Image processing apparatus, image processing method, and program

Abstract

To reduce the possibility that, when an image processing apparatus generates an encryption file on the basis of a password transmitted by an information processing apparatus, the password leaks.SOLUTION: An image processing apparatus of the present invention comprises: setting means that performs settings as to whether receiving means performs encryption communication; scanning means that scans an image of a document; and generation means that generates a file including the image, the file being encrypted by using a password received by the receiving means from an information processing apparatus. When the setting means performs settings so that the receiving means performs the encryption communication, transmission means transmits, to the information processing apparatus, information indicating that the encrypted file can be generated, and when the setting means performs settings so that the receiving means does not perform the encryption communication, the transmission means does not transmit, to the information processing apparatus, the information indicating that the encrypted file can be generated.SELECTED DRAWING: Figure 8

Description

Technical Field

[0001] The present invention relates to an image processing apparatus, an image processing method, and a program.

Background Art

[0002] When an information processing apparatus such as a smartphone makes a scan request for a document to an image forming apparatus, a technique is known in which the generation of a signed file in the image forming apparatus is instructed. (Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When the image processing apparatus is set to disable encrypted communication, the password for encrypting the file from the information processing apparatus instructing the generation of the encrypted file is transmitted via non-encrypted communication, so there is a possibility that the password will leak.

[0005] An object of the present invention is to reduce the possibility of a password leaking when the image processing apparatus generates an encrypted file based on the password transmitted by the information processing apparatus.

Means for Solving the Problems

[0006] The image processing apparatus of the present invention includes a receiving means, a transmitting means, a setting means for setting whether the receiving means performs encrypted communication, a scanning means for scanning an image of a document, and a generating means for generating a file including the image and encrypted using a password received by the receiving means from an information processing apparatus. When the setting means sets the receiving means to perform the encrypted communication, the transmitting means transmits information indicating that the encrypted file can be generated to the information processing apparatus. When the setting means sets the receiving means not to perform the encrypted communication, the transmitting means does not transmit information indicating that the encrypted file can be generated to the information processing apparatus.

Advantages of the Invention

[0007] When the image processing apparatus generates an encrypted file based on the password transmitted by the information processing apparatus, the possibility of the password leaking can be reduced.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Modes for Carrying Out the Invention

[0009] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the present invention according to the claims, and not all combinations of the features described in this embodiment are essential for the solution means of the present invention.

[0010] Also, in this example, an example using HTTPS (Hypertext Transfer Protocol Secure) communication as encrypted communication will be described, but the communication protocol is not limited to this. For example, other communications using TLS or SSL may be used, or communications using an encryption method in the data link layer of the OSI reference model such as WPA may be used.

[0011] <Overall Configuration> FIG. 1 is a diagram showing an example of the system configuration of this example. As shown in FIG. 1, the system of this example is composed of, for example, an image processing apparatus 101, an information processing apparatus 102, and a network 103. This system may include a plurality of information processing apparatuses.

[0012] The image processing apparatus 101 and the information processing apparatus 102 can communicate with each other via the network 103. Note that each of the image processing apparatus 101 and the information processing apparatus 102 may be configured with multiple connections instead of a single connection.

[0013] The image processing apparatus 101 is a multifunction device having a plurality of functions such as copy, scan, print, FAX, etc. Note that the image processing apparatus 101 may be a device having a single function such as a printer or a scanner. The operation panel 208 will be described later with reference to FIG. 2.

[0014] The information processing apparatus 102 may be, for example, a mobile terminal such as a smartphone used by a user, or a PC. The information processing apparatus 102 includes means for generating a scan job for the image processing apparatus 101 to scan a paper medium manuscript, and display means for displaying image data on the display unit 308.

[0015] <Hardware Configuration of the Image Forming Apparatus> FIG. 2 is a block diagram showing an example of the hardware configuration of the image processing apparatus 101 according to an embodiment of the present invention.

[0016] As shown in FIG. 2, the image processing apparatus 101 includes a CPU 202, a RAM 203, a ROM 204, a storage 205, a network I / F 206, an operation I / F 207, a print controller 209, and a scan controller 211 connected to the system bus 201.

[0017] The CPU (Central Processing Unit) 202 controls the operation of the entire image processing apparatus 101. The CPU 202 reads out the device control program 400 stored in the ROM 204 or the storage 205, and performs various controls such as read control and print control.

[0018] The RAM 203 is the main memory of the CPU 202 and is used as a temporary storage area for expanding various control programs stored in the work area, ROM 204, and storage 205.

[0019] The ROM 204 stores the device control program 400, which is a control program executable by the CPU 202.

[0020] The storage 205 stores print data, image data, various programs, and various setting information.

[0021] In the image processing apparatus 101 of the present embodiment, it is assumed that one CPU 202 executes each process shown in the flowchart described later using one memory (RAM 203), but other modes may be adopted. For example, a plurality of CPUs, RAMs, ROMs, and storages may cooperate to execute each process shown in the flowchart described later. Also, some processes may be executed using a hardware circuit such as an ASIC (Application Specific Integrated Circuit) or FPGA (Field-Programmable Gate Array).

[0022] The network I / F 206 is an interface for communicating the image processing apparatus 101 with an external device via the network 103. The image processing apparatus 101 transmits the electronic data read by the scanner 212 to the information processing apparatus 102 via the network I / F 206. Also, the image processing apparatus 101 receives the electronic data managed by the information processing apparatus 102 via the network I / F 206 and prints it with the print engine 210.

[0023] The operation panel 208 displays a screen controlled by the operation I / F 207. When the user operates the operation panel 208, the image processing apparatus 101 acquires an event corresponding to the user operation via the operation I / F 207.

[0024] The print controller 209 is connected to the print engine 210. The image data to be printed is transferred to the print engine 210 via the print controller 209. The print engine 210 receives the control command and the image data to be printed, and forms an image on the sheet based on this image data. The printing method of the print engine 210 may be an electrophotographic method or an inkjet method. In the case of the electrophotographic method, an electrostatic latent image is formed on the photoreceptor, then developed with toner, the toner image is transferred to the sheet, and the transferred toner image is fixed to form an image. On the other hand, in the case of the inkjet method, ink is ejected to form an image on the sheet.

