Image processing device, control method, and program

Abstract

To prevent confidential information from being leaked due to providing image data including an image abnormality to an external device.SOLUTION: An image processing device 1 includes an image reading unit 13 for reading an image of a document and generating image data 27 including an image abnormality, an image transmission unit 32 for transmitting the image data 27 to an external device, a determination unit 31 for determining whether the image data 27 includes confidential information, an image storage unit 33 for storing the image data 27 into a predetermined storage unit 21 without transmitting the image data 27 to the external device when the determination unit 31 determines that the image data 27 includes confidential information, and an access information transmission unit 34 for transmitting access information 28 for accessing the image data 27 stored in the storage unit 21 to the external device when the image storage unit 33 stores the image data 27 in the storage unit 21.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to an image processing apparatus, a control method, and a program, and more particularly to a technique for providing image data in which an image abnormality has occurred to an external device when an image abnormality has occurred in an image processing apparatus. [Background technology]

[0002] Image processing devices such as MFPs (Multifunction Peripherals) execute various jobs such as scan jobs, print jobs, and copy jobs. When these jobs are executed in the image processing device, image abnormalities may occur. For example, in the case of a scan job, streaky image stains may occur in image data generated by reading an image of an original (sheet). Similarly, in the case of a print job, streaky image stains may occur in an image formed on a sheet such as printing paper. Image abnormalities that occur in the image processing device are not limited to streaky image stains, and various other abnormalities may occur.

[0003] Meanwhile, in recent years, remote maintenance work is performed by a serviceman stationed at a service base communicating with a user of the image processing device via a telephone line, etc. The serviceman identifies the cause of a problem occurring in the image processing device by communicating with the user, and provides guidance for the user to replace parts or clean the device themselves, or dispatches a serviceman to carry out the maintenance work.

[0004] However, when an image abnormality occurs in an image processing device, it is difficult for a user without specialized knowledge to adequately explain the symptoms of the image abnormality. Descriptions of image abnormalities tend to be abstract, and differ from person to person. For this reason, it is difficult for a serviceman to identify the cause of the image abnormality by just talking to the user.

[0005] Therefore, it is desirable to be able to diagnose the actual image at the service center by transmitting the image data to an external device at the service center. However, if the document in which the image abnormality occurred is a confidential document, transmitting the image data to the external device is not preferable from the viewpoint of security.

[0006] For example, Patent Document 1 describes an image processing device that, when transmitting a preview image displayed on an operation panel to a service center, if the preview image contains confidential information, performs a process of concealing the confidential information before transmitting the image. However, even if confidential information is concealed, there is a possibility that the confidential information may be inferred from the unconcealed portion. Therefore, even if the confidential information is concealed, it is not preferable to transmit image data containing confidential information to the outside. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2018-142881 A Summary of the Invention [Problem to be solved by the invention]

[0008] Therefore, in order to solve the above-mentioned conventional problems, the present invention aims to provide an image processing device, a control method, and a program that can reliably prevent confidential information from being leaked when image data including image abnormalities is provided to an external device. [Means for solving the problem]

[0009] In order to achieve the above-mentioned object, the invention of claim 1 is an image processing device comprising: an image reading unit that reads an image of a document and generates image data including image abnormalities; an image transmitting unit that transmits the image data to an external device; a judgment unit that judges whether the image data contains confidential information; an image saving unit that saves the image data in a specified memory unit without sending it to the external device if the judgment unit judges that the image data contains confidential information; and an access information transmitting unit that transmits access information for accessing the image data saved in the memory unit to the external device if the image saving unit saves the image data in the memory unit.

[0010] The invention of claim 2 is characterized in that, in the image processing device of claim 1, the image storage unit processes areas of the image data containing confidential information to make them unviewable and stores them in the memory unit.

[0011] The invention of claim 3 is characterized in that, in the image processing device of claim 1, it further comprises an image deletion unit that counts the number of accesses to the image data stored in the memory unit and deletes the image data from the memory unit when the number of accesses exceeds a predetermined number.

[0012] The invention of claim 4 is characterized in that, in the image processing device of claim 1, it further comprises an image deletion unit that deletes the image data from the memory unit when the storage period of the image data in the memory unit has elapsed a predetermined period.

[0013] The invention according to claim 5 is the image processing device according to claim 1, characterized in that the image saving section saves the image data in the memory section in a state in which copying of the image data is prohibited.

