JP5023801B2 - Image reading apparatus, image processing system, and image processing program - Google Patents

Description

  The present invention relates to an image reading apparatus, an image processing system, and an image processing program.

  For example, in Patent Document 1, there is no risk of accidentally adding a document attribute when a plurality of scanner documents are transmitted, and even if a scanner document is stored in a multi-function peripheral, the third party without permission. There have been proposed a scanner device, a multi-function device, and a document management system that are not seen and that a secret may not be disclosed unexpectedly.

  In the invention disclosed in Patent Document 1 described above, simultaneously with generation of a scanned document obtained by scanning and reading document data with a scan input unit, document attribute information and security information of the scanned document are input with an information input unit. By displaying it on the display unit and confirming it, it is possible to prevent mistaken attribute information from being added to the scanned document and to prevent the scanned document from being disclosed unexpectedly.

  Patent Document 2 discloses a scanner device, an information processing device, an image data encryption method, and an image data display that can encrypt image data and use the encrypted image data without the user managing the encryption key. A method, an image data encryption program, and an image data display program have been proposed.

  In the invention disclosed in Patent Document 2, a smart card owned by a user is inserted into a card reader / writer provided in the scanner device 2, and image data of a document scanned and read by the scanner device 2 is inserted into the card reader / writer. The encrypted smart card is used to generate an encrypted document, so that the image data can be encrypted without the user managing the encryption key.

The encrypted encrypted document is stored in the scanner device and transmitted to the personal computer in response to a browsing request from the user. When the user browses the encrypted document, the smart card is stored in the card reader of the personal computer. / The encrypted document is decrypted by a browsing program or the like inserted into the writer and activated by a personal computer.
JP 2003-304352 A JP 2006-050535 A

  The inventions of Patent Document 1 and Patent Document 2 described above prevent an erroneous document attribute from being added to a scanned image scanned from a paper document, or prevent the scanned image from being disclosed unexpectedly. Is configured to automatically encrypt the scanned image, but the paper document is not properly oriented in the vertical direction at the time of scanning, or an unnecessary page such as a blank page is scanned Is not configured to perform editing such as correction of the orientation of the scanned image after scanning, deletion of extra pages, rearrangement of page order, and the like.

  An object of the present invention is to provide an image reading apparatus, an image processing system, and an image processing program for converting a scanned image into a protected electronic document after editing a scanned image scanned and read from a paper document.

In order to achieve the above object, an image reading apparatus according to a first aspect of the present invention provides image information from an authentication means for performing user authentication, and a paper document to which document identification information and at least protection information indicating whether or not to perform scanning processing are provided. An image reading means, a determination means for determining whether image information can be read from the paper document based on the protection information included in the image information read by the image reading means, and a determination means for determining whether the image information can be read. The user who has been authenticated by the authenticating means for editing the image information read by the image reading means, and the operation authority information for giving the image information edited by the editing means to the filed electronic document. Setting means for selecting and setting operation authority information that can be set, generating identification information of the electronic document, and generating the generated identification information and the setting means Registration means for associating and registering the operation authority information set in step 1; and protected document generation means for generating the protected electronic document by adding the identification information registered by the registration means to the electronic document and encrypting it. It is characterized by doing.

  According to a second aspect of the present invention, there is provided the image reading apparatus according to the first aspect, wherein the editing means performs rotation processing of at least one page image data in the image information read by the image reading means. Features.

  According to a third aspect of the present invention, there is provided the image reading apparatus according to the second aspect, wherein the editing means performs the rotation process by adding predetermined rotation angle setting information to the page image data. To do.

  According to a fourth aspect of the present invention, there is provided the image reading apparatus according to the first aspect, wherein the editing means performs a process of deleting at least one page image data in the image information read by the image reading means. Features.

  According to a fifth aspect of the present invention, there is provided the image reading apparatus according to the first aspect, wherein the editing means performs a rearrangement process for rearranging each page image data in the image information read by the image reading means. It is characterized by.

  According to a sixth aspect of the present invention, there is provided the image reading device according to the first aspect, wherein the editing means performs a resolution conversion process for converting the resolution of the image of the image information read by the image reading means. To do.

  According to a seventh aspect of the present invention, there is provided the image reading apparatus according to the first aspect, wherein the editing means performs color number conversion processing for converting the number of colors of the image of the image information read by the image reading means. Features.

  According to an eighth aspect of the present invention, there is provided the image reading apparatus according to the first aspect, wherein the editing means performs a format conversion process for converting a format of image information read by the image reading means.