[0025] The scan controller 211 is connected to the scanner 212. The scanner 212 reads the image of the original document and generates image data. Further, a file such as a PDF file is generated based on the image data. The image data generated by the scanner 212 is stored in the storage 205. Also, the image processing apparatus 101 can form an image on the paper using the image data generated by the scanner 212. The scanner 212 has an original document feeder (not shown), and can read while transporting the sheets placed on the original document feeder one by one.

[0026] <Hardware Configuration of the Information Processing Apparatus> FIG. 3 is a diagram showing a hardware configuration example of the information processing apparatus 102 according to an embodiment of the present invention.

[0027] As shown in FIG. 3, the information processing apparatus 102 includes a CPU 302, a RAM 303, a ROM 304, a storage 305, a network I / F 306, an operation unit 307, and a display unit 308 connected to the system bus 301.

[0028] The CPU 302 is a central processing unit that controls the operation of the entire information processing apparatus 102. The RAM 303 is a volatile memory. The ROM 304 is a non-volatile memory and stores the startup program for the CPU 302. The storage 305 is a storage device with a larger capacity compared to the RAM 303 (for example, a hard disk drive: HDD). Note that the storage 305 may be a solid state drive (SSD) or the like, and may be replaced with another storage device having a function equivalent to that of the hard disk drive.

[0029] When starting up such as when power is turned on, the CPU 302 executes the startup program stored in the ROM 304. This startup program is for reading out the control program stored in the storage 305 and expanding it onto the RAM 303. When the CPU 302 executes the startup program, it subsequently executes the control program expanded onto the RAM 303 to perform control. Also, the CPU 302 stores and reads / writes data used when executing the control program onto the RAM 303. On the storage 305, various settings necessary when executing the control program can be stored and read / written by the CPU 302. The CPU 302 communicates with other devices on the network 103 via the network I / F 306. Also, the information processing apparatus 102 can receive the content of the operation / input / instruction performed by the user using the operation unit 307. Further, the information processing apparatus 102 can display the content controlled by the CPU 302 on the display unit 308.

[0030] <Functional Configuration of the Device Control Program of the Image Forming Apparatus> FIG. 4 is a block diagram showing the functional configuration of the device control program 400 of the image processing apparatus 101 executed by the CPU 202.

[0031] The device control program 400 of the image processing apparatus 101 is stored in the ROM 204 as described above and is expanded and executed on the RAM 203 when the CPU 202 starts up.

[0032] The data transmission / reception unit 401 transmits and receives data with other devices on the network 103 via the network I / F 206 using TCP / IP. In this embodiment, the data transmission / reception unit 401 receives a scan job (scan ticket) generated by the information processing apparatus 102 using HTTP (Hypertext Transfer Protocol) or HTTPS, an image data request, and a scanner capability request. Further, the data transmission / reception unit 401 transmits a job generation result, an image data request, a response to a scanner capability request, and a redirection notification for HTTPS communication to the information processing apparatus 102 using HTTP or HTTPS.

[0033] The data analysis unit 402 converts a job control command included in the BODY of an HTTP packet or an HTTPS packet received by the data transmission / reception unit 401 into job information for controlling the job of the image processing apparatus 101, and transmits it to the job control unit 403. As an example of the job control command, eSCL, which is a protocol for controlling a scan job, can be mentioned.

[0034] The job control unit 403 issues control instructions to the print engine 210 and the scanner 212 via the print controller 209 and the scan controller 211. For example, when the display processing unit 405 detects the pressing of the start key while the SEND function screen is being displayed, the job control unit 403 receives the parameters of the SEND job and a job start instruction from the operation target determination unit 406. Then, based on the job information, it executes a scan, and controls to transmit the generated image data and files to a destination set with the parameters of the SEND job, such as an E-Mail address or a directory path of a shared server on the network 103. Also, when the data transmission / reception unit 401 receives an HTTP packet or an HTTPS packet whose BODY part contains a job control command based on the eSCL protocol, the job control unit 403 executes a scan based on the job information converted by the data analysis unit 402. Then, the job control unit 403 transmits the image data read by the scanner 212 to the transmission source of the HTTP packet or the HTTPS packet.

[0035] The data management unit 404 stores and manages various data such as work data generated during the execution of the device control program 400 and setting parameters required for each device control in predetermined areas on the RAM 203 and the storage 205. For example, job information consisting of combinations of each setting item and setting value of a job executed by the job control unit 403, language settings which are information on the language to be displayed on the operation panel 208, etc. Also, device information necessary for communicating with the information processing apparatus 102, etc. is stored and managed. Further, image data of an object to be formed into an image by the image forming apparatus 101 is stored and managed. Also, screen control information used by the display processing unit 405 for screen display control and operation target determination information used by the operation target determination unit 406 for determining an operation target are stored, and the screen control information and the operation target determination information are managed for each screen displayed by the display processing unit 405.

[0036] The display processing unit 405 controls the operation panel 208 via the operation I / F 207. More specifically, UI components (buttons, pull-down lists, check boxes, etc.) operable by the user are displayed on the operation panel 208. The screen is updated based on the screen display control information. For example, a language dictionary corresponding to the language setting stored in the data management unit 404 is acquired from the storage 205, and text data based on the language dictionary is displayed on the screen.

[0037] The operation target determination unit 406 acquires the touched coordinates on the operation panel 208 via the operation I / F 207, and determines a UI component operable by the user displayed on the operation panel 208 as an operation target.

[0038] Furthermore, the operation target determination unit 406 reads out screen display control information corresponding to the UI component determined as an operation target, and determines the processing content at the time of accepting an operation based on the information. For example, an instruction to update the display content of the screen is issued to the display processing unit 405, or parameters of a job set by a user operation and an instruction to start the job are transmitted to the job control unit 403.

[0039] Based on the job information, the scan control unit 407 executes a scan using the scanner 212 via the scan controller 211 and stores the read image data in the data management unit 404. Here, if the file format is specified as encrypted PDF in the scan job information, the scan control unit 407 generates an encrypted PDF based on the image data using the password extracted from the scan job information before storing it in the data management unit 404. That is, the scan control unit 407 generates an encrypted file using the password received from the information processing apparatus 102.

