Image processing system

Abstract

To ensure security of printing at an appropriate security level according to the degree of confidentiality of details indicated by printing target data.SOLUTION: An image processing system Sy provides a security level according to the details of confidential information to printing target data, sets a password to the printing target data, notifies a user of the set password, imposes image processing restrictions according to the security level on the printing target data, and when determining that an input password matches the password set to the printing target data, causes an image forming unit to form an image indicated by the printing target data on a recording paper.SELECTED DRAWING: Figure 2A

Description

[Technical field]

[0001] The present invention relates to an image processing system, and more particularly to a technique for improving printing security. [Background technology]

[0002] As is well known, various methods have been proposed to improve printing security.

[0003] For example, in locked printing in a cloud printing environment described in Patent Document 1, a cloud print service provider provides a platform that enables a client device to submit a print request for processing by any print device configured to communicate with the cloud print service provider over a network such as the Internet. The print device has a cloud print agent configured to manage locked print requests received from the client device via the cloud print platform. The cloud print agent may be configured to notify a user when print job data of a print job submitted by the user is nearing a deadline. This provides a locked print function that improves security of print jobs in the cloud printing environment.

[0004] In addition, in the printing device described in Patent Document 2, when the panel lock control means receives a release of the operation lock from the authentication device, the panel lock control means notifies the operation unit control means of the release of the operation lock and displays an initial screen on the display unit. Furthermore, when the operation lock is received from the authentication device and the operation status management means holds the device in operation, the panel lock control means delays the notification of the operation lock to the operation unit control means until the operation is stopped. Furthermore, when the operation status management means holds the process in stop, the panel lock control means notifies the operation unit control means of the operation lock upon receiving the operation lock. When the operation status control mode is set to enabled, the operation unit control means displays a panel lock screen on the display unit upon receiving the notification of the operation lock, and when the operation status control mode is set to disabled, the operation unit control means compares the display levels of the panel lock screen with those of the current screen currently being displayed or the next screen to be displayed next, and displays the screen with the higher display level on the display unit. This appropriately avoids a state in which the panel lock screen is displayed on the display unit and operation is not possible even if a notification of the operation lock is received when the printing device is performing a process such as copying or FTP transmission, thereby improving the convenience for the user. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2015-165394 A [Patent Document 2] JP 2014-27512 A Summary of the Invention [Problem to be solved by the invention]

[0006] One method for improving printing security is to set a password for the data to be printed. If the security level could be changed as needed using simple procedures, the convenience of security would be improved.

[0007] Patent Document 1 provides a locked print function that improves the security of print jobs, but does not include any technical description of setting a password or changing the security level.

[0008] Furthermore, in Patent Document 2, when a notification of an operation lock is received while the printing device is performing a process such as copying or FTP transmission, a state in which a panel lock screen is displayed on the display unit and operation is disabled is appropriately avoided; however, there is no technical description of setting a password or changing the security level.

[0009] The present invention has been made in consideration of the above circumstances, and has an object to ensure printing security at an appropriate security level according to the level of confidentiality of the contents of the data to be printed. [Means for solving the problem]

[0010] According to one aspect of the present invention, there is provided an image processing system including an information processing device, a server which performs data communication with the information processing device, and an image forming device which performs data communication with the server, wherein the information processing device includes a first communication unit which performs data communication with the server, and a first control unit which causes the first communication unit to transmit data to be printed to the server, and the server includes a second communication unit which performs data communication between the information processing device and the image forming device, and when the data to be printed is received by the second communication unit, the server determines whether the data to be printed contains predetermined confidential information, and when it is determined that the data to be printed contains the confidential information, determines a security level according to the content of the confidential information, sets a password for the data to be printed, and transmits the data to be printed and the security level to the server. and a second control unit that causes the second communication unit to transmit the security level and the password to the image forming device and causes the second communication unit to transmit the password to notify a predetermined destination, wherein the image forming device comprises a third communication unit that performs data communication with the server, an input unit that is operated by a user to input a password, an image forming unit that forms an image indicated by the data to be printed on recording paper, and a third control unit that, when the data to be printed, the security level, and the password are received by the third communication unit, imposes an image processing restriction on the received data to be printed in accordance with the determined security level, and causes the image forming unit to form the image indicated by the data to be printed on recording paper when it is determined that the input password matches the password set for the data to be printed.