According to another aspect of the image processing system of the present invention, the operation authority information is managed by the operation authority management device that manages the operation authority information of the document in association with the identification information of the document, and the operation authority management device. a protected document management apparatus that stores and manages documents, and a said operating authority management device document processing performs processing documents on the basis of the operation authority information managed by the device, the document processing device, a user authentication Authentication means for performing, image reading means for reading image information from a paper document corresponding to a document for which the operation authority information is managed by the operation authority management device, and storage means for temporarily storing image information read by the image reading means When, reading the image information from the paper document based on protection information indicating whether or not to perform at least the scanning process included in the image information read by said image reading means A discriminating unit for discriminating whether or not the image data is temporarily read by the storing unit when the discriminating unit determines that the data can be read; and an electronic file in which the image information edited by the editing unit is filed A setting unit that selects and sets operation authority information to be given to a document from operation authority information that can be set by a user authenticated by the authentication unit, and generates identification information of the electronic document, and the generated identification information And registration means for associating the operation authority information set by the setting means with the operation authority management device, and a protected electronic document encrypted by adding the identification information registered by the registration means to the electronic document Is transmitted to the protected document management apparatus.

The invention of an image processing program according to claim 10, reads the image information of the computer, from the authentication unit, the identification information and at least the scanning process paper document protection information is given to demonstrate the practice whether the document for user authentication image A reading unit, a determination unit that determines whether image information can be read from the paper document based on the protection information included in the image information read by the image reading unit, and when the determination unit determines that reading is possible, Editing authority for editing image information read by the image reading means, and operation authority information that can be set by the user authenticated by the authentication means for operating authority information to be given to the electronic document filed with the image information edited by the editing means Setting means for selecting and setting from the information, generating identification information of the electronic document, and setting the generated identification information and the setting means Registering means for registering the registered operation authority information in association with each other, functioning as a protected document generating means for adding the identification information registered by the registration means to the electronic document and encrypting it to generate a protected electronic document Features.

  According to the image reading apparatus, the image processing system, and the image processing program of the present invention, deletion of unnecessary pages of image information, rearrangement of page order, etc. before converting image information scanned and read from a paper document into a protected document, etc. Thus, it becomes easy to read a protected document as an electronic document.

  In addition, image information scanned and read from a paper document is edited, protected, and encrypted in the multi-function peripheral, and then sent to a designated destination, thereby further improving document security. it can.

  DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of an image reading apparatus, an image processing system, and an image processing program according to the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a configuration diagram showing the main configuration of an image processing system 100 according to the present invention.

  As shown in FIG. 1, an image processing system 100 includes a multifunction machine 3 to which an image reading apparatus according to the present invention is applied, a policy server 2 and a client PC 1 in a network 4 such as a LAN (= Local Area Network). The policy server 2 and the client PC 1 are connected to an input device (for example, a keyboard and a mouse), an output device (for example, a display), a central processing unit (for example, a CPU), and a storage device (ROM, RAM, hard disk, external storage). It is a general computer composed of a device and the like.

  CPU is an abbreviation for Central Processing Unit, ROM is an abbreviation for Read Only Memory, and RAM is an abbreviation for Random Access Memory. In addition to the above-described devices, the image processing system 100 is connected to various devices such as a server that manages various devices connected to the network 4. The network 4 includes a client PC 1, a multifunction device 2, and the like. A plurality of devices may be connected.

  In addition to the scan processing function for optically scanning a paper document (document printed on paper) to read the image data of the paper document and transmitting the read image data to a designated destination, the multifunction machine 3 is instructed to print. A print processing function for printing the print data, a copy processing function for copying a paper document, and a facsimile communication function for performing facsimile communication of a paper document or an electronic document.

  In this embodiment, the paper document is described as a document in which images and print data are formed on paper. However, the paper document is not limited to paper, and various types of paper such as a plastic sheet and a vinyl sheet can be used. It may be a document in which an image or print data is formed on the medium.

  The client PC 1 has a function of performing various types of document processing such as document display, editing, and printing. In addition, in document printing, in addition to document data to be printed, a paper document on which document data is printed is used. Identification information unique to a paper document for identification (hereinafter referred to as “document ID”), and protection information indicating whether or not various processes such as a copying process, a scanning process, and a facsimile transmission process of the paper document by the multifunction device 3 are performed. Has a function of printing a document (hereinafter referred to as a “pattern image-attached paper document”) added in an arrangement of a predetermined dot pattern (hereinafter referred to as a pattern image).

