Scanner, program, and method

Abstract

To take action when scan instructions may be inappropriate.SOLUTION: In response to receiving a scan instruction from a first terminal device, first scan data is acquired. In response to receiving a scan instruction from a second terminal device after receiving the first scan instruction, second scan data is acquired. By comparing a first scan image and a second scan image, it is determined whether an image condition indicating that the second scan image is the same as the first scan image is satisfied. When the image condition is satisfied and the second terminal device is different from the first terminal device, a specific process related to performing a scan is executed.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present specification relates to a technique for controlling a scanner. [Background technology]

[0002] A pull scan function is known as a scanner function. For example, Patent Document 1 discloses the following technology: A Multi Function Peripheral (MFP) equipped with a scanner reads an image with the scanner in response to a scan command from a smartphone, and transmits the read image to the smartphone. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-065129 A Summary of the Invention [Problem to be solved by the invention]

[0004] The scanner may be provided with an inappropriate scan instruction. For example, an object such as a manuscript may be scanned in response to a scan instruction from a third party's terminal device different from the terminal device of the object's owner. There is room for ingenuity in handling cases where the scan instruction may be inappropriate.

[0005] This specification discloses a technique that can take measures when a scan instruction may be inappropriate. [Means for solving the problem]

[0006] The technology disclosed in this specification can be realized in the following application examples.

[0007] [Application Example 1] A scanner comprising: a memory; a first scan execution unit that acquires first scan data by executing a first scan process in response to receiving a first scan instruction from a first terminal device; a storage control unit that stores the first scan data in a specific area of ​​the memory; a second scan execution unit that acquires second scan data by executing a second scan process in response to receiving a second scan instruction from a second terminal device after receiving the first scan instruction; a comparison unit that determines whether an image condition indicating that the second scan image is the same as the first scan image is satisfied by comparing a first scan image represented by the first scan data with a second scan image represented by the second scan data; and a specific processing unit that executes specific processing related to scan execution when the image condition is satisfied and the second terminal device is different from the first terminal device.

[0008] When the same scan image is generated by a first scan instruction from a first terminal device and a second scan instruction from a second terminal device different from the first terminal device, the first scan instruction or the second scan instruction may be inappropriate. According to the above configuration, when the first scan instruction or the second scan instruction may be inappropriate, a measure can be taken by executing a specific process.

[0009] The technology disclosed in this specification can be realized in various forms, such as a scanner control method and control device, a computer program for realizing the functions of those methods or devices, a recording medium (e.g., a non-temporary recording medium) on which that computer program is recorded, and the like. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is an explanatory diagram illustrating a system according to an embodiment; [Diagram 2] FIG. 2 is a perspective view of a portion of the multifunction peripheral 100. [Diagram 3] 13A-13C are diagrams showing examples of lists 131, 132, and 133, respectively. [Figure 4] 1 is a sequence diagram illustrating an example of the operation of the system 1000. FIG. [Diagram 5] 1 is a sequence diagram illustrating an example of the operation of the system 1000. FIG. [Figure 6] 1 is a sequence diagram illustrating an example of the operation of the system 1000. FIG. [Figure 7] 1 is a sequence diagram illustrating an example of the operation of the system 1000. FIG. [Figure 8] 13 is a flowchart illustrating an example of a specific process. [Figure 9] 13 is a flowchart illustrating an example of a specific process. [Figure 10] 13A and 13B are flowcharts illustrating an example of a deletion process. [Figure 11] 13A and 13B are diagrams showing another embodiment of the terminal conditions. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] A. First Example: A1. System configuration: FIG. 1 is an explanatory diagram showing a system as an embodiment. This system 1000 includes a multifunction device 100, a first terminal device 200A, a second terminal device 200B, and a management terminal 300. The multifunction device 100, the first terminal device 200A, the second terminal device 200B, and the management terminal 300 are connected to a network LN. In this embodiment, the network LN includes a so-called local area network. The network LN may further include the so-called Internet. In this embodiment, the multifunction device 100 is used by multiple users including a first user of the first terminal device 200A and a second user of the second terminal device 200B. The multifunction device 100 is installed in a place where multiple users are active, such as a school or a company.

[0012] The multifunction device 100 includes a processor 110, a storage device 115, a display unit 140, an operation unit 150, a print engine 160, a scan engine 170, and a communication interface 180. These elements are connected to each other via a bus.

[0013] The display unit 140 is a device configured to display images, such as a liquid crystal display or an organic EL display. The operation unit 150 is a device configured to receive operations by a user, such as a button, a lever, or a touch screen overlaid on the display unit 140. The communication interface 180 is an interface configured to communicate with other devices (e.g., it includes one or more interfaces of a wired LAN and an IEEE802.11 wireless LAN). In this embodiment, the communication interface 180 is connected to a network LN.

[0014] The print engine 160 is a device that prints images. In this embodiment, the print engine 160 is a so-called inkjet printer (a device that prints images using other methods, such as a laser printer, may also be used). The scan engine 170 optically reads an object such as a document and generates scan data that represents the read object.

[0015] The processor 110 is a device configured to process data. The processor 110 is, for example, a Central Processing Unit (CPU) or a System on a chip (SoC). The storage device 115 includes a volatile storage device 120 and a non-volatile storage device 130. The volatile storage device 120 is, for example, a DRAM, and the non-volatile storage device 130 is, for example, a flash memory.

[0016] The non-volatile storage device 130 stores data of a program P1, an authentication list 131, a scan list 132, and a prohibition list 133. Hereinafter, a partial area representing the scan list 132 among the storage areas of the non-volatile storage device 130 is referred to as a specific area SA. The program P1 is stored in advance in the non-volatile storage device 130 as firmware by the manufacturer of the multifunction device 100. The processes executed by the processor 110 according to the program P1 include a process for controlling the print engine 160 and the scan engine 170, a process for communicating with an external device through the communication interface 180, and a process for setting the multifunction device 100. In this embodiment, the processor 110 can execute a process for making the scan engine 170 read an object in response to a scan request from the external device, and for transmitting scan data representing the read object to the external device (such a process is also called pull scan).

[0017] FIG. 2 is a perspective view of a part of the multifunction device 100. The multifunction device 100 has a housing 190 and a scan engine 170 arranged on the upper part of the housing 190. The scan engine 170 has a cover 174 attached to the upper part of the housing 190 so as to be openable and closable, and a cover sensor 176. In FIG. 2, the cover 174 is opened in an upward direction. The cover sensor 176 detects whether the cover 174 is opened or closed. In this embodiment, the scan engine 170 is a so-called flatbed type scanner. The scan engine 170 has a support base 172 arranged on the upper surface of the housing 190. The support base 172 appears when the cover 174 is opened in an upward direction. The support base 172 is a rectangular base and is configured using a transparent plate (e.g., a glass plate). The upper surface of the support base 172 forms a support surface 172s that supports an object to be read (e.g., a document). The support surface 172s is an example of a placement portion of the scan engine where an object to be scanned should be placed.

