JP2018124711A - Information processor and program thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique to secure secrecy of secret information in an information processor when a screen for operating the information processor is displayed in a device other than the information processor.SOLUTION: A composite device includes a control part that performs control to cause the own device to display a first operation screen which is an operation screen for operating functions of the own device and where no secret information is displayed and a terminal to display a second operation screen which is an operation screen for operating the functions of the own device and where secret information is displayed.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus and a program thereof.

  In recent years, it has become a common practice to convert a wide variety of information into data and store it in an information processing apparatus such as a PC (Personal Computer) or server. The information converted into data includes, for example, confidential information such as personal information or confidential information, and various measures are taken so as not to be leaked to anyone other than those concerned. In particular, in an office, many users often share information that has been converted into data. Under such conditions, the access authority to the information varies depending on the user's position such as the department or position of the user. For this reason, accessible data varies depending on the user.

  In Patent Document 1, the access authority to the confidential information is set for each record of the database in which the confidential information is stored, and the confidentiality described in a predetermined column of the record is set for a user who does not have the access authority. A technique is described in which all information is concealed and displayed, thereby ensuring confidentiality for users without access authority.

JP 2005-158038 A

  The problem to be solved by the present invention is a technique for ensuring the confidentiality of confidential information in the information processing apparatus when a screen for operating the information processing apparatus is also displayed on a device other than the information processing device. It is to provide.

  1st invention is an operation screen for operating the function of an own apparatus, and displays the 1st operation screen on which the confidential information is not displayed on the own apparatus, and an operation screen for operating the function of the own apparatus The information processing apparatus includes a control unit that controls to display a second operation screen on which confidential information is displayed on the terminal.

  A second invention includes an authentication unit that authenticates a terminal that has requested connection authentication using the terminal authentication information in the first invention, and the control unit displays the second operation screen. An information processing apparatus that controls to display on an authenticated terminal.

  According to a third invention, in the first or second invention, the control unit invalidates an instruction performed using the first operation screen while the second operation screen is displayed. An information processing apparatus that performs control.

  In a fourth aspect based on any one of the first to third aspects, the control unit controls display of the first operation screen by replacing at least a part of the confidential information with other information. Information processing apparatus.

  According to a fifth invention, in any one of the first to fourth inventions, the control unit responds to selection of a location where confidential information is to be displayed in the first operation screen in response to the terminal. An information processing apparatus that controls to display the second operation screen.

  According to a sixth aspect of the present invention, the control unit includes the first operation screen and the second operation screen so that the operation content on the first operation screen is different from the operation content on the second operation screen. It is the information processing apparatus which controls the display of.

  A seventh invention is a program for an information processing device, wherein the information processing device is an operation screen for operating a function of the information processing device, and a first operation screen on which confidential information is not displayed is the information It is an operation screen for operating on the function of the information processing device displayed on the processing device, and is a program that functions as a control unit that controls to display the second operation screen on which confidential information is displayed on the terminal. .

According to the first aspect of the invention, confidentiality can be maintained in the information processing apparatus.
According to the invention which concerns on Claim 2, confidential information can be displayed on the authenticated terminal.
According to the invention of claim 3, malfunctions are unlikely to occur.
According to the fourth aspect of the invention, the confidential information is not displayed on the information processing apparatus, and it is difficult for other users to visually recognize the confidential information.
According to the fifth aspect of the present invention, since the confidential information can be displayed on the terminal when the user needs to display the confidential information, the convenience for the user is enhanced.
According to the invention which concerns on Claim 6, much information required for operation can be displayed on a display part at once.
According to the invention which concerns on Claim 7, confidential information can be displayed, maintaining confidentiality.

1 is a schematic diagram of a system using an information processing apparatus according to the present invention. It is an example of login information. It is a figure for demonstrating an example which does not display confidential information. It is an example of the operation screen displayed on an information processing apparatus. It is a sequence diagram. It is a figure for demonstrating operation | movement of the compound apparatus in 1st Embodiment. It is an example of the flow of a transition of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is a figure for demonstrating operation | movement of the compound apparatus in 2nd Embodiment. It is an example of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is an example of an operation screen. It is an example of the operation screen in 3rd Embodiment. It is another example of composition of a compound device concerning the present invention.

  The present invention is an operation screen for operating a function of the own device, displaying a first operation screen on which the confidential information is not displayed on the own device, and operating the function of the own device. The information processing apparatus includes a control unit that controls to display a second operation screen on which confidential information is displayed on the terminal.

  Here, the information processing apparatus may be of any type as long as it is an apparatus that processes information such as a personal computer (PC), a tablet, a multi-function peripheral (MFP), a copying apparatus, a printer apparatus, and a facsimile. . In the following description, the information processing apparatus is a composite apparatus.