[0040] Based on the job information of the print job of the job control unit 403, the print control unit 408 executes printing using the print engine 210 via the print controller 209.

[0041] <Encrypted PDF Scan Sequence> FIG. 5 is a diagram showing an example of a sequence of encrypted PDF scanning executed by the image processing apparatus 101 and the information processing apparatus 102 according to an embodiment of the present invention. In this embodiment, the user has previously launched a scan application from the operation unit 307 of the information processing apparatus 102. At that time, the scan application performs a network search so that the image processing apparatus 101 connected to the same network as the information processing apparatus 102 is displayed as a scanner list on the scan application.

[0042] When the user selects the image processing apparatus 101 displayed on the operation unit 307 of the information processing apparatus 102 in S501, in S502, the CPU 302 of the information processing apparatus 102 transmits a scanner capability request to the image processing apparatus 101 as an HTTP GET request.

[0043] In S503, the CPU 202 of the image processing apparatus 101 executes encrypted PDF determination processing. In this embodiment, as examples of the encrypted PDF determination processing, a first encrypted PDF determination processing (FIG. 8), a second encrypted PDF determination processing (FIG. 9), and a third encrypted PDF determination processing (FIG. 10) are shown. Therefore, the image processing apparatus 101 executes any one of the first to third encrypted PDF determination processes. Also, the first to third encrypted PDF determination processes may be combined.

[0044] In S504, the CPU 202 of the image processing apparatus 101 acquires the encrypted PDF determination result, which is the result of the encrypted PDF determination processing executed in S503, from the RAM 203 and generates a scanner capability response (FIG. 14). If the encrypted PDF determination result is "TRUE", a scanner capability response (FIG. 14(A)) indicating that there is an encrypted PDF is generated, and if the encrypted PDF determination result is "FALSE", a scanner capability response (FIG. 14(B)) indicating that there is no encrypted PDF is generated.

[0045] FIG. 14 is a diagram showing an example of a scanner capability response. The scanner capability response is a response to a capability request received from the information processing apparatus 102 and is capability information regarding the scan processing of the image processing apparatus 101. Also, this capability information is stored in the ROM 204 of the image processing apparatus 101.

[0046] FIG. 14(A) is the capability information transmitted from the image processing apparatus 101 to the information processing apparatus 102 when the image processing apparatus 101 can generate an encrypted PDF (when there is an encryption capability and encrypted communication is effectively set). The format item of this capability information includes JPEG, PDF, and encryptionPDF. This indicates that JPEG, PDF, and encrypted PDF are candidates for the file format of the file generated by the image processing apparatus 101. As other items, there are an item for the color mode, an item for whether double-sided is possible, and an item for the resolution, and values are transmitted for each.

[0047] FIG. 14(B) shows the capability information transmitted from the image processing apparatus 101 to the information processing apparatus 102 when the image processing apparatus 101 cannot generate an encrypted PDF (when it has no encryption ability or when encrypted communication is set to invalid). The format items of this capability information include JPEG and PDF, but do not include encryptionPDF. This indicates that JPEG and PDF are candidates for the file format of the files generated by the image processing apparatus 101. By interpreting this capability information, the information processing apparatus 102 will not be able to set encrypted PDF in the setting screen.

[0048] Note that although an example where the information encryptionPDF is not transmitted when the image processing apparatus 101 cannot generate an encrypted PDF has been described, it is not limited to this. For example, information indicating that an encrypted PDF cannot be generated (such as not_encryptionPDF) may be transmitted. In that case, by interpreting the information indicating that the information processing apparatus 102 cannot generate an encrypted PDF, the encrypted PDF cannot be set in the setting screen.

[0049] In S505, the CPU 202 of the image processing apparatus 101 transmits the HTTP response data with the response status code "200" with the scanner capability response generated in S504 to the information processing apparatus 102.

[0050] In S506, the CPU 302 of the information processing apparatus 102 displays a scan job setting screen based on the scanner capability response received in S505. If the information included in the received response indicates that the encrypted PDF capability is "available", a scan job screen 601 that allows selection of encrypted PDF settings is displayed. If the information included in the received response indicates that the encrypted PDF capability is "not available", a scan job screen 701 on which encrypted PDF cannot be selected is displayed. Here, the state where encrypted PDF cannot be selected may be a state where encrypted PDF is not displayed as a selection candidate in the file format pull-down 606. Also, it may be a state where encrypted PDF is displayed as a selection candidate in the pull-down 606 but is not selected even when an operation is received. At that time, the option for encrypted PDF may be grayed out.

[0051] The scan job screen 601 is a screen for the user to perform scan settings. The pull-down 602 is a pull-down for setting the color mode, and the options are "Color" and "Monochrome". The pull-down 603 is a pull-down for setting the document type, and the options are "Photo", "Text", and "Text / Photo". The pull-down 604 is a pull-down for setting whether to scan both sides, and the options are "Both Sides" and "Single Side". The pull-down 605 is a pull-down for setting the file format, and the options change according to the capability information received from the image processing apparatus 101. For example, if the image processing apparatus that transmitted the capability information supports encrypted PDF, JPEG, PDF, and encrypted PDF are options. For example, if the image processing apparatus that transmitted the capability information does not support encrypted PDF, JPEG and PDF are options. The input field 607 is an input field for entering a password. The scan button 608 is a button for transmitting the scan job to the image processing apparatus 101. The back button 609 is a button for canceling the settings.

[0052] When the user presses the scan button 608 after performing scan settings on the scan job screen 601 in S507, the CPU 302 of the information processing apparatus 102 generates a scan job (FIG. 15) in S508. This scan job is generated based on the scan settings set on the scan job screen (601, 701). That is, this scan job includes the set values set on the scan job screen.

[0053] The CPU 302 transmits the scan job (FIG. 15) to the image processing apparatus 101 via the network I / F 306. Here, when encrypted PDF is set as the file format on the scan job screen 601, the scan job (FIG. 15(A)) specified with encrypted PDF is transmitted by an HTTPS POST request. When PDF is set as the file format on the scan job screen 701, the CPU 302 transmits the scan job (FIG. 15(B)) by an HTTP POST request.

