JP2006270353A - Image processor, data management method, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently use a storage medium used for an image processor and to enhance security of data. <P>SOLUTION: An image forming device 1 is provided with an account management part 14 for managing an account of each user, a box management part 16 for managing the data used for image processing by allowing the storage medium to store them by making them correspond to the account of the user related with the data, an operational information management part 15 for managing the data used for operation of the image forming device 1 by allowing the storage medium to store them by making them correspond to the account of the user related with the data, and a manipulation reception part 11 for receiving designation of the account to be made invalid. When the designation is received, the account management part 14 makes the account related to the designation invalid and the operational information management part 15 and the box management part 16 delete all the data made to correspond to the account related to the designation in the data stored in the storage medium. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image processing apparatus such as an MFP, a method for handling data stored in a storage medium used in the image processing apparatus, and the like.

  In recent years, image processing apparatuses called MFPs or multi function peripherals (MFPs) equipped with functions such as a copy, a scanner, a FAX, a network printer, and a document server have begun to spread.

  Such an image processing apparatus is often shared by a plurality of users in an office such as a public office or a company. Therefore, in order to maintain the security of the image processing apparatus, it is necessary to allow use of the image processing apparatus only by a user having a legitimate authority.

  Therefore, one user ID (account) is given for each user, and the user is not permitted to use a part or all of the functions of the image processing apparatus unless logging in to the image processing apparatus using the user ID. Thus, a method for configuring an image processing apparatus has been proposed.

  In the case of an image processing apparatus having a document server function, each user's data is stored in a storage medium such as a hard disk. In order to prevent unauthorized use of these data, a management method has been proposed in which only users who log in with a predetermined user ID are allowed to use the data.

In addition, as a data management method in the image processing apparatus, a method as described in Patent Document 1 has been proposed. According to such a method, the confidential data remaining in the image processing apparatus is erased upon restart. As a result, it is possible to prevent data from being illegally taken out and to improve safety.
JP 2003-150360 A

  Generally, when managing an image processing apparatus, if the user has not retired, the user ID of the user is deleted.

  However, simply deleting the user ID leaves unnecessary data related to the user ID in the image processing apparatus. Leaving such data is not only a waste of resources such as the hard disk of the image processing apparatus, but is also illegally used because the data is taken outside against the intention of the owner. Since this is also possible, it is not preferable.

  However, in the conventional method described in Patent Document 1, even if the user ID is deleted, the data related to the user ID remains in the storage medium.

  In view of such problems, it is an object of the present invention to use a storage medium used in an image processing apparatus more efficiently than before and to increase data security.

  An image processing apparatus according to the present invention is an image processing apparatus that executes image processing, and is used for account management means for managing an account of each user for using the image processing apparatus, and for image processing. Or data management means for managing data used for operation of the image processing apparatus by storing it in a storage medium in association with the user's account related to the data, and to invalidate Account designation accepting means for accepting designation of the account, and when the designation is accepted, the account management means invalidates the account relating to the designation, and the data management means comprises the storage medium. Delete all data associated with the specified account from the data stored in That, characterized in that.

  Instead of deleting all the data associated with the account, only some types of data may be deleted. For example, among the data stored in the storage medium and associated with the account according to the designation, data stored in a storage area allocated to the storage medium only for the user The data for the print process by the confidential print function, the data for the print process by the confirmation print function, and the data regarding the access right or the e-mail address are deleted and stored in the storage medium for a user other than the user. Data stored in the allocated storage area, data for providing information by the polling transmission function, data related to the history of executing image processing, and stored in a storage area commonly allocated to the plurality of users Data and the fax transmission function, Data that is not transmitted may be left without deleting.

  According to the present invention, the storage medium used in the image processing apparatus can be used more efficiently than before, and the data security can be increased as compared with the conventional one.

  FIG. 1 is a diagram showing an example of the overall configuration of a network system provided with an image forming apparatus 1 according to the present invention, FIG. 2 is a diagram showing an example of the hardware configuration of the image forming apparatus 1, and FIG. FIG. 4 is a diagram illustrating an example of a functional configuration of the image forming apparatus 1.