[0011] According to one aspect of the present invention, there is provided an image processing system including an information processing device and an image forming device which performs data communication with the information processing device, the information processing device including a first communication unit which performs data communication with the image forming device, and a first control unit which causes the first communication unit to transmit data to the image forming device, the image forming device including a third communication unit which performs data communication with the information processing device, and when the data to be printed is received by the third communication unit, the image forming device determines whether the data to be printed includes predetermined confidential information, and when it is determined that the data to be printed includes the confidential information, performs security measures according to the contents of the confidential information. and a third control unit that determines a security level of the received data to be printed, sets a password for the data to be printed, and notifies the password to a predetermined destination by transmitting it via the third communication unit; an input unit that is operated by a user to input a password; and an image forming unit that forms an image indicated by the data to be printed on recording paper, wherein the third control unit imposes image processing restrictions on the received data to be printed in accordance with the determined security level, and when it is determined that the input password matches the password set for the data to be printed, causes the image forming unit to form the image indicated by the data to be printed on recording paper. Effect of the Invention

[0012] According to the present invention, printing security can be ensured at an appropriate security level according to the level of confidentiality of the contents of the data to be printed. [Brief description of the drawings]

[0013] [Figure 1] 1 is a block diagram showing an image processing system according to a first embodiment of the present invention, and a configuration of an image forming apparatus, a configuration of a server, and a configuration of an information processing apparatus in the image processing system. [Figure 2A]This is a flowchart showing a control procedure for forming an image of an original on recording paper while adding a watermark and character string indicating a security level to an image of an original in an information processing device, setting a password in a management server, and imposing input restriction conditions according to the security level on the input of the password in an image forming device. [Figure 2B] 2B is a flowchart showing a control procedure subsequent to FIG. 2A. [Diagram 3] (A) is a diagram showing a watermark and input restriction conditions associated with a security level of "low," (B) is a diagram showing a watermark, character strings, and input restriction conditions associated with a security level of "medium," and (C) is a diagram showing a watermark, each character string, and input restriction conditions associated with a security level of "high." [Figure 4] FIG. 4 is a diagram showing a print job standby screen displayed on a display unit of the image forming apparatus. [Diagram 5] FIG. 13 is a diagram showing a pop-up window displayed on a display unit of the image forming apparatus. [Figure 6] FIG. 13 is a diagram showing a message displayed in a pop-up window. [Figure 7] FIG. 11 is a block diagram showing an image processing system according to a second embodiment of the present invention, and a configuration of an image forming apparatus and a configuration of an information processing apparatus in the image processing system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, an image processing system according to an embodiment of the present invention will be described with reference to the drawings. First Embodiment 1 is a block diagram showing an image processing system according to a first embodiment of the present invention, and the configurations of an image forming device, a server, and an information processing device in the image processing system. The image processing system Sy of the first embodiment includes an image forming device 10, a management server 30, and an information processing device 50, which are connected to each other via a network (such as an intranet) N.

[0015] In this image processing system Sy, the image forming device 10 is an MFP (multi-function peripheral) having multiple functions such as a copy function, a printer function, and a scanner function. The image forming device 10 includes a display unit 11, an operation unit 12, a communication unit 14, a touch panel 13, an image reading unit 15, an image forming unit 16, a storage unit 18, and a control unit 19. These components are capable of transmitting and receiving data or signals to and from each other via a bus.

[0016] The display unit 11 is configured with a liquid crystal display (LCD) or an organic light-emitting diode (OLED) display.

[0017] A touch panel 13 is overlaid on the screen of the display unit 11. The touch panel 13 detects contact (touch) of a user's finger or the like on the touch panel 13 together with the contact position, and outputs a detection signal indicating the coordinates of the contact position to a control unit 21 (described later) of the control unit 19. This makes it possible to operate a GUI (Graphical User Interface) or the like displayed on the screen of the display unit 11 through the touch panel 13. Thus, the touch panel 13 functions as an operation unit into which user operations on the screen of the display unit 11 are input. In this embodiment, the touch panel 13 is a part of the operation unit 12.

