollers 36Y to 36K, and the superimposed and transferred toner images (full-color toner images) are transferred to the intermediate transfer belt 35. 35 is carried to the nip portion N.

In parallel with the above-described image forming operation, the sheets stacked on the sheet stacking section 11 are separated one by one by the separation and feeding section 12 and fed to the sheet conveying path 26 by the pickup roller 15. Then, the skew is corrected by a registration roller pair 27 located upstream of the nip portion N in the sheet conveyance direction, and the sheet is conveyed to the nip portion N at a predetermined conveyance timing. A full-color toner image carried by the intermediate transfer belt 35 is transferred to the sheet conveyed to the nip portion N by the secondary transfer roller 37 .

The sheet onto which the toner image has been transferred is heated and pressurized by the fixing section 34 to fuse and fix the toner image, and is discharged from the apparatus by a pair of discharge rollers 18 . The sheets discharged outside the apparatus are stacked on the discharged sheet stacking section 19.

In addition, when forming images on both sides of the sheet (the first side and the second side), before the sheet with the image formed on the first side is ejected from the apparatus, the ejection roller pair 18 is rotated in the reverse direction. The paper is then conveyed to the double-sided conveyance path 17, and then conveyed again to the image forming section 30 via the double-sided conveyance path 17. Then, similarly to the first side, an image is formed on the second side, and the image is discharged from the apparatus. The sheets discharged outside the apparatus are stacked on the discharged sheet stacking section 19.

When a user operates to send a URL for accessing image data read by a document reading device to another device using the Scan to URL function, the user uses a screen like the one shown in Figure 3. do.

The user enters the e-mail address of the recipient in the recipient field, the subject to be given to the outgoing email in the subject field, and the file name to be given to the data file of the image scanned by the document reading device in the file name field. Enter. However, the file name may be assigned by the multifunction device. When the user presses the start button, the multifunction device reads the image according to settings such as color mode, resolution, format, scanning paper, density, etc., and writes the URL for accessing the image data file obtained in the main text. send the email to the destination email address.

You can select the destination e-mail address from the address book inside the multifunction device or from a server connected to the multifunction device, or you can directly enter the e-mail address in the e-mail address field using the soft keyboard or hardware keyboard. You can also enter it.

Note that any destination can be registered in the address book. For example, some address books can only be used by authenticated users, while others can be used even by unauthenticated users. There are address books exclusive to authenticated users, and there are address books exclusive to groups to which authenticated users belong.

The people registered in the address book may include users who are authenticated and use the multifunction device, or may include people who are not such users, so generally both parties are registered in the address book. A mixture of addresses is registered in the address book. Authenticated users who use the multifunction device are registered in a user information table used to authenticate users. Even if such non-users are registered in the address book, they are not registered in the user information table.

Each record of the user information table has fields for a user ID, a password, and an e-mail address, for example, as shown in FIG. Although the registration number is also included in each record, it is not shown in FIG.

FIG. 4 shows a case where the destination e-mail address is the e-mail address of the user registered in the user information table. In such a case, nothing is registered in the Scan to URL destination table, which is prepared separately from the user information table.

FIG. 5 shows a case where the destination e-mail address is the e-mail address of a user who is not registered in the user information table. In such a case, the destination e-mail address is registered in the Scan to URL destination table together with the user ID and password automatically generated by the multifunction device. Note that the user ID and password generated here are different from those used for authentication for using the multifunction peripheral. A person who is not registered in the user information table but is registered in the scan to URL destination table will hereinafter be referred to as a "destination table registrant."

6A, 6B, and 6C correspond to FIG. 4, and the user registered in the user information table can access the URL (main text) inserted in the text of the e-mail address sent from the multifunction device. This is a case where an image data file of a document read by a multifunction peripheral is displayed on the screen of one's personal computer or is acquired using the "acquisition information" of the invention.

