JP4204002B2 - Image reading device - Google Patents

Description

  The present invention includes an image reading unit that reads an original image, a file generation unit that generates image data read by the image reading unit as an image file in a predetermined file format, and a file generated by the file generation unit. The present invention relates to an image reading apparatus including file output means for outputting to a connected terminal.

Digital image data read by the scanner is digitized as image information data so that the digital image data read by the image reading means can be viewed by an image display application used in a general personal computer. In an image forming apparatus that stores an image in a storage unit and forms an image on a predetermined recording medium based on the image information data according to an instruction from an operation unit or a computer. Conversion means for converting to a commonly used digital data format, for example, PDF format, display means for displaying image information in the digital data format on the screen, and transfer means for transferring the image information in the digital data format to a computer An image forming apparatus comprising: There has been proposed.
JP 2003-46700 A

  However, according to the above-described conventional technology, all of the digital image data read by the image reading means is converted into a format that can be viewed by a general-purpose image display application installed in the computer. There was room for further improvement in terms of security.

  For example, when a plurality of in-house confidential documents such as important meeting minutes read by the image reading means are converted into such a file format and stored in a file server or the like, or leaked to the network, A third party can easily view the contents of the file, which causes a serious problem in terms of security. On the other hand, the degree of security can be improved by encrypting such an image file or setting a password, but when there are multiple files of the same type, which file is what type of file. There is a problem that it is not possible to easily determine whether a file is properly selected even if the password for accessing such a confidential document is known.

  SUMMARY OF THE INVENTION In view of the conventional drawbacks, the present invention provides an image reading apparatus capable of performing gradual security management in which a part of the contents of a file is disclosed to an unspecified user while the remaining part is disclosed only to the specified user. In the point.

In order to achieve the above object, a first characteristic configuration of an image reading apparatus according to the present invention includes an image reading unit that reads an original image page by page , as described in claim 1 of the document, and File generation means for generating image data read for each page by the image reading means as an image file having a predetermined file format, and file transfer for transferring the file generated by the file generation means to a network-connected terminal An image reading apparatus comprising: a first file generation unit configured to generate and process the file generation unit as a first file of a predetermined file format ; second file to generate a second file in different file formats the remainder of the page or all pages with the first file And Le generating means, said output file of the second file is added generated by the second file generating means to the subsequent image end identifier of the first file generated by the first file generation means, the first file An output file generation means for generating an output file in a file format is provided.

According to the above configuration, when the output file generated by the output file generation means is viewed on the computer, the output file has the file format of the first file. When operated to open (for example, double-click), an application corresponding to the file format , that is, an application corresponding to the first file is started by the OS file management system, and as a result, the first file is opened by the application. Opened. However, the second file that is not supported will not be opened. That is, when the application recognizes the image end identifier of the first file, the subsequent data is ignored. Therefore, for an unspecified user, the file can be recognized only as an open content, and the content of the second file is not grasped and the existence itself is not recognized. On the other hand, a specific user who understands that a hidden file exists in the output file can confirm the presence of the second file based on some contents of the opened first file.

  As described in claim 2, the second feature configuration includes security information input means for the second file in addition to the first feature configuration described above, and the second file generation means includes the security information The second file in which the security information input by the input means is embedded is generated.

  According to the above configuration, even if an unspecified user who notices the presence of the second file tries to open the second file by editing the output file, the file cannot be opened because the security information is unknown. It is.

  In the third feature configuration, as described in claim 3, in addition to the first or second feature configuration described above, the output file generation unit identifies that the second file is a genuine file. The output file is generated by further adding file identification information to be generated.

  According to the above-described configuration, even if an output file having the same file structure is generated by another application, the authentic file generated by the output file generation unit based on the file identification information is used. Since it can be determined whether or not there is security, the reliability of security can be improved.

  As described above, according to the present invention, there is provided an image reading apparatus capable of performing gradual security management such that a part of the contents of a file is disclosed to an unspecified user while the rest is disclosed only to a specified user. Can now be offered.

  Hereinafter, an image reading apparatus according to the present invention and a file processing system for processing an output file generated and transferred by the image reading apparatus will be described. As shown in FIG. 8, an image reading apparatus according to the present invention is incorporated in a digital multi-function peripheral, and an image reading unit 20 that reads a document image, and image data read by the image reading unit 20 is converted into an image file in a predetermined file format. And a file transfer means 50 for transferring the file generated by the file generation means 33 to a network-connected terminal.