[0014] The invention according to claim 6 is characterized in that in the image processing device of claim 1, the judgment unit judges whether or not the image data contains confidential information based on an instruction operation by a user.

[0015] The invention of claim 7 is characterized in that, in the image processing device of claim 1, the judgment unit automatically determines whether the image data contains confidential information by analyzing the image data.

[0016] The invention of claim 8 is an image processing device of any of claims 1 to 7, characterized in that the judgment unit, when the image data includes images of multiple pages, judges whether or not confidential information is contained for each page, and the image storage unit extracts images of pages containing confidential information from the image data and stores them in the memory unit.

[0017] The invention of claim 9 is characterized in that in the image processing device of claim 8, the image transmission unit extracts images of pages that do not contain confidential information from the image data and transmits them to the external device.

[0018] The invention according to claim 10 is the image processing device according to claim 1, characterized in that the image saving unit saves the image data in the storage unit based on an instruction operation by a user.

[0019] The invention of claim 11 is characterized in that, in the image processing device of claim 1, it further comprises an access management unit that restricts access to the image data stored in the memory unit from devices other than the external device.

[0020] The invention of claim 12 is a control method for an image processing device, comprising: an image reading step of reading an image of an original document to generate image data including an image abnormality; an image transmitting step of transmitting the image data to an external device; a judgment step of judging whether the image data includes confidential information; an image storing step of storing the image data in a specified memory unit without transmitting it to the external device if it is judged by the judgment step that the image data includes confidential information; and an access information transmitting step of transmitting access information for accessing the image data stored in the memory unit to the external device if the image data has been stored in the memory unit by the image storing step.

[0021] The invention of claim 13 is a program executed in an image processing device, which causes the image processing device to execute an image reading step of reading an image of an original document to generate image data including image abnormalities, an image transmitting step of transmitting the image data to an external device, a judgment step of determining whether the image data contains confidential information, an image storing step of storing the image data in a specified memory unit without transmitting it to the external device if it is determined by the judgment step that the image data contains confidential information, and an access information transmitting step of transmitting access information for accessing the image data stored in the memory unit to the external device if the image storing step has stored the image data in the memory unit. Effect of the Invention

[0022] According to the present invention, it is possible to reliably prevent confidential information from being leaked when image data including an image abnormality is provided to an external device. [Brief description of the drawings]

[0023] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of a network system including an image processing apparatus. [Diagram 2] FIG. 1 is a block diagram showing an example of the configuration of an image processing device. [Diagram 3] FIG. 13 is a diagram illustrating a concept of processing by an image anomaly processing unit. [Figure 4] 4 is a block diagram showing a detailed functional configuration of an image abnormality processing unit. FIG. [Diagram 5] 10 is a flowchart showing a processing procedure of the image processing apparatus in a remote maintenance mode. [Figure 6] 13 is a flowchart illustrating an example of a detailed processing procedure of an access management process. [Figure 7] 13A and 13B are diagrams illustrating an example of processing an area including confidential information. [Figure 8] FIG. 2 is a diagram illustrating an example of image data 27 including images for multiple pages. [Figure 9] 11 is a diagram showing a concept of processing by an image anomaly processing section when image data includes a page image including confidential information and a page image not including confidential information. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0024] Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings. In the following embodiments, elements common to each other are designated by the same reference numerals, and redundant description thereof will be omitted.

[0025] 1 is a diagram showing an example of the configuration of a network system including an image processing device 1 according to an embodiment of the present invention. This network system is a system in which an image processing device 1 installed in a user's local environment 6 and an image diagnostic device 2 installed at a remote service base 7 can communicate with each other via a network 3 such as the Internet. For example, the image diagnostic device 2 is configured by a personal computer (PC) or the like. The image diagnostic device 2 is an external device installed at the service base 7 that is different from the local environment 6 in which the image processing device 1 is installed.

[0026] A local network 4 such as a Local Area Network (LAN) is installed in the local environment 6. To the local network 4, an image processing device 1 and a plurality of information processing devices 5 are connected.