  The confidential information is information that is permitted to be browsed (accessed) only by a specific user. The confidential information is, for example, a scanned image temporarily stored in the RAM of the multifunction apparatus. The confidential information is destination information (address book) or data file contents stored in a hard disk or a non-volatile memory of the composite apparatus. For example, the destination information (address book) or the contents of a data file stored in a database such as a data server on the network to which the composite apparatus is connected. Of course, it is not limited to these. The confidential information may be information that is not displayed on the display unit of the multifunction device among information that is permitted to be browsed only by a specific user. The confidential information may be appropriately set for each table, column, record, and field of the database.

  In an environment in which a display unit (display, etc.) on which information is displayed can be seen by anyone regardless of whether or not the user has access authority, if a user with legitimate access authority displays confidential information on the display unit, the confidentiality is displayed. The information is visible to other users who do not have access authority. That is, sneak peeking by shoulder hacking occurs. Therefore, it is difficult to say that confidentiality is ensured. In particular, when confidential information is displayed in a scanner, a copy, a printer, a facsimile, or a composite device used by many users in an office, it is difficult to say that confidentiality is ensured. According to the present invention, confidentiality of confidential information is ensured.

<First embodiment>
FIG. 1 is a schematic diagram of a system using the composite apparatus according to the first embodiment. In FIG. 1, 10 is a user terminal, and 20 is a composite apparatus.

  The user terminal 10 is a terminal having a wireless function such as a smartphone or a tablet terminal. The user terminal 10 includes a wireless network interface 11, a control unit 12, a display unit 13, and an operation unit 14.

  The wireless network interface 11 transmits and receives data via a wireless LAN (Local Area Network). When the user terminal 10 connects to the composite apparatus 20, the wireless network interface 11 transmits a connection authentication request and receives terminal authentication. The authentication request includes terminal identification information as authentication information, and the wireless network interface 11 has terminal identification information for uniquely identifying its own terminal. The following example is an example in which a MAC (Media Access control) address is used as terminal identification information. However, it is not limited to this. For example, other information may be used as long as the information is uniquely assigned to the terminal and can uniquely identify the terminal. For example, it may be a UUID (Universally Unique IDentifier). In this case, UUID variants are not limited. For example, UUID (version 1) using time and MAC address, part of version 1 UUID, user ID or group of POSIX (Portable Operating System Interface), etc. UUID (Version 2) replaced by ID, UUID using some unique name (byte string) such as domain name, UUID using MD5 (Version 3) or SHA1 (Version 5) as a hash function, or UUID by random number (Version 4) may be used. Other information used for authentication may be a SIM (Subscriber Identity Module), a card identification number, a terminal telephone number, or the like.

  The wireless network interface 11 may be a short-range wireless interface such as Bluetooth (registered trademark). Communication between the user terminal 10 and the composite apparatus 20 may be performed by wire.

  The control unit 12 displays on the display unit 13 of the user terminal 10 based on the operation screen display data transmitted from the multifunction apparatus 20. The operation screen is used when the user operates each function of the multifunction device 20 such as a scanner, a copy, a printer, and a facsimile. The control unit 12 executes various controls as a terminal in addition to displaying the operation screen.

  The display unit 13 is a display on which an operation screen is displayed by the control unit 12. For example, an LCD (Liquid Crystal Display) is used.

  The operation unit 14 is configured with a touch panel. The operation unit 14 is a functional unit that receives an instruction input by the user using the operation screen displayed on the display unit 13.

  The composite apparatus 20 has a plurality of functions such as scanner, copy, print, and facsimile. The composite apparatus 20 transmits and receives data via a network such as a LAN or the Internet. The composite apparatus 20 transmits and receives data (for example, facsimile image data) via a communication network such as a public telephone line network. The composite apparatus 20 has a terminal connection mode and a normal mode. The terminal connection mode is a display method to which the present invention is applied. The normal mode is a mode in which the user terminal 10 is not connected to the multifunction device 20 and confidential information is not displayed on the multifunction device 20. Even in this normal mode, the function of the composite apparatus 20 can be executed. For example, it is possible to execute copying, printing, a facsimile in which a destination is directly input and transmitted.

  The composite apparatus 20 includes a wireless network interface 21, an operation panel unit 22, a storage unit 23, an authentication unit 24, a control unit 25, a wired network interface 26, and a function unit 27.

  The wireless network interface 21 transmits / receives data to / from the user terminal 10 via the wireless network. The wireless network interface 21 receives the connection authentication transmitted from the user terminal 10. The wireless network interface 21 transmits display data of the operation screen displayed on the display unit 13 to the user terminal 10.

  The operation panel unit 22 is a touch panel, for example. The operation panel unit 22 includes a display unit 221 and an operation unit 222. The display unit 221 is an LCD, for example. The display unit 221 displays an operation screen for operating each function of the multifunction apparatus 20. The operation unit 222 receives an instruction input by the user using the operation screen displayed on the display unit 221.