  As shown in FIG. 1, the image forming apparatus 1 according to the present invention is connected to one or a plurality of terminal devices 2 and a FAX terminal 3 via a communication line 4. As the communication line 4, a LAN, the Internet, a public line, a dedicated line, or the like is used.

  The image forming apparatus 1 is an apparatus that integrates functions such as copying, network printing, scanner, fax, and document server. Sometimes called a multi-function peripheral or MFP (Multi Function Peripherals).

  The function of the document server is sometimes called a “box function” because a logical storage area called a “box” is allocated to each user or group. Thus, each user can store data such as an image file and a document file in his / her box or a box of the group to which the user belongs. A box corresponds to a folder in a personal computer or a workstation. Boxes are also provided for the application functions described below.

  In addition to the basic functions such as the copy function described above, the image forming apparatus 1 according to the present embodiment includes application functions (application functions) such as a confidential print function, a confirmation print function, and a polling transmission function. ing. When the network printing is performed, the confidential print function temporarily holds the print processing instead of immediately starting the print processing even if the image forming apparatus 1 receives the print data from the terminal device 2. This is a function of starting the printing process when the user correctly inputs a preset password by operating the operation panel of the image forming apparatus 1.

  The confirmation print function is a function of outputting only one copy first when outputting a plurality of copies (printing or copying) of the same document, and outputting the remaining number of copies after the user confirms the finished state. . The polling transmission function is an on-demand function for information by FAX, in which information managed by the image forming apparatus 1 is transmitted as FAX data in response to a request from an external FAX terminal 3.

  Hereinafter, the user's personal box is referred to as “personal box 5K”, the group member's shared box is referred to as “group box 5G”, and the confidential print function box is referred to as “confidential print box 5A1”. The box for the confirmation print function may be described as “confirmation print box 5A2”, and the box for the polling transmission function may be described as “polling transmission box 5A3”. In addition, these boxes may be collectively referred to as “box 5”.

  As shown in FIG. 2, the image forming apparatus 1 includes a CPU 1a, a RAM 1b, a ROM 1c, an operation panel 1d, a scanner unit 1e, a printing unit 1f, a hard disk 1g, and a network interface 1h.

  The operation panel 1d includes a display and a plurality of operation buttons. When the operation button is pressed, a signal indicating the operation button is transmitted to the CPU 1a. The display includes a screen for giving a message or an instruction to a user who operates the image forming apparatus 1, a screen for the user to input setting contents and processing contents, and images and processes formed by the image forming apparatus 1. A screen showing the result of the is displayed. In the present embodiment, a touch panel is used as the display. Therefore, the display has a function of detecting a position on the touch panel touched by the user with a finger and transmitting a signal indicating the detection result to the CPU 1a. As described above, the operation panel 1 d serves as a user interface for a user who directly operates the image forming apparatus 1.

  In order to allow the user to use the image forming apparatus 1 from a remote location, the terminal apparatus 2 is designated with a driver for controlling the image forming apparatus 1 and processing conditions for the image forming apparatus 1. Software to install is installed. As the terminal device 2, a personal computer or a workstation is used.

  The scanner unit 1e includes a document feeding unit, an image reading unit, and the like, such as photographs, characters, pictures, charts, and the like drawn on a document sheet (hereinafter simply referred to as “document”). Image data is read photoelectrically to generate image data.

  The printing unit 1 f includes a paper feeding unit, a paper discharging unit, a drive system, and the like. The printing unit 1 f is an image read by the scanner unit 1 e, an image of image data transmitted from the terminal device 2, or a fax terminal 3. Print the image of the received fax data on paper.

  The network interface 1 h is a device for communicating with the terminal device 2 and the FAX terminal 3. As the network interface 1h, a NIC (Network Interface Card), a modem, a TA (Terminal Adapter), or the like is used.

  As shown in FIG. 3, the hard disk 1g includes a personal box 5K for each user, a group box 5G for each group, a confidential print box 5A1, a confirmation print box 5A2, a polling transmission box 5A3, a user account database DB1, and a group account database. Storage areas for DB2, job history database DB3, operation information database DB4, setting information database DB5, and account history database DB6 are allocated.

