Image log management system and processing method for image log management system

Abstract

To enable notification that a risk of information leakage is included before a job is executed.SOLUTION: A server includes: storage means for storing submitted job information; and first notification means for providing a notification that a risk of information leakage is included if it is determined based on determination processing for the job information stored by the storage means. An image forming device includes: acquisition means for acquiring a job from the server based on a first job execution instruction; execution means for executing the acquired job or a job based on a second job execution instruction; and transmission means for transmitting information on the executed job to the server. The server includes second notification means for executing determination processing for the job information received from the image forming device if information corresponding to the job information received from the image forming device is not stored by the storage means, and providing a notification that a risk of information leakage is included if it is determined.SELECTED DRAWING: Figure 5

Description

Technical Field

[0001] The present disclosure relates to an image log management system and a processing method for the image log management system.

Background Art

[0002] Conventionally, there has been an auditing system that generates a job log including image data when executing a job such as printing in an image forming apparatus and transmits it to a server to realize auditing. In this auditing system, for jobs such as printing, copying, scanning, and FAX executed by the image forming apparatus, a job log including image data can be recorded.

[0003] Also, there is a printing system in which print data is submitted from a client terminal to a server, and the server transmits the print data in response to a request from a printer to realize printing.

[0004] Also, when the communication load from the image forming apparatus to the auditing system is high, there is a technique for reducing the communication load due to job log transmission by transmitting the job log from the printing system to the auditing system (see, for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0006] However, in the above auditing system, for any job process, a job log including image data is uniformly recorded after the job execution. Therefore, there is a problem that even if the submission of print data is early, the auditing system does not operate until after the execution.

[0007] For example, assume that an audit system has a system that performs information leakage risk analysis based on job logs and notifies an administrator when it determines that there is an information leakage risk. Although this notification can reduce the information leakage risk by notifying the administrator as soon as possible, the administrator will not be notified at the timing when print data with an information leakage risk is submitted.

[0008] An object of the present disclosure is to be able to notify that an information leakage risk is included in job information before the execution of a job.

Means for Solving the Problems

[0009] An image log management system includes a server and an image forming apparatus. The server includes a storage means for storing information of a submitted job, a determination means for executing a determination process for determining whether or not an information leakage risk is included in the job information, and a first notification means for notifying that an information leakage risk is included based on the determination process for the job information stored by the storage means. The image forming apparatus includes an acquisition means for acquiring a job from the server based on a first job execution instruction, an execution means for executing the job acquired by the acquisition means or a job based on a second job execution instruction, and a transmission means for transmitting information of the job executed by the execution means to the server. The server includes a second notification means for executing the determination process on the information of the job received from the image forming apparatus when information corresponding to the information of the job received from the image forming apparatus is not stored by the storage means, and for notifying that an information leakage risk is included when it is determined that an information leakage risk is included.

Effects of the Invention

[0010] According to the present disclosure, it is possible to notify that an information leakage risk is included in job information before the execution of a job.

Brief Description of the Drawings

[0011]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Embodiments for Carrying Out the Invention

[0012] Hereinafter, embodiments will be described with reference to the drawings.

[0013] (First Embodiment) FIG. 1 is a diagram showing a configuration example of an image log management system 110 according to the first embodiment. The image log management system 110 includes a network 100, an image forming apparatus 101, a server 102, and a client terminal 103.

[0014] Network 100 is a communication network. An image forming apparatus 101, a server 102, and a client terminal 103 are connected to the network 100. The network 100 may be, for example, the Internet, a LAN, a WAN, a telephone line, a dedicated digital line, an ATM, or the like. Further, the network 100 may be a communication network realized by a combination of these. In the present embodiment, one image forming apparatus 101, one server 102, and one client terminal 103 are described, but a plurality of each device may be connected to the network 100.

[0015] The image forming apparatus 101 has functions such as scanning, printing, copying, FAXing, and transmitting, and executes a job according to a user's operation. Further, the image forming apparatus 101 has a function of acquiring a job from the server 102 and performing image processing such as printing. To realize these functions, the image forming apparatus 101 may be a digital multi-function peripheral (MFP).