[0018] The scan engine 170 has a sensor unit 178 and a transport device (not shown) disposed inside the housing 190. The sensor unit 178 is a one-dimensional image sensor (e.g., a Contact Image Sensor (CIS)) that optically reads an object from the lower side of the support base 172. The sensor unit 178 is transported by a transport device (not shown). This allows the sensor unit 178 to read the object over the entire support surface 172s.

[0019] Next, the terminal devices 200A and 200B (FIG. 1) will be described. The terminal devices 200A and 200B are terminal devices used by a first and a second user, respectively (for example, a personal computer, a smartphone, a tablet computer, etc.). In this embodiment, the terminal devices 200A and 200B have similar hardware configurations. The terminal devices 200A and 200B each have a processor 210A, 210B, a storage device 215A, 215B, a display unit 240A, 240B, an operation unit 250A, 250B, and a communication interface 280A, 280B. In each of the terminal devices 200A and 200B, these elements are connected to each other via a bus (not shown).

[0020] The display units 240A, 240B are devices configured to display images, such as a liquid crystal display or an organic EL display. The operation units 250A, 250B are devices configured to receive user operations, such as a button, a lever, or a touch screen superimposed on the display units 240A, 240B. The communication interfaces 280A, 280B are interfaces configured to communicate with other devices (e.g., including one or more interfaces of a wired LAN and an IEEE802.11 wireless LAN). In this embodiment, the communication interfaces 280A, 280B are connected to a network LN.

[0021] The processors 210A and 210B are devices configured to process data. The processors 210A and 210B are, for example, a CPU or a SoC. The storage devices 215A and 215B include volatile storage devices 220A and 220B and non-volatile storage devices 230A and 230B, respectively. The volatile storage devices 220A and 220B are, for example, DRAM, and the non-volatile storage devices 230A and 230B are, for example, flash memory.

[0022] The non-volatile storage devices 230A and 230B store data of programs P2A and P2B, user identifiers UID1 and UID2, and authentication information PW1 and PW2, respectively. The programs P2A and P2B are application programs for pull scanning using the multifunction device 100. The application programs P2A and P2B are provided, for example, by the manufacturer of the multifunction device 100. Hereinafter, it is assumed that the application programs P2A and P2B have already been installed in the terminal devices 200A and 200B.

[0023] The management terminal 300 is a terminal device (for example, a personal computer, a smartphone, a tablet computer, etc.) used by an administrator of the multifunction device 100. Although not shown in the figure, an application for handling e-mails is installed in the management terminal 300.

[0024] A2. Lists 131, 132, 133: 3(A)-3(C) are diagrams showing examples of the lists 131, 132, and 133. The authentication list 131 (FIG. 3(A)) shows the correspondence between the user identifier UID and the authentication information UAI. The user identifier UID is an identifier used in user authentication for using the multifunction device 100. The authentication information UAI is authentication information used in user authentication (e.g., a hash value of a password). A set of the user identifier UID and the authentication information UAI is registered in advance in the authentication list 131. For example, an administrator of the multifunction device 100 supplies a registration request to the multifunction device 100 through the management terminal 300. The processor 110 of the multifunction device 100 registers a set of the user identifier UID and the authentication information UAI in the authentication list 131 in accordance with the request. User data representing the user identifier UID and information associated with the authentication information UAI (e.g., a password) is stored in the user's terminal device. For example, the management terminal 300 transmits user data to a terminal device of a user. Here, it is assumed that the non-volatile storage device 230A of the first terminal device 200A stores a first user identifier UID1 and authentication information PW1 associated with the first user identifier UID1. It is also assumed that the non-volatile storage device 230B of the second terminal device 200B stores a second user identifier UID2 and authentication information PW2 associated with the second user identifier UID2.

[0025] Scan list 132 (FIG. 3(B)) shows the correspondence between user identifiers UID, scan data SD, and time stamps TS. Processor 110 of multifunction device 100 performs a scan using scan engine 170 in response to a scan instruction associated with user identifier UID. Processor 110 registers user identifier UID, scan data SD, and time stamp TS in scan list 132 in response to the scan. Processor 110 refers to a timer (not shown) and obtains the current date and time as time stamp TS. The registered information is used to determine whether a new scan instruction is appropriate (described later).

[0026] The prohibition list 133 (FIG. 3(C)) represents identifiers DIDs (referred to as prohibition identifiers DIDs) associated with devices for which pull scanning is prohibited. As described later, the processor 110 of the multifunction device 100 prohibits pull scanning by a device associated with an inappropriate scan instruction when the scan instruction may be inappropriate. As the prohibition identifier DID, various identifiers capable of identifying a device, such as a user identifier UID, a MAC address, or a host name, may be registered. A MAC address is an address assigned to a communication interface. A host name is a name of a device used on a network. The host name used in this embodiment is a name set by an administrator of a local area network (i.e., a name used within the local area network). Alternatively, the host name may be a name determined by a Domain Name System (DNS).

[0027] A3. System 1000 Operation: 4-7 are sequence diagrams showing an example of the operation of the system 1000. In S110, the first user of the first terminal device 200A places the first document on the support surface 172s of the multifunction device 100 (FIG. 2). In S115, the first user inputs a scan instruction by operating the operation unit 250A of the first terminal device 200A. Here, the first user inputs a normal scan instruction, not a preview (scanning for preview will be described later). In response to the instruction, the processor 210A of the first terminal device 200A starts processing for scanning according to the program P2A. In S120, the processor 210A transmits a scan instruction to the multifunction device 100. The scan instruction includes data representing the first user identifier UID1 and authentication information PW1.

[0028] In response to a scan instruction from the first terminal device 200A, the processor 110 of the multifunction device 100 starts processing for scanning according to the program P1. In S125, the processor 110 determines whether or not scanning according to the scan instruction from the first terminal device 200A is permitted. The permissible condition may be various conditions. In this embodiment, the permissible condition is that all of the following conditions C1 and C2 are satisfied. (First condition C1) User authentication is successful. (Second condition C2) The identifier associated with the sending device of the scan instruction is not included in the prohibition list 133 (FIG. 3(C)).

[0029] To determine whether the first condition C1 is satisfied, the processor 110 refers to the authentication list 131 (FIG. 3(A)) and acquires the first authentication information UAI1 associated with the first user identifier UID1 included in the scan instruction of S120. If the authentication information PW1 matches the first authentication information UAI1, the processor 110 determines that the user authentication is successful (i.e., the first condition C1 is satisfied). If the first user identifier UID1 is not registered in the authentication list 131, the processor 110 determines that the user authentication is unsuccessful (i.e., the first condition C1 is not satisfied).

[0030] To determine whether the second condition C2 is satisfied, the processor 110 acquires an identifier associated with the first terminal device 200A, which is the sending device of the scan instruction of S120. In this embodiment, the processor 110 acquires a first user identifier UID1 associated with the scan instruction, a MAC address of the first terminal device 200A, and a host name of the first terminal device 200A. The processor 110 determines that the second condition C2 is satisfied if none of the acquired identifiers is included in the prohibition list 133.