  The storage unit 23 is a non-volatile memory such as a flash memory, for example. Or, it is a storage device such as a hard disk drive. Of course, it is not limited to these. User login information is stored in the storage unit 23 (see FIG. 2). This user login information is information in which a user ID, a password, and terminal identification information are associated with each other. The user ID is identification information that uniquely identifies a user who uses the composite apparatus 20. The password is information for logging in to the composite apparatus 20 when the user uses the composite apparatus 20. A user who uses the composite apparatus 20 registers his / her user ID and password in the storage unit 23 in advance. The terminal identification information is information for uniquely identifying the user terminal 10 used by the user. As described above, the terminal identification information is described by the MAC address. Of course, it is not limited to this.

  The authentication unit 24 performs user authentication and terminal authentication. First, user authentication will be described. The user inputs his / her user ID and password from the operation panel unit 22. The authentication unit 24 collates (user authentication) the input user ID and password with the user login information stored in the storage unit 23. In this embodiment, an example in which a user inputs his / her user ID will be described. The user may select his / her user ID from the list of user IDs displayed on the display unit 221 and input the password.

  Next, terminal authentication will be described. The authentication unit 24 receives a connection authentication request from the user terminal 10. The authentication unit 24 collates the MAC address included in the connection authentication request with the user ID input in the user authentication based on the user login information in the storage unit 23. Thereby, terminal authentication of the user terminal 10 is performed.

  The control unit 25 generates display data of an operation screen for operating each function of the multifunction apparatus 20. The display data of the operation screen generated by the control unit 25 is displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the composite apparatus 20.

  Here, the operation screen will be described. The operation screen includes, for example, data written in a markup language such as XML (Extensible Markup Language) and HTML (Hypertext Markup Language), and JavaScript (registered trademark) or GUI (GraphicUsual Script). And composed script. The operation screen is displayed on the display unit using a Web browser. As a display method other than the Web browser, a display by a dedicated application is conceivable. The display unit 13 and the display unit 221 may be displayed by the same application or different applications. In the following, both operation screens are composed of data and scripts described in a markup language, and are displayed by a Web browser.

  The operation screen is displayed on the display unit 221 as described above, and the user inputs an operation instruction using the displayed operation screen. The operation screen corresponds to, for example, a login screen (see FIG. 4 (1)), a menu screen (see FIG. 4 (2)), a setting screen (see FIG. 4 (3)), or the like.

  As described above, the operation screen is displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the multifunction device 20. However, display of confidential information differs between the display unit 13 and the display unit 221. The control unit 25 reads confidential information associated with the currently logged-in user ID. The control unit 25 performs control so that the read confidential information is not displayed on the operation screen (first operation screen) displayed on the display unit 221. On the other hand, the control unit 25 performs control so that the read confidential information is displayed on the operation screen (second operation screen) displayed on the display unit 13.

  An operation screen displayed on the display unit 13 of the user terminal 10 and the display unit 221 of the multifunction apparatus 20 will be described. There are a method for controlling the confidential information not to be displayed, a method for controlling the confidential information itself not to be displayed, and a method for controlling the confidential information not to be displayed by replacing it with other information. Hereinafter, the fax destination information is confidential information, and an example of an operation screen for setting the fax destination will be described.

  A method of controlling so that the fax destination information (secret information) itself is not displayed will be described. The operation screen displayed on the display unit 221 of the multifunction apparatus 20 is controlled so that destination information is not displayed. The confidential information is not displayed on the operation screen displayed on the display unit 221 (see the composite device side diagram in FIG. 3A). As a method for preventing the destination information from being displayed, there is a method for controlling the destination information itself so that it is not displayed without being read. There is also a method of controlling the destination information not to be displayed by replacing the read destination information with a Null value. Any method may be used. It is not restricted to the said method. The destination information is controlled to be displayed on the operation screen displayed on the display unit 13 of the user terminal 10 (see the user terminal side diagram in FIG. 3A).

  A method of controlling the confidential information so that it is not displayed after being replaced with other information will be described. The operation screen displayed on the display unit 221 of the multifunction apparatus 20 is controlled so that the destination information is not displayed by replacing the destination information with other information. For example, the destination information is replaced so as to be hidden by the characters. As a result, the destination information is not displayed (see the diagram on the multifunction apparatus side in FIG. 3B). Control is performed so that destination information is displayed on the operation screen displayed on the display unit 13 of the user terminal 10. Destination information is displayed on the operation screen displayed on the display unit 13 (see the user terminal side in FIG. 3B). On the operation screen displayed on the display unit 221 of the multifunction apparatus 20, there are cases where not all of the confidential information is displayed and cases where a part of the confidential information is not displayed. That a part of the confidential information is not displayed is such that the content of the confidential information is not inferred.