[0016] The server 102 has functions of managing the image forming apparatus 101, managing users, managing print jobs, and managing job histories. The server 102 shown here is mainly assumed to be an application server realized on a cloud platform. The image forming apparatus 101 and the client terminal 103 realize various functions by communicating with an application server realized on a cloud platform. Further, the server 102 may be realized by a general single information processing apparatus server.

[0017] The client terminal 103 is a terminal used when accessing the server 102 via a web browser. A document possessed by the client terminal 103 is submitted to the server 102, and the document is printed from the image forming apparatus 101 via the server 102.

[0018] FIG. 2 is a block diagram showing an example of the hardware configuration of each of the image forming apparatus 101, the server 102, and the client terminal 103 in FIG. 1. The hardware configuration of a general information processing apparatus can be applied to the image forming apparatus 101, the server 102, and the client terminal 103, respectively.

[0019] The image forming apparatus 101 includes a bus 200, a CPU 201, a ROM 202, a RAM 203, a storage device 204, a communication device 205, an input device 206, a display device 207, a scanner device 208, and a printer device 209. The server 102 and the client terminal 103 have the same configuration as the image forming apparatus 101, but may not have the scanner device 208 and the printer device 209.

[0020] The CPU 201 comprehensively controls the entire hardware and controls each component connected to the bus 200 to execute each function such as printing and scanning.

[0021] The ROM 202 is a read-only memory for data and stores, for example, a basic control program executed by the CPU 201.

[0022] The RAM 203 is a memory capable of reading / writing data and is used, for example, as a working memory of the CPU 201.

[0023] The storage device 204 is used as a storage area for temporary data and permanent data while the CPU 201 is executing each program. For example, the storage device 204 often uses an HDD, but may be a device capable of reading / writing data by loading an external medium such as an SSD, a CD, a DVD, or a memory card.

[0024] The communication device 205 connects to the network 100 in FIG. 1 and enables data communication between devices by TCP / IP.

[0025] The input device 206 is an operation unit for receiving input operations of characters and data by the user. For example, the input device 206 is a keyboard, a mouse, a hard key, or a touch panel.

[0026] The display device 207 is a device for displaying various screens, and is, for example, a liquid crystal display or a touch panel. The user gives an instruction on the user interface screen displayed on the display device 207 via the input device 206. For example, the instruction is a job execution instruction to the image forming apparatus 101, a setting instruction for the server 102, or the like.

[0027] In addition, a scanner device 208 and a printer device 209 are connected to the bus 200 in the image forming apparatus 101.

[0028] FIG. 3 is a block diagram showing a functional configuration example of the image forming apparatus 101 in FIG. 1. The functional configuration described in FIG. 3 is realized by the CPU 201 reading out a program stored in the ROM 202 into the RAM 203 and executing it. Also, descriptions of functional configurations not related to the present embodiment are omitted.

[0029] The image forming apparatus 101 includes a job control unit 301, a setting management unit 302, a communication unit 303, a job log generation unit 304, and a UI control unit 305.

[0030] The job control unit 301 performs processing related to generation of an output from the printer device 209 of the image forming apparatus 101 and processing related to generation of an input from the scanner device 208. In addition, the job control unit 301 is generally responsible for control related to input / output jobs of the image forming apparatus 101 such as copying and FAX transmission / reception.

[0031] The setting management unit 302 manages settings related to input / output jobs of the image forming apparatus 101. For example, setting of the resolution of the input process from the scanner device 208 is also under the management of the setting management unit 302.

[0032] The communication unit 303 is responsible for communication processing that connects the image forming apparatus 101 to others. For example, the communication unit 303 receives a print job from the server 102.

[0033] The job log generation unit 304 generates job log information including the image of the job processed by the job control unit 301. The job log generation unit 304 transmits the generated job log information to the server 102 via the communication unit 303.

[0034] The UI control unit 305 performs control related to the user interface of the input device 206 and the display device 207 of the image forming apparatus 101. For example, the UI control unit 305 displays an operation screen on the display device 207 for the user to change the resolution setting of the input process of the scanner device 208.