A screen as shown in FIG. 6A is displayed on the user's personal computer or the like. When the user selects a URL inserted in the email body, the personal computer requests the multifunction device to send an image data file corresponding to the URL. Upon receiving this request, the multifunction device transmits data for displaying a screen for authentication using a user name and password as shown in FIG. 6B to the personal computer. To explain using the example shown in the figure, when the user enters the user name "BBB" and password "s9t8u7" on this screen and presses the login button, the personal computer saves this user name and password to the multifunction device. Send an authentication request. Upon receiving this authentication request, the multifunction device searches the user information table for the user name "BBB" and password "s9t8u7" received from the personal computer. In this example, the user's user name "BBB" is registered in the user information table, so the search is successful as shown in FIG. 6C. In this case, the Scan to URL destination table is not searched.

A successful search means a successful authentication, so the multifunction peripheral transmits the image data file to the personal computer in response to the already received request to transmit the image data file.

If a wrong user name or wrong password is entered on the screen shown in FIG. 6B, authentication will fail and the multifunction device will not send the image data file to the personal computer. In this case, information for displaying on the screen of the personal computer that authentication has failed may be sent. Additionally, information may be sent to display a message on the personal computer screen prompting the user to re-enter the user name and password.

Therefore, the security of the image data file can be ensured by using the user information table used for authentication for use of the multifunction device.

7A, FIG. 7B, FIG. 7C, and FIG. 7D correspond to FIG. 5. If a person who is not registered in the user information table but is registered in the Scan to URL destination table (that is, a destination table registrant) is sent from the multifunction device by the operation explained with reference to FIG. This is for displaying or obtaining an image data file of a document read by a multifunction peripheral on the screen of one's personal computer using a URL inserted in the body of an e-mail address.

A screen like the one shown in FIG. 7A is displayed on the personal computer of the destination table registrant. When the destination table registrant selects a URL inserted in the email body, the personal computer requests the multifunction device to send an image data file corresponding to the URL. Upon receiving this request, the multifunction device transmits data for displaying a screen for authentication using a user name and password as shown in FIG. 7C to the personal computer. Destination table registrants must enter their username and password on this screen. In addition to the mail shown in FIG. 7A, the mail shown in FIG. 7B is also sent from the multifunction device to the e-mail address of the person registered in the destination table. To explain this using the example shown in the figure, when a destination table registrant selects the URL in the body of the email shown in Figure 7A, the screen shown in Figure 7C is displayed. When the user enters the user name "PPP" and the password "p9p9p9" and presses the login button, the personal computer sends an authentication request to the multifunction peripheral together with the user name "PPP" and password "p9p9p9." Upon receiving this authentication request, the multifunction device searches the user information table for the user name and password received from the personal computer. In this example, the destination table registrant is not registered in the user information table, so the search fails as shown in FIG. 7D. Next, the multifunction device searches the Scan to URL destination table for the user name "PPP" and password "p9p9p9" received from the personal computer. In this example, the destination table registrant is registered in the Scan to URL destination table, so the search is successful as shown in FIG. 7D.

A successful search means a successful authentication, so the multifunction peripheral transmits the image data file to the personal computer in response to the already received request to transmit the image data file.

Note that the user ID and password to be sent by e-mail shown in FIG. 7B may be notified to the destination table registrant by a method other than the method of sending the e-mail shown in FIG. 7B. You may notify the recipient table registrants by email to another email address, by SMS, by some kind of message, by facsimile, or by paper. You can tell them, you can tell them over the phone, or you can tell them in person.

If a wrong user name or wrong password is entered on the screen shown in FIG. 7C, authentication will fail and the multifunction peripheral will not send the image data file to the personal computer. In this case, information for displaying on the screen of the personal computer that authentication has failed may be sent. Additionally, information may be sent to display a message on the personal computer screen prompting the user to re-enter the username and password.

Therefore, the security of the image data file can be ensured by using the user information table used for authentication for use of the multifunction device.