[0054] In S509, the CPU 202 of the image processing apparatus 101 saves the scan job (FIG. 15) received in S508 in the RAM 203 and executes scan job execution processing (FIG. 16).

[0055] In S510, the CPU 202 of the image processing apparatus 101 transmits response data with a "job ID", which is an ID corresponding to the executed job, to the information processing apparatus 102.

[0056] When the request transmitted in S508 is an HTTPS POST request, HTTP response data with an HTTP response status code "200" is transmitted to the information processing apparatus 102. When the request transmitted in S508 is an HTTP POST request, HTTPS response data with an HTTP response status code "200" is transmitted to the information processing apparatus 102.

[0057] In S511, the CPU 302 of the information processing apparatus 102 displays the scanning screen 610 on the display unit 308. A cancel button 611 is displayed on the scanning screen, and when it is selected, the scanning is stopped.

[0058] When the scanning is completed, in S512, the CPU 202 of the image processing apparatus 101 sets the start address of the image memory corresponding to the scanned image as the image transfer start address of the RAM 203.

[0059] In S513, the CPU 302 of the information processing apparatus 102 transmits an image data request command to the image processing apparatus 101 via the network I / F 306, attaching the "job ID" acquired in S510 and the "transmission size" specifying the size to be transmitted with the response data. Here, when the scan settings are made on the scan job screen 601 (when encrypted communication is possible), the image data request command is transmitted as an HTTPS POST request. When the scan settings are made on the scan job screen 701 (when encrypted communication is not possible), the image data request command is transmitted as an HTTP POST request.

[0060] In S514, the CPU 202 of the image processing apparatus 101 confirms that the job corresponding to the "job ID" notified in S513 is in execution and the image data exists in the image memory. Then, the CPU 202 transmits response data with the image data of the "transmission size" from the image transmission start address of the RAM 203 to the information processing apparatus 102. Then, the CPU 202 resets the image transmission start address to the position incremented by the "transmission size". When S513 is an HTTPS POST request, HTTPS response data with the HTTP response status code "200" is transmitted to the information processing apparatus 102. When S513 is an HTTP POST request, HTTP response data with the HTTP response status code "200" is transmitted to the information processing apparatus 102.

[0061] That is, in the process of S514, a file based on the image data generated by the image processing apparatus 101 scanning the document, a file including the image of the document, such as an encrypted PDF file generated by the image processing apparatus 101, is transmitted to the information processing apparatus 102. The encrypted PDF file generated here is a file encrypted using the password included in the scan settings set in the information processing apparatus 102.

[0062] While there is still image data to be transmitted on the image memory, S513 and S514 are repeated. When all the scanned page image data has been transmitted, the CPU 202 sets the "job result" corresponding to the notified "job ID" to "normal completion".

[0063] In S515, the CPU 302 of the information processing apparatus 102 transmits an image data request command to the image processing apparatus 101 via the network I / F 306, attaching the "job ID" acquired in S510 and the "transmission size" specifying the size to be transmitted with the response data. Here, when scan settings are made on the scan job screen 601 (when encrypted communication is possible), the image data request command is transmitted as an HTTPS POST request. When scan settings are made on the scan job screen 701 (when encrypted communication is not possible), the image data request command is transmitted as an HTTP POST request.

[0064] In S516, the CPU 202 of the image processing apparatus 101 confirms that the "job result" corresponding to the "job ID" of the RAM 203 notified in S515 is "normal completion", and transmits response data which is a scan completion notification to the information processing apparatus 102. When the request transmitted in S515 is an HTTPS POST request, HTTPS response data with an HTTP response status code "404" is transmitted to the information processing apparatus 102. When the request transmitted in S515 is an HTTP POST request, HTTP response data with an HTTP response status code "404" is transmitted to the information processing apparatus 102.

[0065] In S517, the CPU 302 of the information processing apparatus 102 displays a scan completion screen 612 on the display unit 308. A close button 613 is displayed on the scan completion screen 612.

[0066] <First Encrypted PDF Capability Determination Process> FIG. 8 is a flowchart showing an example of a first encrypted PDF capability determination process executed by the CPU 202 of the image processing apparatus 101 in the present embodiment. Each process in the flowchart of FIG. 8 is performed by the CPU 202 of the image processing apparatus 101 reading a program stored in the ROM 204 into the RAM 203 and executing it.

[0067] In S801, the CPU 202 of the image processing apparatus 101 refers to the value stored in the ROM 204 and determines whether the image processing apparatus supports "encrypted PDF". If it supports, the process proceeds to S802. Otherwise, the process proceeds to S805.

[0068] In S802, the CPU 202 of the image processing apparatus 101 determines whether the "HTTPS enabled / disabled" setting stored in the storage 205 is "enabled". That is, it determines whether HTTPS is enabled or disabled for the user. Note that when HTTPS is enabled, if the communication partner of the image processing apparatus 101 does not support HTTPS, communication can be performed via HTTP. Also, when the HTTPS setting is disabled, even if the communication partner of the image processing apparatus 101 requests communication via HTTPS, the communication is cancelled without communicating via HTTPS.

[0069] The "HTTPS enabled / disabled" setting is a setting that can be set by the operation unit 208 or the like of the image processing apparatus, and the CPU 202 receiving this setting corresponds to a setting means for setting whether the receiving means performs encrypted communication.

[0070] If it is determined in S802 that the "HTTPS enabled / disabled" setting is "enabled", the process proceeds to S803. Otherwise, the process proceeds to S805.

[0071] In S803, the CPU 202 of the image processing apparatus 101 determines that the "TLS setting" stored in the storage 205 is "ON". That is, it determines whether the TLS setting is set to be valid or invalid for the user. Note that when the TLS is set to be valid, if the communication partner of the image processing apparatus 101 does not support TLS, it is a state where unencrypted communication or communication using SSL or the like can be performed. Also, when the TLS setting is set to be invalid, even if the communication partner of the image processing apparatus 101 requests communication using TLS, the communication is canceled without using TLS, or communication is performed using SSL or the like.