  The wired network interface 26 is connected to a data server or storage device on the network via the network. The network is, for example, a LAN or the Internet. In a data server or storage device on the network, for example, an address book and a file are stored in association with the user ID.

  The function unit 27 is a function collection unit. For example, scanner, copy, print, facsimile, etc.

  Subsequently, the operation of the present embodiment will be described. FIG. 5 is a sequence diagram of the present embodiment.

  The control unit 25 displays an operation screen (login screen) on the display unit 221 (see step 501: FIG. 4 (1)). The user inputs a user ID and a password assigned to the user (step 502). The authentication unit 24 checks whether the input user ID and password are associated and stored in the user login information. Thereby, user authentication is performed (step 503). If the verification matches, login is permitted, and if not, login is rejected.

  After the login is permitted, the connection authentication request transmitted from the user terminal 10 is received (step 504).

  Whether the authentication unit 24 receives a connection authentication request from the user terminal 10 from the wireless network interface 21 and whether the MAC address included in the connection authentication and the logged-in user ID are associated and stored in the user login information. Collate. Thereby, terminal authentication is performed (step 505). If the user ID and the MAC address are stored in association with each other, the connection is permitted. If the user ID and the MAC address are stored in association with each other, the connection is rejected.

  The authentication unit 24 transmits the authentication result to the user terminal 10 via the wireless network interface 21 (step 506).

  When the connection is permitted in step 505, the control unit 25 displays a menu screen (see FIG. 4 (2)), for example. In accordance with the function selected by the user on this menu screen, an operation screen controlled so as not to display confidential information is displayed on the display unit 221 (step 507). 3A and 3B are examples of operation screens when a fax is selected. The control part 25 transmits the display data of the operation screen controlled so that confidential information is displayed to the user terminal 10 (step 508). The diagrams on the user terminal side in FIGS. 3A and 3B are examples of operation screens when a fax is selected.

  The control unit 12 of the user terminal 10 displays the operation screen on the display unit 13 of the own terminal based on the operation screen display data received by the wireless network interface 11 (step 509).

  The operation unit 14 receives an instruction input by the user using the operation screen displayed on the display unit 13 of the user terminal 10 (step 510). The received instruction is transmitted to the composite apparatus 20 via the wireless network interface 11 (step 511).

  The function unit 27 executes a function according to the instruction from the user terminal 10 received by the wireless network interface 21 (step 512).

  Subsequently, the operation of the composite apparatus 20 will be described. FIG. 6 is a flowchart for explaining the operation of the composite apparatus 20.

  The control unit 25 displays an operation screen (login screen: see FIG. 3 (1)) on the display unit 221 and waits for an input from the user (step 601).

  The user inputs a user ID and a password using the operation unit 222. The authentication unit 24 checks whether the user ID and the password are stored in association with the user login information in the storage unit 23 (step 602). If the collation result is OK, the authentication unit 23 permits login (step 602: Yes). When the collation result is NG, the authentication unit 23 rejects the login (step 602: No). If the login is rejected, the user cannot use the multifunction device 20 and ends.

  If login is permitted (step 602: Yes), the wireless network interface 21 receives a connection authentication request from the user terminal 10 (step 603).

  The authentication unit 24 collates whether the logged-in user ID and the MAC address included in the received connection authentication request are associated and stored in the user login information (step 604). If the verification result is OK, the authentication unit 24 permits the connection (step 604: Yes). If the collation result is NG, the connection is rejected (step 604: No). In the case of connection rejection (step 604: No), the wireless network interface 21 receives the connection rejection authentication result from the authentication unit 24 and transmits it to the user terminal 10 (step 605). A normal mode operation screen is displayed on the display unit 221. The function unit 27 executes the function in the normal mode (step 610).

  When the connection is permitted (step 604: Yes), the control unit 25 displays an operation screen on the display unit 221 of the multifunction apparatus 20 (step 606). For example, a menu screen (see FIG. 4 (2)) and a setting screen (see FIG. 4 (3)) corresponding to the function selected by the user in the menu are displayed.

  The control unit 25 reads confidential information associated with the logged-in user ID. Display data of the operation screen controlled to display the read confidential information is transmitted to the user terminal 10 via the wireless network interface 21 (step 607). An operation screen on which confidential information is displayed is displayed on the display unit 13 of the user terminal 10.

  The operation unit 14 receives the content instructed by the user using the operation screen displayed on the display unit 13 of the user terminal 10. The received instruction content is transmitted to the composite apparatus 20 via the wireless network interface 11 (step 608).

  The function unit 27 executes a function corresponding to the instruction content received via the wireless network interface 21 (step 609).

  The normal mode described above is a case where confidential information is not displayed on the display unit 221 of the multifunction apparatus 20. However, in this normal mode, each user may set the type and level of confidential information in advance and display the confidential information according to the set conditions.