[0027] The image processing device 1 is composed of an MFP or the like, and executes various jobs such as a scan job, a print job, and a copy job. For example, in the case of a scan job, the image processing device 1 reads an image of an original document set by a user, generates image data, and outputs the image data. Furthermore, when the image processing device 1 receives a print job from an information processing device 5 via a local network 4, it executes the print job. The image processing device 1 forms an image on a sheet such as a printing paper based on image data to be printed specified in the print job, and outputs the image. Furthermore, in the case of a copy job, the image processing device 1 reads an image of an original document set by a user, generates image data, and forms an image based on the image data on a sheet and outputs the image.

[0028] In this way, the image processing device 1 outputs an image by executing a job. A user judges whether or not the job has been normally executed in the image processing device 1 by checking the image output from the image processing device 1. For example, if the image output from the image processing device 1 has stains, bright spots, or streaky stains, the user judges that an image abnormality has occurred. When the user checks the image abnormality, the user contacts a serviceman at the service base 7 and performs work to eliminate the image abnormality. For example, the user switches the operation mode of the image processing device 1 from the normal job mode to the remote maintenance mode, and transmits the image data in which the image abnormality has occurred to the image diagnostic device 2 at the service base 7.

[0029] The serviceman at the service base 7 checks the image displayed on the image diagnostic device 2 and identifies the cause of the image abnormality in the image processing device 1. Based on the identified cause of the image abnormality, the serviceman guides the user to replace parts or clean the device himself, or dispatches another serviceman to the local environment 6 to perform maintenance work.

[0030] 2 is a block diagram showing an example of the configuration of the image processing device 1. The image processing device 1 includes a control unit 10, an operation panel 11, an automatic document transport unit 12, an image reading unit 13, an image memory 14, a paper feed unit 15, an image forming unit 16, and a communication interface 17, which are configured to input and output data to and from each other via a bus 18.

[0031] The control unit 10 includes a CPU 20 and a storage unit 21, and controls the overall operation of the image processing device 1. The CPU 20 is a hardware processor that reads and executes a program 22 stored in the storage unit 21. The storage unit 21 is a non-volatile storage device that stores the program 22. In addition to the program 22, the storage unit 21 can store image data 27 in which an image abnormality has occurred.

[0032] The operation panel 11 is a user interface when a user uses the image processing device 1. The operation panel 11 includes a display unit 11a that displays various screens, and an operation unit 11b that accepts operations by the user. The display unit 11a is configured, for example, by a color liquid crystal display. The operation unit 11b is configured, for example, by touch panel keys arranged on the screen of the display unit 11a.

[0033] The automatic document feeder 12 and the image reading unit 13 operate when a scan job or a copy job is executed in the image processing device 1. The automatic document feeder 12 automatically feeds a document set by a user. The image reading unit 13 reads an image of the document set by the user and generates image data. The image reading unit 13 works in conjunction with the document feed operation by the automatic document feeder 12, and can automatically read an image of the document fed by the automatic document feeder 12. For example, when the automatic document feeder 12 automatically feeds multiple documents in succession, the image reading unit 13 can automatically read the images of the multiple documents in succession.

[0034] The image memory 14 is a memory for storing image data generated by executing a job or image data to be printed. The image memory 14 has a sufficiently large data capacity and can store image data for multiple pages.

[0035] The paper feed unit 15 and the image forming unit 16 operate when a print job or a copy job is executed in the image processing device 1. The paper feed unit 15 feeds sheets such as printing paper and transports them to the image forming unit 16. The image forming unit 16 forms an image based on image data to be printed on the sheet fed by the paper feed unit 15, fixes the image on the sheet, and outputs it.

[0036] The communication interface 17 is a communication unit that connects the image processing device 1 to the network 3 and the local network 4 for communication. The image processing device 1 receives a print job transmitted from the information processing device 5 via this communication interface 17. The image processing device 1 also communicates with the image diagnostic device 2 at the service base 7 via this communication interface 17.

[0037] The CPU 20 of the control unit 10 executes the program 22 to function as a job control unit 23 and an image abnormality processing unit 24. The job control unit 23 is a control unit that operates in a normal job mode, and controls the operation of each of a scan job, a copy job, and a print job.