  Further, the hard disk 1g includes basic functions such as the copy function described above, application functions such as the confidential print function, and the operation reception unit 11, user authentication unit 12, job execution unit 13, account management shown in FIG. A program and data for realizing each function such as the unit 14, the operation information management unit 15, and the box management unit 16 are installed. A part or all of the program or data may be stored in the ROM 1c. The program and data are loaded into the RAM 1b as necessary, and the program is executed by the CPU 1a. Alternatively, some or all of these functions may be realized in hardware by a processor (control circuit) instead of software.

  The contents of each database in FIG. 3 and the functions of each unit in FIG. 4 will be described below.

  5 shows an example of the user account database DB1, FIG. 6 shows an example of the group account database DB2, FIG. 7 shows an example of the job history database DB3, and FIG. 8 shows an example of the operation information database DB4. FIG. 9 is a diagram illustrating an example of the setting information database DB5, and FIG. 10 is a diagram illustrating an example of the account history database DB6.

  As shown in FIG. 5, the user account database DB1 stores information related to a user account given to the user in order to use the image forming apparatus 1. One record corresponds to one user. “User ID” is identification information for identifying users. The “password” is a keyword used for user authentication when logging in to the image forming apparatus 1 and is known only by a user having the user ID. “User name” is the name of the user. “Affiliation group” is a group ID of a group to which the user belongs (for example, when the image forming apparatus 1 is used in a company, a department such as “XXX department” or “XXX section”). When one user belongs to a plurality of groups, each group ID is indicated. A person whose user ID is not registered in the user account database DB1 cannot use a part or all of the functions of the image forming apparatus 1.

  As shown in FIG. 6, the group account database DB2 stores information related to the group account assigned to each group to which the user belongs. One record corresponds to one group. “Group ID” is identification information for identifying each group, “Password” is a keyword used for authentication at the time of login, and “Group Name” is the name of the group. Each user is informed of the group ID and password of the group to which the user belongs. Therefore, each user can use the image forming apparatus 1 not only by the user ID of the user but also by the group ID of the group to which the user belongs. Hereinafter, the user ID and the group ID may be collectively referred to as “account”.

  In the job history database DB3, as shown in FIG. 7, history information of jobs executed by the image forming apparatus 1 is stored. One record is stored every time one job is executed. “Date” is the date and time when the job was executed, and “Account” is the user ID of the user who gave the job execution instruction or the group ID of the group to which the user belongs.

  “Job type” is the type of the job. For example, “copy” means a job for printing an image of a document read by the scanner unit 1 e on paper, and “FAX transmission” means a fax terminal using image data of the document read by the scanner unit 1 e as fax data. 3 means a job to be transmitted. “Print” means a job for printing an image based on data transmitted from the terminal device 2 (network printing). “Scan” converts an image of a document read by the scanner unit 1e into image data. Means a job.

  “Job content” indicates the processing conditions of the job (paper size, color or monochrome, number of sheets, data transmission destination, etc.).

  In the operation information database DB4, as shown in FIG. 8, image forming apparatuses for each account for a predetermined period (for example, for the last one month or until the start of operation of the image forming apparatus 1). Information on the operation status of 1 is stored. One record is provided for each account. “Number of logins” indicates the number of logins to the image forming apparatus 1. “Number of printed sheets” indicates the total number of sheets used when copying, network printing, or FAX reception is performed. The “FAX transmission fee” indicates the total communication fee incurred when FAX transmission is performed to the FAX terminal 3.

  In the setting information database DB5, as shown in FIG. 9, setting information such as an access right and an e-mail address for each account is stored. One record is provided for each account. “Access right” indicates a function of the image forming apparatus 1 that is permitted to be used by a user of the account of the record or a member of the group. Note that a user who is involved in the management of the image forming apparatus 1 is given the authority “system management”.

  In the account history database DB6, as shown in FIG. 10, history information related to account addition or deletion processing is stored. Each time a process is performed, one record is generated. “Date and time” indicates the date and time when the process was performed. “Processing content” indicates the type of processing, that is, whether it is addition or deletion. “Account” indicates a user ID or group ID added or deleted.