[0031] If the permissible condition is not satisfied (S125: No), the processor 110 ends the process. Here, the processor 110 may transmit information indicating that scanning is not permitted to the first terminal device 200A. Hereinafter, it is assumed that the permissible condition is satisfied.

[0032] If the permissible condition is met (S125: Yes), in S130, the processor 110 acquires scan data by executing a scan process. In this embodiment, the processor 110 causes the scan engine 170 to read an object (here, the first original). The scan engine 170 generates scan data representing the read object. The processor 110 acquires the scan data from the scan engine 170 (referred to as scan data SDa). The data format of the scan data may be in various formats. In this embodiment, the scan data is color bitmap data. Note that the scan data may be generated by the processor 110 using data from the scan engine 170.

[0033] After acquiring the scan data, the processor 110 compares the current scan image with the comparison scan image. The current scan image is a scan image represented by the scan data acquired in the current scan process. The comparison scan image is a scan image represented by the scan data SD stored in the scan list 132 (FIG. 3(A)). In S135, the current scan image is a scan image represented by the scan data SDa acquired in S130. Also, in S135, it is assumed that only the scan data SDx is stored in the scan list 132. The scan data SDx is scan data generated by the previous scan process (not shown). In this case, the comparison scan image is a scan image represented by the scan data SDx. Based on the comparison result, the processor 110 determines whether an image condition indicating that the comparison scan image is the same as the current scan image is satisfied. If multiple scan data are stored in the scan list 132, the processor 110 uses the scan data having the latest timestamp TS. If no scan data is stored in the scan list 132, the processor 110 determines that the image condition is not satisfied.

[0034] The image condition may be various conditions that indicate that the comparison scan image is the same as the current scan image. For example, the image condition may be that the similarity between the two scan images is equal to or greater than a predetermined threshold. The similarity may be, for example, any of the following: Sum of Squared Difference, Sum of Absolute Difference, Normalized Cross-Correlation, and Zero-means Normalized Cross-Correlation.

[0035] In either case, if the resolution (i.e., pixel density) differs between the two scan images, the processor 110 may perform resolution conversion of one or both of the current scan image and the comparison scan image and compare the current scan image and the comparison scan image of the same resolution.

[0036] Here, it is assumed that the scanning process of S130 is the first scanning process of the first document, and the current scanned image is not the same as the comparison scanned image. In S140, the processor 110 determines that the image condition is not satisfied.

[0037] If the image conditions are not satisfied, processor 110 registers information related to the scan data in scan list 132 (FIG. 3(B)). In the processing of FIG. 4, information related to scan data SDa (here, first user identifier UID1, scan data SDa, and timestamp TSa) is registered in S145. In S145, processor 110 refers to a timer (not shown) and acquires the current date and time as timestamp TSa. By registering this information, data representing information UID1, SDa, and TSa is stored in specific area SA of non-volatile storage device 130.

[0038] In S155, the processor 110 transmits the scan data SDa to the first terminal device 200A. The processor 210A of the first terminal device 200A stores the received scan data SDa in the storage device 215A (for example, the non-volatile storage device 230A). With the above, the process associated with the scan instruction in S120 ends.

[0039] In S210 (FIG. 5), the first user removes the first original from the support surface 172s of the multifunction device 100 (FIG. 2) and places the second original on the support surface 172s. Then, in S215, the first user inputs a scan instruction to the first terminal device 200A. Here, it is assumed that the first user inputs a scan instruction for preview. In this embodiment, in the scan for preview, the object is read at a lower resolution than in the normal scan. Then, the scan data is used to preview the scanned image.

[0040] S220-S255 respectively correspond to S120-S155 in Fig. 4. Below, the description will be given while omitting the description of the same parts as in Fig. 4.

[0041] The scan instruction in S220 includes data indicating a preview request in addition to the first user identifier UID1 and authentication information PW1. In S225, the permissible condition is satisfied. In the scan process in S230, the processor 110 causes the scan engine 170 to read the object (here, the second original) at a resolution for preview. The processor 110 obtains scan data from the scan engine 170 (referred to as scan data SD1). The resolution of the scan data SD1 is coarser than the resolution in a normal scan (e.g., S130 (FIG. 4)).

[0042] In S235, processor 110 compares the current scan image with the comparison scan image. The current scan image is the second original scan image represented by scan data SD1. The comparison scan image is the first original scan image represented by scan data SDa (FIG. 3(B)). The current scan image is not the same as the comparison scan image. In S240, processor 110 determines that the image condition is not satisfied.

[0043] At S245, processor 110 registers information related to scan data SD1 (here, first user identifier UID1, scan data SD1, and timestamp TS1) in scan list 132 (FIG. 3B). Data representing this information UID1, SD1, and TS1 is stored in a specific area SA of non-volatile storage device 130.

[0044] In S255, the processor 110 transmits the scan data SD1 to the first terminal device 200A. In S260, the processor 210A of the first terminal device 200A displays a scanned image of the scan data SD1 on the display unit 240A. This ends the process associated with the scan instruction in S220.

[0045] The first user can determine whether or not an appropriate scan is possible by observing the scan image displayed in S260. If the scan image is inappropriate (for example, if an unintended page of the second document is read), the first user may reposition the document on the support surface 172s and input a scan instruction to the first terminal device 200A again. Hereinafter, it is assumed that the scan image is appropriate, and the first user continues with normal scanning.

[0046] In S315 (FIG. 6), the first user inputs a scan instruction to the first terminal device 200A. Here, it is assumed that the first user inputs a normal scan instruction, not a preview instruction.

[0047] S320-S335 respectively correspond to S120-S135 in Fig. 4. Below, the description will be given while omitting the description of the same parts as in Fig. 4.

[0048] The scan instruction of S320 includes the first user identifier UID1 and authentication information PW1, similar to the scan instruction of S120 (FIG. 4), and does not include data indicating a preview request. In S325, the permissible condition is satisfied. In the scan process of S330, the processor 110 causes the scan engine 170 to read the target object (here, the second original) at normal resolution. The processor 110 obtains scan data from the scan engine 170 (referred to as scan data SD1b).

[0049] In S335, processor 110 compares the current scan image with the comparison scan image. The current scan image is a scan image of the second original represented by scan data SD1b. The comparison scan image is a scan image of the second original represented by scan data SD1 registered in scan list 132 (FIG. 3(B)). The current scan image is the same as the comparison scan image. In S340, processor 110 determines that the image condition is satisfied.

[0050] If the image condition is satisfied, the processor 110 determines whether the terminal condition is satisfied (S350). The terminal condition is a condition indicating that the transmission device of the scan instruction of the current scan process (called the current device) is the same as the transmission device of the scan instruction associated with the comparison scan image (called the comparison device).