[0038] The image anomaly processing unit 24 operates when an image anomaly occurs as a result of executing a job in the normal job mode and the operation mode is switched to the remote maintenance mode by the user. The image anomaly processing unit 24 generates image data 27 of an image in which an image anomaly occurs, and transmits the generated image data 27 to the image diagnostic device 2, which is an external device. However, the image in which an image anomaly occurs may contain confidential information. If the image in which an image anomaly occurs contains confidential information, the image anomaly processing unit 24 does not transmit the image data 27 to the external image diagnostic device 2. In other words, if the image in which an image anomaly occurs contains confidential information, the image anomaly processing unit 24 stores the image data 27 in the storage unit 21.

[0039] FIG. 3 is a diagram showing the concept of processing by the image abnormality processing unit 24. Note that FIG. 3 illustrates a case where an image abnormality occurs in a print job or a copy job. When the operation of the remote maintenance mode is started, the image abnormality processing unit 24 drives the image reading unit 13, reads the image of the document 9 in which the image abnormality occurs, and generates image data 27 including the image abnormality. When the image data 27 is generated, the image abnormality processing unit 24 judges whether or not the image data 27 includes confidential information. If the image data 27 does not include confidential information, the image abnormality processing unit 24 transmits the image data 27 including the image abnormality to the external image diagnostic device 2 as it is. When the image diagnostic device 2 receives the image data 27 from the image abnormality processing unit 24, it displays an image including the image abnormality based on the image data 27. This allows a service person to identify the cause of the image abnormality in the image processing device 1 by checking the image including the image abnormality.

[0040] On the other hand, when the image data 27 includes confidential information, the image anomaly processing section 24 stores the image data 27 including the image anomaly in the storage section 21. That is, when the image data 27 includes confidential information, the image anomaly processing section 24 does not transmit the image data 27 to the external image diagnostic device 2, thereby preventing the confidential information from leaking to the outside. When the image anomaly processing section 24 stores the image data 27 in the storage section 21, it generates access information 28 for the external image diagnostic device 2 to access the image data 27 in the storage section 21. Then, the image anomaly processing section 24 transmits the access information 28 to the image diagnostic device 2. Therefore, when the image data 27 includes confidential information, the image diagnostic device 2 does not receive the image data 27 from the image processing device 1, but receives only the access information 28. For example, the access information 28 is information such as a URL (Uniform Resource Locator) for accessing the image data 27 stored in the storage section 21 of the image processing device 1. The serviceman performs an operation on the image diagnostic device 2 and accesses the image data 27 in the storage section 21 based on the access information 28. When the image abnormality processing unit 24 detects an access from the image diagnostic device 2, it generates a screen on which the image data 27 stored in the storage unit 21 can be viewed, and provides it to the image diagnostic device 2. The image diagnostic device 2 displays the viewing screen. This allows the service person to identify the cause of the image abnormality by checking the image displayed as the viewing screen.

[0041] 4 is a block diagram showing a detailed functional configuration of the image abnormality processing unit 24. The image abnormality processing unit 24 includes an image acquisition unit 30, a judgment unit 31, an image transmission unit 32, an image storage unit 33, an access information transmission unit 34, an access management unit 35, and an image deletion unit 36.

[0042] The image acquiring unit 30 acquires the image data 27 in which the image abnormality has occurred. For example, the image acquiring unit 30 acquires the image data 27 including the image abnormality by driving the image reading unit 13 to read the image of the document 9 in which the image abnormality has occurred.

[0043] The determination unit 31 determines whether or not the image data 27 includes confidential information. For example, the determination unit 31 analyzes the image data 27 and determines whether or not the image data 27 includes a specific character string such as "confidential" or "CONFIDENTIAL". If the image data 27 includes the specific character string, the determination unit 31 determines that the image data 27 includes confidential information. If the image data 27 does not include the specific character string, the determination unit 31 determines that the image data 27 does not include confidential information.

[0044] The determination unit 31 may also determine whether or not the image data 27 includes confidential information based on an instruction operation by the user. For example, the determination unit 31 displays a screen on the display unit 11a of the operation panel 11 to inquire of the user whether or not the image includes confidential information. The determination unit 31 determines whether or not the image data 27 includes confidential information based on the user's operation on the screen. For example, when the determination unit 31 determines that the image data 27 does not include a specific character string and does not include confidential information, it is preferable to display a screen on the display unit 11a of the operation panel 11 to inquire of the user whether or not the image includes confidential information. Thereby, even if it is not possible to accurately determine whether or not confidential information is included by only searching for a specific character string, the determination unit 31 can prevent leakage of confidential information by making a determination based on an instruction operation by the user.