  Note that “deletion of account” means that login to the image forming apparatus 1 by the account is disabled. That means disabling the account. The method of registering data in each database of the user account database DB1 to the account history database DB6 and deleting the data will be described sequentially.

  The operation accepting unit 11 in FIG. 4 accepts an operation of the operation panel 1d by the user, and gives an instruction to execute predetermined processing to each unit of the image forming apparatus 1 based on the contents of the operation.

  As described above, the user can use the image forming apparatus 1 remotely by operating the terminal device 2 instead of the operation panel 1d. In this case, the operation accepting unit 11 receives information on the content of the process desired by the user and data necessary for the process from the terminal device 2, and gives a command to each unit of the image forming apparatus 1 based on the information. .

  The user authentication unit 12 collates the user ID and password input by the user operating the operation panel 1d or the terminal device 2 with the user ID and password stored in the user account database DB1 of FIG. It is determined whether or not the user is a regular user. That is, user authentication processing is performed. However, when the user inputs a group ID instead of a user ID, authentication is performed based on the group ID in the group account database DB2 of FIG. When the user is authenticated as a legitimate user, the user can log in to the image forming apparatus 1 and is allowed to use the image forming apparatus 1 until logging out.

  The job execution unit 13 generates a job for executing a process desired by the user and registers it in a queue (queue). When the order of the jobs comes, the job is executed based on the processing conditions designated by the user.

  The account management unit 14 adds or updates an account based on a user instruction. The operation information management unit 15 updates the contents of the job history database DB3 in FIG. 7, the operation information database DB4 in FIG. 8, the setting information database DB5 in FIG. 9, and the account history database DB6 in FIG. Management of information related to the operation of 1.

  The box management unit 16 stores data in the box 5 provided in the hard disk 1g, calls the requested data from the box 5, deletes the data from the box 5, creates a new box 5, or creates an existing one. Processing related to the box such as deleting the box 5 is performed.

  FIG. 11 is a flowchart illustrating an example of the overall processing flow of the image forming apparatus 1, FIG. 12 is a diagram illustrating an example of the menu screen HG1, FIG. 13 is a diagram illustrating an example of an account deletion screen HG2, and FIG. It is a flowchart explaining the example of the flow of a deletion process.

  Next, the processing content of each part of the image forming apparatus 1 will be described in more detail with reference to flowcharts and the like.

  On the operation panel 1d, when no one is directly operating the image forming apparatus 1, a login screen for inputting an account and a password is displayed as a standby screen (# 11 in FIG. 11). A user who wants to use the image forming apparatus 1 operates his / her button on the operation panel 1d and inputs his / her user ID and password. A group ID to which the user belongs may be input instead of the user ID.

  Then, the operation reception unit 11 in FIG. 4 receives the input account (user ID or group ID) and password (# 12), and executes an authentication process to determine whether or not the user is a regular user. Commands the user authentication unit 12. The user authentication unit 12 determines whether or not a record of the same combination as the user operation content, that is, the input account and password is registered in the user account database DB1 (see FIG. 5) or the group account database DB2 (see FIG. 6). Check (# 13). If registered, the user is authenticated as a legitimate user (Yes in # 14), and the login of the user is permitted (# 15). On the other hand, if it is not registered (No in # 14), a message indicating that the account or password is incorrect is output, and the process returns to step # 11 to prompt the user to input again.

  After login, a menu screen HG1 as shown in FIG. 12 is displayed on the operation panel 1d (# 16). Further, the operation information management unit 15 adds “1” to the current value of “login count” of the account relating to login in the operation information database DB4 of FIG.

  When the user wants to use the image forming apparatus 1 remotely by operating the terminal device 2, the user inputs the account and password by operating the keyboard of the terminal device 2 and transmits the account and password to the image forming apparatus 1. Then, the operation reception part 11 receives an account and a password (# 12), and makes the user authentication part 12 perform an authentication process (# 13, # 14). If the user can log in, the user can cause the image forming apparatus 1 to execute a process desired by the user. Also in this case, “1” is added to the current value of “number of logins” of the account relating to login in the operation information database DB4.