[0035] FIG. 4 is a block diagram showing a functional configuration example of the server 102 in FIG. 1. The functional configuration described in FIG. 4 is realized by the CPU 201 reading a program stored in the storage device 204 into the RAM 203 and executing it. Also, the server 102 described this time is a server that provides functions to enterprises or groups that use the service, and the unit that provides the functions is called a tenant.

[0036] The server 102 includes a user management unit 401, a device management unit 402, a job management unit 403, a setting management unit 404, a risk analysis unit 405, a UI control unit 406, and a communication unit 407.

[0037] The user management unit 401 manages the users who use the server 102 in tenant units. The administrator registers the users who want to use the server 102 in the tenant. The registered users can use the functions provided by the server 102. The functions provided are, for example, cloud print functions such as uploading a document to be printed on the server 102 and printing from the devices registered in the server 102.

[0038] The device management unit 402 manages the devices that use the server 102 on a tenant-by-tenant basis. A user or an administrator registers the devices to be managed by the server 102 with a tenant. The user can use the functions provided by the server 102 from the registered devices.

[0039] The job management unit 403 manages the jobs submitted to the server 102 on a tenant-by-tenant basis. Also, the job management unit 403 manages the job logs of the image forming apparatus 101. The detailed content of the job logs will be described later with reference to FIG. 11.

[0040] The setting management unit 404 manages the setting values of the functions provided by the server 102. For example, the setting management unit 404 manages the setting of conditions for which the risk analysis unit 405 described later determines an information leakage risk.

[0041] The risk analysis unit 405 calculates the information leakage risk for the jobs executed by the user and determines whether the job has an information leakage risk equal to or higher than a threshold value. Specifically, the information leakage risk is that the content of the printed matter contains personal information or corporate confidential information. The risk analysis unit 405 may be able to set keywords for identifying them. In addition, the risk analysis unit 405 may include matters other than the content of the printed matter, such as use during late-night hours or use on holidays, as determination conditions.

[0042] The UI control unit 406 controls the screen to be displayed on the web browser for the UI and UI operations required for the functions provided by the server 102.

[0043] The communication unit 407 controls all communication processes of the server 102. Specifically, the transmission and reception related to the printing process with the devices registered in the device management unit 402 are performed via the communication unit 407.

[0044] FIG. 11 shows an example of a job log list managed by the job management unit 403 of the server 102 according to the first embodiment. The job log list is a list of information regarding the job information of each job. The target jobs are the jobs executed by the device management unit 402 and the jobs submitted to the job management unit 403.

[0045] Each item of the job log has a job ID, a job name, a user name, an execution date and time, a job type, a risk analysis result, a status, and an image path.

[0046] The job ID is an ID that uniquely identifies the job managed by the job management unit 403.

[0047] The job name indicates the name of the executed job. A job without a job name may be set as "no name". For example, for a job imported by scanning or copying, since there is no original file name or the like, the job name is set as "no name".

[0048] The user name indicates the user name of the user who executed the job. The user referred to here is the user managed by the user management unit 401.

[0049] The execution date and time indicates the date and time when the job was executed or submitted. At this time, when the job submission and execution have the same job ID, if the job is executed after being submitted, the execution date and time may be overwritten.

[0050] The job type indicates the type of the job. For example, the job types include print, copy, scan, FAX transmission, FAX reception, etc.

[0051] The status indicates the state of the job. For example, the status includes completed, submitted (waiting for output), etc. For example, when a submitted job is printed, the execution date and time and the status are updated. Alternatively, the status may be added to the job list as information separate from the submitted job information.

[0052] The image path indicates the path to the location where the image of the executed job is stored. The job management unit 403 can refer to the image of the executed job based on the image path.

[0053] Figure 5 is a flowchart showing the processing method of the server 102. Hereinafter, the processing when a user submits a job to the server 102 via the client terminal 103 is shown. The server 102 can receive the submission of the job through the submission screen displayed by the UI control unit 406 via the web browser of the client terminal 103.

[0054] In step S501, the job management unit 403 functions as a storage unit and stores the job submitted by the user via the web browser of the client terminal 103. The job includes the job name, user name, job type, and job image in FIG. 11.

[0055] In step S502, the job management unit 403 records (stores) the job log (job information) of the job submitted in step S501 in the job log list in FIG. 11. Specifically, the job management unit 403 records the information of the job log list as shown in FIG. 11.