[0045] When the determination unit 31 determines that the image data 27 does not include confidential information, the image abnormality processing unit 24 activates the image transmission unit 32. The image transmission unit 32 transmits the image data 27 not including confidential information to the image diagnostic device 2 via the communication interface 17. For example, the image transmission unit 32 transmits the image data 27 in a file format such as PDF, JPEG, or GIF.

[0046] On the other hand, if the judgment unit 31 determines that the image data 27 contains confidential information, the image abnormality processing unit 24 causes the image storage unit 33, the access information transmission unit 34, the access management unit 35, and the image deletion unit 36 ​​to function.

[0047] The image saving unit 33 saves the image data 27 acquired by the image acquiring unit 30 in the storage unit 21. The image saving unit 33 can change the destination of the image data 27 to a destination different from the storage unit 21 based on an instruction from the user. For example, the user may specify a storage device installed in the local environment 6 as the destination of the image data 27. However, if the image data 27 is stored outside the image processing device 1 even in the local environment 6, there is a high possibility that confidential information will be leaked. Therefore, it is preferable that the image saving unit 33 warns the user when the user specifies a storage device outside the image processing device 1 as the destination. The image saving unit 33 may also prohibit the specification of a storage device outside the image processing device 1 as the destination.

[0048] When storing image data 27 in memory 21, image storage unit 33 stores the image data 27 in a state in which copying of image data 27 is prohibited. By prohibiting copying of image data 27, image storage unit 33 prevents image data 27 including confidential information from being illegally obtained.

[0049] The access information transmission unit 34 generates access information 28 for accessing the image data 27 stored by the image storage unit 33, and transmits the access information 28 to a pre-specified image diagnostic device 2. This allows the image diagnostic device 2 to access the image data 27 stored in the storage unit 21 based on the access information 28.

[0050] The access management unit 35 manages external access to the image data 27 in the storage unit 21. For example, when the access management unit 35 detects an access to the image data 27 from the outside, it judges whether the device from which the access originates is the image diagnostic device 2 designated in advance. As a result, when the access is from the image diagnostic device 2, the access management unit 35 permits the access. When the access management unit 35 permits the access, it reads the image data 27, generates a viewing screen on which the image data 27 can be viewed, and provides the viewing screen to the image diagnostic device 2. This viewing screen is generated as a Web page such as HTML (Hyper Text Markup Language). In addition, the access management unit 35 permits only viewing of the image included in the viewing screen, and prohibits printing of the image and downloading of the image data 27. Therefore, the serviceman at the service base 7 can check the image only on the viewing screen displayed on the image diagnostic device 2. The serviceman can identify the cause of the image abnormality by checking the image on the viewing screen.

[0051] On the other hand, if the external access is from a device other than the pre-specified imaging diagnostic device 2, the access management unit 35 restricts access to the image data 27. For example, the access management unit 35 prohibits access to the image data 27. Therefore, even if the access information 28 transmitted from the access information transmission unit 34 is acquired by a device other than the imaging diagnostic device 2, the image data 27 cannot be viewed in the other device.

[0052] The image deletion unit 36 ​​deletes the image data 27 stored in the storage unit 21 under a predetermined condition. For example, the image deletion unit 36 ​​counts the number of times the image data 27 is accessed from outside, and deletes the image data 27 from the storage unit 21 when the number of accesses exceeds a predetermined number. The image deletion unit 36 ​​also deletes the image data 27 from the storage unit 21 when a predetermined period of time has elapsed since the image deletion unit 36 ​​deleted the image data 27 under a predetermined condition, thereby preventing confidential information from being stored in the storage unit 21 for a long period of time.

[0053] FIG. 5 is a flowchart showing the processing procedure of the image processing device 1 in the remote maintenance mode. This processing procedure is performed by the CPU 20 of the control unit 10 executing the program 22. When the image processing device 1 starts this processing, it judges whether or not it has been switched to the remote maintenance mode (step S1). If it has not been switched to the remote maintenance mode (NO in step S1), the flowchart shown in FIG. 5 ends. In contrast, if it has been switched to the remote maintenance mode (YES in step S1), the image processing device 1 judges whether or not it has detected an image reading instruction from the user (step S2). If it has detected an image reading instruction (YES in step S2), the image processing device 1 drives the image reading unit 13, performs a reading operation of the document 9 including the image abnormality, and acquires the image data 27 (step S4).