  Here, the user designates a desired process for the image forming apparatus 1 by operating the menu screen HG1 or the terminal device 2. At this time, processing conditions are also specified as necessary. Then, the processing start button is pressed.

  For example, when it is desired to copy a document, the number of copies and the magnification are designated on the menu screen HG1. If there are more detailed processing conditions such as double-sided copy, 2-in-1 copy, paper size, or staple finish, the “detailed condition” button is pressed to switch the screen and specify these items.

  Alternatively, when FAX transmission to the FAX terminal 3 is desired, the “FAX transmission” button is pressed to switch the screen, and the telephone number of the FAX terminal 3 that is the transmission destination is designated. If the user wants to scan a document, he presses the “scan” button to switch the screen, and specifies the resolution for reading, whether the document is color or monochrome, and the storage location of the document image data.

  If it is desired to delete the account, the “delete account” button is pressed to switch to an account delete screen HG2 as shown in FIG. Then, enter the administrator account and its password in the “Administrator ID” text box and “Password” text box, respectively, and enter and specify the account you want to delete in the “Delete ID” text box. . Further, when it is desired to delete the data related to the specified account, the linked deletion is specified by pressing the “Yes” button. To delete only the account, press the “No” button. If you are already logged in with an administrator account, you may omit entering the account and password.

  If it is desired to add an account, the “add account” button is pressed to switch the screen, and the ID, password, user name or group name of the account to be added is designated. If it is desired to change the access right, the “access right” button is pressed to switch the screen, and the addition, change, or deletion of the access right is designated.

  When the operation accepting unit 11 accepts a screen such as the menu screen HG1 or the account deletion screen HG2 or a user operation content on the terminal device 2 (# 17), the operation accepting unit 11 gives an instruction to each unit of the image forming apparatus 1 as follows, for example.

  When an operation related to image processing such as copying, FAX transmission, or scanning is performed (Yes in # 18), the operation reception unit 11 instructs the job execution unit 13 to execute the image processing specified by the user. Give a command to it. Then, the job execution unit 13 generates a job for executing the image processing and registers it in the queue (# 19). When the turn of the job comes, the job is executed based on the processing condition designated by the user (# 20).

  For example, when the user performs an operation for FAX transmission, the job execution unit 13 registers the FAX transmission job in a queue. When the job order is reached, the scanner unit 1e is controlled to scan the document, and the network interface 1h or the like so that the image data of the document is dialed and transmitted to the FAX terminal 3 designated by the user. To control.

  Alternatively, when a printing (network printing) command and processing conditions are transmitted from the terminal device 2 together with image data, the job execution unit 13 registers the print job in a queue. When the job order is reached, the printing unit 1f is controlled to print an image on a sheet based on the image data and processing conditions.

  However, when executing a job that requires the confidential print function or the confirmation print function, the box management unit 16 uses the data required for the job by the instructing user before executing the job. Corresponding to the account, it is stored in advance in a predetermined box 5 for application functions.

  That is, in the case of a job that requires the confidential print function, the print data received from the terminal device 2 is stored in the confidential print box 5A1 in association with the account when the user of the terminal device 2 logs in. Keep it. When the user correctly inputs a predetermined password to the image forming apparatus 1, the job execution unit 13 starts execution of a print job using print data stored in the confidential print box 5A1.

  In the case of a job that requires the confirmation print function, the print data received from the terminal device 2 is stored in the confirmation print box 5A2. Then, the job execution unit 13 prints only one copy using the printing data and the like, and after the user gives an instruction that the remaining printing may be performed, the remaining printing is performed. Do.

  After the execution of the job, the box management unit 16 personalizes the data used to execute the job or the data generated by executing the job, as necessary. It is stored in the box 5K or the group box 5G of the group to which the user belongs (# 21). That is, the image is stored in the box 5 corresponding to the account used to log in to the image forming apparatus 1. At this time, the job processing conditions and the account are associated with the data to be stored.

  For example, when a copy job is executed in accordance with a request (operation) of a user who has logged in with a user ID of “U001”, image data of an image of a document that is a copy target, information indicating copy processing conditions, and Corresponding to “U001”, it is stored in the box 5 (personal box 5K) corresponding to “U001”.