  The multifunction device 3 includes a control unit (hereinafter referred to as “control unit (multifunction device)”) 30, an image reading unit 31, a pattern image processing unit 32, an image correction unit 33, an image processing unit 34, an image editing unit 35, and a thumbnail. An image processing unit 36, a network interface unit (hereinafter referred to as “network I / F unit (multifunction device)”) 37, a user interface unit (hereinafter referred to as “user I / F unit”) 38, and a storage unit (hereinafter referred to as “ Storage unit (multifunction machine) ”) 39, an image forming unit 40, a document ID generation unit 41, and an encryption processing unit 42.

  The control unit (multifunction machine) 30 is a CPU of the multifunction machine 3, and controls each part of the multifunction machine 3 to control the entire multifunction machine 3.

  The image reading unit 31 is configured by a scanner device, and optically scans (scans) one by one a paper document set on an ADF (= automatic document feeder) or a platen glass provided in the multifunction machine 3, Read the image of the paper document.

  Hereinafter, for convenience of explanation, an image read from a paper document by the image reading unit 31 is referred to as a scanned image.

  The pattern image processing unit 32 analyzes the scan image, extracts the pattern image included in the scan image, and detects the document ID and protection information indicated by the pattern image. Further, the document ID and the protection information are generated by converting into a pattern image arranged in a predetermined dot pattern based on a preset conversion method.

  The image correction unit 33 analyzes the scan image, detects the tilt angle of the scan image, and performs rotation processing of the scan image according to the tilt angle.

  The image processing unit 34 performs image processing on the scanned image with the resolution, the number of colors, the hue, and the like of the scanning conditions set by the user, and converts the image into a predetermined image format set.

  The image editing unit 35 performs a scan image editing process in accordance with a user editing operation.

  Specifically, the rearrangement process of each scan image and the deletion process of the scan image of at least one page in the scan image are performed according to the editing operation of the user.

  The thumbnail image processing unit 36 generates a thumbnail image based on the scanned image.

  The network I / F unit (multifunction device) 37 is connected to another device (hereinafter referred to as “external device”) from the network 4 or the multifunction device 3, and is connected to the external device or the direct connection via the network 4. Controls the exchange of data signals and control signals with the external device. Further, the document data and the scanned image are transmitted to the destination designated based on the command of the control unit 30.

  The user I / F unit 38 includes a display device such as an LCD (= Liquid Crystal Display) and operation buttons. The user I / F unit 38 inputs instruction information to the multifunction device 3 by the user's operation and the multifunction device 3 from the multifunction device 3 to the user. Interface processing between the user and the multifunction device 3 such as display of status information and various types of information is performed.

  The storage unit (multifunction device) 39 is configured by a storage device such as a ROM (= Read Only Memory), a RAM (= Random Access Memory), a hard disk, and the like. Control the reading of data.

  The image forming unit 40 forms image data (including a scanned image) subjected to image processing when printing, copying, scanning, or the like is performed on the multifunction device 3 on a sheet (not shown) provided in the multifunction device 3. Control to output.

  The document ID generation unit 41 adds a document ID unique to the paper document to be added to the paper document output by the printing process or duplication process by the multifunction machine 3, and an electronic document to be transmitted to the designated destination by the scan process or the fax transmission process. A document ID unique to the electronic document is generated.

  The encryption processing unit 42 performs encryption processing of the scanned image and document data and decryption processing of the encrypted scanned image and document data.

  The policy server 2 includes a control unit (hereinafter referred to as “control unit (policy server)”) 20, a display unit 21, an input unit 22, a storage unit (hereinafter referred to as “storage unit (policy server)”) 23, a network. The interface unit (hereinafter referred to as “network I / F unit (policy server)”) 24 is composed of functional blocks, and the control unit (policy server) 20 is a central processing unit (for example, a CPU) of the policy server 2. ) And controls each part of the policy server 2 and controls the entire policy server 2 in an integrated manner.

  The display unit 21 includes a display device such as a display, and displays and controls various information on the display device.

  The input unit 22 includes input devices such as a keyboard and a mouse, and inputs and controls various information from these devices to the policy server 2.

  The storage unit (policy server) 23 includes a storage device such as a ROM, a RAM, a hard disk, and an external storage device, and stores and controls various information and programs in these devices.

  The network I / F unit (policy server) 24 is connected to an external device other than the network 4 or the policy server 2 and controls transmission / reception of data signals and control signals.