If a user fails authentication a predetermined number of times using the same user ID and some password, that user ID is added to the connection prohibition table. Here, failure in authentication means that the combination of user ID and password input by the user does not exist in either the user information table or the scan to URL destination table.

If a user ID existing in the user information table is added to the connection prohibition table, from then on, authentication will fail even if the user is a legitimate user with a user ID existing in the user information table. Become. What to do after that will depend on the operation. For example, in response to a request from an authorized user, the administrator deletes the user ID from the connection prohibition table.

If a user ID that exists in the Scan to URL destination table is added to the connection prohibition table, from then on, the user who is an authorized user with the user ID that exists in the Scan to URL destination table will be prohibited. However, authentication will fail. What to do after that will depend on the operation. For example, the administrator deletes the user ID from the table in response to a request from the person who has the user ID.

If a user ID that does not exist in either the user information table or the Scan to URL destination table is added to the connection prohibition table, authorized users will not be affected.

FIG. 8 shows a flowchart for explaining the method according to the first embodiment.

Referring to FIG. 8, for example, a user authentication screen as shown in FIG. 6B is displayed (step S337). Next, if the login button is pressed (YES in step S339), it is checked whether the user ID input on the user authentication screen exists in the user information table (step S341). For this confirmation, the user information table may be directly referred to, or data recorded in relation to the image data file whose acquisition is requested may be referred to. In the latter case, confirmation may be made, for example, by checking whether the access user name recorded for each destination shown in FIG. 9 is "none."

If the user ID entered in the user authentication screen exists in the user information table (YES in step S341), the user ID and password entered in the screen displayed in step S337 are added to the user information table as authentication information. Authentication is performed by determining whether it is registered (step S343).

If the user ID entered on the user authentication screen does not exist in the user information table (NO in step S341), the user ID and password entered in the screen displayed in step S337 are added to the Scan to URL destination table. Authentication is performed by determining whether it is registered (step S345).

If the authentication is successful in step S343 or step S345 (YES in step S347), the process proceeds to step S349; otherwise, the process proceeds to step S355.

In step S349, it is checked whether the user DI and password entered on the screen displayed in step S337 exist in the connection prohibition table, and if they do not exist (NO in step S349), a file acquisition screen is displayed. (Step S351), and an image data file is acquired (Step S353).

In step S349, it is checked whether the user DI and password entered on the screen displayed in step S337 exist in the connection prohibition table, and if they exist (YES in step S349), a lock screen is displayed (step S361). ).

In step S355, the number of authentication failures is counted up. Next, if the number of authentication failures after counting up is 4 or more, the user ID input on the screen displayed in step S337 is added to the connection prohibition table (step S359), and a lock screen is displayed (step S361). ).

If the number of authentication failures after counting up is 3 or less (NO in step S357), the process returns to step S337.

Note that four times in step S355 and three times in step S357 are just examples, and other times may be used.

Note that step S341 may be omitted and step S343 is executed, and if authentication fails here, authentication may be performed in step S345, and if authentication here succeeds, authentication may be considered successful.

Alternatively, step S341 may be omitted and step S345 is executed, and if authentication fails here, authentication may be performed in step S343, and if authentication here is successful, authentication may be considered successful.

Furthermore, if step S341 is omitted and both step S343 and step S345 are executed, and either of the authentications is successful, the authentication may be considered successful.

[Second embodiment]
Next, a file management method according to a second embodiment of the present invention will be described.

This file management method is based on a function that allows access to an uploaded image data file from the outside by specifying a URL corresponding to the file.

For example, one person uses the operation panel 850 of the multifunction device 800 to cause the document reading device 820 included in the multifunction device 800 to read a document and record it in the external storage unit 890, and the image of the document. If an operation for sending a URL notification email about a data file to someone is performed all at once, that person is also the person who uploads the image data file to the external storage unit 890 and the person who sends the URL notification email. In this case, this one person makes designations regarding deletion of the image data file after acquisition, which will be described below.