  Alternatively, the data may be stored in another box 5 designated by the user instead of the box 5 of the user or group that is the request source of the job. Since the data associated with the information indicating the processing condition can be used when a job having the same processing condition is executed again, it may be referred to as “job data” hereinafter.

  As in the case of a folder or directory of a personal computer, the user appropriately stores data in his / her personal box 5K or a group box 5G of a group to which the user belongs or deletes data from these boxes 5. Can do. Further, the data transmitted from the FAX terminal 3 can be stored in these boxes 5. If it is desired to provide information in response to a request from the FAX terminal 3, the FAX data of the information may be stored in the polling transmission box 5A3.

  In parallel with or before and after the job data storage process in step # 21, the operation information management unit 15 records information for operation of the image forming apparatus 1 in the database based on the contents of the current job ( # 22). That is, a new record is generated in the job history database DB3 of FIG. 7, and in this record, the type of the current job, the processing conditions, that is, the job contents, the date and time of execution, and the account used by the requesting user to log in are recorded. Store. Further, the record corresponding to the account in the operation information database DB4 of FIG. 8 is updated as necessary. For example, if 50 sheets are consumed as a result of executing a copy job based on a request of a user who has logged in with a user ID “U001”, the current “number of prints” of the record “U001” Add “50” to the value. Alternatively, if a communication fee of 30 yen is charged as a result of executing the FAX transmission job, “30” is added to the current value of “FAX communication fee”.

  Alternatively, when the operation accepting unit 11 accepts an account deleting operation in Step # 17 (No in # 18, Yes in # 23), the account managing unit 14 performs a process for deleting the account. Command. Then, the account management unit 14 executes an account deletion process according to the procedure shown in FIG. 14 (# 24).

  Based on the administrator account and password entered by the user on the account deletion screen HG2 in FIG. 13 and the user account database DB1 in FIG. 5, it is determined whether or not the user who performed the operation is a valid user. Then, it is determined based on the setting information database DB5 of FIG. 9 whether or not the user is given system management authority (# 101 of FIG. 14). If it is determined that the authority is not given (No in # 102), the user operation is rejected, and the account deletion process is stopped.

  If it is determined that the authority is given (Yes in # 102), the deletion process of the account designated by the user on the account deletion screen HG2 (hereinafter referred to as “deletion target ID”) is continued.

  Note that the steps # 101 and # 102 may be omitted if the administrator has already logged in with an administrator account. Also, in steps # 26, # 28, and # 30 of FIG. 11 to be described later, the authority for system management is checked as necessary as in step # 101.

  When the “Yes” button is pressed on the account deletion screen HG2 (Yes in # 103), the deletion target ID is searched from the user account database DB1 in FIG. 5 and the group account database DB2 in FIG. 6 and deleted. (# 104). Further, the data (record) associated with the deletion target ID is searched from the box 5, job history database DB3, operation information database DB4, setting information database DB5, and account history database DB6, and deleted (#). 105). Alternatively, a flag indicating the validity of the account may be provided in the user account database DB1, and the flag of the retrieved record may be updated to a value meaning invalidity.

  However, not all of the data associated with the deletion target ID is deleted, but a part of the data is left without being deleted according to the specifications, status, usage pattern, management policy, etc. of the image forming apparatus 1. It may be left.

  For example, when one data can be shared by a plurality of users, the data stored in the personal box 5K, the confidential print box 5A1, or the confirmation print box 5A2 corresponding to the deletion target ID is deleted. However, the data stored in the other personal box 5K, group box 5G, or polling transmission box 5A3 may be left.

  Alternatively, when a FAX transmission job requested by a user with a deletion target ID is waiting to be executed, data necessary for the job may be left. When the usage state of the image forming apparatus 1 is strictly managed, at least the history data data in the job history database DB3 and the data in the operation information database DB4 are kept, and the usage state is directly related. The e-mail address and the access right data in the setting information database DB5 not related to may be deleted.

  If the capacity of the hard disk 1g of the image forming apparatus 1 is small and it is desired to secure a free space as much as possible, all the data corresponding to the deletion target ID may be deleted. If the usage form allows the re-registration of the account once deleted, the data in the account history database DB6 may be left behind.