  In addition, the document management software 50 is installed in the policy server 2 and stored in the storage unit (policy server) 23. When the document management software 50 is started on the policy server 2, the policy server 2 It functions and operates to perform document management and user authentication according to the invention.

  The document management software 50 includes a user authentication function 51 and a security policy management function 52. The user authentication function 51 performs an authentication process in response to an operator (user) user authentication inquiry from the MFP 3 or the client PC 1. The security policy management function 52 performs a security policy that defines the user's operation authority for the document and its management processing.

  The storage unit (policy server) 23 of the policy server 2 stores a later-described user authentication information management table 60 (see FIG. 2) that is referred to when a user authentication process is performed by the user authentication function 51 (document management software 50). ) Or the security policy management function 52 (document management software 50), information about the security policy of the document, and an operation authority information list 70 (see FIG. 3) or a security policy management table to be referred to or generated to manage the information. 80 (see FIG. 4) is stored and held.

  FIG. 2 is a diagram illustrating an example of the user authentication information management table 60. As shown in FIG. 2, the user authentication information management table 60 includes a “user ID” 61 indicating user identification information (hereinafter referred to as “user ID”) for identifying each user, a client PC 1, and an MFP. A “password” 62 indicating a password to be input in pair with the user ID at the time of login of each device such as “2”, “affiliation” 63 indicating the department to which the user assigned the user ID is assigned, “position” 64 indicating the position, and the like User authentication information configured in association with each other is managed in the user authentication information management table 60.

  For example, the user authentication information 601 in the user authentication information management table 60 indicates that the login password of the user with the user ID “P1201” is “ABC012”, the affiliation of the user is “development department”, and the title is “officer”. It shows that there is.

  FIG. 3 is a diagram illustrating an example of the operation authority information list 70. As shown in FIG. 3, the operation authority information list 70 includes “processing condition information” 71 indicating various processing conditions that can be operated on a document, and “operation authority content” 72 indicating the contents of the operation authority under various processing conditions. Are managed in association with each other.

  Specifically, the processing condition information 71 of the operation authority information list 70 includes, for example, “print condition” 711, “access condition” 712, “scan condition” 713, “transmission condition” 714, “encryption” 715, The processing conditions that can be operated on the document such as “confirmation / non-confirmation of set password” 716 are shown.

  For example, the printing condition 711 of the processing condition information 71 of the operation authority information list 70 includes “printing prohibition”, “whole surface WM (watermark) printing”, “header / footer, document ID printing”, “no restriction”, and the like. The operation authority contents (operation authority contents 72) that can be set as the operation authority in the document printing operation are shown, and the printing condition 711 (processing condition information 71) is set to “printing prohibited” (operation authority contents 72). For a document for which a security policy for authority information is set, even when a printing operation for the document is performed, the printing process for the document is not executed, and a printing prohibition operation is performed.

  Further, a document in which the security policy of the operation authority information in which the operation authority content 72 of the print condition 711 is “no restriction” is set to print according to the print instruction when the document is printed. .

  In addition, in a document in which the security policy of the operation authority information in which the operation authority content 72 of the access condition 712 is “display only” is set, when an access operation is performed on the document, an access operation only for displaying the document is permitted. Access to other operations such as editing, copying, moving, and printing is prohibited.

  In addition, when a scan policy is set for a document in which the security policy of the operation privilege information in which the operation privilege content 72 of the scan condition 713 is “scannable under a limited condition” is set, the scan operation of the document is It is allowed only under limited conditions, and scanning operations under other conditions are prohibited.

  In addition, for a document in which the security policy of the operation authority information whose transmission condition 714 of the processing condition information 71 is “transmission of U / I display information” (operation authority content 72) is set, a fax transmission operation is performed on the document. In this case, various information (for example, various information such as transmission source information and transmission destination information) displayed on the display device of the user I / F unit 38 is added to the document and transmitted to the designated transmission destination.

  Further, a document in which the security policy of the operation authority information in which the encryption 715 of the document of the processing condition information 71 is “Yes” (operation authority content 72) is set, when the document is operated, Encrypt.

  In addition, a document in which the security policy of the operation authority information in which the password confirmation 716 of the processing condition information 71 is set to “Yes” (operation authority content 72) is set to the document when the document is operated. Only when a password that matches the password set in is input, processing for permitting the operation of the document is performed.