[0051] In this embodiment, a user identifier UID is used as information indicating a transmitting device. Here, the user identifier UID indicating the current device is called a current identifier, and the user identifier UID indicating the comparison device is called a comparison identifier. In S350, the processor 110 uses the first user identifier UID1 included in the current scan instruction (S320) as the current identifier. In addition, the processor 110 uses the user identifier UID associated with the comparison scan image by the scan list 132 (FIG. 3(B)) as the comparison identifier (here, the first user identifier UID1 associated with the scan data SD1). In this way, the current identifier and the comparison identifier are the same. In S350, the processor 110 determines that the current device is the same as the comparison device.

[0052] If the image conditions are met and the current device is the same as the comparison device, in S355, the processor 110 transmits the scan data SD1b to the first terminal device 200A. The processor 210A of the first terminal device 200A stores the received scan data SD1b in the storage device 215A (for example, the non-volatile storage device 230A). With the above, the process associated with the scan instruction in S320 ends.

[0053] In S415 (FIG. 7), the second user of the second terminal device 200B inputs a scan instruction by operating the operation unit 250B of the second terminal device 200B. Here, it is assumed that the second original remains on the support surface 172s (FIG. 2).

[0054] When scan instructions are issued from two different terminal devices for the same scan object (e.g., a document), the scan instruction from one of the terminal devices may be a scan instruction from a user other than the owner of the scan object. Scanning by a user other than the owner of the scan object may be contrary to the owner's intention. It is preferable not to provide scan data based on an unauthorized scan instruction that is contrary to the owner's intention. As described below, in this embodiment, the processor 110 executes a specific process when scan instructions are issued from two different terminal devices for the same scan object.

[0055] S420-S440 correspond to S320-S340 in Fig. 6, respectively. Below, the description will be given while omitting the description of the same parts as in Fig. 6.

[0056] In response to the instruction in S415, the processor 210B of the second terminal device 200B starts processing for scanning according to the program P2B. In S420, the processor 210B transmits a scan instruction to the multifunction device 100. The scan instruction includes data representing the second user identifier UID2 and the authentication information PW2. This scan instruction may be either a normal one or a one for preview.

[0057] In response to a scan instruction from the second terminal device 200B, the processor 110 of the multifunction device 100 starts processing for scanning according to the program P1. In S425, it is assumed that the permissible conditions are satisfied. In the scanning process in S430, the processor 110 causes the scan engine 170 to read the target object (here, the second original). The processor 110 acquires scan data from the scan engine 170 (referred to as scan data SD2).

[0058] At S435, processor 110 compares the current scan image with the comparison scan image. The current scan image is a scan image of the second original represented by scan data SD2. The comparison scan image is a scan image of the second original represented by scan data SD1 registered in scan list 132 (FIG. 3(B)). Thus, the current scan image is the same as the comparison scan image. At S440, processor 110 determines that the image condition is satisfied.

[0059] At S450, processor 110 determines whether the current identifier of the current device is the same as the comparison identifier of the comparison device. At S450, the current identifier is the second user identifier UID2 included in the current scan instruction (S420). The comparison identifier is the first user identifier UID1 associated with the comparison scan image (here, scan data SD1) by scan list 132 (FIG. 3(B)). Thus, the current identifier is different from the comparison identifier. At S450, processor 110 determines that the current device is different from the comparison device.

[0060] If the image condition is satisfied and the current device is different from the comparison device, the processor 110 starts the identification process without transmitting the scan data SD2 to the second terminal device 200B (S460). After S460 ends, the process associated with the scan instruction of S420 ends.

[0061] A4. Specific Processing: 8 and 9 are flowcharts showing an example of the specific processing. FIG. 9 shows a continuation of FIG. 8. In the figure, S505, a first processing (S510), a second processing (S520), a third processing (S533), and a fourth processing (S536) are shown. The specific processing may include one or more processing arbitrarily selected in advance from the first to fourth processing. Each processing will be described below, assuming that the specific processing is executed in S460 of FIG. 7.

[0062] In S505, the processor 110 of the multifunction device 100 generates warning information. The warning information may include any information indicating that the scan instruction may be invalid. In this embodiment, the warning information includes the following information W1-W3. (First information W1) Suspect user identifier (Second information W2) Suspect MAC address (Third information W3) Suspect host name

[0063] The suspect user identifier of the first information W1 represents a user identifier UID of a suspect user who may have issued an unauthorized scan instruction. An unauthorized scan instruction may be issued before a legitimate scan instruction. Either a user associated with the current device or a user associated with the comparison device may be a suspect user. The suspect user identifier may include one or both of a user identifier UID associated with the current device (here, the second user identifier UID2) and a user identifier UID associated with the comparison device (here, the first user identifier UID1).

[0064] The suspect MAC address of the second information W2 represents the MAC address of a suspect device that may have issued an unauthorized scan command. The suspect MAC address may include one or both of the MAC address of the current device and the MAC address of the comparison device.

[0065] The suspect host name of the third information W3 represents the host name of the suspect device. The suspect host name may include one or both of the host name of the current device and the host name of the comparison device.

[0066] The warning information may indicate that both the information associated with the current device and the information associated with the comparison device may be invalid. Alternatively, the warning information may indicate only a preselected one of the information associated with the current device and the information associated with the comparison device. In either case, the warning information may include a message indicating that the scan instruction from the device indicated by the warning information may be invalid.

[0067] In S510, processor 110 executes a first process. In the first process, processor 110 transmits warning information to a contact address for an administrator of multifunction device 100. In this embodiment, the administrator's email address is preregistered in multifunction device 100 (for example, nonvolatile storage device 130 stores email address data). Processor 110 transmits an email including the warning information to the administrator's email address. In this embodiment, processor 110 transmits an email including the warning information to management terminal 300. The email may be transmitted via a mail server (not shown). The administrator who receives the warning information can take measures, such as inquiring about a scan instruction to a user of the device represented by the warning information.

[0068] In S520, the processor 110 executes the second process. In this embodiment, the second process includes S522, S524, S526, S528, and S529. In S522, the processor 110 displays the warning information on the display unit 140 by outputting data of the warning information to the display unit 140. Usually, a user who places a document on the support surface 172s (FIG. 2) of the multifunction device 100 stays near the multifunction device 100 until the user collects the document. Therefore, the owner of the document can know the possibility of an unauthorized scan instruction by observing the display unit 140.

[0069] In S524, the processor 110 displays a user interface screen on the display unit 140. Although not shown in the figure, the user interface screen displays two options: "Continue" and "Notify." "Continue" indicates sending the scan data, while "Notify" indicates notifying the administrator of warning information. A user near the multifunction device 100 (usually the owner of the document) can select either option by operating the operation unit 150 of the multifunction device 100.

[0070] In S526, the processor 110 acquires the option selected by the user through the operation unit 150. If "Continue" is selected, in S528, the processor 110 transmits the scan data to the current device (here, the second terminal device 200B). Then, S520 ends. If "Notify" is selected, the processor 110 executes the process of S529. S529 is the same as S510 (the processor 110 transmits warning information to the contact address of the administrator of the multifunction device 100). Then, S520 ends.