[0054] Next, the image processing device 1 judges whether or not confidential information is included in the image data 27 including the image abnormality (step S5). For example, the image processing device 1 judges whether or not a specific character string is included in the image data 27. If the specific character string is included, the image processing device 1 judges that the image data 27 includes confidential information. If the specific character string is not included, the image processing device 1 displays a screen on the display unit 11a of the operation panel 11 to inquire of the user whether or not the image includes confidential information. If the user specifies on the screen that the image does not include confidential information, the image processing device 1 judges that the image data 27 does not include confidential information. On the other hand, if the user specifies that the image includes confidential information, the image processing device 1 judges that the image data 27 includes confidential information.

[0055] When it is determined that the image data 27 does not include confidential information (NO in step S6), the image processing device 1 transmits the image data 27 to the image diagnostic device 2 (step S7).

[0056] When it is determined that the image data 27 includes confidential information (YES in step S6), the image processing device 1 does not transmit the image data 27, but stores the image data 27 in the storage unit 21 (step S8). The image processing device 1 generates access information 28 for accessing the image data 27 stored in the storage unit 21 (step S9), and transmits only the access information 28 to the image diagnostic device 2 (step S10). After transmitting the access information 28, the image processing device 1 executes an access management process (step S11).

[0057] 6 is a flowchart showing an example of a detailed procedure of the access management process (step S11). When the image processing device 1 starts the access management process, the image processing device 1 starts measuring time (step S20). This measuring time counts the storage period of the image data 27.

[0058] Next, the image processing device 1 judges whether or not an access to the image data 27 from the outside is detected (step S21). When an access from the outside is detected (YES in step S21), the image processing device 1 judges whether or not the access is from a pre-specified external device (imaging diagnostic device 2) (step S22). When the access source is the imaging diagnostic device 2 (YES in step S22), the image processing device 1 generates a viewing screen for viewing the image data 27 (step S23) and transmits the viewing screen to the imaging diagnostic device 2 (step S24). This allows a serviceman at the service base 7 to identify the cause of the image abnormality by checking the viewing screen displayed on the imaging diagnostic device 2.

[0059] When the image processing device 1 transmits the viewing screen, it updates the count value of the number of accesses to the image data 27 (step S25). Then, the image processing device 1 judges whether or not the count value of the number of accesses exceeds a predetermined number (step S26). If the count value of the number of accesses does not exceed the predetermined number (NO in step S26), the image processing device 1 judges whether or not the storage period of the image data 27 has passed a predetermined period (step S27). If the storage period has not passed the predetermined period (NO in step S27), the process by the image processing device 1 returns to step S21. Therefore, the serviceman at the service base 7 can access the image processing device 1 and check the viewing screen until the number of accesses exceeds the predetermined number.

[0060] On the other hand, if the number of accesses exceeds a predetermined number (YES in step S26), or if the storage period of the image data 27 has elapsed a predetermined period (YES in step S27), the image processing device 1 deletes the image data 27 stored in the memory unit 21 (step S28).

[0061] As described above, the image processing device 1 of this embodiment includes an image reading unit 13 that reads an image of a document 9 including an image abnormality and generates image data 27 including the image abnormality, an image transmitting unit 32 that transmits the image data 27 to an external device, a judgment unit 31 that judges whether the image data 27 includes confidential information, an image saving unit 33 that saves the image data 27 in a specified memory unit 21 without sending it to the external device if the judgment unit 31 judges that the image data 27 includes confidential information, and an access information transmitting unit 34 that transmits access information 28 for accessing the image data 27 saved in the memory unit 21 to the external device if the image saving unit 33 saves the image data 27 in the memory unit 21.

[0062] When confidential information is included in image data 27 including an image abnormality, the image processing device 1 having the above configuration stores the image data 27 in the storage unit 21 without transmitting the image data 27 to an external device. That is, the image processing device 1 does not transmit confidential information to an external device outside the local environment 6, so that it is possible to prevent the confidential information from being leaked. In addition, the image processing device 1 transmits access information 28 for accessing the image data 27 stored in the storage unit 21 to the external device. Therefore, the external device can obtain and display a viewing screen from the image processing device 1 by accessing the image processing device 1 from the service base 7. The viewing screen includes an image corresponding to the image data 27. Therefore, a serviceman at the service base 7 can identify the cause of the image abnormality by checking the viewing screen.