[0072] Also, the ON / OFF of the "TLS setting" is a setting that can be set by the operation unit 208 or the like of the image processing apparatus, and the CPU 202 receiving this setting corresponds to a setting unit that sets whether the receiving means performs encrypted communication.

[0073] Note that the process of S803 may be executed without performing the process of S802, or the process of S802 may be executed without performing the process of S803.

[0074] If it is determined in S803 that the "TLS setting" is "ON", the process proceeds to S804. Otherwise, the process proceeds to S805.

[0075] In S804, the CPU 202 of the image processing apparatus 101 stores "TRUE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets that there is an encrypted PDF as the determination result. The fact that the image processing apparatus 101 can perform encrypted communication leads to reducing the possibility of the password leaking when receiving the password for generating an encrypted file from the information processing apparatus 102. Therefore, when the image processing apparatus 101 performs encrypted communication, "TRUE" is set in the encrypted PDF determination result in order to enable encrypted PDF to be set as the setting value of the file format of the scan job.

[0076] With S805, the CPU 202 of the image processing apparatus 101 stores "FALSE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets no encrypted PDF as the determination result. In this case, when the image processing apparatus 101 is set not to perform encrypted communication, since an encrypted PDF cannot be set as the file format of the scan job, a password is not transmitted from the information processing apparatus 102. As a result, the possibility of the password leaking when receiving a password for generating an encrypted file from the information processing apparatus 102 is reduced.

[0077] Here, the setting of "HTTPS enabled / disabled" and the ON / OFF setting of "TLS setting" are settings for whether the receiving means of the image processing apparatus 101 that receives a password from the information processing apparatus 102 performs encrypted communication.

[0078] When the process of this flow is executed, the image processing apparatus 101 operates as follows. When the image processing apparatus 101 is set to perform encrypted communication, the CPU 202 transmits information indicating that the encrypted file can be generated to the information processing apparatus 102. Also, when the image processing apparatus 101 is set not to perform encrypted communication, the CPU 202 does not transmit information indicating that the encrypted file can be generated to the information processing apparatus.

[0079] <Second Encrypted PDF Capability Determination Process> FIG. 9 is a diagram showing a flowchart of a second encrypted PDF capability determination process executed by the CPU 202 of the image processing apparatus 101 in this embodiment. Each process in the flowchart of FIG. 9 is performed by the CPU 202 of the image processing apparatus 101 reading a program stored in the ROM 204 into the RAM 203 and executing it.

[0080] In S901, the CPU 202 of the image processing apparatus 101 refers to the value stored in the ROM 204 and determines whether the image processing apparatus supports "encrypted PDF". If it does, the process proceeds to S902. Otherwise, the process proceeds to S906.

[0081] In S902, the CPU 202 of the image processing apparatus 101 determines whether the "HTTPS enabled / disabled" setting stored in the storage 205 is "enabled". That is, it determines whether the user has set HTTPS to be enabled or disabled. Note that when HTTPS is set to be enabled, if the communication partner of the image processing apparatus 101 does not support HTTPS, it can communicate via HTTP. Also, when the HTTPS setting is set to be disabled, even if the communication partner of the image processing apparatus 101 requests communication via HTTPS, the communication is canceled without communicating via HTTPS.

[0082] If it is determined in S902 that the "HTTPS enabled / disabled" setting is set to "enabled", the process proceeds to S903. Otherwise, the process proceeds to S905.

[0083] In S903, the CPU 202 of the image processing apparatus 101 determines whether the "TLS setting" stored in the storage 205 is "ON". That is, it determines whether the user has set the TLS setting to be enabled or disabled. Note that when TLS is set to be enabled, if the communication partner of the image processing apparatus 101 does not support TLS, it can communicate without encryption or via SSL etc. Also, when the TLS setting is set to be disabled, even if the communication partner of the image processing apparatus 101 requests communication via TLS, the communication is canceled without using TLS or communicated via SSL etc. Note that the process of S903 can be executed without executing the process of S902, or the process of S902 can be executed without executing the process of S903.

[0084] If it is determined in S903 that the "TLS setting" is "ON", the process proceeds to S904. Otherwise, the process proceeds to S905.

[0085] In S904, the CPU 202 of the image processing apparatus 101 stores "TRUE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets that there is an encrypted PDF as the determination result. The fact that the image processing apparatus 101 can perform encrypted communication leads to reducing the possibility of password leakage when receiving a password for generating an encrypted file from the information processing apparatus 102. Therefore, when the image processing apparatus 101 performs encrypted communication, in order to enable setting of encrypted PDF as the setting value of the file format of the scan job, "TRUE" is set in the encrypted PDF determination result.

[0086] In S905, the CPU 202 of the image processing apparatus 101 displays the notification screen 1101 in FIG. 11 on the operation panel 208. On the notification screen 1101, information indicating that encrypted communication is disabled is displayed. Further, information prompting to enable TLS setting and HTTPS setting is also displayed. Note that on this notification screen 1101, information indicating that the reason why the user cannot set encrypted PDF as the file format of the scan job is that encrypted communication is disabled may also be displayed. A close button 1102 is displayed on the notification screen 1101.

[0087] In S906, the CPU 202 of the image processing apparatus 101 stores "FALSE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets that there is no encrypted PDF as the determination result. In this case, when the image processing apparatus 101 is set not to perform encrypted communication, since encrypted PDF cannot be set as the file format of the scan job, no password is transmitted from the information processing apparatus 102. This leads to reducing the possibility of password leakage when receiving a password for generating an encrypted file from the information processing apparatus 102. Further, the user can be prompted to enable encrypted communication. Further, the user can know the reason why encrypted PDF cannot be set as the file format of the scan job.

[0088] <The Third Encrypted PDF Capability Determination Process> FIG. 10 is a flowchart showing an example of a third encrypted PDF capability determination process executed by the CPU 202 of the image processing apparatus 101 in this embodiment. Each process in the flowchart of FIG. 10 is performed by the CPU 202 of the image processing apparatus 101 reading a program stored in the ROM 204 into the RAM 203 and executing it.

[0089] In S1001, the CPU 202 of the image processing apparatus 101 refers to the value stored in the ROM 204 and determines whether the image processing apparatus supports "encrypted PDF". If it supports, the process proceeds to S1002. Otherwise, the process proceeds to S1008.