However, for example, after a person uses the operation panel 850 of the multifunction device 800 to perform an operation to cause the document reading device 820 provided in the multifunction device 800 to read a document and record it in the external storage unit 890, If another person searches for the image data file of the document stored in the external storage unit 890 and performs an operation to send a URL notification email to someone regarding the image data file, the first person This is the person who uploads the data file to the external storage section 890, and the latter person is the person who sends the URL notification email. In this case, the designation regarding deletion of the image data file after acquisition, which will be described below, may be made by the first person or may be made by the second person.

In the following explanation, the first of the above two cases will be explained as an example, but this can also be modified to the remaining one case. In other words, what is said to be specified by the person who uploads for convenience by referring to the person who does both, means that the person who uploads independently and the person who sends the independent URL notification email can also be specified, and vice versa. For convenience, it is explained that the person who sends the URL notification email specifies the person who does the uploading, but it can also be specified by the person who uploads independently and the person who sends the independent URL notification email.

In the first embodiment, the following can be done when uploading the image data file of a document read by the document reading device 820 to the external storage section 890 via the file management section 880.

That is, the person who uploaded the image data file can specify whether or not to delete the file from the external storage unit 890 after acquiring the image data file. If there is such a specification, it will behave accordingly. Also, if multiple people are to obtain the file, delete the file once everyone has obtained it.

If the person uploading the file does not make such a designation, the user who is the recipient of the URL notification email can designate deletion of the file after acquiring the image data file at the notified URL. . If there are multiple recipients of the URL notification email, the file will be deleted if all recipients specify deletion of the file.

FIG. 3 is an example of a screen displayed on the display unit 852 when the document reading device 820 is in the scanner mode. As shown in Figure 3, this screen includes a text box D for entering the destination of the URL notification email, and a check box for entering whether or not to delete the file after the destination user obtains the file. C. Contains a start button B1 for allowing the user to start reading the original, storing it in the external storage unit 890, and sending an e-mail. This screen also includes an address book button A. Although it is possible to directly enter the destination in text box D using the soft keyboard or hardware keyboard (not shown), if the user presses the address book button A, the address will be saved internally and/or externally on the multifunction device. The selected address book (not shown) is displayed, and the user can also insert the selected destination into the text box D.

When check box C is checked, the file on the server is deleted after the file is acquired from the server by the user who is the destination of the URL notification email, even if there is no particular designation by the user. On the other hand, if checkbox C is not checked, the user at the destination of the URL notification email can specify whether to delete or leave the file after acquiring the file at the notified URL. .

As shown in FIG. 10A, a URL notification email is sent to the destination set on the display screen shown in FIG. 3, displaying a link string containing the URL of the acquisition program and an argument for specifying the image data file. is sent. Hereinafter, the link character string may be simply referred to as a URL.

When the user clicks on this link string, a retrieval program is started, and the program specifies the file using arguments. The program also causes the computer of the user who is the destination of the URL notification email to have an "Open" button B4 for instructing to open a file and an "Open" button for instructing to save the file, as shown in FIG. 10B. A dialog box containing a "Save" button B5 and a "Cancel" button B6 for canceling file acquisition is displayed. By pressing any of these buttons, the user can open the file and check the image content, save the file on his or her personal computer, or cancel the file.

Note that if check box C shown in Figure 3 is not checked, as shown in Figure 10C, for the destination set on the display screen shown in Figure 3, " A dialog box containing a "Yes" button B7 and a "No" button B8 for instructing file retention is displayed.

Here, if there are multiple destination users, a dialog box shown in FIG. 10C is displayed to all users, and the file is deleted when all users press the "Yes" button B7.

The operation of the file management method will be described in detail below with reference to the flowcharts of FIGS. 11 to 14.

It is determined whether "delete" was specified when sending the URL notification email (step S100). If check box C shown in FIG. 3 is checked, it means "delete". If it is determined that deletion has been specified, it is determined whether the destination is singular (step S200), and if it is determined that the destination is singular, the URL notification email is sent to the specified destination as shown in FIG. 10A. (step S300).