[0056] In step S503, the risk analysis unit 405 performs a risk analysis of the job information recorded in step S502. The specific processing of the risk analysis will be described later in the description of FIG. 6.

[0057] With the above, the flowchart at the time of submission in FIG. 5 ends.

[0058] Figure 6 is a flowchart showing the details of the processing in step S503 of FIG. 5. Hereinafter, the processing in which the risk analysis unit 405 performs a risk analysis on the job passed from the job management unit 403 is shown.

[0059] In step S601, the risk analysis unit 405 functions as a determination unit and executes a determination process to determine whether the job information recorded in step S502 includes an information leakage risk. The job information shown here refers to the job name, user name, execution date and time, job type, etc. shown in FIG. 11.

[0060] For example, when the job name contains a string such as "Printing for taking out is strictly prohibited", the risk analysis unit 405 determines that an information leakage risk is included. Also, when the execution date and time is in the late-night time zone outside normal business hours, the risk analysis unit 405 determines that an information leakage risk is included. These determination conditions may be defined in advance by the image log management system 110, or may be set by the administrator via the setting management unit 404. If the job information includes an information leakage risk, the process proceeds to step S602. If the job information does not include an information leakage risk, the process proceeds to S604.

[0061] In step S604, the risk analysis unit 405 refers to the image path of the job in the job log list of FIG. 11 from the job management unit 403 and extracts character information from the image of the job. Specifically, the risk analysis unit 405 extracts the character information in the image by using OCR (Optical Character Recognition) technology.

[0062] In step S605, the risk analysis unit 405 determines whether the character information extracted in step S604 includes an information leakage risk. When the character information includes a string similar to the job name shown in step S601, the risk analysis unit 405 determines that an information leakage risk is included. Similar to step S601, the administrator may be able to set the determination conditions via the setting management unit 404. If the character information includes an information leakage risk, the process proceeds to step S602. If the character information does not include an information leakage risk, the process proceeds to step S606.

[0063] In step S602, the risk analysis unit 405 records "Yes" in the risk analysis result column, which is the job information of the job in the job log list of FIG. 11, via the job management unit 403. That is, the risk analysis unit 405 records, as job information, that the job includes an information leakage risk.

[0064] Next, in step S603, the risk analysis unit 405 functions as a notification unit, refers to the administrator information managed by the user management unit 401, and notifies (sends) the risk analysis result to the administrator via the communication unit 407. For example, the user management unit 401 may store the email address in advance as user information, and the risk analysis unit 405 may send the risk analysis result to the email address via the communication unit 407. After that, the processing of the flowchart in FIG. 6 ends.

[0065] In step S606, the risk analysis unit 405 records "No" in the risk analysis result column, which is the job information of the job in the job log list of FIG. 11, via the job management unit 403. That is, the risk analysis unit 405 records, as job information, that the job does not include an information leakage risk. After that, the processing of the flowchart in FIG. 6 ends.

[0066] FIG. 7 is a flowchart showing a processing method of the image forming apparatus 101. Hereinafter, the processing when the image forming apparatus 101 prints an input job is shown.

[0067] In step S701, the job control unit 301 functions as an acquisition unit, and acquires an input job and job information from the job management unit 403 of the server 102 via the communication unit 303 in response to an operation of the user's cloud job execution instruction. The job information shown here indicates a job ID or the like assigned by the job management unit 403 of the server 102.

[0068] In step S702, the job control unit 301 functions as an execution unit and executes (outputs) the submitted job acquired in step S701 (cloud job execution). For example, the job control unit 301 prints the image included in the submitted job by executing the submitted job (cloud printing).

[0069] Note that in addition to the above-described cloud printing, the image forming apparatus 101 can also perform local printing. The job control unit 301 executes a job based on a local job execution instruction in response to an operation of a user's local job execution instruction (local job execution). For example, the job control unit 301 prints the image included in the job by executing the job (local printing).

[0070] With the above, the flowchart of the submitted job printing in FIG. 7 ends.

[0071] FIG. 8 is a flowchart showing a processing method of the image forming apparatus 101. Hereinafter, processing for generating a job log after the image forming apparatus 101 performs the job execution in FIG. 7 is shown.