[0063] Incidentally, when the image processing device 1 generates a viewing screen, if an image based on the image data 27 is included in the viewing screen as is, there is a possibility that confidential information may be transmitted to an external device. Therefore, when the image saving unit 33 saves the image data 27 in the storage unit 21, it is preferable that the image saving unit 33 processes the area including the confidential information in the image data 27 so that it cannot be viewed before saving the image data 27.

[0064] FIG. 7 is a diagram showing an example of processing an area R1 including confidential information. For example, as shown in FIG. 7(a), image data 27 has an area R1 that is determined to be confidential information by a specific character string 29. That is, the area R1 is an area including confidential information. Also, the image data 27 has an image abnormality 26 such as a stain in a portion other than the area R1 including confidential information. When storing the image data 27 shown in FIG. 7(a) in the storage unit 21, the image storage unit 33 processes the area R1 including confidential information. Specifically, the image storage unit 33 generates the image data 27 shown in FIG. 7(b) from the image data 27 shown in FIG. 7(a). In the image data 27 shown in FIG. 7(b), processing is performed on the area R1 including confidential information, so that the confidential information cannot be viewed. Examples of processing the area R1 include a process of filling the area R1 with a predetermined color and a process of overwriting the area R1 with other data not including confidential information. Also, the image storage unit 33 may perform a scramble process on the area R1. By the image storage unit 33 processing the area R1 including the confidential information so that it cannot be viewed, it is possible to reliably prevent the confidential information from being leaked when the viewing screen is provided to an outside party.

[0065] The image storage unit 33 may specify an area specified by the user as the area R1 including confidential information. In this case, the image storage unit 33 displays a preview image based on the image data 27 on the display unit 11a of the operation panel 11, and specifies an area specified by the user in the preview image as the area R1 including confidential information.

[0066] Furthermore, the image data 27 acquired by the image acquisition unit 30 may include images of multiple pages. When the image data 27 includes images of multiple pages, the determination unit 31 determines whether or not confidential information is included for each page. FIG. 8 is a diagram illustrating an example of image data 27 including images of multiple pages. The determination unit 31 determines whether or not confidential information is included for each page. Then, as shown in FIG. 8, the multiple images included in the image data 27 are sorted into images of pages including confidential information and images of pages not including confidential information. In the example of FIG. 8, the image of the first page, the image of the third page, ... are detected as images not including confidential information, and the images of the second page, ..., and the Nth page are detected as images including confidential information.

[0067] When the image data 27 includes an image of a page including confidential information and an image of a page not including confidential information, for example, the image abnormality processing unit 24 causes both the image transmission unit 32 and the image storage unit 33 to function. FIG. 9 is a diagram showing the concept of processing by the image abnormality processing unit 24 when the image data 27 includes an image of a page including confidential information and an image of a page not including confidential information. As shown in FIG. 9, the image transmission unit 32 extracts an image of a page not including confidential information from the image data 27 and transmits the extracted image to the image diagnostic device 2. In addition, the image storage unit 33 extracts an image of a page including confidential information from the image data 27 and stores it in the storage unit 21. At this time, the image storage unit 33 processes the area R1 including the confidential information to be in an unviewable state and stores it. The access information transmission unit 34 generates access information 28 for accessing the image data 27 stored in the storage unit 21 and transmits it to the image diagnostic device 2. The image diagnostic device 2 acquires an image of a page not including confidential information from the image processing device 1 and displays it. Furthermore, the image diagnostic apparatus 2 acquires and displays an image of a page including confidential information as a viewing screen by accessing the image processing device 1 based on the access information 28. Therefore, if the serviceman can identify the cause of the image abnormality in the image of a page not including confidential information that the image diagnostic apparatus 2 acquires directly from the image processing device 1, the serviceman can efficiently identify the cause of the image abnormality without needing to access the image processing device 1 to acquire the viewing image.

[0068] Although the preferred embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and various modifications are possible.