[0018] The operation unit 12 includes hardware keys such as a numeric keypad, a decision key, and a start key.

[0019] The image reading unit 15 has a scanner that optically reads an image of a document, and generates print target data.

[0020] Image forming unit 16 includes a photosensitive drum, a charging device that uniformly charges the surface of the photosensitive drum, an exposure device that exposes the surface of the photosensitive drum to form an electrostatic latent image on the surface of the photosensitive drum, a developing device that develops the electrostatic latent image on the surface of the photosensitive drum into a toner image, and a transfer device that transfers the toner image (image) on the surface of the photosensitive drum to recording paper as a recording medium, and prints an image represented by the image data on the recording paper.

[0021] The communication unit 14 is a communication interface equipped with a communication module such as a LAN chip. The communication unit 14 is connected to the management server 30 and the information processing device 50 through a network (such as an intranet) N, and performs data communication between the management server 30 and the information processing device 50. The communication unit 14 is an example of a third communication unit within the scope of the patent.

[0022] The storage unit 18 is a large-capacity storage device such as a solid state drive (SSD) or a hard disk drive (HDD), and stores various application programs and various data.

[0023] The control unit 19 is composed of a processor, a RAM (Random Access Memory), a ROM (Read Only Memory), etc. The processor is, for example, a CPU (Central Processing Unit), an ASIC (Application Specific Integrated Circuit), or an MPU (Micro Processing Unit). This control unit 19 functions as a control unit 21 by the processor executing a control program stored in the ROM or the storage unit 18. The control unit 21 is an example of a third control unit in the claims.

[0024] The control unit 21 is responsible for the overall control of the image forming apparatus 10. In addition, the control unit 19 is connected to the display unit 11, the operation unit 12, the touch panel 13, the communication unit 14, the image reading unit 15, the image forming unit 16, and the storage unit 18. The control unit 21 controls each of the above-mentioned components and transmits and receives signals or data between each of the components.

[0025] The control unit 21 serves as a processing unit that executes various processes and has a function of controlling the display unit 11 and the communication unit 14.

[0026] In the image processing system Sy, the management server 30 includes a communication unit 34, a storage unit 38, and a control unit 39. These components are capable of transmitting and receiving data or signals to and from each other via a bus.

[0027] The communication unit 34 is a communication interface, and is connected to the image forming apparatus 10 and the information processing apparatus 50 through the network N to transmit and receive data between the image forming apparatus 10 and the information processing apparatus 50. The communication unit 34 is an example of a second communication unit in the claims.

[0028] The storage unit 38 is a large-capacity storage device such as an SSD or HDD, and stores various application programs and various data.

[0029] The control unit 39 is composed of a processor, a RAM, a ROM, etc. The control unit 39 functions as a control unit 41 by the processor executing a control program stored in the ROM or the storage unit 38. The control unit 41 is an example of a second control unit in the claims.

[0030] The control unit 41 is responsible for the overall control of the management server 30. In addition, the control unit 39 is connected to the communication unit 34, the storage unit 38, etc. The control unit 41 controls each of the above-mentioned components and transmits and receives signals or data between each of the components.

[0031] In the image processing system Sy, the information processing device 50 is, for example, a personal computer (PC), and includes a display unit 51, an operation unit 52 such as a keyboard and a mouse, a communication unit 54, a storage unit 58, and a control unit 59. These components are capable of transmitting and receiving data or signals to and from each other via a bus.

[0032] The communication unit 54 is a communication interface, and is connected to the management server 30 and the image forming device 10 via the network N to transmit and receive data between the management server 30 and the image forming device 10. The communication unit 54 is an example of a first communication unit in the claims.

[0033] The storage unit 58 is a large-capacity storage device such as an SSD or HDD, and stores various application programs and various data.

[0034] The control unit 59 is composed of a processor, a RAM, a ROM, etc. The control unit 59 functions as a control unit 61 by the processor executing a control program stored in the ROM or the storage unit 58. The control unit 61 is an example of a first control unit in the claims.