  The above-described digital multi-function peripheral includes the image reading unit 20, an image processing unit 30 that executes predetermined processing on the read image, and an image forming unit 40 that prints out the image data subjected to the image processing on recording paper. A file transfer means 50 for transferring a file to a plurality of computers connected to the network, an operation unit 70 for setting a plurality of operation modes and the like, a system control unit 60 for integrally controlling the above functional blocks, and the like. It is prepared for.

  The image reading unit 20 includes a document feeding unit 21 that transports a document to be scanned to a predetermined reading position, a CCD 22 that photoelectrically converts the fed document image, and an A / D conversion that converts the document image into digital image data. Means 23 and input image processing means 24 for performing shading correction or the like on the A / D converted digital image data.

  The image processing unit 30 performs predetermined image processing such as gradation conversion and enlargement / reduction processing on the image data from the input image processing unit 24 in accordance with the operation mode set by the operation unit 70. 31, the image conversion unit 32 that converts the processed image data into print data for printing, the hard disk device as the file storage unit 34 that stores the processed image data, and the file storage unit 34. And a file generation means 33 for generating a predetermined output file from the image data. The generated output file is stored in the file storage means 34.

The image forming unit 40 is driven based on the print data converted by the image conversion unit 32, the image forming unit 42 that employs an electrophotographic system, the conveyance unit 43 that conveys recording paper, and the image forming unit 42 includes a print head 41 that exposes the photosensitive member 42 and a fixing unit 44 that fixes the recording paper onto which the toner image formed by the image forming unit 42 is transferred.

  As shown in FIG. 1, the file generation means 33 generates a first file for generating and processing a part of the image data processed by the image processing unit 31, that is, a part of the target file data FD as a first file F1 of a predetermined format. Means 1, second file generation means 2 for generating the remaining portion of the target file data FD as a second file F 2 having a format different from that of the first file F 1, and the first file generated by the first file generation means 1. Output file generating means 3 for generating an output file F3 with the file attribute of the first file F1 added to the file F1 by adding the second file F2 generated by the second file generating means 2 is provided. Composed.

Security information input means 25 for the second file F2 is provided, and the second file generation means 2 is configured to generate the second file F2 in which the security information input by the security information input means 25 is embedded. The output file generation means 3 is further configured to generate the output file F3 by further adding file identification information for identifying that the second file F2 is a genuine file.

  As an example, a case will be described in which target file data FD as a meeting minutes read by the image reading unit 20 is edited and generated into a predetermined output file by the file generation unit 33.

  Specifically, in the state where the target file data FD, which is a plurality of image data read by the image reading means 20, is stored in the file storage means 34, a file editing switch (not shown) is operated from the operation unit 70. When operated, the mode is changed to the file editing mode, and an editing target file selection screen is displayed on the liquid crystal display unit of the operation unit. When the editing target file is selected, those thumbnail images are displayed, and a setting screen as shown in FIG. 2 is displayed. A part of page data (here, the first page) designated for the target file data is generated as a JPEG image file by the first file generation means 1, and the remaining page data or all page data is the second file generation means. 2 is generated as a PDF file, and the output file generating means 3 adds the extension (.jpg) as an attribute of the file in which the PDF file as the second file F2 is added to the JPEG image file as the first file F1. After being generated as a JPEG image file, the file storage means 34 stores it.

  As shown in FIG. 4, the generated output file F3 includes a first file F1, a JPEG header portion, a JPEG information data portion in which attribute data such as creation date and time and thumbnail image data are arranged, and the first page A file having a JPEG file format composed of a JPEG image data portion in which a JPEG image consisting of page data is arranged, followed by file identification information for identifying that the second file is a genuine file, etc. An information storage unit and a file actual data unit in which a PDF file corresponding to the second file F2 made up of remaining page data or all page data is arranged. The file information storage unit has, for example, authentication information indicating that the file is generated by the image reading unit 20 with a fixed length of 1024 bytes, a file name that is attribute information of the PDF file, a file creation date and time, a PDF file It consists of data size and checksum.

  In general, predetermined 2-byte data (indicated by a black circle in the figure) indicating << Start of image >> is arranged at the head of the JPEG header part, and then the head address information corresponding to the JPEG information data part, the JPEG image data part, etc. Etc. are recorded. Furthermore, 2-byte data (indicated by a white circle in the figure) indicating << End of Image >> is added to the last part of the JPEG image data part.