  In the example described above, user authentication is always performed, but user authentication may be omitted. In this case, the MAC address used for terminal authentication is used instead of the user ID.

  The example described above is an example in which the operation unit 222 receives the operation even after the terminal is authenticated even if the user operates using the operation screen displayed on the display unit 221 of the multifunction device 20. However, the configuration may be such that no operation using the operation screen displayed on the display unit 221 is accepted after terminal authentication. In this case, when the terminal authentication is completed, the authentication unit 24 notifies the control unit 25 that the terminal authentication has been completed. The control unit 25 performs control to invalidate an operation instruction using the operation screen displayed on the display unit 221. That is, the operation unit 222 is controlled not to accept an operation instruction. After this notification, the operation unit 222 does not accept an operation instruction using the operation screen displayed on the display unit 221. While the terminal 10 is connected, the functional operation of the multifunction apparatus 20 is performed using the operation screen displayed on the display unit 13 of the terminal 10.

<Specific example 1>
A specific operation example will be described below. This specific example is an example in which the user can operate using the operation screen displayed on the display unit 221 of the composite apparatus 20 even after terminal authentication. FIG. 7 is a diagram for explaining screen transition when the copy function is selected.

  A login screen (see FIG. 7A) is displayed on the display unit 221. The user inputs a user ID and password assigned to the user. It is assumed that the user ID “AAA” and the password “FX001” are input.

  The authentication unit 24 checks whether or not the user ID “AAA” and the password “FX001” are stored in association with the user login information. Referring to the login information in FIG. 2, login is permitted because the user ID “AAA” and the password “FX001” are associated with each other.

  When login is permitted, the user terminal 10 transmits a connection authentication request. It is assumed that the connection authentication request is transmitted in a state including “12-34-56-78-90-11” as the MAC address.

  The authentication unit 24 checks whether or not the MAC address “12-34-56-78-90-11” and the user ID “AAA” of the logged-in user are associated and stored in the user login information. Authenticate by Here, referring to the login information in FIG. 2, since the MAC address “12-34-56-78-90-11” and the user ID “AAA” are associated with each other, the connection is permitted. This authentication result is transmitted to the user terminal 10. At this time, the authentication result is displayed on the display unit 13 of the user terminal 11 (see the user terminal side in FIG. 7B).

  After transmitting the authentication result, an operation screen (menu screen: see FIG. 7 (2)) is displayed on the display unit 221. Here, for example, a document to be copied is set in the composite apparatus, and the copy function is selected.

  An operation screen (copy setting screen: see the composite device side in FIG. 7C) is displayed on the display unit 221. The scan function unit of the function unit 27 temporarily stores the scanned image in the RAM in association with the logged-in user ID. The control unit 25 transmits display data of the operation screen that is controlled to display the scanned image to the user terminal 10. The control unit 12 of the user terminal 10 displays an operation screen on the display unit 13 based on the received display data. The diagram on the user terminal side in FIG. 7 (3) is an example in which a scan image is displayed on the display unit 13 of the user terminal 10.

  Here, the user confirms the scanned image on the operation screen displayed on the display unit 13. In response to the confirmation result, an instruction for operating the function of the multifunction apparatus 20 is selected using the operation screen. The selected instruction content is transmitted to the composite apparatus 20.

  In the multifunction device 20, an operation corresponding to the instruction content is executed.

  As described above, according to the present exemplary embodiment, the confidential information is not displayed on the display unit 221 of the composite device 20 but is displayed only on the display unit 13 of the user terminal 10 that is authenticated by the composite device 20. This increases confidentiality.

<Specific example 2>
This specific example is an example in which an operation instruction using the operation screen displayed on the display unit 221 of the multifunction apparatus 20 is not accepted after terminal authentication. An example in which the fax function is selected will be described. 8 to 10 are examples of the operation screen in this specific example. It is assumed that the address book used in the fax function is stored in association with each user ID in a data server on the LAN.

  An operation screen (login screen: see the diagram on the multifunction device side in FIG. 8) is displayed on the display unit 221 of the multifunction device 20. The user inputs a user ID and password assigned to the user. Here, it is assumed that the user ID “AAA” and the password “FX001” are input.

  The authentication unit 24 checks whether or not the input user ID “AAA” and the password “FX001” are associated with each other and stored in the user login information of the storage unit 23. In the login information of FIG. 2, the user ID “AAA” and the password “FX001” are stored in association with each other. Therefore, login is permitted.

  When login is permitted, the user terminal 10 transmits a connection authentication request. Here, it is assumed that “12-34-56-78-90-11” is included in the authentication request as the MAC address.