Next, the recipient of the URL notification email accesses the URL written in the email and determines whether or not the file has been acquired (step S400), and if it is determined that the file has been acquired, then The file is deleted (step S500).

If "delete" is not specified at the time of transmission, that is, if checkbox C shown in FIG. 3 is not checked, it is determined whether the destination is singular (step S101 12)) If it is determined that the number is singular, a URL notification email is sent to the set destination as shown in FIG. 10A (step S102).

Next, it is determined whether or not the recipient of the URL notification email has accessed the URL written in the email (step S103). If it is determined that the recipient has accessed the URL, a dialog box shown in FIG. It is determined whether the recipient has selected to delete the file on the server S by pressing the "Yes" button B7 in the dialog box shown in FIG. 10C (step S104). If it is determined that deletion of the file has been specified, the file on the server S is deleted (step S105).

Returning to FIG. 11 again, it is determined whether the destination is single or not (step S200), and if it is determined that the destination is not singular, that is, plural, the URL notification email is sent to all the set destinations (step S200). Step S201 (FIG. 13)).

Here, if there are multiple destinations, as shown in FIGS. 15A, 15B, and 15C, a URL containing a link string including the URL of the acquisition program and an argument for specifying the image data file. Send notification email. As shown in FIGS. 15A, 15B, and 15C, destination A (address is aaa@abc-kaisha.co.jp) has "http://abc-kaisha.co.jp=?321aaa", For destination B (address is bbb@abc-kaisha.co.jp), enter "http://abc-kaisha.co.jp=?321bbb", and for destination C (address is ppp@abc-kaisha.co.jp) ), "http://abc-kaisha.co.jp=?321ppp" is written in the respective URL notification emails and sent.

As shown in FIG. 9, the file name and whether or not file deletion is selected are registered in the server S, and user information (registered in the user information table) is also registered for multiple destinations A, B, and C in relation to this file. If it is registered in the user information table, it is the registration number in the user information; if it is not registered in the user information table, it is "None"), access information (has a value of "Completed" or "Not yet"), acquisition information ("Completed" or "Not yet"). ) is registered. Furthermore, access user names and passwords are registered only for destinations that are not registered in the user information table. In this example, since the check box C shown in FIG. 3 has been checked, "File deletion selection: Yes" indicates that the file deletion on the server S is set after acquisition.

In this example, for destination A, the user information is "No. 5", the access user name is "none", the password is "none", the access is "completed", the acquisition is "completed", and for destination B, User information is "No. 10", user name for access is "None", password is "None", access is "Not yet", acquisition is "Not yet", and for destination C, user information is "None", for access The user name is "ppp", the password is "p9p9p9", the access is "completed", and the acquisition is "completed". In addition, since a link string including an argument for specifying the image data file is assigned to each recipient, when the recipient clicks on the URL written in the URL notification email and accesses it, the recipient who accessed it can can be identified.

The explanation will be given by returning to FIG. 13 again. It is determined whether the recipient of the URL notification email has accessed the URL (step S202), and if it is determined that the URL has been accessed, the file information of the file to be acquired shown in FIG. 9 is updated (step S203). Specifically, "accessed: not yet" is updated to "accessed: completed".

Next, it is determined whether the recipient of the URL notification email has acquired the file (step S204), and if it is determined that the file has been acquired, the file information of the file to be acquired shown in FIG. 9 is updated (step S204). S205). Specifically, "obtained: not yet" is updated to "obtained: completed".

Next, it is determined whether all recipients have accessed and acquired the file (step S206), and if it is determined that all recipients have acquired the file, the file on server S is Delete (step S207).

Returning to FIG. 12 again, it is determined whether the destination is singular (step S101), and if it is determined that the destination is not singular, a link containing the URL of the acquisition program and an argument for specifying the image data file is sent. A URL notification email containing the character string is sent to all set destinations (step S106 (FIG. 14)).