[0071] S530 (FIG. 9) includes one preselected from a third process (S533) and a fourth process (S536). In the third process of S533, the processor 110 restricts devices that can transmit a scan instruction. The restriction process may be various processes. In this embodiment, the restriction process includes the following processes R1-R3. (First restriction process R1) Restriction of user identifier UID (Second restriction process R2) MAC address restriction (Third Restriction Process R3) Host Name Restriction

[0072] In the first restriction process R1, the processor 110 registers the user identifier UID of the suspect user in the ban list 133 (FIG. 3(C)). The user identifier UID to be registered may include one or both of the user identifier UID associated with the current device (here, the second user identifier UID2) and the user identifier UID associated with the comparison device (here, the first user identifier UID1).

[0073] In the second restriction process R2, the processor 110 registers the MAC address of the suspect device in the prohibition list 133. The MAC address to be registered may include one or both of the MAC address of the current device and the MAC address of the comparison device.

[0074] In the third restriction process R3, the processor 110 registers the host name of the suspect device in the prohibition list 133. The host name to be registered may include one or both of the host name of the current device and the host name of the comparison device.

[0075] As described above, an unauthorized scan instruction may be issued before a valid scan instruction. Therefore, information associated with a comparison device (i.e., a device that issued a scan instruction first) is registered in the prohibition list 133. However, in a modified example, the information registered in the prohibition list 133 may include both information associated with the current device and information associated with the comparison device. Alternatively, the information registered in the prohibition list 133 may be only one of the information associated with the current device and the information associated with the comparison device that is preselected.

[0076] In the fourth process of S536, the processor 110 disables pull scanning. That is, the processor 110 prohibits the execution of a scan process in response to a new scan instruction from any external device (including the terminal devices 200A and 200B). After this, the processor 110 does not execute a scan process even if a new scan instruction is received from an external device. The processor 110 may further notify the device that transmitted the scan instruction that scanning is prohibited.

[0077] With the above, the identification process ends. Note that if the second process (S520) is adopted, the first process (S510) may be omitted. If the third process (S533) is adopted, the fourth process (S536) is omitted. If the fourth process (S536) is adopted, the third process (S533) is omitted. If the first process (S510) and the second process (S520) are omitted, S505 may also be omitted.

[0078] As described above, in this embodiment, the multifunction device 100 (FIG. 1) includes the scan engine 170. The multifunction device 100 is an example of a scanner. The multifunction device 100 includes a storage device 115 (for example, the nonvolatile storage device 130). The processor 110 of the multifunction device 100 executes the following process. In S220 (FIG. 5), the processor 110 receives a scan instruction (called a first scan instruction) from the first terminal device 200A. In response to receiving the first scan instruction, the processor 110 executes S230. In S230, the processor 110 acquires scan data SD1 (called first scan data SD1) by executing a scan process (called a first scan process). In S245, the processor 110 stores the first scan data SD1 in a specific area of ​​the storage device 115 (here, the specific area SA of the nonvolatile storage device 130).

[0079] After receiving the first scan instruction (S220), in S420 (FIG. 7), the processor 110 receives a scan instruction (referred to as a second scan instruction) from the second terminal device 200B. In response to receiving the second scan instruction, the processor 110 executes S430. In S430, the processor 110 acquires scan data SD2 (referred to as second scan data SD2) by executing a scan process (referred to as a second scan process).

[0080] In S435, the processor 110 compares the scan image represented by the first scan data SD1 (referred to as the first scan image) with the scan image represented by the second scan data SD2 (referred to as the second scan image). The processor 110 determines whether the comparison satisfies an image condition indicating that the second scan image is the same as the first scan image.

[0081] If the image condition is satisfied (S440) and the second terminal device 200B is different from the first terminal device 200A (S450), the processor 110 executes a specific process related to the execution of a scan in S460. According to this configuration, the processor 110 can take measures by executing the specific process when the first scan instruction or the second scan instruction may be inappropriate.

[0082] In this embodiment, as shown in FIG. 6, if the image condition is satisfied (S340) and the current device is the same as the comparison device (S350), the processor 110 does not execute the specific process. If the image condition is satisfied and the current device is the same as the comparison device, the first scan instruction or the second scan instruction is unlikely to be inappropriate. The processor 110 can reduce the possibility of inappropriate execution of the specific process. In the process of FIG. 6, after receiving the first scan instruction (S220 (FIG. 5)), the processor 110 receives a scan instruction from the first terminal device 200A in S320 (FIG. 6). In S330, the processor 110 executes the scan process (scan data SD1b is acquired) in response to the reception of this scan instruction. In S335 and S340, the scan image represented by the scan data SD1b is compared with the first scan image represented by the first scan data SD1. In S350, the current device is the first terminal device 200A that sent the scan instruction received in S320. The current device is the same as the comparison device.

[0083] In this embodiment, the specific process (FIGS. 8 and 9) may include one or both of S510 and S522 in FIG. 8. In S510, the processor 110 transmits warning information to the administrator's contact. In this embodiment, the warning information is output as an e-mail. In S522, the processor 110 outputs data of the warning information to the display unit 140. In this way, the warning information is output to the display unit 140 for display. In this way, S510 and S522 are examples of output processes that output warning information. The processor 110 can take various measures by outputting the warning information (for example, by executing one or both of S510 and S522). For example, the processor 110 can urge a person (administrator, user, etc.) related to the multifunction device 100 to take measures.

[0084] In this embodiment, as described in S505 of FIG. 8, the warning information indicates that one or both of the information associated with the current device and the information associated with the comparison device may be fraudulent. The current device is, for example, the second terminal device 200B, and the comparison device is, for example, the first terminal device 200A. In this manner, the warning information indicates one or both of the possibility that the first scan instruction from the first terminal device 200A may be fraudulent and the possibility that the second scan instruction from the second terminal device 200B may be fraudulent. The processor 110 can take various measures by outputting such warning information. For example, the processor 110 can urge a person related to the multifunction device 100 to take appropriate measures.

[0085] A person related to the multifunction device 100 may take various measures based on the warning information. The measures may include, for example, issuing a warning to a user associated with the information included in the warning information not to perform an inappropriate scan. In addition, the administrator may delete the user identifier UID associated with the information included in the warning information from the authentication list 131 (FIG. 3(A)).

[0086] In addition, in this embodiment, as described in S505 of FIG. 8, the warning information includes a user identifier UID, a MAC address, and a host name. Any of these pieces of information can identify a terminal device. That is, these pieces of information are examples of identification information of a terminal device. In this way, the warning information includes one or both of the first identification information indicating the first terminal device 200A and the second identification information indicating the second terminal device 200B. By outputting such warning information, the processor 110 can take various measures. For example, the processor 110 can facilitate the identification of a device (specifically, the identification of a device that transmits an inappropriate scan instruction) by a person who refers to the warning information.

[0087] Furthermore, in this embodiment, the identification process (FIGS. 8 and 9) may include S510 in FIG. 8. In S510, the processor 110 sends an email including warning information to the management terminal 300. The management terminal 300 is an example of a device external to the multifunction device 100. In this manner, the output process for outputting the warning information may include a process for outputting the warning information to the external device. By outputting the warning information to the external device (for example, by executing S510), the processor 110 can take various measures. For example, the processor 110 can urge a user of the external device to take appropriate measures.