  FIG. 4 is a diagram showing an example of the security policy management table 80. As shown in FIG. 4, the security policy management table 80 includes a “document ID” 81 indicating a document ID, “set operation authority information” 82 set for the document with the document ID, and an operation indicated by the operation authority information. A security policy configured by associating “affiliation” 83 indicating the department to which the authorized user belongs and “position” 84 indicating the title is stored and managed.

  In the “set operation authority information” 82, as described in the process condition information 71 of the operation authority information list 70 (see FIG. 3), “print conditions” 821 indicating various process conditions that can be operated on the document, The contents of the operation authority set in each processing condition of “access condition” 822, “scan condition” 823, “transmission condition” 824, “encryption” 825, and “set password confirmation / notification” 826 are recorded.

  For example, the security policy 800 in the security policy management table 80 includes printing (printing condition 821), scanning (scanning condition 823), and fax transmission by a general employee (position 84) of the accounting department (affiliation 83) for the document with the document ID “S0001”. Or, each operation of transmission to the specified destination (transmission condition 824) is prohibited, and only when a general employee of the accounting department inputs a password that matches the password set in the document and operates the document, This indicates that the display access (access condition 822) is permitted (confirmation password confirmation 826).

  The security policy 801 is for any officer (position 84) (= Any, affiliation 83) without inputting the password set in the document for the document with the document ID “S0001” (the set password Confirmation 826), display of the document, access for editing (access condition 822), fax transmission (transmission condition 824), and scan and print operations are permitted (scan condition 823, print condition 821). When the document is printed by the officer, the document ID unique to the paper document is additionally printed on the paper document to be printed by the header / footer function (print condition 821), and the document is printed by the officer. When a fax transmission operation or a scanning operation is performed, the image information read from the document is encrypted and then transmitted to a designated destination.

  By the way, as described above, the multifunction machine 3 to which the image reading apparatus of the present invention is applied scans a paper document, reads the scanned image from the paper document, and stores or transmits the scanned image to the designated destination. This scan processing function is configured so that either the normal scan mode or the protected document creation scan mode can be selected and operated.

  The normal scan mode is a mode in which a paper document is scanned under a preset scan condition and a scan process similar to the conventional one is performed to read a scan image of the paper document.

  The protected document creation scan mode automatically corrects the skew of the scanned image scanned from the paper document, previews the scanned image after correction, deletes excess pages, and rearranges the page order. This mode is configured to perform security policy setting and encryption processing for a scanned image file (hereinafter referred to as “scanned image file”) after editing.

  In this embodiment, the scan image preview in the protected document creation scan mode displays the corrected scan image as a thumbnail image to be previewed by the user, and the edit to the corrected scan image is displayed. Based on the thumbnail image corresponding to the scan image, the user can perform an instruction operation such as deleting an extra scan image or rearranging the page order of the scan image.

  The security policy setting and encryption processing for the scanned image file includes setting a security policy for the scanned image file after editing, adding a pattern image to the file, and encryption processing.

  The processing operation of the main part of the present invention in which the MFP 3 configured in this way scans the above-described pattern image-attached paper document in the protected document creation scan mode will be described below.

  FIG. 5 is a flowchart illustrating an example of a scan processing operation in the protected document creation scan mode of the multifunction machine 3.

  As shown in FIG. 5, a login screen (not shown) of the initial screen is displayed on the display device of the user I / F unit 38 of the multifunction machine 3, and the login information of the user ID and password is displayed on the login screen by the user. Is input by operating an operation button (not shown), the multifunction device 3 authenticates the user based on the input login information.

  In this user authentication, the MFP 3 sends login information (user ID, password) entered on the login screen to the policy server 3 to inquire about user authentication (step S501). The user authentication information management table 60 confirms whether or not the paired user ID and password information transmitted from the user authentication information management table 60 is registered. If it is authenticated and not registered, a message indicating that authentication is not performed is sent to the requesting multifunction machine 3 for notification (step S502).

  After the user authentication, the multifunction machine 3 displays a selection menu (not shown) of processing operations on the display device, and when the “protected document creation scan mode” is selected by the user in this selection menu, the paper in the protected document creation scan mode is displayed. Start the document scanning process.

  More specifically, when a paper document with a pattern image is set in the automatic document feeder provided in the multifunction machine 3 and “Protected Document Creation Scan Mode” is selected in the selection menu, scanning is performed by scanning from a paper document with a pattern image. A security policy that can be set by the user in the image is acquired from the policy server 3 and displayed on the display device, and the user is allowed to select it.