Here, if there are multiple destinations, as shown in FIGS. 15A, 15B, and 15C, a URL containing a link string including the URL of the acquisition program and an argument for specifying the image data file. Send notification email. I have already explained this.

As shown in FIG. 9, the file name and whether or not file deletion is selected are registered in the server S, and user information and access information are stored as necessary for multiple destinations A, B, and C in relation to this file. A user name and password are registered, as well as access information and acquisition information. In this example, since the check box C shown in FIG. 3 is not checked, "File deletion selection: No" is displayed, indicating that the file deletion on the server S is not set after acquisition.

The explanation will be given by returning to FIG. 14 again. It is determined whether the recipient of the URL notification email has accessed the file located at the notified URL (step S107), and if it is determined that the recipient has accessed the file, the file information of the file to be acquired shown in FIG. 9 is updated. (Step S108). Specifically, "accessed: not yet" is updated to "accessed: completed."

Next, the file deletion selection of server S is held (step S109). That is, if the answer is "Yes" on the screen of FIG. 10C, the file deletion selection is set to "Yes", and if the answer is "No" on that screen, the file deletion selection is set to "No".

Next, it is determined whether the recipient of the URL notification email has acquired the file (step S110), and if it is determined that the recipient has acquired the file, the file information of the file to be acquired shown in FIG. 9 is updated (step S110). S111). Specifically, "obtained: not yet" is updated to "obtained: completed".

Next, it is determined whether all recipients have accessed and acquired the file (step S112).

If it is determined that all recipients have executed the file acquisition, it is determined whether all recipients have selected to delete the file on server S (step S113), and based on the file deletion selections of all recipients, , if it is determined that all recipients have selected file deletion, the file on server S is deleted (step S114).

As explained above, by deleting the file at the notified URL in a timely manner when it is no longer needed, it is efficient and easy to use, and the risk of information leakage can be minimized.

Note that the user information table and the scan to URL destination table are usually two-dimensional tables that include multiple records and each record has one or more fields, but they may have other configurations. It may also be a table. Furthermore, data stored in a table may be stored in a file with a configuration other than the table. References to tables in the present invention include files of other configurations containing data that can be stored in tables. Moreover, the above file management device can be realized by hardware, software, or a combination thereof. Further, the information management method performed by the above file management device can also be realized by hardware, software, or a combination thereof. Here, being realized by software means being realized by a computer reading and executing a program.

The program can be stored and provided to a computer using various types of non-transitory computer readable media. Non-transitory computer-readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (e.g., flexible disks, magnetic tape, hard disk drives), magneto-optical recording media (e.g., magneto-optical disks), CD-ROMs (Read Only Memory), and CD-ROMs. R, CD-R/W, semiconductor memory (e.g., mask ROM, PROM (programmable ROM), EPROM (erasable ROM), flash ROM, RAM (Random Access Memory). Transitory computer readable media may be supplied to the computer by a transitory computer readable medium. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The program can be supplied to the computer via a wired communication path such as an optical fiber, or a wireless communication path.

The invention may be embodied in various other forms without departing from its spirit or essential characteristics. Therefore, each of the embodiments described above is merely an example and should not be interpreted in a limited manner. The scope of the present invention is indicated by the claims, and is not restricted in any way by the main text of the specification. Furthermore, all modifications and changes that come within the scope of equivalents of the claims are intended to be within the scope of the present invention.

The present invention can be used to appropriately delete files uploaded to a server and strengthen security.