  The authentication unit 24 collates whether the MAC address “12-34-56-78-90-11” and the logged-in user ID “AAA” are associated with each other and stored in the user login information. In FIG. 2, it can be seen that the MAC address “12-34-56-78-90-11” and the user ID “AAA” are associated with each other. An authentication result indicating that the terminal 10 is permitted to connect is transmitted to the user terminal 10. An authentication result indicating that the connection is permitted is displayed on the display unit 13 of the user terminal 11 (see the terminal side diagram in FIG. 8).

  The authentication unit 24 notifies the control unit 25 that the terminal 10 has been permitted to connect. Upon receiving this notification, the control unit 25 performs control to invalidate the operation instruction using the operation screen displayed on the display unit 221.

  After transmitting the authentication result, an operation screen (menu screen: see the diagram of the multifunction device side in FIG. 9) is displayed on the display unit 221 of the multifunction device 20. Even if the fax function is selected on this menu screen, the operation unit 222 does not accept an operation instruction. An operation screen (menu screen: see FIG. 9 on the user terminal side) is displayed on the display unit 13 of the user terminal 10. The user selects the fax function on this menu screen. The selected operation instruction is received by the operation unit 14. The accepted operation instruction (fax) is transmitted to the composite apparatus 20 via the wireless network interface 11. The control unit 25 receives an operation instruction (fax) via the wireless network interface 21.

  While the user terminal 10 is connected to the composite apparatus 20, the operation screen displayed on the display unit 221 does not change (see the composite apparatus side in FIG. 10). An operation screen (menu screen: see the user terminal side in FIG. 10) is displayed on the display unit 13 of the user terminal 10. The user selects an address book on this menu screen. The selected operation instruction (address book) is received by the operation unit 14. The accepted operation instruction (address book) is transmitted to the composite apparatus 20 via the wireless network interface 11. The control unit 25 receives an operation instruction (address book) via the wireless network interface 21. The control unit 25 reads the address book associated with the logged-in user ID from the data server on the LAN. The fax function unit of the function unit 27 temporarily stores the scanned image in the RAM in association with the user ID that has been authenticated. The control unit 25 controls the display unit 13 to display the scanned image and the address information of the read address book. The display data of the operation screen thus controlled is transmitted to the user terminal 10 via the wireless network interface 21.

  The control unit 12 displays the operation screen received via the wireless network interface 11 on the display unit 13 (see the user terminal side diagram in FIG. 11). In the display unit 221 of the multifunction device 20, no screen transition is performed (see the diagram on the multifunction device side in FIG. 11). That is, the confidential information is not displayed on the display unit 222 of the multifunction apparatus 20. In FIG. 11, an operation screen on which an address book destination is displayed and an operation screen on which a scanned image is displayed are displayed by switching the operation screen. However, these operation screens may be integrated into one operation screen.

  The user selects a destination on the operation screen displayed on the display unit 13 of the user terminal 10. The selected operation instruction (destination) is received by the operation unit 14. The user confirms the scanned image. The user selects an operation instruction “OK” for transmitting the scanned image by fax using the operation screen. The selected operation instruction is received by the operation unit 14. The accepted operation instruction (destination and OK) is transmitted to the composite apparatus 20 via the wireless network interface 11.

  The fax function unit of the function unit 27 receives an operation instruction (destination and OK) via the wireless network interface 21. The fax function unit transmits the scanned image to the destination according to the operation instruction.

  According to the present embodiment, the confidential information is not displayed on the display unit 221 of the composite apparatus 20 that can be viewed by many users. The confidential information is only displayed on the display unit 13 of the user terminal 10 permitted to connect. The confidential information is difficult to be visually recognized by other users. Although a specific person can visually recognize confidential information, confidentiality is ensured for persons other than the above.

  According to the present embodiment, the operation screen is displayed on the display unit 13 of the user terminal 10 in addition to the display unit 221 of the multifunction apparatus 20. Thereby, the area | region which displays the information regarding operation of the composite apparatus 20 becomes large by using both display parts. The operability of the composite device 20 is improved. This is effective for a composite apparatus in which the display area of the display unit is not large.

<Second Embodiment>
The above embodiment is an example in which the composite apparatus 20 is waiting for a connection authentication request from the user terminal 10 to be transmitted. The present embodiment is an example in which the composite apparatus 20 requests the user terminal 10 to transmit a connection authentication request. In addition, about the structure similar to the said embodiment, detailed description is abbreviate | omitted by describing using the same number.

  A different point from the said embodiment is demonstrated.

  The authentication unit 24 receives from the operation unit 222 a notification that there is an instruction to display confidential information. Upon receiving this notification, the authentication unit 24 transmits a request for transmitting a connection authentication request to the user terminal 10 via the wireless network interface 21. That is, the authentication unit 24 determines whether there is an instruction to request the user terminal 10 to transmit a connection authentication request.