[0088] Moreover, in this embodiment, multifunction device 100 (FIG. 1) includes display unit 140. The identification process (FIGS. 8 and 9) may include S522 in FIG. 8. In S522, processor 110 outputs data of the warning information to display unit 140, thereby causing the warning information to be displayed on display unit 140. By executing S522, processor 110 can urge a person (e.g., a user) observing display unit 140 to take measures.

[0089] In the present embodiment, the identification process (FIGS. 8 and 9) may include S533 in FIG. 9. In S533, the processor 110 registers one or both of an identifier associated with a current device (here, the second terminal device 200B) and an identifier associated with a comparison device (here, the first terminal device 200A) in the prohibition list 133 (FIG. 3(C)). As a result, the processor 110 prohibits one or both of the execution of a scan process according to a new scan instruction from the first terminal device 200A and the execution of a scan process according to a new scan instruction from the second terminal device 200B. By executing such a process, the processor 110 can reduce the possibility that a scan process is executed according to an unauthorized scan instruction.

[0090] Furthermore, in this embodiment, the specific process (FIGS. 8 and 9) may include S536 in FIG. 9. In S536, the processor 110 prohibits the execution of a scan process according to a new scan instruction from any external device (including the terminal devices 200A and 200B). The external device is a device other than the multifunction device 100 (more generally, a scanner). By executing S536, the processor 110 can reduce the possibility that a scan process will be executed according to an unauthorized scan instruction.

[0091] B. Second Example: 10(A) and 10(B) are flow charts showing an example of the deletion process. In this embodiment, the processor 110 of the multifunction device 100 executes the first deletion process of FIG. 10(A) in addition to the processes described in FIG. 4-FIG. 9. In S610, the processor 110 acquires the current date and time by referring to a timer (not shown). The processor 110 refers to the scan list 132 (FIG. 3(B)) and searches for a timestamp TS (called an excess timestamp) whose length from the date and time of the timestamp TS to the current date and time is equal to or longer than a specific time. The excess timestamp indicates that a specific time has elapsed since the scan data was stored in the scan list 132. If the excess timestamp is found (S610: Yes), in S620, the processor 110 deletes the target information (here, the excess timestamp, the scan data (called excess scan data), and the user identifier UID) associated with the excess timestamp from the scan list 132 (i.e., the specific area SA of the non-volatile storage device 130). After S620, the processor 110 proceeds to S610. If the exceeded timestamp is not found (S610: No), the processor 110 repeats S610 until the exceeded timestamp is found.

[0092] The method of deleting the target information may be any method that makes it impossible to detect the deleted target information from the scan list 132. In this embodiment, a file system is running on the multifunction device 100. The program P1 may be configured to delete data representing the target information from data representing the scan list 132 according to the file system. As a result, the data representing the target information is deleted from the specific area SA representing the scan list 132. Then, the target information becomes impossible to detect from the scan list 132. The file system running on the multifunction device 100 or the controller of the nonvolatile storage device 130 may execute various processes for such data deletion. For example, the specific area SA representing the scan list 132 may be moved or changed within the storage area of ​​the nonvolatile storage device 130, thereby removing the portion in which the excess scan data is stored from the specific area SA. The excess scan data may be erased from the specific area SA by writing other data into the portion of the specific area SA in which the excess scan data was stored.

[0093] Thus, in this embodiment, processor 110 deletes scan data associated with the exceeded timestamp from scan list 132 (i.e., specific area SA of non-volatile storage device 130). For example, processor 110 deletes first scan data SD1 from scan list 132 in response to the passage of a specific time from the date and time of timestamp TS1 (FIG. 3(B)) (i.e., the date and time of storage of the scan data). The specific time indicates a threshold value of the elapsed time after the scan data was stored in the specific area SA of non-volatile storage device 130.

[0094] The reason for deleting old scan data from the scan list 132 is as follows. For example, assume that after the first user scans the second document, the first user retrieves the second document. After a long time has passed since the first user scanned the second document, the second user may scan the same second document. In this case, the scan instruction from the second user is not illegal. However, due to the old scan data (scan data from the first user) remaining in the scan list 132, it may be determined that the image conditions are satisfied, and further that the current device is different from the comparison device. In this embodiment, the old scan data is deleted from the scan list 132, so the possibility of such a malfunction is reduced.

[0095] The specific time may be various times, for example, the time it takes for the user to collect the document from the multifunction device 100 after the document is scanned (for example, 5 minutes or more and 30 minutes or less).

[0096] Moreover, the processor 110 may execute the second deletion process of FIG. 10(B) instead of or in addition to the first deletion process (FIG. 10(A)). In S650, the processor 110 judges whether or not new scan data is stored in the scan list 132 (i.e., the specific area SA of the non-volatile storage device 130). If the new scan data is stored in the scan list 132 (S650: Yes), in S660, the processor 110 refers to data from the cover sensor 176 (FIG. 2) and judges whether or not the cover 174 can be opened. Usually, the user opens the cover 174 after scanning and collects the document. Therefore, the cover 174 being opened indicates that the document is to be collected. If the cover 174 is not opened (S660: No), the processor 110 repeats S660 until the cover 174 is opened. If the cover is opened (S660: Yes), in S670, the processor 110 deletes the target information associated with the scan data associated with the determination of Yes in S650 from the scan list 132 (i.e., the specific area SA of the non-volatile storage device 130). For example, after the first scan data SD1 (FIG. 3B) is stored in the scan list 132, the processor 110 deletes the target information (here, the user identifier UID1, the first scan data SD1, and the time stamp TS1) associated with the first scan data SD1 from the scan list 132 in response to the cover 174 being opened. The deletion method in S670 may be the same as the deletion method in S620 (FIG. 10A). After S670, the processor 110 proceeds to S650. If new scan data is not stored in the scan list 132 (S650: No), the processor 110 repeats S650 until the new scan data is stored in the scan list 132.

[0097] In this manner, the processor 110 deletes the scan data from the scan list 132 (i.e., the specific area SA of the non-volatile storage device 130) in response to the user's collection of the document. Therefore, the possibility of problems caused by old scan data is reduced.

[0098] C. Third Example: 11(A) and 11(B) are diagrams showing another embodiment of the terminal condition. S750b (FIG. 11(A)) and S750c (FIG. 11(B)) can be used instead of the judgment in S350 (FIG. 6) and S450 (FIG. 7). In S750b (FIG. 11(A)), the processor 110 uses the MAC address of the terminal device instead of the user identifier UID. If the MAC address of the current device is the same as the MAC address of the comparison device, the processor 110 judges that the terminal condition is satisfied. In S750c (FIG. 11(B)), the processor 110 uses the host name of the terminal device instead of the user identifier UID. If the host name of the current device is the same as the host name of the comparison device, the processor 110 judges that the terminal condition is satisfied. In either case, the scan data SD and information used to determine the terminal conditions (called terminal identification information; here, a MAC address or a host name) may be stored in association with each other in scan list 132 (FIG. 3(B)). In the process of storing the scan data in scan list 132 (FIG. 3(B)) (e.g., S145, S245 (FIGS. 4, 5)), processor 110 preferably stores the terminal identification information in scan list 132 in association with the scan data SD.