[0035] The control unit 61 is responsible for the overall control of the information processing device 50. In addition, the control unit 59 is connected to the display unit 51, the operation unit 52, the communication unit 54, the storage unit 58, etc. The control unit 61 controls each of the above-mentioned components and transmits and receives signals or data between each of the components.

[0036] Here, the user of the information processing device 50 causes the data to be printed to be transmitted from the information processing device 50 to the image forming device 10 via the management server 30 .

[0037] In this case, in the management server 30, when the communication unit 34 receives the data to be printed from the information processing device 50, the control unit 41 temporarily stores the data to be printed in the storage unit 38. The control unit 41 reads out the data to be printed from the storage unit 38, and transmits the data to be printed from the communication unit 34 to the image forming device 10 through the network N.

[0038] In the image forming device 10, when the data to be printed is received by the communication unit 14, the control unit 21 stores the data to be printed in the storage unit 18. In accordance with instructions input to the operation unit 12, the control unit 21 causes the image forming unit 16 to form an image on recording paper based on the data to be printed.

[0039] Here, when the data to be printed is sent from the information processing device 50 via the management server 30 to the image forming device 10 as described above, and the image of the original is formed on recording paper by the image forming unit 16 and the recording paper is ejected, it is necessary to prevent a user other than the user who sent the data to be printed from the information processing device 50 from obtaining the recording paper, thereby maintaining the security of the contents indicated by the data to be printed, i.e., the security of the printing.

[0040] Therefore, in the image processing system Sy of the first embodiment, the management server 30 analyzes the data to be printed received from the information processing device 50 and determines whether the data to be printed contains predetermined confidential information. If it is determined that the data to be printed contains confidential information, it determines the security level according to the content of the confidential information and sets a password for the data to be printed. The data to be printed, the security level and the password are transmitted to the image forming device 10 via the network N by the communication unit 34.

[0041] In the image forming apparatus 10, when the data to be printed, the security level, and the password are received by the communication unit 14, the image data is stored in the storage unit 18. The control unit 21 imposes an image processing restriction on the received data to be printed according to the received security level. The image processing restriction is, for example, a restriction imposed according to the number of times an incorrect password is allowed to be entered, or the time allowed for entering a correct password.

[0042] Furthermore, the control unit 41 of the management server 30 creates an e-mail including the set password, and causes the communication unit 34 to send the e-mail to a predetermined destination via the network N. The predetermined destination is, for example, an e-mail address managed by a mailer installed in the information processing device 50, or an e-mail address of a user who has sent the data to be printed from the information processing device 50. When sending the data to be printed to the management server 30, the control unit 61 of the information processing device 50 sends the identification information of the information processing device 50 or the ID information of the user together with the data to be printed. The control unit 41 of the management server 30 stores the e-mail address to which the e-mail is to be sent in association with the identification information of the information processing device 50 or the ID information of each user, and sends the e-mail to the e-mail address associated with the identification information of the information processing device 50 or the ID information of each user received from the information processing device 50.

[0043] The user who sent the print data from the information processing device 50 to the management server 30 receives the email on his / her mobile terminal or the communication unit 54 of the information processing device 50, and learns the password. The user then goes to the image forming device 10 and operates the numeric keypad or the like of the operation unit 12 to input the password.

[0044] In image forming device 10, when a password is entered into operation unit 12, if control unit 21 determines that the entered password matches the password set for the data to be printed, it causes image forming unit 16 to form an image indicated by the data to be printed on recording paper, and at this time, executes image processing restrictions on the data to be printed according to its security level.

[0045] Next, a process for printing data to be printed in the image processing system Sy will be described with reference to Fig. 2A and Fig. 2B, which are flow charts showing the process for printing data to be printed in the image processing system Sy.

[0046] First, in the information processing device 50, in accordance with instructions input by the user to the operation unit 52, the communication unit 54 transmits the data to be printed and identification information of the information processing device 50 (or ID information of the user operating the information processing device 50; below, the case of the identification information of the information processing device 50 will be explained) to the management server 30 (S101).

[0047] In the management server 30, when the data to be printed and the identification information are received by the communication unit (S201), the control unit 41 stores the data to be printed in the storage unit .