  When the user performs an operation to display confidential information using the operation screen displayed on the display unit 221, the operation unit 222 notifies the authentication unit 24 to that effect.

  Upon receiving a connection authentication request transmission request from the composite apparatus 20, the wireless network interface 11 transmits a connection authentication request.

  Subsequently, the operation of the composite apparatus 20 will be described. FIG. 12 is a flowchart for explaining the operation of the composite apparatus 20.

  The operations in step 601 and step 602 are the same as those in the first embodiment.

  When login is permitted (step 602: Yes), an operation screen in the normal mode is displayed on the display unit 221. The function unit 27 executes the function in the normal mode (step 610).

  The authentication unit 24 determines whether or not there is an instruction to request the user terminal 10 to transmit a connection authentication request (step 902). If it is determined that there is no instruction to request the transmission of the authentication request (step 902: No), the process returns to step 610. If it is determined that there is an instruction to request transmission of the authentication request (step 902: Yes), the authentication unit 24 requests the user terminal 10 to transmit the authentication request via the wireless network interface 21 (step 903). In response to this request, the authentication request transmitted from the user terminal 10 via the wireless network interface 11 is received (step 603).

  The operation after receiving the connection authentication request is performed from step 604 to step 610 as in the first embodiment.

<Specific example 3>
Next, a specific operation when the fax function is selected by the user in the second embodiment will be described.

  An operation screen (login screen: see FIG. 13) is displayed on the display unit 221 of the multifunction device 20. The user inputs a user ID and password assigned to the user. Here, it is assumed that the user ID “AAA” and the password “FX001” are input.

  The authentication unit 24 checks whether or not the input user ID “AAA” and the password “FX001” are associated with each other and stored in the user login information of the storage unit 23. In the login information of FIG. 2, the user ID “AAA” and the password “FX001” are stored in association with each other. Therefore, login is permitted.

  When the login is permitted, a normal mode operation screen (menu screen: see FIG. 14) is displayed on the display unit 221. The function unit 27 executes the function in the normal mode. When the user selects a fax on the menu screen, an operation screen (setting screen: see FIG. 15) is displayed on the display unit 221. Here, it is assumed that a destination is selected.

  The control unit 25 reads the address book associated with the logged-in user ID from the data server on the LAN. The fax function unit of the function unit 27 temporarily stores the scanned image in the RAM in association with the logged-in user ID.

  Since it is being executed in the normal mode, an operation screen that is controlled so that the confidential information is not displayed is displayed on the display unit 221 (see FIG. 16). FIG. 16A is an example of an operation screen that is controlled so that the confidential information itself is not displayed. FIG. 16B is an example of an operation screen in which confidential information is replaced with other information.

  The user selects a location where the confidential information is to be displayed (for example, a location surrounded by a dotted line in FIGS. 16A and 16B). The operation unit 222 recognizes this. The operation unit 222 notifies the authentication unit 24 that the user has performed an operation to display confidential information. The authentication unit 24 requests the user terminal 10 to transmit a connection authentication request via the wireless network interface 21. In response to this request, the user terminal 10 transmits a connection authentication request via the wireless network interface 11. Here, it is assumed that the connection authentication request includes “12-34-56-78-90-11” as the MAC address.

  The authentication unit 24 receives a connection authentication request via the wireless network interface 21. It is verified whether the MAC address “12-34-56-78-90-11” is associated with the logged-in user ID “AAA” and stored in the user login information. In the user login information in FIG. 2, the MAC address “12-34-56-78-90-11” and the user ID “AAA” are associated with each other. The authentication unit 24 transmits a connection permission authentication result to the user terminal 10 via the wireless network interface 21.

  The control unit 25 transmits to the user terminal 10 display data of an operation screen that is controlled so that the scanned image and the address information of the read address book are displayed. The control unit 12 displays an operation screen on the display unit 13 based on the display data transmitted from the multifunction apparatus 20 (see the user terminal side diagram in FIG. 17). In FIG. 17, an operation screen for displaying the address book address and an operation screen for displaying a scanned image are displayed by switching the operation screen. However, these operation screens may be integrated into one operation screen.

  The display unit 221 of the composite apparatus 20 only displays an operation screen (see the composite apparatus side in FIG. 17) that is controlled so that the address book address and the scanned image are not displayed. That is, confidential information is not displayed.

  The user selects a destination on the operation screen displayed on the display unit 13 of the user terminal 10. The selected operation instruction (destination) is received by the operation unit 14. The user confirms the scanned image. The user selects an operation instruction “OK” for transmitting the scanned image by fax using the operation screen. The selected operation instruction is received by the operation unit 14. The accepted operation instruction (destination and OK) is transmitted to the composite apparatus 20 via the wireless network interface 11. The fax function unit of the function unit 27 receives an operation instruction (destination and OK) via the wireless network interface 21. The fax function unit transmits the scanned image to the destination according to the operation instruction.