[0090] In S1002, the CPU 202 of the image processing apparatus 101 determines whether the "HTTPS enabled / disabled" setting stored in the storage 205 is "enabled". That is, it determines whether HTTPS is enabled or disabled by the user. Note that when HTTPS is enabled, if the communication partner of the image processing apparatus 101 does not support HTTPS, communication can be performed via HTTP. Also, when the HTTPS setting is disabled, even if the communication partner of the image processing apparatus 101 requests communication via HTTPS, the communication is canceled without communicating via HTTPS.

[0091] If it is determined in S1002 that the "HTTPS enabled / disabled" setting is "enabled", the process proceeds to S1003. Otherwise, the process proceeds to S1005.

[0092] In S1003, the CPU 202 of the image processing apparatus 101 determines whether the "TLS setting" stored in the storage 205 is "ON" or not. That is, it determines whether the TLS setting is effectively set or invalidly set by the user. Note that when TLS is effectively set, if the communication partner of the image processing apparatus 101 does not support TLS, it is a state where unencrypted communication or communication using SSL or the like can be performed. Also, when the TLS setting is invalidly set, even if the communication partner of the image processing apparatus 101 requests communication using TLS, the communication is cancelled without using TLS, or communication is performed using SSL or the like. Note that the process of S1003 may be executed without performing the process of S1002, or the process of S1002 may be executed without performing the process of S1003.

[0093] If it is determined in S1003 that the "TLS setting" is "ON", the process proceeds to S1004. Otherwise, the process proceeds to S1005.

[0094] In S1004, the CPU 202 of the image processing apparatus 101 stores "TRUE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets that there is an encrypted PDF as the determination result. The fact that the image processing apparatus 101 can perform encrypted communication leads to reducing the possibility of the password leaking when receiving the password for generating an encrypted file from the information processing apparatus 102. Therefore, when the image processing apparatus 101 performs encrypted communication, in order to enable setting of encrypted PDF as the setting value of the file format of the scan job, "TRUE" is set in the encrypted PDF determination result.

[0095] In S1005, the CPU 202 of the image processing apparatus 101 displays the selection screen 1103 in FIG. 11 on the operation panel 208. Information indicating that encrypted communication is invalidly set is displayed on the selection screen 1103. Also, a message for confirming whether to enable the encrypted communication setting is displayed. Further, an "OK" button 1104 and a "Cancel" button 1105 are also displayed.

[0096] In S1006, the CPU 202 of the image processing apparatus 101 determines whether the user has pressed the "Yes" button 1104 or the "No" button 1105 on the selection screen 1103. If it is determined in S1006 that the user has pressed the "Yes" button 1104, the process proceeds to S1007. Otherwise, the process proceeds to S1008.

[0097] In S1007, the CPU 202 of the image processing apparatus 101 executes the automatic setting process for encrypted communication (FIG. 12).

[0098] In S1008, the CPU 202 of the image processing apparatus 101 saves "FALSE" in the encrypted PDF determination result in the RAM 203. In other words, the CPU 202 sets that there is no encrypted PDF as the determination result. In this case, when the image processing apparatus 101 is set not to perform encrypted communication, since the encrypted PDF cannot be set as the file format of the scan job, the password is not transmitted from the information processing apparatus 102. As a result, it is possible to reduce the possibility of the password leaking when receiving the password for generating the encrypted file from the information processing apparatus 102.

[0099] Furthermore, when the encrypted communication is set to be invalid, by automatically setting the encrypted communication to be valid, the password transmitted from the information processing apparatus 102 can be received by the encrypted communication.

[0100] <Automatic setting process for encrypted communication> FIG. 12 is a diagram showing a flowchart of the automatic setting process for encrypted communication executed by the CPU 202 of the image processing apparatus 101 in the present embodiment. Each process in the flowchart of FIG. 12 is performed by the CPU 202 of the image processing apparatus 101 reading the program stored in the ROM 204 into the RAM 203 and executing it. In the present embodiment, it is assumed that an encrypted communication setting table (FIG. 13) in which the combination of settings necessary for the image processing apparatus 101 to enable HTTPS communication is listed in the JSON format of "encrypted setting item name": "setting value" is stored in the ROM 204.

[0101] In S1201, the CPU 202 of the image processing apparatus 101 lists the encryption communication setting table (FIG. 13) stored in the ROM 204, and stores the encryption communication setting list with the reference position at the head and the head element of the encryption communication setting list in the RAM 203.

[0102] In S1202, the CPU 202 of the image processing apparatus 101 obtains the encryption setting item name from the encryption communication setting data, and determines whether the same setting item exists in the storage 205. In this embodiment, for convenience, the encryption setting item names are "HTTPS enabled / disabled" and "TLS setting", but it is desirable to manage them with unique IDs such as "id_setting_http_enable" and "id_setting_tls".

[0103] If it is determined in S1202 that the same setting item as the encryption setting item name exists in the storage 205, the process proceeds to S1203. Otherwise, the process proceeds to S1205.

[0104] In S1203, the CPU 202 of the image processing apparatus 101 determines whether the setting value of the encryption communication setting data is different from the setting value of the setting item corresponding to the encryption setting item name of the encryption communication setting data stored in the storage 205.

[0105] If it is determined in S1203 that the setting value of the encryption communication setting data is different from the setting value of the setting item corresponding to the encryption setting item name of the encryption communication setting data stored in the storage 205, the process proceeds to S1204. Otherwise, the process proceeds to S1205.

[0106] In S1204, the CPU 202 of the image processing apparatus 101 stores the setting value of the encryption communication setting data in the setting item corresponding to the encryption setting item name of the encryption communication setting data in the storage 205. That is, the CPU 202 can automatically enable the encryption communication.

[0107] In S1205, the CPU 202 of the image processing apparatus 101 determines whether the reference position of the encryption communication setting list is at the end of the list.

[0108] If it is determined in S1205 that the reference position of the encrypted communication list is at the end of the list, the process ends. If it is determined that it is not at the end of the list, proceed to S1206.