  To obtain a security policy that can be set by the user, the MFP 3 sends the user ID input in step S501 to the policy server 3 and inquires and acquires a security policy that can be set by the user of the user ID (step S503). ).

  On the other hand, the policy server 3 receives an inquiry about a security policy that can be set by the user from the multifunction device 3, and a processing condition that can be set for the user's document specified by the user with the user ID transmitted from the multifunction device 3. Refer to the security policy management table for each user (not shown) to identify the contents of the operation authority under the processing conditions and the security policy group information such as the department and post of the target user to whom the operation authority is given, 3 for notification (step S504).

  The security policy management table for each user includes a security policy that can be set for a document according to the user's job title and affiliation associated with the user ID (contents of various processing conditions, operation authority in the processing conditions, and operation authority thereof) Information on the department and position of the target user to whom the user is given is managed in association with each other.

  When a security policy to be set for a scanned image to be read from a pattern image-added paper document is selected from the security policy group displayed on the display device of the multifunction device 3, the multifunction device 3 reads the pattern image-added paper document. A scan condition setting screen (not shown) for setting each setting value such as the resolution, the number of colors, the document format, and the transmission destination, which is the scan condition, is displayed and selected by the user (step S505).

  When the user presses a scan start button (not shown) of the user I / F unit 38 of the multifunction machine 3 after the user selects and sets the security policy and scan conditions, the paper document with the pattern image set in the automatic document feeder Are conveyed one by one to the image reading unit 31, and the image reading unit 31 reads a scanned image from the pattern image-attached paper document under the scanning conditions set in step S505 (step S506), and the scanned image is read by the pattern image processing unit. 32 analyzes to determine whether or not the scanning process for the pattern image-attached paper document can be performed (step S507).

  Specifically, in the pattern image-attached paper document, in addition to the document data, the document ID of the pattern image-attached document and protection information (for example, a code indicating whether scanning processing is prohibited or permitted) are arranged in a predetermined dot pattern. The pattern image processing unit 32 extracts the pattern image included in the scan image read from the pattern image-attached paper document, analyzes the extracted pattern image, and analyzes the pattern image. The document ID of the attached document and the protection information are detected.

  In step S507, when the scanned pattern image-attached paper document is prohibited from scanning, that is, when the pattern image processing unit 32 detects that the protection information of the pattern image is prohibited from scanning (YES in step S507), the control unit (multifunction device) ) 30 stops the scan processing operation and ends the job (step S515).

  In step S507, when the scanned pattern image-attached paper document is not prohibited from scanning, that is, when the pattern image processing unit 32 detects that the protection information of the pattern image is not prohibited from scanning (NO in step S507), image correction is performed. The unit 33 performs image correction processing for correcting the deviation of the tilt of the scan image, and the corrected scan image (hereinafter referred to as “scan image (after correction)”) is stored in the storage unit (multifunction device) 39 of the multifunction device 3. The data is saved in a designated storage area of a hard disk (not shown) (step S508).

  More specifically, this image correction processing is performed when the pattern image-attached paper document conveyed by the automatic document feeder is conveyed to the image reading unit 31 in a state where the pattern image-attached document is obliquely shifted for some reason. Since the scanned image read from the image also becomes an obliquely inclined image, it is a process for performing correction on the scanned image by performing rotation processing corresponding to the inclination in order to correct the inclination of the image. The scan image read from is analyzed to detect the tilt angle (skew angle) of the scan image, and the scan image is rotated based on the detected tilt angle.

  The inclination angle of the scan image is detected by, for example, detecting the four vertex coordinates of the scan image and detecting the inclination angle of the scan image from the positional relationship of these vertex coordinates, or detecting based on the margin width of the document. Generally known techniques are used, and the scan image is rotated using a known technique such as rotating the scan image using a rotation matrix or the like based on the detected tilt angle.

  After the scanned image (after correction) is stored in the hard disk in step S508, the above-described processing in steps S506 to S509 is repeated until the scanning of the paper document with all pattern images is completed, and the scanning of the paper document with all pattern images is completed. When each scan image (after correction) is stored on the hard disk (YES in step S509), the thumbnail image processing unit 36 reads all the scan images (after correction) from the hard disk, and the thumbnail corresponding to each scan image (after correction). An image is generated and stored in the designated storage area of the hard disk (step S510).