  According to the present embodiment, the confidential information is displayed on the user terminal 10 when the user needs to display the confidential information. Therefore, user convenience is high.

<Third Embodiment>
The present embodiment is an example of control performed in addition to the above embodiment. The present embodiment is an example in which control is performed so that different operation instructions can be performed in the operation of the same functional unit on the respective operation screens displayed on the display unit 13 and the display unit 221. The same configurations as those in the above embodiment are denoted by the same reference numerals, and detailed description thereof is omitted.

  The control unit 25 controls the operation screen so that different operation instructions can be given in the operation of the same functional unit on the display unit 13 of the user terminal 10 and the display unit 221 of the multifunction device 20. The control unit 25 fixes the operation screen displayed on the display unit 221 so as not to transition. At least one of the different operation instructions is different. Two or more different operation instructions may be used.

Example 4
This embodiment will be described. FIG. 18 is an example of an operation screen displayed on the display unit 13 and the display unit 221. Here, it is assumed that user authentication and terminal authentication have already been completed through the processing described in the above embodiment.

  An operation screen (menu screen: see FIG. 18 (1)) is displayed on the display unit 221. Here, it is assumed that the user selects the copy function. An operation screen (copy setting screen: see FIG. 18B) is displayed on the display unit 221. The control unit 25 transmits display data of the operation screen that is controlled so that an operation instruction that cannot be displayed without scrolling is displayed to the user terminal 10. At this time, the control unit 25 fixes the operation screen displayed on the display unit 221 so that it cannot be scrolled. FIG. 18 (3) is an example of the operation screen displayed on the display unit 221 and the operation screen displayed on the display unit 13. In FIG. 18 (3), the confidential information is not displayed on the user terminal side, and only the operation instructions that can be selected are displayed. However, when the screen is changed by scrolling the operation screen or selecting an operation instruction, the confidential information is displayed.

  Since an operation screen that allows different operation instructions to be displayed on the display unit 221 and the display unit 13 is displayed, a large amount of information necessary for operating the functions of the multifunction apparatus 20 is displayed at a time.

  As apparent from the above description, the terminal of the present invention described above can be configured by hardware, but can also be realized by a computer program. In this case, the composite device 20 includes a processor 121, a memory (ROM or RAM) 122, a storage device (hard disk, semiconductor disk, etc.) 123, an input device (keyboard, mouse, touch panel) 124, a display device 125, a communication unit 126, and the like. It can also be realized by a general-purpose computer having hardware resources (see FIG. 19). Only a part of the functions can be realized by a computer program.

  The preferred embodiments and examples have been described above. However, the present invention is not necessarily limited to the above-described embodiments and examples, and various modifications can be made within the scope of the technical idea.

  A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
Having at least one processor,
The processor is
An operation screen for operating a function of the information processing device, displaying a first operation screen on which the confidential information is not displayed on the information processing device;
It is an operation screen for operating the function of the information processing apparatus, and controls to display a second operation screen on which confidential information is displayed on the terminal.

DESCRIPTION OF SYMBOLS 10 User terminal 11 Wireless network interface 12 Control part 13 Display part 20 Compound apparatus 21 Wireless network interface 22 Operation panel part 221 Display part 222 Operation part 23 Storage part 24 Authentication part 25 Control part 26 Wired network interface 27 Function part

Claims (7)

It is an operation screen for operating the function of the own device, and displays a first operation screen on which the confidential information is not displayed on the own device,
An information processing apparatus having a control unit that controls to display a second operation screen, which is an operation screen for operating the function of the own device and on which confidential information is displayed, on a terminal. Using the authentication information of the terminal, having an authentication unit that authenticates a terminal that has requested connection authentication,
The information processing apparatus according to claim 1, wherein the control unit controls to display the second operation screen on an authenticated terminal.   The information processing apparatus according to claim 1, wherein the control unit performs control to invalidate an instruction performed using the first operation screen while the second operation screen is displayed. .   The information processing apparatus according to any one of claims 1 to 3, wherein the control unit controls display of the first operation screen by replacing at least a part of the confidential information with other information.   The said control part controls to display the said 2nd operation screen on the said terminal in response to selection of the location where confidential information should be displayed in the said 1st operation screen. 5. The information processing apparatus according to any one of 4.   The control unit controls display of the first operation screen and the second operation screen so that an operation content on the first operation screen is different from an operation content on the second operation screen. The information processing apparatus according to any one of claims 1 to 5. An information processing apparatus program comprising:
An operation screen for operating the function of the information processing device, displaying a first operation screen on which the confidential information is not displayed on the information processing device,
A program that functions as a control unit that controls an operation screen for operating a function of the information processing apparatus and displays a second operation screen on which confidential information is displayed on a terminal.

Images