[0072] In step S801, the job log generation unit 304 generates a job log of the job executed by cloud job execution or local job execution in FIG. 7. The generated job log includes job information and a job image shown in FIG. 11. The generation of the job image is performed by conversion into an image file in a general format or the like.

[0073] In step S802, the job log generation unit 304 functions as a transmission unit and transmits the job log generated in step S801 to the server 102 via the communication unit 303.

[0074] With the above, the flowchart of the job log generation in FIG. 8 ends.

[0075] FIG. 9 is a flowchart showing a processing method of the server 102. Hereinafter, processing when the server 102 receives a job log from the image forming apparatus 101 is shown.

[0076] In step S901, the job management unit 403 records the job log received from the image forming apparatus 101 in the job log list of FIG. 11. The recorded job log is recorded as a job log list as shown in FIG. 11.

[0077] Next, in step S902, the job management unit 403 determines whether the job recorded in step S901 is the job saved in step S501 and has already been recorded as a job log in step S502. Specifically, the job management unit 403 checks whether a job with the same job ID has already been recorded in the job log list of FIG. 11 in the job management unit 403. If it has already been recorded, the processing of the flowchart in FIG. 9 ends. If it has not been recorded, the processing proceeds to step S903.

[0078] That is, since the job executed by the cloud job is the job submitted in step S501, the processing of the flowchart in FIG. 9 ends. Since the job executed by the local job is not the job submitted in step S501, the processing proceeds to step S903.

[0079] In step S903, the risk analysis unit 405 performs a risk analysis on the job log received from the above-mentioned image forming apparatus 101. The specific risk analysis process is the process of the flowchart in FIG. 6.

[0080] With the above, the flowchart at the time of receiving the job log in FIG. 9 ends.

[0081] In this embodiment, the risk analysis step S503 at the time of job submission and the risk analysis step S903 at the time of job log reception are the same analysis process. When performing risk analysis at the time of job submission, it is assumed that no analysis is performed at the time of job log reception. However, the conditions for both risk analyses may be set separately. In that case, for a job that has been determined to have an information leakage risk through risk analysis at the time of job submission, risk analysis may not be performed at the time of job log reception. For example, by setting the conditions for risk analysis at the time of job submission to be conditions with a higher information leakage risk than at the time of job log reception, it is possible to obtain an information leakage result notification at an earlier stage for only jobs with a higher information leakage risk.

[0082] Also, for a job that has been notified of the risk analysis result through risk analysis at the time of job submission, it may be notified again at the time of job log reception.

[0083] Also, in the description of FIG. 5, it was described that the job management unit 403 can receive job submissions through the submission screen displayed by the UI control unit 406 via a web browser. This is an example of a submission method, and for example, a submission method via a printer driver for cloud printing may also be used. Also, a submission method via a dedicated printing application for a smartphone from a client terminal 103 such as a smartphone may also be used.

[0084] According to this embodiment, when there is a job with an information leakage risk, if there is already a submitted job (print data), the administrator can receive a notification immediately without waiting for execution on the image forming apparatus 101.

[0085] (Second Embodiment) In the first embodiment, an example was described in which when a job (print data) is submitted, a risk analysis of information leakage is performed based on the submitted job, and for other job data, a risk analysis of information leakage is performed based on the job log transmitted from the image forming apparatus 101. Thereby, when there is a job with an information leakage risk, if there is already a submitted job, the administrator can receive a notification immediately without waiting for execution on the image forming apparatus 101.

[0086] However, it is difficult for the administrator to notice that the job has been properly deleted without being output (executed) afterwards. The administrator has to regularly view the job list to check whether the job has been deleted, which causes trouble.

[0087] In the second embodiment, in addition to the first embodiment, when a user deletes a job having an information leakage risk, a notification is sent to the administrator. As a result, the administrator can easily notice that the job having an information leakage risk has been properly deleted without being output.

[0088] Note that all the configurations and processes of the second embodiment not specifically stated are the same as those of the first embodiment.

[0089] FIG. 12 shows an example of a job log list managed by the job management unit 403 of the server 102 according to the second embodiment. The job log list in FIG. 12 is a list of information regarding the job information of each job.