[0069] For example, in the above embodiment, the case where an image abnormality occurs mainly in a print job or a copy job has been described. However, an image abnormality may also occur in a scan job. For example, when an image of a document is read in a scan job, image data 27 is stored in the image memory 14. The image processing device 1 can read out the image data 27 and display a preview on the display unit 11a of the operation panel 11. By checking the preview display, the user recognizes that an image abnormality has occurred and switches the image processing device 1 to a remote maintenance mode. At this time, the image abnormality processing unit 24 can obtain the image data 27 including the image abnormality by reading out the image data 27 temporarily stored in the image memory 14.

[0070] Furthermore, the program 22 described in the above embodiment is not limited to being stored in advance in the storage unit 21 of the image processing device 1. For example, the program 22 may be a subject of trading by itself. In this case, the program 22 may be provided in a form that allows downloading via a network such as the Internet, or may be provided in a state in which it is recorded on a computer-readable recording medium such as a CD-ROM. [Explanation of symbols]

[0071] 1 Image processing device 2. Diagnostic imaging equipment (external equipment) 13 Image reading unit 16 Image forming section 21 Memory section 22 Programs 23 Job Control Section 24 Image abnormality processing section 27 Image data 28 Access Information 30 Image reading unit 31 Judgment Department 32 Image transmission unit 33 Image storage section 34 Access information transmission unit 35 Access Control Department 36 Image Deletion Section

Claims

1. an image reading unit that reads an image of a document and generates image data including an image anomaly; an image transmitting unit that transmits the image data to an external device; a determination unit that determines whether the image data includes confidential information; an image storage unit that stores the image data in a predetermined storage unit without transmitting the image data to the external device when the determination unit determines that the image data contains confidential information; an access information transmission unit that transmits, when the image data is stored in the storage unit by the image storage unit, access information for accessing the image data stored in the storage unit to the external device; An image processing device comprising:

2. The image processing apparatus according to claim 1 , wherein the image saving section processes an area of ​​the image data including confidential information into an unviewable state before saving the image data into the storage section.

3. an image deleting unit that counts the number of accesses to the image data stored in the storage unit, and deletes the image data from the storage unit when the number of accesses exceeds a predetermined number; The image processing device according to claim 1 , further comprising:

4. an image deleting unit that deletes the image data from the storage unit when a storage period of the image data in the storage unit has elapsed a predetermined period; The image processing device according to claim 1 , further comprising:

5. 2. The image processing apparatus according to claim 1, wherein the image saving section saves the image data in the storage section in a state in which copying of the image data is prohibited.

6. The image processing apparatus according to claim 1 , wherein the determination unit determines whether or not the image data includes confidential information based on an instruction operation by a user.

7. The image processing apparatus according to claim 1 , wherein the determination unit automatically determines whether or not the image data includes confidential information by analyzing the image data.

8. When the image data includes an image of a plurality of pages, the determination unit determines whether or not confidential information is included for each page, 8. The image processing apparatus according to claim 1, wherein the image saving unit extracts an image of a page including confidential information from the image data and saves the image in the storage unit.

9. The image processing apparatus according to claim 8 , wherein the image transmission unit extracts images of pages that do not contain confidential information from the image data and transmits the images to the external device.

10. The image processing apparatus according to claim 1 , wherein the image saving section saves the image data in the storage section based on an instruction operation by a user.

11. an access management unit that restricts access to the image data stored in the storage unit from devices other than the external device; The image processing device according to claim 1 , further comprising:

12. A control method for an image processing device, comprising: an image reading step of reading an image of a document to generate image data including an image anomaly; an image transmitting step of transmitting the image data to an external device; a determination step of determining whether the image data includes confidential information; an image storage step of storing the image data in a predetermined storage unit without transmitting the image data to the external device when it is determined that the image data includes confidential information by the determination step; an access information transmitting step of transmitting, when the image data is stored in the storage unit by the image storing step, access information for accessing the image data stored in the storage unit to the external device; A control method comprising the steps of:

13. A program executed in an image processing device, the program comprising: an image reading step of reading an image of a document to generate image data including an image anomaly; an image transmitting step of transmitting the image data to an external device; a determination step of determining whether the image data includes confidential information; an image storage step of storing the image data in a predetermined storage unit without transmitting the image data to the external device when it is determined that the image data includes confidential information by the determination step; an access information transmitting step of transmitting, when the image data is stored in the storage unit by the image storing step, access information for accessing the image data stored in the storage unit to the external device; A program characterized by executing the above.

Images