[0048] Here, it is assumed that the image represented by the data to be printed contains, for example, a watermark indicating that the content is confidential, and a predetermined character string indicating that the content is confidential. The image represented by the data to be printed contains the image contents PL, PM, and PH of the watermark and character string contained in the image represented by the data to be printed, as shown in Figs. 3(A), (B), and (C), for example. The control unit 41 stores the security levels "low," "medium," and "high" corresponding to the image contents PL, PM, and PH.

[0049] 3A corresponds to a security level "low" and includes only a watermark (character string) TW. At the security level "low," the input restriction conditions for inputting a password by operating the numeric keypad or the like of the operation unit 12 of the image forming apparatus 10 are set such that the number of times an incorrect password can be input is "3," and the time period for inputting a correct password is "3 hours."

[0050] 3B is associated with a security level of "medium," and includes a watermark (character string) TW and a header character string T1. At the security level of "medium," the input restriction conditions for inputting a password by operating the numeric keypad or the like of the operation unit 12 of the image forming apparatus 10 are set such that the number of times an incorrect password can be input is "2," and the time period for inputting a correct password is "2 hours."

[0051] 3C is associated with a security level of "high," and includes a watermark (character string) TW, a header character string T1, and a footer character string T2. At the security level of "high," the input restriction conditions for inputting a password by operating the numeric keypad or the like of the operation unit 12 of the image forming apparatus 10 are set such that the number of allowed inputs of an incorrect password is "1," and the allowed time for inputting a correct password is "1 hour."

[0052] In this way, the higher the security level given to the data to be printed, the fewer the number of permitted inputs is set, and the shorter the permitted input time is set, the higher the security level given to the data to be printed.

[0053] The control unit 41 of the management server 30 analyzes the received data to be printed and judges whether the watermark or a predetermined character string is present (S202). The watermark may be of any content, but is, for example, a watermark image indicating content such as "confidential information", "no copying", "confidential", etc. The predetermined character string is a character string such as "confidential information", "no copying", "confidential", etc. The control unit 41 stores a plurality of image samples that can be used as the watermark, and judges whether any of the image samples is included in the image indicated by the data to be printed, for example, by a technique such as pattern matching. Furthermore, when the content indicated by the data to be printed includes a group of characters such as letters and symbols, the control unit 41 judges whether the group of characters includes the above character string.

[0054] For example, when the control unit 61 of the information processing device 50 transmits data to be printed to the management server 30, the control unit 61 converts the data to be printed into a page description language adapted to the image forming device 10 using a printer driver adapted to the image forming device 10 to which the data to be printed will ultimately be delivered, and then transmits the data. The control unit 41 of the management server 30 determines whether the watermark or a predetermined character string is present, based on the print content, which is a combination of characters, figures, images, etc., on a page-by-page basis indicated by the received data to be printed written in the page description language.

[0055] When the control unit 41 of the management server 30 determines that the watermark TW has been detected (S203 "Yes"), it generates a password Pa for the data to be printed, and determines the security level associated with the watermark TW, character string T1, and character string T2 determined in S202 and included in the content indicated by the data to be printed, based on the criteria shown in Figs. 3(A), 3(B), and 3(C), and determines the email address as the destination associated with the identification information of the received information processing device 50 (S204). Then, the control unit 41 causes the communication unit 34 to transmit the received data to be printed (page description language), password Pa, and security level to the image forming device 10 through the network N (S205). The transmitted security level includes information indicating the content of the input allowance condition, which is composed of the number of input allowances and the input allowance time, in addition to the level of "low", "medium", or "high".

[0056] Furthermore, the control unit 41 of the management server 30 creates an e-mail addressed to the determined e-mail address, attaches the password Pa to the e-mail, and causes the communication unit 34 to send the e-mail through the network N (S206).

[0057] In the information processing device 50, the communication unit 54 receives the email, and the control unit 61 causes the content of the email (password) to be displayed on the screen of the display unit 51 (S105).