  The head of the file information storage part and the file actual data part added to the first file F1 represented by the JPEG image file indicates the head position of the file added by the output file generation means 3 according to the present invention. Several bytes of head data (indicated by a black triangle in the figure) indicating << KM Embedded Image Start >> are arranged, and several bytes indicating << KM Embedded Image End >> indicating the final position of the added file at the end. End data (indicated by white triangles in the figure) is arranged.

  The output file generated in such a file format is transferred to a personal computer connected to the network by a transfer operation from the operation unit 70 (not shown) (transfer in the form of an e-mail attached file or the like, or a dedicated transfer) In the personal computer under the environment managed by the file management program that is one of the system calls that are transferred between the OS and the application, the icon of the output file is double-clicked. Is recognized as a JPEG file, and a display application corresponding to the JPEG image file is activated. The application recognizes the range surrounded by << Start of Image >> and << End of Image >> as the JPEG file area, and the image data is based on the top address information of the JPEG image data part stored in the JPEG header part. After being read out and subjected to a predetermined expansion process, the image is displayed on the attached display.

  At this time, the data after << End of Image >> in the output file F3 is ignored by the application corresponding to the JPEG image file, so that the data after that is not displayed. Even if the application is recognized as a JPEG file and the corresponding application is activated, the second file in the subsequent stage is not read out. Since the management data such as the file name and file size of the output file F3 is separately managed by the OS file management program, the second file may be missing from the output file by copying processing such as transfer or copying over the network. No serious situation will occur.

  Since the image displayed in this way is an image corresponding to the first page of the original file data, the contents that can be grasped on the first page of the original file data, for example, the contents of the meeting In the case of a record, the date and time of agenda, agenda, etc. are described, so that a specific user can determine whether or not the file is necessary. That is, the target file data FD generated by the first file generation unit 1 is data that can identify the content of the target file data FD.

  The operation of the file generation means 33 will be described based on the flowchart shown in FIG. When the target file is selected via the operation unit 70 (SA1), the PDF embedded driver that constitutes a part of the file generation means 33 is activated, and the setting screen 10 shown in FIG. 2 is displayed.

  In the PDF / security setting tab 11 screen of the setting screen 10, a storage destination folder is set in the output file storage folder column 12 (SA 2), and a target for generating a JPEG image file as the first file F 1 in the cover processing column 13 is set. Set (SA3). Here, as shown in FIG. 3, as a choice, the first page of the document is the first file F1 and the last page from the first page is the second file F2, or the first page of the document is the first file F1, Either the second page to the last page is the second file F2, or the first file is imported from other file data stored in the storage means 34 and the first page to the last page is the second file F2. Are selectable (SA3, SA4).

Next, setting of security information for the second file F2 generated as a PDF file is performed in the PDF file operation restriction column 14. Specifically, set one or both of a user password for opening a file and a master password that sets detailed security conditions such as file access rights, that is, whether to allow printing or document modification. (SA5). When only the user password is set, printing and changing of the document is free, and when the master password is set, the file opened with the user password is accessed based on the setting conditions such as printing and changing as described above. Rights are restricted. That is, the part that executes step SA5 is the security information input means 25 for the second file F2.

Next, when a file name or the like is set in the document information tab 15 and the “OK” button is clicked (SA6), the first application is started by the first file generating means 1 and becomes the designated first file F1. A JPEG image file is generated for the data (SA7), and then a second file is started by the second file generation means 2 and a PDF file is generated for the file data that becomes the designated second file F2. (SA8).

Furthermore, the above-described downstream of the JPEG image file "KM Embedded Image Start" and "KM Embedded Image End" described above in a region surrounded by the inserted file identifier consisting of the file information storage unit and the PDF by the output file generation means 3 The files are arranged (SA9) and stored in a storage folder designated as a JPEG image file in which they are integrated (SA10). At this time, if there are multiple inserted files, the identification
Child and a set of file information storage unit and the PDF file enclosed by its identifier can be arranged more sets continuously. Further, a transfer destination setting screen is displayed by operating the transfer operation switch, and the output file is transferred by selecting the transfer destination address and operating the transfer switch (SA11).