(Additional notes)
(Additional note 1)
According to the invention,
The destination (for example, a URL for accessing an image data file and inserted in the body of an e-mail) for accessing a file scanned by the scanner function and recorded on a recording medium ( A multifunction device that causes the destination to acquire the file in response to a request from, for example, an email destination,
When transmitting the URL to the destination, existing authentication information (for example, existing ID and password) is not associated with the destination, associate auxiliary authentication information (for example, a new user ID and password) used for authentication to access the file with the destination. an auxiliary authentication table registration means for registering in an auxiliary authentication table (for example, a scan to URL destination table);
When a request to obtain the file is received from the destination, the request source authentication information (for example, the existing ID and password or the new user ID and password) accompanying the request is transferred to the existing authentication table ( a first authentication means for authenticating the destination by comparing it with existing authentication information (for example, an existing ID and password) existing in a user information table;
When a request to obtain the file is received from the destination, the request source authentication information (for example, the existing ID and password or the new user ID and password) accompanying the request is stored in the auxiliary authentication table. a second authentication means that authenticates the destination by comparing it with auxiliary authentication information (for example, the new user ID and password) existing in the destination table for Scan to URL;
acquisition means for causing the destination to acquire the file recorded on the recording medium if authentication by the first authentication means or the second authentication means is successful;
Provided is a multifunctional device characterized by comprising:

(Additional note 2)
Further, according to the present invention, the above multifunction device includes:
The multifunctional device is characterized in that the first authentication means operates with priority over the second authentication means, and if authentication by the first authentication means is successful, the operation of the second authentication means is omitted. is provided.

(Additional note 3)
Furthermore, according to the present invention, the above multifunctional device,
A multifunction device is provided, further comprising authentication information notification means for notifying a destination of the auxiliary authentication information (for example, the new user ID and password).

(Additional note 4)
Furthermore, according to the present invention, the above multifunctional device,
The auxiliary authentication table registration means stores the auxiliary authentication information (for example, the new user ID and password) in the auxiliary authentication table (for example, the Scan to URL destination table) to the e-mail address of the destination. Register as associated,
The authentication information notifying means is configured to notify the auxiliary authentication information (for example, the new user ID and A multifunctional device is provided that is characterized in that it notifies a destination e-mail address of a password.

(Appendix 5)
Furthermore, according to the present invention, the above multifunctional device,
connection prohibition table registration means for registering identification information of a destination in a connection prohibition table if authentication by the first authentication means and authentication by the second authentication means fails a predetermined number of times or more;
The acquisition means is configured to determine whether the identification information of the transmission destination is recorded on the recording medium even if the authentication by the first authentication means or the second authentication means is successful, if the identification information of the transmission destination is registered in the connection prohibition table. Provided is a multifunction device characterized in that it does not cause files to be retrieved.

(Appendix 6)
Furthermore, according to the present invention, the above multifunctional device,
A multifunction peripheral is provided, wherein the verification by the first authentication means or the second authentication means is performed using identification information and a password included in the authentication information.

(Appendix 7)
Furthermore, according to the present invention, the above multifunctional device,
In the existing authentication table, existing authentication information and a destination e-mail address are recorded in association with each other,
Whether or not any existing authentication information (e.g., existing ID and password) registered in the existing authentication table (e.g., user information table) is associated with the destination, A multifunction device is provided, further comprising a registration determining means for determining whether or not an e-mail address exists in the existing authentication table (for example, a user information table).

(Appendix 8)
Furthermore, according to the present invention,
The computer is
The destination (for example, a URL for accessing an image data file and inserted in the body of an e-mail) for accessing a file scanned by the scanner function and recorded on a recording medium ( A file management method for a multifunction device that causes the destination to acquire the file in response to a request from, for example, an e-mail destination, the method comprising:
When transmitting the URL to the destination, existing authentication information (for example, existing ID and password) is not associated with the destination, associate auxiliary authentication information (for example, a new user ID and password) used for authentication to access the file with the destination. an auxiliary authentication table registration step of registering in an auxiliary authentication table (for example, a scan to URL destination table);
When a request to obtain the file is received from the destination, the request source authentication information (for example, the existing ID and password or the new user ID and password) accompanying the request is transferred to the existing authentication table ( a first authentication step of authenticating the destination by comparing it with existing authentication information (for example, an existing ID and password) existing in a user information table;
When a request to obtain the file is received from the destination, the request source authentication information (for example, the existing ID and password or the new user ID and password) accompanying the request is stored in the auxiliary authentication table. a second authentication step of authenticating the destination by comparing it with auxiliary authentication information (for example, the new user ID and password) existing in the Scan to URL destination table;
If the authentication in the first authentication step or the second authentication step is successful, an acquisition step of causing the destination to acquire the file recorded on the recording medium;
A file management method for a multifunction device is provided, which is characterized by executing the following steps.