[0058] On the other hand, when the control unit 41 of the management server 30 determines that the watermark TW is not detected (S203 ``No''), it causes the communication unit 34 to transmit the data to be printed (page description language) to the image forming device 10 via the network N (S208).

[0059] In the image forming device 10, when either (i) the data to be printed, password Pa, and security level, or (ii) the data to be printed, transmitted from the management server 30 in S205, is received by the communication unit 14 (S301), the control unit 21 stores (i) the data to be printed, password Pa, and security level, or (ii) the data to be printed in the memory unit 18.

[0060] If the received data to be printed is accompanied by a security level, i.e., if an image processing restriction is set for the data to be printed (YES in S302), the control unit 21 sets the input restriction condition indicated by the security level (S303). The control unit 21 puts on hold the execution of the print job for the received data to be printed (S304), and starts counting the elapsed time from the date and time when the data to be printed was received from the management server 30 in S301 (S305). After this, the process proceeds to S306.

[0061] Furthermore, when the control unit 21 of the image forming apparatus 10 receives (ii) data to be printed in S301, it determines that the received data to be printed does not have a security level (S302 "No"), converts the data to be printed into a data format that can be processed by the image forming unit 16, and then causes the image forming unit 16 to immediately form an image indicated by the data to be printed (S325). Then, the process ends.

[0062] After the control unit 21 of the image forming apparatus 10 puts the data to be printed on hold and starts the timing, it causes the display unit 11 to display a print job waiting screen G1 as shown in FIG. 4 (S306). The print job waiting screen G1 displays a list IR showing each print job waiting to be executed on the image forming apparatus 10. In this list IR, the print waiting order, the reception date and time, the user name, and whether printing is on hold or allowed are set for each print job. In this example, the print job with the print waiting order "0001" is a job based on the data to be printed received by the image forming apparatus 10 from the information processing apparatus 50 via the management server 30.

[0063] Here, unless the touch operation on the image area showing the pending print job in the list IR is accepted by the touch panel 13 (S307 "No"), the control unit 21 of the image forming device 10 executes the print jobs that are waiting to be executed and that are permitted to be printed in the order of waiting for execution, and causes the image forming unit 16 to form an image shown by the print target data of the job to be executed on the recording paper (S308). The control unit 21 deletes the print job after the printing is completed from the list IR and makes it invisible. After executing one print job, the control unit 21 determines whether there are other print jobs that are waiting to be executed and permitted to be printed (S310), and if it determines that there are other print jobs that are permitted to be printed (S310 "Yes"), it repeats the process from S306. Also, if the control unit 21 determines that there are no other print jobs that are waiting to be executed and permitted to be printed (S310 "No"), the process ends.

[0064] On the other hand, when the user of the information processing device 50 knows the password displayed on the screen of the display unit 51 in S105, the user goes to the image forming device 10, touches the image area in the list IR that shows the print job for the data to be printed that the user sent, and further touches the print key K21. Here, the user can see that the print job "0001" in the print queue is his / her print job by visually confirming that his / her own name is displayed in the print job column.

[0065] Here, when a touch operation on an image area indicating a pending print job in the list IR is accepted by the touch panel 13 (S307 "Yes"), in this example, when a touch operation on an image area indicating a print job with the print queue number "0001" is accepted by the touch panel 13, the control unit 21 accepts a selection instruction to select the print job, and determines whether the elapsed time from the reception date and time at which timing began in S305 satisfies the input restriction condition corresponding to the security level set in S303, i.e., whether the elapsed time has not yet reached the input allowable time for that security level (S311).

[0066] When the control unit 21 determines that the time elapsed since the reception date and time has not yet reached the input allowable time for the security level (S311 "Yes"), it causes a pop-up window PU, such as the example shown in Fig. 5, to be displayed on the print job standby screen G1 (S312). The pop-up window PU displays a text box T31 for displaying the password entered from the operation unit 12, an OK key 31, and the like.