[0099] In addition, to determine whether the two terminal devices associated with the two scan instructions are the same, any information capable of identifying the terminal device may be used instead of the user identifier UID, the MAC address, and the host name.

[0100] D. Variations: (1) The warning information (FIG. 8: S505) is not limited to the above information and may be various information. For example, one or two types of information arbitrarily selected from information W1-W3 (FIG. 8) may be omitted from the warning information. That is, the warning information may include one or more pieces of information arbitrarily selected in advance from information W1-W3. The warning information may represent a list of destinations (e.g., identifiers identifying terminal devices) of scan data representing the same scan image.

[0101] (2) The process of sending the alert information to the administrator's contact may be various processes other than sending an email. For example, the processor 110 may send a message via Short Message Service (SMS) or a messaging system that transmits and receives information between multiple users.

[0102] (3) The process of outputting the warning information to the external device may be various other processes instead of the process of sending the warning information to the administrator's contact information. The external device may be, for example, a web server that provides a web page that shows information related to the multifunction device 100. The web server may provide a web page that includes the received warning information.

[0103] (4) The output process for outputting the warning information may be various other processes instead of the processes described in the above embodiment and modified examples. For example, the processor 110 may output a sound representing the warning information from a speaker (not shown).

[0104] (5) The method of determining the image condition (e.g., S235, S240, S335, S340, S435, S440 (FIGS. 5, 6, 7)) may be various methods other than the method using the similarity between two images. For example, the processor 110 may compare histograms of color values ​​(e.g., luminance values) between the current scanned image and the comparative scanned image. The histogram is obtained by classifying a plurality of pixels of the image into a plurality of data intervals (also called "bins") according to the color values. The processor 110 calculates the frequency difference of each data interval between the two histograms obtained from the two images. The processor 110 calculates the sum of the absolute values ​​of the frequency differences of each of the plurality of data intervals. The more similar the shapes of the two histograms are, the smaller this sum is. The processor 110 may determine that the image condition is satisfied when this sum is equal to or less than a predetermined threshold value.

[0105] In either case, processor 110 may compare the entire current scan image to the comparison scan image, or alternatively, a portion of the current scan image to a portion of the comparison scan image may be compared, for example, a central portion of the current scan image to a central portion of the comparison scan image.

[0106] (6) The process of restricting devices that can transmit scan instructions (FIG. 9: S533) may be various processes. For example, one or two restriction processes arbitrarily selected from the restriction processes R1-R3 may be omitted from the restriction process. In other words, the restriction process may include one or more processes arbitrarily selected in advance from the processes R1-R3.

[0107] (7) The identification process (S460 (FIG. 7)) may be various processes related to inappropriate scan instructions instead of the processes described in FIG. 8 and FIG. 9. For example, the process of displaying warning information (e.g., S522) may be omitted. The process of outputting warning information (e.g., S510, S522) may be omitted. The process of restricting devices that can send scan instructions (e.g., S533) may be omitted. The process of disabling pull scan (e.g., S536) may be omitted.

[0108] Furthermore, the identification process may include a process of adding the following third condition C3 to the permissible conditions (S125, S225, S325, S425 (FIGS. 4 to 7)) for permitting a scan in response to a scan instruction. (Third Condition C3) A scan password specified by a scan instruction is input to operation unit 150. When inputting a scan instruction to a terminal device (e.g., terminal devices 200A and 200B) (S115, S215, S315, S315 (FIGS. 4-7)), the user inputs the newly determined scan password. The scan instruction (S120, S220, S320, S420) transmitted from the terminal device to multifunction device 100 includes the scan password data. The user inputs the scan password by operating operation unit 150 of multifunction device 100. As a result, processor 110 determines that third condition C3 is satisfied.

[0109] (8) The time stamp TS (FIG. 3(B)) referred to in S610 in FIG. 10(A) is not limited to the date and time when the scan data is stored in the scan list 132, but may be the date and time when other processing due to the scan instruction is performed (the processing associated with the time stamp TS is called the time stamp processing). The time stamp processing may be various processing included in a series of processing from obtaining the scan instruction to storing the scan data in the scan list 132. The time stamp processing may be, for example, a process of generating scan data (in this case, the time stamp TS indicates the date and time when the scan data was generated). In either case, the condition of S610 may be various conditions that are satisfied when a specific time has passed after the scan data is stored in the scan list 132 (here, the specific area SA of the non-volatile storage device 130). For example, the condition of S610 may be that the length from the date and time of the time stamp TS to the current date and time is equal to or longer than a predetermined waiting time. In this case, too, the condition of S610 is satisfied when the specific time associated with the waiting time has passed since the scan data was stored in the scan list 132. Here, the specific time is the remaining time obtained by subtracting the time from the time stamp processing to the storage of the scan data from the waiting time.

[0110] (9) The process performed in response to a scan instruction may be various other processes instead of the processes in the above-described embodiments and modifications. For example, the successful user authentication (first condition C1) may be omitted from the permissible conditions (S125, S225, S325, S425 (FIGS. 4-7)). In this case, the specific process (S460 (FIG. 7)) may include a process of adding the first condition C1 to the permissible conditions. Also, the preview scan function may be omitted from the multifunction device 100. In this case, the process in FIG. 6 may be omitted, and the process in FIG. 7 may be performed following S255 in FIG. 5.

[0111] In addition, when the image conditions (e.g., S335, S340, S435, S440 (FIGS. 6 and 7)) are satisfied, the processor 110 may execute a specific process (e.g., FIG. 8 and FIG. 9) regardless of whether the terminal conditions (S350, S450) are satisfied.

[0112] (10) The scan list 132 (FIG. 1) may be stored in the volatile storage device 120 instead of the non-volatile storage device 130. In this case, the partial area of ​​the storage area of ​​the volatile storage device 120 that stores the scan list 132 is an example of a specific area. In either case, the specific area may be various storage areas for storing acquired scan data. Furthermore, the process of controlling the data in the specific area may be various processes for holding in the specific area scan data to be compared with scan data acquired in accordance with a new scan instruction from an external device. For example, the processor 110 may store the acquired scan data in the specific area (e.g., the scan list 132) every time the processor 110 acquires scan data in accordance with a new scan instruction from an external device. Here, the processor 110 may delete scan data different from the scan data newly stored in the specific area from the specific area. Alternatively, the processor 110 may delete the scan data in the specific area (e.g., the scan list 132) and store the current scan data in the specific area when the image conditions (e.g., S235, S240 (FIG. 5), etc.) are not satisfied. If the image condition is satisfied, the processor 110 may maintain the scan data of the specific area without updating it. In either case, the processor 110 may store the scan data and terminal identification information that identifies the terminal device that sent the scan instruction to acquire the scan data in the specific area in association with each other. The process of deleting the scan data of the specific area may include one or both of a first deletion process (FIG. 10(A)) and a second deletion process (FIG. 10(B)). When the first deletion process is adopted, the processor 110 may store the scan data and a timestamp associated with the scan data in the specific area in association with each other.