[0109] In S1206, the CPU 202 of the image processing apparatus 101 rewrites the reference position of the encrypted communication list one position backward, and stores the element at the reference position of the encrypted communication list in the RAM 203 as encrypted communication setting data.

[0110] <Scan job execution process> FIG. 16 is a diagram showing a flowchart of a scan job execution process executed by the CPU 202 of the image processing apparatus 101 in this embodiment. Each process in the flowchart of FIG. 16 is performed by the CPU 202 of the image processing apparatus 101 reading a program stored in the ROM 204 into the RAM 203 and executing it.

[0111] In S1601, the CPU 202 of the image processing apparatus 101 generates scan job information including a job ID based on the scan job stored in the RAM 203, and stores the scan job information in the RAM 203.

[0112] In S1602, the CPU 202 of the image processing apparatus 101 executes a scan job by the job control unit 403 based on the scan job information stored in the RAM 203. When the scan job is executed, the CPU 202 instructs the scanner 212 to start scanning corresponding to the scan job information via the scan controller 211. Then, the CPU 202 stores the image data generated by scanning the image of the document by the scanner 212 in a continuous area of the RAM 203 line by line. When scanning all of one page of the document, the CPU 202 executes a one-page scan process of creating page information in which the area of the image data in the RAM 203 is associated with a page number obtained by sequentially adding 1 to the number of scanned pages starting from 1. Further, when the CPU 202 of the image processing apparatus 101 receives an image data request from the information processing apparatus 102, the CPU 202 checks whether page information exists in the RAM 203. Then, the CPU 202 executes an image data transmission process of identifying the area of the image data from the page information with the smallest page number and transmitting the image data to the information processing apparatus 102. When all of the image data for one page is transmitted to the information processing apparatus 102, the CPU 202 of the image processing apparatus 101 deletes the page information and the corresponding image data from the RAM 203. Generally, in continuous scanning using an ADF (Auto Document Feeder), the CPU 202 of the image processing apparatus 101 executes the one-page scan process and the image data transmission process in parallel.

[0113] The scan job executed in S1602 is based on the scan settings configured in the information processing apparatus 102. The scanner 212 and the CPU 202 scan the image of the document based on the scan settings and generate image data and files. For example, a case where encrypted PDF is set as the file format in the information processing apparatus 102, the password is set to ABC, and the resolution is set to 300 dpi will be described. The scanner scans the image of the document at a reading resolution of 300 dpi to generate image data. Then, the CPU 202 generates an encrypted PDF file based on the generated image data. Here, the password of the generated encrypted PDF is ABC, and when viewing this encrypted PDF with a PDF viewer or the like, entering the password (ABC) enables viewing.

[0114] In S1603, when the scan job is completed, the CPU 202 of the image processing apparatus 101 saves a "job result" in which the job ID is associated with the job end cause corresponding to the cause of the job completion in the storage 205. Examples of job end causes include "normal completion" where image data transmission is completed, "jam" where the job ends due to paper jamming in the document feeder, and "transmission error" where the job is ended due to a communication disconnect with the information processing apparatus 102 during image data transmission.

[0115] <Encrypted PDF Redirect Scan Sequence> FIG. 17 is a diagram showing the sequence of encrypted PDF redirect scan executed by the image processing apparatus 101 and the information processing apparatus 102 according to an embodiment of the present invention.

[0116] In the example of this sequence, it is assumed that the following conditions are met. First, the user starts the scan application from the operation unit 307 of the information processing apparatus 102 in advance, and the scan application performs network search. Then, the image processing apparatus 101 connected to the same network as the information processing apparatus 102 is displayed in the scanner list on the scan application. And it is assumed that the "HTTPS enabled / disabled" setting in the storage 205 of the image processing apparatus 101 is set to "disabled" and the "TLS setting" is set to "OFF", and the state is such that HTTPS communication is impossible.

[0117] When the user selects the image processing apparatus 101 in the scanner list using the operation unit 307 of the information processing apparatus 102 in S1701, in S1702, the CPU 302 of the information processing apparatus 102 sends a scanner capability request to the image processing apparatus 101 as an HTTP GET request.

[0118] In S1703, the CPU 202 of the image processing apparatus 101 executes an encrypted PDF determination process (Figure 8).

[0119] In S1704, the CPU 202 of the image processing apparatus 101 acquires the encrypted PDF determination result, which is the result of the encrypted PDF determination process executed in S1703, from the RAM 203, and generates a scanner capability response (Figure 14(A)).

[0120] In S1705, the CPU 202 of the image processing apparatus 101 sends HTTP response data with a response status code "200" to which the scanner capability response generated in S1704 is attached to the information processing apparatus 102.

[0121] In S1706, the CPU 302 of the information processing apparatus 102 displays the scan job screen 601 based on the scanner capability response received in S1705.

[0122] After the user makes scan settings on the scan job screen 601 in S1707, the user presses the scan button 608. In S1708, the CPU 302 of the information processing apparatus 102 generates a scan job (FIG. 15(A)) based on the scan settings set on the scan job screen 601. The scan job (FIG. 15(A)) is transmitted to the image processing apparatus 101 via the network I / F 306 as an HTTP POST request.

[0123] In S1709, the CPU 302 of the information processing apparatus 102 displays the selection screen 1103.

[0124] When the user presses the "Yes" button 1104 on the selection screen 1103 in S1710, in S1711, the CPU 202 of the image processing apparatus 101 executes the automatic setting process for encrypted communication (FIG. 12).

[0125] In S1712, the CPU 202 of the image processing apparatus 101 transmits HTTP response data with a response status code "301" to the information processing apparatus 102.

[0126] In S1713, the CPU 302 of the information processing apparatus 102 transmits the scan job (FIG. 15(A)) generated in S1708 to the image processing apparatus 101 via the network I / F 306 as an HTTPS POST request.

[0127] In S1714, the CPU 202 of the image processing apparatus 101 displays the password re-entry screen 1801 on the operation panel 208. On the password re-entry screen 1801 in FIG. 18, an input field 1802 for the user to enter a password is displayed. When the OK button 1803 is selected with a password entered in the input field 1802, an encrypted PDF is generated using the entered password.