  On the other hand, if the “No” button is pressed (No in # 103), the deletion target ID is searched from the user account database DB1 in FIG. 5 and the group account database DB2 in FIG. 6, and only the deletion target ID is searched. It is deleted (# 106).

  Then, the deletion of the deletion target ID is recorded in the account history database DB6 (# 107).

  Returning to FIG. 11, when the operation accepting unit 11 accepts an account addition operation in Step # 17 (No in # 18, No in # 23, Yes in # 25), the operation accepting unit 11 executes an account addition process. Commands are given to the account management unit 14. Then, the account management unit 14 additionally registers a new account in the user account database DB1 in FIG. 5 or the group account database DB2 in FIG. 6 based on the content specified by the user, and the account history database DB6 indicates that the account has been registered. (# 26). When re-registration of an account once deleted is permitted, an account that has been deleted may be extracted from the account history database DB 6 and presented to the user as a re-registration candidate.

  Alternatively, when an operation to change the access right is accepted (No in # 18, # 23, and # 25, Yes in # 27), the operation information management unit 15 sets the settings shown in FIG. 9 based on the content specified by the user. The information database DB5 is updated (# 28).

  When an operation other than those described above is accepted (No in # 18, # 23, # 25, and # 27), each unit of the image forming apparatus 1 executes a process according to the user's operation as in the past (# 29).

  Steps # 16 to # 29 are repeatedly executed as necessary until the user logs out.

  According to the present embodiment, in an image processing apparatus such as an MFP, when an account is deleted, data associated with the account is deleted. Therefore, among the data in the storage medium used in the image processing apparatus, it is possible to easily delete data that is useless for other users and that the user of the account to be deleted does not want to be seen by others. Therefore, the storage medium can be used more efficiently than before, and the security of data can be enhanced as compared with the conventional one.

  In this embodiment, the data to be deleted together with the account is determined according to the management policy of the image forming apparatus 1, but the administrator sets the type of data to be deleted and the type of data not to be deleted one by one. You may be able to do that.

  In addition, the entire network system, the configuration of the image forming apparatus 1 or each unit, the processing content, the processing order, the configuration of the database, the type of data to be deleted, and the like can be appropriately changed in accordance with the spirit of the present invention.

  The present invention is preferably used particularly in an environment such as an office where a plurality of users share one image processing apparatus.

1 is a diagram illustrating an example of the overall configuration of a network system provided with an image forming apparatus according to the present invention. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus. FIG. It is a figure which shows the example of allocation of the storage area of a hard disk. 2 is a diagram illustrating an example of a functional configuration of an image forming apparatus. FIG. It is a figure which shows the example of a user account database. It is a figure which shows the example of a group account database. It is a figure which shows the example of a job history database. It is a figure which shows the example of an operation information database. It is a figure which shows the example of a setting information database. It is a figure which shows the example of an account history database. 6 is a flowchart illustrating an example of the overall processing flow of the image forming apparatus. It is a figure which shows the example of a menu screen. It is a figure which shows the example of an account deletion screen. It is a flowchart explaining the example of the flow of an account deletion process.

Explanation of symbols

1 Image forming device (image processing device)
11 Operation reception part (account designation reception means)
14 Account Management Department (Account Management Means)
15 Operation Information Management Department (Data management means)
16 Box management section (data management means)
1d Operation panel (input means)
1f Printing unit (printing means)
1h Network interface (input means, fax communication means)

Claims (8)