[0067] When the user who transmitted the print target data from the information processing device 50 inputs the password displayed on the screen of the display unit 51 in S105 by operating the numeric keypad or the like of the operation unit 12 (S313 "Yes"), the control unit 21 displays the input password in the text box T31 of the pop-up window PU, and determines whether the input password matches the password Pa received in S301 (S314). When the control unit 21 determines that the two passwords match (S314 "Yes"), it reads out the print target data of the print job selected by the selection instruction accepted based on the touch operation in S307 from the storage unit 18, converts the data into a data format that can be processed by the image forming unit 16, and then causes the image forming unit 16 to form an image indicated by the print target data on recording paper (S315).

[0068] At this time, if an image indicated by the print target data of another print job is being formed on recording paper by the image forming unit 16, the control unit 21 of the image forming device 10 interrupts the other print job after the image indicated by the print target data has been formed, and performs S315.

[0069] Thereafter, the control unit 21 deletes the print target data from the storage unit 18, and hides the image indicating the print job from the list IR. Then, the process proceeds to S310.

[0070] Furthermore, when the control unit 21 of the image forming apparatus 10 determines that the password entered in S313 does not match the password Pa received in S301 (S314 "No"), it counts the number of times Q that the passwords do not match (S316) and determines whether or not this number Q of times that the passwords do not match has yet reached the number of times that the inputs are permitted, which is indicated by the input restriction conditions corresponding to the security level set in S303 (S317). When the control unit 21 determines that the number Q of times that the passwords do not match has yet reached the number of times that the inputs are permitted, which is indicated by the input restriction conditions corresponding to the security level (S317 "Yes"), it displays a message E1 in a pop-up window PU (S318) that prompts the user to re-enter the password, as shown in the example of FIG. 6, and waits for the user to re-enter the password (S313).

[0071] Furthermore, if the control unit 21 of the image forming apparatus 10 determines that the password re-entered in the text box T21 does not match the password Pa received in S301 (S314 "No"), it repeats S316, S317 "Yes", and S318, and returns to S313.

[0072] Then, when the control unit 21 determines that the input password matches the password Pa received in S301 before the permitted number of inputs is reached (S314 "Yes"), it reads out from the storage unit 18 the print data of the print job selected by the selection instruction accepted based on the touch operation in S307, converts the data into a data format that can be processed by the image forming unit 16, and then causes the image forming unit 16 to form an image indicated by the print data on recording paper (S315). Then, the control unit 21 deletes the print data from the storage unit 18, and makes the image indicating the print job invisible from the list IR. After this, the process proceeds to S310.

[0073] Furthermore, when the control unit 21 determines that the number of mismatch determinations Q has reached the number of inputs permitted for that security level (S317 "No"), it deletes the print target data from the storage unit 18 and makes the image showing that print job invisible from the list IR (S320). After this, the process proceeds to S310.

[0074] Also, when the control unit 21 of the image forming apparatus 10 determines that the time elapsed since the reception date and time has reached the input allowable time for the security level (S311 "No"), it deletes the print target data from the storage unit 18 and hides the image showing the print job from the list IR (S320). After this, the process proceeds to S310.

[0075] In this way, in the image processing system Sy of the first embodiment, it is possible to ensure printing security at an appropriate security level according to the level of confidentiality of the contents of the data to be printed.

[0076] In the first embodiment, the control unit 41 of the management server 30 transmits the received data to be printed, password Pa, and security level from the communication unit 34 to the image forming apparatus 10 through the network N, but in addition to this, the determined email address may also be transmitted to the image forming apparatus 10. Then, in the image forming apparatus 10, when the communication unit 14 receives the data to be printed, password Pa, security level, and email address and deletes the pending data to be printed in S320, the communication unit 14 may send to the email address an email including a message indicating that the data to be printed will be deleted. <Second embodiment> 7 is a block diagram showing an image processing system according to a second embodiment of the present invention, and a configuration of an image forming apparatus and a configuration of an information processing apparatus in the image processing system. In the image processing system SyA of the second embodiment, an image forming apparatus 10 and an information processing apparatus 50 are connected via a network (such as an intranet) N.

[0077] Therefore, in the image processing system SyA of the second embodiment, the management server 30 in the image processing system Sy of the first embodiment shown in FIG. 1 is omitted.