  The image editing unit 35 reads all the thumbnail images stored in the hard disk, displays the thumbnail image corresponding to the scanned image of the paper document with all the pattern images on the display device of the multifunction machine 3, confirms it to the user, and if necessary. After the editing operation is performed, the scanned image (after correction) is edited according to the editing operation (step S511).

  More specifically, the editing process is performed by the image editing unit 35 such as a scan image deletion operation or a page order rearrangement operation performed by the user operating the edit button while viewing the thumbnail image. When the image is stored in the memory and the editing operation by the user is completed, the image editing unit 35 edits the scanned image (after correction) based on the editing content stored in the memory.

  For example, when the user edits to delete a scanned image, the scanned image (after correction) corresponding to the page number of the thumbnail image instructed to be deleted is deleted, and the order of the scanned images is rearranged. Then, processing such as changing the page number of the scanned image (after correction) in the page order of the designated thumbnail image is performed.

  When the editing process for the scanned image (after correction) is completed, the document ID generation unit of the multifunction machine 3 adds a new file to the scanned image (after correction) file (hereinafter referred to as “scanned image (after correction) file”). The document ID is generated, the generated document ID, the processing conditions set in the scan image (after correction) file set in step S505 described above, the contents of the operation authority in the processing conditions, and the target user who gives the operation authority Each piece of department and post information is transmitted to the policy server 3 to request registration and transmission of an encryption key for encrypting the scanned image (after correction) file (step S512).

  The policy server 3 associates the document ID transmitted from the MFP 3, the processing conditions, the contents of the operation authority in the processing conditions, and the department and position of the target user to whom the operation authority is given, in association with the security policy management table 80 ( 4), a security policy for the scanned image (after correction) file is registered, and the encryption key created in advance in response to the encryption key transmission request is transmitted to the requesting multifunction device 3 (step S513). ).

  The MFP 3 that has acquired the encryption key from the policy server 3 adds the document ID generated by the document ID generation unit to the scanned image (after correction) file, and the scanned image (after correction) file to which the document ID is added. Is encrypted with the encryption key acquired from the policy server 3 to generate a protected electronic document file, which is then transmitted to the transmission destination designated by the user (step S514).

  Note that the image correction processing of the scan image in step S508 is configured to add information on the tilt angle of the scan image to the scan image, and the tilt angle added to the scan image when generating the thumbnail image of the scan image in step S510. The scan image may be rotated according to the information, and a thumbnail image corresponding to the scanned image after the rotation process may be generated.

  In this case, the image format format for recording the scanned image is composed of a scanned image area for storing each scanned image and an image rotation angle information area for storing information on the tilt angle of the scanned image. A configuration in which the thumbnail image processing unit 36 of the MFP 3 records the tilt angle information of each scan image so that the scan image is rotated based on the image rotation angle information recorded corresponding to the scan image. To do.

  In addition, for example, viewer software or image processing software that displays and edits a scanned image on a device other than the multifunction machine 3 (for example, the client PC 1) includes image rotation angle information recorded corresponding to the scanned image. Based on this, the scan image is rotated and displayed.

  In the case of such a configuration, the rotation processing of the scan image by the image correction processing of the multifunction machine 3 is not necessary, so that the load of the rotation processing by the image correction unit 33 is eliminated, and the image correction processing can be speeded up.

  In the processing operation by the multifunction machine 3 of the present invention described above, a storage medium recording software program codes for realizing the functions of the above-described embodiments is supplied to the multifunction machine, and the CPU of the multifunction machine is stored in the storage medium. It may be a multi-function machine configured to be realized by reading and executing the program code.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

  In addition, after the program code read from the storage medium is written in a memory provided in a function expansion card inserted in the multifunction peripheral or a function expansion unit connected to the CPU, the program code is read based on the instruction of the program code. A CPU or the like provided in the function expansion card or the function expansion unit may perform part or all of the actual processing, and the functions of the above-described embodiments may be realized by the processing.

  In the above embodiment, the configuration is shown in which the policy server 2 performs user authentication. However, a user authentication server that performs user authentication is provided separately from the policy server 2 and connected to the network 4 to perform user authentication. The server may be configured to perform user authentication.

  The present invention can be applied to document management techniques corresponding to various usage forms of documents.