An image processing apparatus that executes image processing,
Account management means for managing each user's account for using the image processing apparatus;
Data management for managing data used for image processing or for operation of the image processing apparatus by storing the data in a storage medium in association with the account of the user related to the data Means,
And an account designation receiving means for accepting designation of the account to be invalidated,
When the designation is accepted,
The account management means invalidates the account according to the designation,
The data management means deletes all of the data stored in the storage medium and associated with the account according to the designation;
An image processing apparatus. An image processing apparatus that executes image processing,
Account management means for managing each user's account for using the image processing apparatus;
Data management means for managing data used for image processing by storing it in a storage medium in association with the account of the user related to the data;
And an account designation receiving means for accepting designation of the account to be invalidated,
When the designation is accepted,
The account management means invalidates the account according to the designation,
The data management means stores the data stored in the storage medium in a storage area allocated to the storage medium only for the user among the data associated with the account according to the designation. Are deleted, and those stored in the storage area allocated to the storage medium for other users are not deleted,
An image processing apparatus. An input means for the user at the installation location of the image processing apparatus to input characters to the image processing apparatus;
The printing process instructed by another device is started when the correct password is input by the input means. First, when a security print function and an instruction to print a plurality of copies of documents are received, A printing unit having a confirmation print function for printing only one copy and printing the remaining number of copies after receiving an instruction from the user;
Fax communication means having a polling transmission function which is a function of transmitting the data for providing information stored in the storage medium as fax data in accordance with a request from a fax terminal;
The data management means is for the print processing by the confidential print function and the confirmation print function among the data stored in the storage medium and associated with the account according to the designation The one for printing processing is deleted, and the one for providing information to the fax terminal by the polling transmission function is left without being deleted.
The image processing apparatus according to claim 2. An image processing apparatus that executes image processing,
Account management means for managing each user's account for using the image processing apparatus;
Data management means for managing data used for the operation of the image processing apparatus by storing the data in a storage medium in association with the account of the user related to the data;
And an account designation receiving means for accepting designation of the account to be invalidated,
When the designation is accepted,
The account management means invalidates the account according to the designation,
The data management means deletes the data related to the access right or the e-mail address from the data stored in the storage medium and associated with the account according to the designation, and executes the image processing. Keep the data about without deleting,
An image processing apparatus. When the designation is accepted, the data management means keeps the history data indicating that the account has been invalidated without deleting it, and an operation for newly registering the account is performed. Presenting the account already disabled based on the historical data as a candidate for re-registration,
The image processing apparatus according to claim 4. An image processing apparatus that executes image processing,
Account management means for managing each user's account for using the image processing apparatus;
Data management for managing data used for image processing or for operation of the image processing apparatus by storing the data in a storage medium in association with the account of the user related to the data Means,
An input means for the user at the installation location of the image processing apparatus to input characters to the image processing apparatus;
The printing process instructed by another device is started when the correct password is input by the input means. First, when a security print function and an instruction to print a plurality of copies of documents are received, A printing unit having a confirmation print function for printing only one copy and printing the remaining number of copies after receiving an instruction from the user;
A fax transmission function for transmitting the data stored in the storage medium as fax data to a fax terminal designated by the user, and a request from the fax terminal for the data for providing information stored in the storage medium A polling transmission function that is a function of transmitting as fax data according to
And an account designation receiving means for accepting designation of the account to be invalidated,
When the designation is accepted,
The account management means invalidates the account according to the designation,
The data management means stores the data stored in the storage medium in a storage area allocated to the storage medium only for the user among the data associated with the account according to the designation. Deleted data, data for print processing by the confidential print function, data for print processing by the confirmation print function, and data related to the access right or e-mail address are deleted for users other than the user. Data stored in a storage area allocated to the storage medium, data for providing information by the polling transmission function, data related to the history of image processing, and storage commonly allocated to the plurality of users The data stored in the area and the fax transmission function Data that has not yet been sent to the box terminal leave without deleting,
An image processing apparatus. A data management method for managing data used for image processing stored in a storage medium provided in an image processing apparatus for executing image processing or used for operation of the image processing apparatus,
Managing an account of each user for using the image processing apparatus by an account database;
The data is associated with the user's account associated with the data,
When you accept the designation of the account that should be disabled,
Update the account database so that the account related to the designation is invalid,
Deleting all data associated with the account according to the designation from the data stored in the storage medium;
A data management method characterized by the above. A computer program used in an image processing apparatus provided with a storage medium,
When accepting the designation of an account to be invalidated from among the accounts of each user for using the image processing apparatus,
Disabling the account associated with the designation,
Processing that deletes all data associated with the specified account from data stored in the storage medium and used for image processing or used for operation of the image processing apparatus When,
A computer program for causing a computer to execute.