(Appendix 9)
Further, according to the present invention, a program for causing a computer to function as the above-mentioned multifunction device is provided.

10 Sheet feeding section 20 Manual feeding section 30 Image forming section 50 Control section 60 Storage section 800 Multifunction device 820 Original reading device 822 Reading device main body 824 Automatic document feeding section 840 Arithmetic processing section 850 Operation panel section 852 Display section 854 Input Section 860 Transmitting/receiving section 870 Interface

Claims (6)

By transmitting acquisition information for acquiring a file recorded on a recording medium to a specified destination, and comparing the authentication information sent from the specified destination with registered authentication information, An image forming apparatus including a control unit that authenticates the specified destination and obtains the file,
The control unit includes:
When the acquisition information is sent to the specified destination, if the specified destination is not associated with any of the registered authentication information, automatically generated. registering the generated authentication information in association with the specified destination, and transmitting the automatically generated authentication information together with the acquisition information to the specified destination ;
After the file is acquired by the specified destination, the image forming apparatus transmits information for causing the specified destination to select whether or not to delete the file recorded on the recording medium. . The control unit includes:
When sending the acquisition information to the specified destination, if the specified destination is associated with any of the registered authentication information, only the acquisition information is sent. The image forming apparatus according to claim 1, wherein the image forming apparatus transmits the image to the designated destination. The control unit includes:
The image forming apparatus according to claim 1 or 2, wherein a URL for accessing a file recorded on the recording medium is transmitted to the specified destination as the acquisition information. By transmitting acquisition information for acquiring a file recorded on a recording medium to a specified destination, and comparing the authentication information sent from the specified destination with registered authentication information, a control unit that authenticates the specified destination and obtains the file;
An image forming apparatus comprising: an input unit for transmitting the acquisition information to the designated destination;
When the control unit transmits the acquisition information to the specified destination, if the specified destination is a destination that is not associated with any of the registered authentication information. , registering the automatically generated authentication information in association with the specified destination, and transmitting the automatically generated authentication information together with the acquisition information to the specified destination;
The input unit may receive in advance a selection as to whether or not to delete the file recorded on the recording medium after the file is acquired by the designated destination. The computer is
By transmitting acquisition information for acquiring a file recorded on a recording medium to a specified destination, and comparing the authentication information sent from the specified destination with registered authentication information, A file management method for authenticating the specified destination to obtain the file, the method comprising:
When the acquisition information is sent to the specified destination, if the specified destination is not associated with any of the registered authentication information, automatically generated. registering the generated authentication information in association with the specified destination, and transmitting the automatically generated authentication information together with the acquisition information to the specified destination ;
after the file is acquired by the specified destination, transmitting information to the specified destination for making it select whether or not to delete the file recorded on the recording medium; How to manage files. The computer is
By transmitting acquisition information for acquiring a file recorded on a recording medium to a specified destination, and comparing the authentication information sent from the specified destination with registered authentication information, A file management method for authenticating the specified destination to obtain the file, the method comprising:
When the acquisition information is sent to the specified destination, if the specified destination is not associated with any of the registered authentication information, automatically generated. registering the generated authentication information in association with the specified destination, and transmitting the automatically generated authentication information together with the acquisition information to the specified destination;
The input unit for transmitting the acquisition information to the specified destination determines whether to delete the file recorded on the recording medium after the file is acquired by the specified destination. A file management method comprising the steps of accepting a selection in advance; and executing the steps.