[0113] (11) The scanner may have various other configurations instead of the configuration of multifunction device 100 (FIGS. 1 and 2). For example, cover 174 and cover sensor 176 may be omitted from scan engine 170. The configuration of the placement portion of the scan engine where the object to be scanned is to be placed is not limited to a configuration including support stand 172, and may have any other configuration. For example, the placement portion may include an auto document feeder. Also, print engine 160 may be omitted. Display unit 140 may be omitted.

[0114] (12) The data processing of each of the above-mentioned embodiments and each of the modified examples described with reference to Figures 4 to 11 etc. may be executed by a data processing device (e.g., a personal computer, a tablet computer, a server, etc.) connected to a device having a scan engine (e.g., scan engine 170). Also, a plurality of devices (e.g., computers) that can communicate with each other via a network may share a part of the data processing function each other and provide the data processing function as a whole (a system including these devices corresponds to a data processing device).

[0115] In each of the above embodiments, a part of the configuration realized by hardware may be replaced by software, and conversely, a part or all of the configuration realized by software may be replaced by hardware. For example, the function of determining the image conditions (e.g., S235, S240, S335, S340, S435, S440 (FIGS. 5, 6, 7)) may be realized by a dedicated hardware circuit.

[0116] Furthermore, when some or all of the functions of the present disclosure are realized by a computer program, the program can be provided in a form stored in a computer-readable recording medium (e.g., a non-transitory recording medium). The program can be used in a state stored in the same or a different recording medium (computer-readable recording medium) from when it was provided. The "computer-readable recording medium" is not limited to portable recording media such as memory cards and CD-ROMs, but may also include internal storage devices within a computer, such as various ROMs, and external storage devices connected to a computer, such as a hard disk drive.

[0117] The above-mentioned examples and modifications can be combined as appropriate. The above-mentioned examples and modifications are provided to facilitate understanding of the present disclosure, and do not limit the present invention. The present invention may be modified or improved without departing from the spirit of the present invention, and the present invention includes equivalents thereof. [Explanation of symbols]

[0118] 100...multifunction device, 110...processor, 115...storage device, 120...volatile storage device, 130...non-volatile storage device, 131...authentication list, 132...scan list, 133...restriction list, 140...display unit, 150...operation unit, 160...print engine, 170...scan engine, 172...support base, 172s...support surface, 174...cover, 176...cover sensor, 178...sensor unit, 180... Communications interface, 190... housing, 200A... first terminal device, 200B... second terminal device, 210A, 210B... processor, 215A, 215B... storage device, 220A, 220B... volatile storage device, 230A, 230B... non-volatile storage device, 240A, 240B... display unit, 250A, 250B... operation unit, 280A, 280B... communications interface, 300... management terminal, 1000... system

Claims

1. 1. A scanner comprising: Memory, a first scan execution unit that executes a first scan process in response to receiving a first scan instruction from a first terminal device to acquire first scan data; a storage control unit that stores the first scan data in a specific area of ​​the memory; a second scan execution unit that acquires second scan data by executing a second scan process in response to receiving a second scan instruction from a second terminal device after receiving the first scan instruction; a comparison unit that determines whether an image condition indicating that the second scan image is the same as the first scan image is satisfied by comparing a first scan image represented by the first scan data with a second scan image represented by the second scan data; a specific processing unit that executes a specific process related to execution of a scan when the image condition is satisfied and the second terminal device is different from the first terminal device; A scanner comprising:

2. 2. A scanner according to claim 1, When the image condition is satisfied and the second terminal device is the same as the first terminal device, the specific processing unit does not execute the specific processing. Scanner.

3. A scanner according to claim 1 or 2, The specific processing includes an output processing for outputting warning information. Scanner.

4. 4. A scanner according to claim 3, The warning information indicates one or both of a possibility that the first scan instruction from the first terminal device is fraudulent and a possibility that the second scan instruction from the second terminal device is fraudulent. Scanner.

5. 4. A scanner according to claim 3, The warning information includes one or both of first identification information indicating the first terminal device and second identification information indicating the second terminal device. Scanner.

6. 4. A scanner according to claim 3, The output process includes a process of outputting the warning information to an external device. Scanner.

7. 4. The scanner of claim 3, further comprising: A display unit is provided, the output process includes a process of outputting the warning information to the display unit to cause the display unit to display the warning information. Scanner.

8. A scanner according to claim 1 or 2, the specific process includes a process of prohibiting one or both of execution of a scan process in response to a new scan instruction from the first terminal device and execution of a scan process in response to a new scan instruction from the second terminal device; Scanner.

9. A scanner according to claim 1 or 2, the specific process includes a process of prohibiting execution of a scan process in response to a new scan instruction from any external device including the first terminal device and the second terminal device; Scanner.

10. 3. A scanner according to claim 1 or 2, further comprising: a first deletion control unit that deletes the first scan data from the specific area of ​​the memory in response to the lapse of a specific time after the first scan data is stored in the specific area of ​​the memory; Scanner.

11. 3. A scanner according to claim 1 or 2, further comprising: A flatbed for placing the object; A cover for the flatbed; A sensor for detecting opening and closing of the cover; a second deletion control unit that deletes the first scan data from the specific area of ​​the memory in response to the cover being opened after the first scan data is stored in the specific area of ​​the memory; A scanner comprising:

12. 1. A program for a computer having a memory for controlling a scanner, comprising: a first scan execution function for acquiring first scan data by executing a first scan process in response to receiving a first scan instruction from a first terminal device; a storage control function for storing the first scan data in a specific area of ​​the memory; a second scan execution function of acquiring second scan data by executing a second scan process in response to receiving a second scan instruction from a second terminal device after receiving the first scan instruction; a comparison function for determining whether an image condition indicating that the second scan image is the same as the first scan image is satisfied by comparing a first scan image represented by the first scan data with a second scan image represented by the second scan data; a specific processing function that executes a specific process related to execution of a scan when the image condition is satisfied and the second terminal device is different from the first terminal device; A program that enables a computer to achieve the above.

13. 1. A method for controlling a scanner, comprising: a first scan execution step of acquiring first scan data by executing a first scan process in response to receiving a first scan instruction from a first terminal device; a storage control step of storing the first scan data in a specific area of ​​a memory; a second scan execution step of acquiring second scan data by executing a second scan process in response to receiving a second scan instruction from a second terminal device after receiving the first scan instruction; a comparison step of determining whether an image condition indicating that the second scan image is the same as the first scan image is satisfied by comparing a first scan image represented by the first scan data with a second scan image represented by the second scan data; a specific processing step of executing a specific process related to execution of a scan when the image condition is satisfied and the second terminal device is different from the first terminal device; A method comprising:

Images