[0090] The status, which is an item indicating the status of a job, includes "deleted (no output)" in addition to "completed" and "submitted (awaiting output)". "Deleted (no output)" indicates the status when a user deletes a job in the "submitted (awaiting output)" state.

[0091] FIG. 10 is a flowchart showing a processing method of the server 102 according to the second embodiment. Hereinafter, the processing when a user deletes submitted data is shown.

[0092] In step S1001, the job management unit 403 changes the status of the job information of the job deleted by the user from the server 102 to "deleted" in the job log list of FIG. 12.

[0093] Next, in step S1002, the risk analysis unit 405 determines whether or not the risk analysis result of the job information of the job deleted by the user from the server 102 in the job log of FIG. 12 is "yes". If the risk analysis result is "yes", the process proceeds to step S1103. If the risk analysis result is "no", the process of the flowchart in FIG. 10 ends.

[0094] In step S1003, the risk analysis unit 405 refers to the administrator information managed by the user management unit 401 and notifies (transmits) the administrator that the submitted job including the information leakage risk has been deleted via the communication unit 407.

[0095] With the above, the flowchart at the time of job log reception in FIG. 10 ends.

[0096] According to this embodiment, the administrator can easily notice that the job having the information leakage risk has been appropriately deleted without being output (executed).

[0097] According to the first and second embodiments, in cloud job execution, when a job is submitted, the server 102 performs information leakage risk analysis based on the submitted job. Further, in local job execution, the server 102 performs information leakage risk analysis based on the job log transmitted from the image forming apparatus 101. Thereby, when there is a job including an information leakage risk, if there is already a submitted job, the administrator can immediately receive a notification without waiting for the job execution in the image forming apparatus 101.

[0098] (Other Embodiments) The present disclosure can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or apparatus via a network or a storage medium and causing one or more processors in a computer of the system or apparatus to read and execute the program. Further, it can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

[0099] Note that the above-described embodiments are merely specific examples for implementing the present disclosure, and the technical scope of the present disclosure is not limitedly interpreted by these. That is, the present disclosure can be implemented in various forms without departing from its technical idea or its main features.

[0100] The disclosure of this embodiment includes the following configurations and methods. (Configuration 1) A server and, an image forming apparatus, having, wherein the server, storage means for storing information of the submitted job, determination means for executing a determination process to determine whether or not the information of the job includes an information leakage risk, first notification means for notifying that an information leakage risk is included when it is determined based on the determination process that the information of the job stored by the storage means includes an information leakage risk, wherein the image forming apparatus, acquisition means for acquiring a job from the server based on a first job execution instruction, execution means for executing the job acquired by the acquisition means or a job based on a second job execution instruction, transmission means for transmitting information of the job executed by the execution means to the server, wherein the server, when information corresponding to the information of the job received from the image forming apparatus is not stored by the storage means, executes the determination process on the information of the job received from the image forming apparatus, and when it is determined that an information leakage risk is included, has second notification means for notifying that fact. An image log management system characterized by this. (Configuration 2) The server does not execute the determination process on the information of the job received from the image forming apparatus when information corresponding to the information of the job received from the image forming apparatus is already stored by the storage means. The image log management system according to Configuration 1, characterized by this. (Configuration 3) The server Based on the risk analysis conditions different from those for the determination process performed on the job information stored by the storage means and the determination process performed on the job information received from the image forming apparatus, it is determined whether or not the job information includes an information leakage risk. The image log management system according to Configuration 1 is characterized by this. (Configuration 4) The server has third notification means for notifying to that effect when the job corresponding to the job information determined to include an information leakage risk is deleted. The image log management system according to any one of Configurations 1 to 3 is characterized by this. (Configuration 5) The job includes an image By executing the job, the execution means prints the image included in the job. The image log management system according to any one of Configurations 1 to 4 is characterized by this. (Configuration 6) The job information includes at least any one of a job name, a user name, an execution date and time, a job type, and an image. The image log management system according to any one of Configurations 1 to 5 is characterized by this. (Configuration 7) The determination process determines whether or not an information leakage risk is included based on the character information in the image included in the job. The image log management system according to any one of Configurations 1 to 6 is characterized by this. (Configuration 8) The storage means stores a job log including the information of the submitted job and the result of the determination. The image log management system according to any one of Configurations 1 to 7 is characterized by this. (Method 1) A processing method of an image log management system having a server and an image forming apparatus, A storage step in which the server stores the information of the submitted job, A determination step in which the server executes a determination process for determining whether or not the job information includes an information leakage risk, When the server determines that an information leakage risk is included based on the determination process for the job information stored in the storage step, a first notification step of notifying the fact; An acquisition step in which the image forming apparatus acquires a job from the server based on a first job execution instruction; An execution step in which the image forming apparatus executes a job acquired in the acquisition step or a job based on a second job execution instruction; A transmission step in which the image forming apparatus transmits information on the job executed in the execution step to the server; When information corresponding to the job information received from the image forming apparatus is not stored in the storage step, the server executes the determination process on the job information received from the image forming apparatus, and when it is determined that an information leakage risk is included, a second notification step of notifying the fact A processing method of an image log management system, characterized by comprising the above.