[0078] In the image processing system SyA of the second embodiment, the processes of S101 and S105 in the flowchart shown in Fig. 2A are performed by the information processing device 50, and the processes of S201, S202, S203, S204, and S206 and the processes of S301 to S325 in the flowchart shown in Fig. 2A are performed by the image forming device 10. In addition, S205 and S208 in the flowchart shown in Fig. 2A are processes performed within the image forming device 10.

[0079] This also makes it possible to achieve the same effects as the first image processing system Sy.

[0080] Incidentally, the configurations and processes of the above-described embodiments described with reference to FIGS. 1 to 7 are merely examples of the present invention, and the present invention is not limited to these configurations and processes. [Explanation of symbols]

[0081] 10 Image forming device 11 Display section 12 Control section 13 Touch Panel 14 Communications Department 15 Image reading unit 16 Image forming section 18 Storage section 19 Control Unit 21 Control section 30 Management Server 34 Communications Department 38 Memory section 39 Control Unit 41 Control section 50 Information processing device 51 Display section 52 Operation section 54 Communications Department 58 Memory section 59 Control Unit 61 Control section

Claims

1. An image processing system including an information processing device, a server that performs data communication with the information processing device, and an image forming device that performs data communication with the server, The information processing device includes: A first communication unit that performs data communication with the server; a first control unit that causes the first communication unit to transmit the print target data to the server; The server, a second communication unit that performs data communication between the information processing device and the image forming device; a second control unit that, when the data to be printed is received by the second communication unit, determines whether the data to be printed contains predetermined confidential information, and when it is determined that the data to be printed contains the confidential information, determines a security level according to the contents of the confidential information, sets a password for the data to be printed, causes the second communication unit to transmit the data to be printed, the security level, and the password to the image forming apparatus, and causes the second communication unit to transmit the password to a predetermined destination, The image forming apparatus includes: A third communication unit that performs data communication with the server; an input section operated by a user to input a password; an image forming unit that forms an image indicated by the print target data on a recording sheet; an image processing system comprising: a third control unit that, when the data to be printed, the security level, and the password are received by the third communication unit, imposes image processing restrictions on the received data to be printed in accordance with the determined security level, and, if it is determined that the input password matches the password set for the data to be printed, causes the image forming unit to form an image indicated by the data to be printed on recording paper.

2. the image processing restriction is a restriction that invalidates the data to be printed when the number of times that the input password is determined not to match the password set for the data to be printed reaches a preset input allowable number of times; The image processing system according to claim 1 , wherein the permissible number of inputs is smaller as the security level given to the data to be printed becomes higher.

3. the image processing is a restriction that invalidates the data to be printed when a time elapsed from a time when the data to be printed is received by the third communication unit of the image forming apparatus until the password is input into the input unit reaches a preset input allowable time, The image processing system according to claim 1 , wherein the input allowable time is shorter as a security level given to the data to be printed becomes higher.

4. The image processing system of claim 2 or claim 3, wherein when the third control unit of the image forming device invalidates the data to be printed, the third control unit notifies a predetermined destination via the third communication unit that the data to be printed has been invalidated.

5. 2. The image processing system of claim 1, wherein when the third control unit of the image forming device determines that the password input into the input unit matches a password set for the data to be printed, the third control unit processes the data to be printed in priority to processing of other jobs waiting to be processed in the image forming device.

6. An image processing system including an information processing device and an image forming device that performs data communication between the information processing device and the image forming device, The information processing device includes: a first communication unit for performing data communication with the image forming apparatus; a first control unit that causes the first communication unit to transmit print target data to the image forming device; The image forming apparatus includes: A third communication unit that performs data communication with the information processing device; a third control unit that, when the data to be printed is received by the third communication unit, determines whether the data to be printed contains predetermined confidential information, and when it is determined that the data to be printed contains the confidential information, determines a security level according to the contents of the confidential information, sets a password for the data to be printed, and notifies the password to a predetermined destination by transmitting it via the third communication unit; an input section operated by a user to input a password; an image forming unit that forms an image indicated by the print target data on a recording sheet; The third control unit imposes image processing restrictions on the received data to be printed in accordance with the determined security level, and if it determines that the input password matches a password set for the data to be printed, causes the image forming unit to form the data to be printed on recording paper.

Images