1 is a configuration diagram showing the main configuration of an image processing system 100 according to the present invention. The figure which shows an example of the user authentication information management table 60 The figure which shows an example of the operation authority information list 70 The figure which shows an example of the security policy management table 80 Flow chart showing an example of scan processing operation in protected document creation scan mode

Explanation of symbols

1 Client PC
2 Policy Server 3 Multifunction Machine 20 Control Unit (Policy Server)
21 display unit 22 input unit 23 storage unit (policy server)
24 Network I / F section (policy server)
30 Control unit (multifunction machine)
31 Image Reading Unit 32 Pattern Image Processing Unit 33 Image Correction Unit 34 Image Processing Unit 35 Image Editing Unit 36 Thumbnail Image Processing Unit 37 Network I / F Unit (Multifunction Device)
38 User I / F section 38
39 Storage unit (multifunction machine)
DESCRIPTION OF SYMBOLS 40 Image formation part 41 Document ID production | generation part 42 Encryption processing part 50 Document management software 51 User authentication function 52 Security policy management function 60 User authentication information management table 70 Operation authority information list 80 Security policy management table

Claims (10)

An authentication means for performing user authentication;
Image reading means for reading image information from a paper document provided with document identification information and at least protection information indicating whether or not scanning processing can be performed ;
Determining means for determining whether image information can be read from the paper document based on the protection information included in the image information read by the image reading means;
An editing unit that edits image information read by the image reading unit when the determination unit determines that reading is possible;
Setting means for selecting and setting operation authority information to be given to the electronic document filed with the image information edited by the editing means from operation authority information that can be set by the user authenticated by the authentication means;
Registration means for generating identification information of the electronic document and registering the generated identification information in association with the operation authority information set by the setting means;
An image reading apparatus comprising: a protected document generation unit that generates a protected electronic document by adding the identification information registered by the registration unit to the electronic document and encrypting the identification information. The editing means includes
The image reading apparatus according to claim 1, wherein at least one page image data in the image information read by the image reading unit is rotated. The editing means includes
The image reading apparatus according to claim 2, wherein the rotation process is performed by adding predetermined rotation angle setting information to the page image data. The editing means includes
The image reading apparatus according to claim 1, wherein at least one page image data in the image information read by the image reading unit is deleted. The editing means includes
The image reading apparatus according to claim 1, wherein rearrangement processing is performed to rearrange each page image data in the image information read by the image reading unit. The editing means includes
The image reading apparatus according to claim 1, wherein a resolution conversion process for converting an image resolution of image information read by the image reading unit is performed. The editing means includes
The image reading apparatus according to claim 1, wherein color number conversion processing is performed to convert the number of colors of an image of image information read by the image reading unit. The editing means includes
The image reading apparatus according to claim 1, wherein a format conversion process for converting a format of image information read by the image reading unit is performed. An operation authority management device that manages the operation authority information of a document in association with the identification information of the document;
A protected document management apparatus that stores and manages a document in which the operation authority information is managed by the operation authority management apparatus;
A document processing apparatus that processes a document based on the operation authority information managed by the operation authority management apparatus,
The document processing apparatus includes:
An authentication means for performing user authentication;
Image reading means for reading image information from a paper document corresponding to a document for which the operation authority information is managed by the operation authority management device;
Storage means for temporarily storing image information read by the image reading means;
A discriminating unit for discriminating whether or not image information can be read from the paper document based on at least protection information indicating whether or not scanning processing can be performed , included in the image information read by the image reading unit;
An editing unit that edits image information temporarily stored by the storage unit when the determination unit determines that the image can be read;
Setting means for selecting and setting operation authority information to be given to the electronic document filed with the image information edited by the editing means from among operation authority information that can be set by the user authenticated by the authentication means;
Registration means for generating identification information of the electronic document and associating the generated identification information with the operation authority information set by the setting means and registering it in the operation authority management device;
An image processing system comprising: a transmission unit that transmits a protected electronic document encrypted by adding the identification information registered by the registration unit to the electronic document to the protected document management apparatus. Computer
An authentication means for performing user authentication,
Image reading means for reading image information from a paper document provided with document identification information and at least protection information indicating whether or not scanning processing can be performed ;
Determining means for determining whether or not image information can be read from the paper document based on the protection information included in the image information read by the image reading means;
An editing unit that edits image information read by the image reading unit when the determination unit determines that the image can be read;
Setting means for selecting and setting operation authority information to be given to the electronic document filed with the image information edited by the editing means from among operation authority information that can be set by the user authenticated by the authentication means;
Registration means for generating identification information of the electronic document and registering the generated identification information in association with the operation authority information set by the setting means;
An image processing program that functions as a protected document generation unit that generates a protected electronic document by adding and encrypting identification information registered by the registration unit to the electronic document.

Images