Explanation of Signs

[0101] 101 Image forming apparatus, 102 Server, 301 Job control unit, 302 Setting management unit, 303 Communication unit, 304 Job log generation unit, 305 UI control unit, 401 User management unit, 402 Device management unit, 403 Job management unit, 404 Setting management unit, 405 Risk analysis unit, 406 UI control unit, 407 Communication unit

Claims

1. A server and an image forming apparatus, wherein the server has a storage means for storing information of an input job, a determination means for executing a determination process for determining whether or not the information of the job includes an information leakage risk, and a first notification means for notifying that fact when it is determined that the information of the job stored by the storage means includes an information leakage risk based on the determination process; wherein the image forming apparatus has an acquisition means for acquiring a job from the server based on a first job execution instruction, an execution means for executing the job acquired by the acquisition means or a job based on a second job execution instruction, and a transmission means for transmitting information of the job executed by the execution means to the server; wherein the server executes the determination process on the information of the job received from the image forming apparatus when information corresponding to the information of the job received from the image forming apparatus is not stored by the storage means, and has a second notification means for notifying that fact when it is determined that the information includes an information leakage risk. An image log management system characterized by the above.

2. The server according to claim 1, wherein when information corresponding to the information of the job received from the image forming apparatus is already stored by the storage means, the server does not execute the determination process on the information of the job received from the image forming apparatus.

3. The server determines whether or not the information of the job includes an information leakage risk based on different risk analysis conditions in the determination process performed on the information of the job stored by the storage means and the determination process performed on the information of the job received from the image forming apparatus. The image log management system according to claim 1.

4. The server according to claim 1, further comprising a third notification means for notifying that fact when the job corresponding to the information of the job determined to include an information leakage risk is deleted.

5. The job includes an image, and the execution means prints the image included in the job by executing the job. The image log management system according to claim 1.

6. The image log management system according to claim 1, wherein the information of the job includes at least any one of a job name, a user name, an execution date and time, a job type, and an image.

7. The image log management system according to claim 1, wherein the determination process determines whether or not an information leakage risk is included based on character information in the image included in the job.

8. The image log management system according to claim 1, wherein the storage means stores a job log including the information of the submitted job and the result of the determination.

9. A processing method of an image log management system having a server and an image forming apparatus, a storage step in which the server stores information of a submitted job; a determination step in which the server executes a determination process for determining whether or not an information leakage risk is included in the information of the job; a first notification step in which, when it is determined that an information leakage risk is included based on the determination process for the information of the job stored in the storage step, the server notifies to that effect; an acquisition step in which the image forming apparatus acquires a job from the server based on a first job execution instruction; an execution step in which the image forming apparatus executes the job acquired in the acquisition step or a job based on a second job execution instruction; a transmission step in which the image forming apparatus transmits information of the job executed in the execution step to the server; a second notification step in which, when information corresponding to the information of the job received from the image forming apparatus is not stored in the storage step, the server executes the determination process on the information of the job received from the image forming apparatus, and when it is determined that an information leakage risk is included, the server notifies to that effect A processing method of an image log management system, characterized by comprising the above.

Images