[0128] At S1715, the user presses the OK button 1803 on the password re - entry screen 1801 in S1715. At S1716, the CPU 202 of the image processing apparatus 101 rewrites the password of the scan job (FIG. 15(A)) received at S1708 with the password entered in the input field 1802. Then, the CPU 202 stores the scan job after password rewriting in the RAM 203 and executes the execution process of the scan job (FIG. 16). Here, when the input field 1802 is blank, the CPU 202 stores the scan job (FIG. 15(A)) in the RAM 203 without rewriting the password.

[0129] At S1717, the CPU 202 of the image processing apparatus 101 transmits HTTPS response data with the HTTP response status code "200" with a "job ID", which is the ID corresponding to the job executed at S1716, to the information processing apparatus 102.

[0130] At S1718, the CPU 302 of the information processing apparatus 102 displays the scanning screen 610 on the display unit 308.

[0131] When the scan is completed, at S1719, the CPU 202 of the image processing apparatus 101 sets the start address of the image memory corresponding to the scanned image as the image transfer start address in the RAM 203.

[0132] At S1720, the CPU 302 of the information processing apparatus 102 transmits an image data request command with the "job ID" and "transmission size" obtained at S1717 to the image processing apparatus 101 via the network I / F 306 as an HTTPS POST request.

[0133] In S1721, the CPU 202 of the image processing apparatus 101 checks that the job corresponding to the "job ID" notified in S1719 is being executed and that the image data exists in the image memory. Then, it transmits HTTPS response data with an HTTP response status code of "200" to which image data for the "transmission size" notified in S1720 is added from the image transmission start address of the RAM 203 to the information processing apparatus 102. Then, it resets the image transmission start address to the position incremented by the "transmission size". While there is still a scanned image to be transmitted on the image memory, S513 and S514 are repeated. When the image data of all scanned pages has been completely transmitted, the "job result" corresponding to the "job ID" notified in S513 of the RAM 203 is set to "normal completion".

[0134] In S1722, the CPU 302 of the information processing apparatus 102 transmits an image data acquisition request command with the "job ID" and "transmission size" acquired in S1717 to the image processing apparatus 101 via the network I / F 306 as an HTTPS POST request.

[0135] In S1723, the CPU 202 of the image processing apparatus 101 checks that the "job result" corresponding to the "job ID" notified in S1721 is "normal completion". Then, it transmits HTTPS response data with an HTTP response status code of "404" to the information processing apparatus 102.

[0136] In S1724, the CPU 302 of the information processing apparatus 102 displays a scan completion screen 612 on the display unit 308.

[0137] In this embodiment, as a method for controlling a scan function that requires receiving secure information in remote scanning, an encrypted PDF scan sequence is shown, but it is not limited to this. For example, when the encrypted communication setting of the scan application is "always perform encrypted communication", even if the image processing apparatus 101 notifies that it has encrypted PDF capabilities, it may be made impossible to select encrypted PDF.

[0138] As described above, it is possible to reduce the possibility of the password leaking when the image processing apparatus generates an encrypted file based on the password transmitted by the information processing apparatus.

[0139] <Other Embodiments> The present invention supplies a program that realizes one or more functions of the above-described embodiment to a system or apparatus via a network or a storage medium. Then, it can also be realized by a process in which one or more processors in a computer of the system or apparatus read and execute the program. Further, it can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

Explanation of Signs

[0140] 101 Image processing apparatus 102 Information processing apparatus 212 Scanner

Claims

1. a receiving means; a transmitting means; a setting means for setting whether the receiving means performs encrypted communication; a scanning means for scanning an image of a document; a generating means for generating a file including the image and encrypted using a password received by the receiving means from an information processing apparatus; when the setting means sets the receiving means to perform the encrypted communication, the transmitting means transmits information indicating that the encrypted file can be generated to the information processing apparatus; An image processing apparatus, wherein when the setting means sets the receiving means not to perform the encrypted communication, the transmitting means does not transmit information indicating that the encrypted file can be generated to the information processing apparatus.

2. The image processing apparatus according to claim 1, further comprising a transmitting means for transmitting the encrypted file generated by the generating means to the information processing apparatus.

3. when the setting means sets the receiving means to perform the encrypted communication, as a response to a request for capability information received by the receiving means from the information processing apparatus, the transmitting means transmits information indicating that the encrypted file can be generated to the information processing apparatus; An image processing apparatus according to claim 1, wherein when the setting means sets the receiving means not to perform the encrypted communication, as a response to a request for capability information received by the receiving means from the information processing apparatus, the transmitting means does not transmit information indicating that the encrypted file can be generated to the information processing apparatus.

4. when the setting means sets the receiving means to perform the encrypted communication, as a response to a request for capability information received by the receiving means from the information processing apparatus, the transmitting means transmits capability information including information indicating that the encrypted file can be generated to the information processing apparatus; An image processing apparatus according to claim 1, wherein when the setting means sets the receiving means not to perform the encrypted communication, as a response to a request for capability information received by the receiving means from the information processing apparatus, the transmitting means transmits capability information not including information indicating that the encrypted file can be generated to the information processing apparatus.

5. The image processing apparatus according to claim 1, wherein the encrypted communication is communication using HTTPS.

6. The image processing apparatus according to claim 1, wherein the encrypted communication is communication using TLS.

7. Further comprising display means, when the setting means sets the receiving means not to perform the encrypted communication, the display means displays information indicating that the encrypted communication has been disabled when the receiving means receives a request for capability information from the information processing apparatus. The image processing apparatus according to claim 1.

8. A receiving step, A transmitting step, A setting step of setting whether to perform encrypted communication in the receiving step, A scanning step of scanning an image of a document, A generating step of generating a file including the image and encrypted using a password received from an information processing apparatus in the receiving step, in the setting step, when it is set to perform the encrypted communication in the receiving step, information indicating that the encrypted file can be generated in the transmitting step is transmitted to the information processing apparatus, An image processing method characterized in that, in the setting step, when it is set not to perform the encrypted communication in the receiving step, information indicating that the encrypted file can be generated in the transmitting step is not transmitted to the information processing apparatus.

9. A program for causing a computer to execute each means of the image processing apparatus according to claim 1.

Images