  For example, a file processing system on a personal computer is a system call in which a file generated by an application operating on Windows (registered trademark), which is a Microsoft OS (Operating System), is transferred between the OS and the application. This is realized in an environment managed by one file management program.

  When the general user who can open the JPEG image file as described above confirms the outline of the file and the specific user who has determined that the file is a necessary file needs to open the output file F3, the dedicated browsing is performed. Start the application. Hereinafter, description will be given based on the flowchart shown in FIG. The application is activated by dragging and dropping the icon of the output file onto the icon of the browsing application (SB1, SB2).

  As shown in FIG. 6, the browsing application separates the second file F2 from the output file F3 generated by the output file generating means 3, and as a separated file F4 having the file attribute of the second file F2. A file separation means 4 to be generated is provided.

The file separation means 4 recognizes a range surrounded by << Start of Image >> and << End of Image >> as a JPEG file area (SB3), and includes << KM Embedded Image Start >> and << KM Embedded Image End >>. recognizing a region enclosed by the inserted file identifier as a PDF file area (SB4), it activates the Acrobat reader is the corresponding application by separating the PDF file that exists in the PDF file area.

In detail, when said identifier is not recognized at the time of separation of the file, if the format is different that the file is not opened because of an error message is displayed (SB 10), the identifier is recognized, the file After verifying the authenticity of the file by comparing the authentication information which is the file identification information arranged in the information storage unit (SB6), the PDF file is separated based on the data size, and the checksum is checked Later, the acrobat reader is activated (SB7). If the authenticity of the file is not confirmed, an error message is displayed in step SB10 (SB10). Incidentally, wherein the authenticity determination of the file by the authentication information not to be necessarily required, but may perform the authenticity judgment of the file by the presence absence of the identifier.

  The activated acrobat reader displays a screen requesting the input of the password, which is the security information set in step SA5 above, and if the password matches the input password (SB8), the PDF file is opened. (SB9), if they do not match, an error message is displayed to prompt the user to input the password again.

When the area enclosed by "KM Embedded Image Start" and "KM Embedded Image End" made by inserting file identifier there are multiple, so that the processing from step SB4 SB 10 is repeated.

  In the embodiment described above, the first file F1 is configured with a JPEG image file and the second file F2 is configured with a PDF file. However, the first file F1 is not limited to a JPEG image file, and at least Corresponding to an application that recognizes a range surrounded by identifiers such as “Start of Image” and “End of Image” as a valid file area and can open an image file based on data in the range If so, it may be an image file such as a TIFF file, and the second file F2 is not limited to a PDF file, but is composed of an arbitrary image file corresponding to a general-purpose application. Also good.

  The above-described embodiment is merely an example of the present invention, and is not limited to an image reading apparatus incorporated in a digital multifunction peripheral, and may be configured by a single network scanner. Needless to say, the specific configuration of each functional block constituting the image reading apparatus can be appropriately changed and designed within the scope of the effects of the present invention.

Block configuration diagram of the main part of the file processing system FS Illustration of output file generation procedure Explanation of target file data File structure diagram of output file Flow chart showing the output file generation procedure Block configuration diagram of the main part of the file processing system FS Flow chart showing output file separation procedure Block diagram of digital multifunction device

Explanation of symbols

1: First file generation unit 2: Second file generation unit 3: Output file generation unit 4: File separation unit 33: File generation unit F1: First file F2: Second file F3: Output file FD: Target file data FS : File system

Claims (3)

An image reading unit that reads a document image for each page, a file generation unit that generates image data read for each page by the image reading unit as an image file having a predetermined file format , and the file generation unit An image reading apparatus comprising file transfer means for transferring a file to a network-connected terminal,
The file generation means includes a first file generation means for generating a part of pages of the image data as a first file in a predetermined file format, and the remaining pages or all pages of the image data as the first file. Is a second file generation unit that generates a second file of a different file format, and a second file generated by the second file generation unit after the image end identifier of the first file generated by the first file generation unit. An image reading apparatus comprising output file generation means for generating an output file to which a file is added as an output file in the file format of the first file .   2. The image reading apparatus according to claim 1, further comprising security information input means for the second file, wherein the second file generation means generates the second file in which security information input by the security information input means is embedded. .   The image reading apparatus according to claim 1, wherein the output file generation unit generates the output file by further adding file identification information for identifying that the second file is a genuine file.