Job management system and method for processing job management system

Abstract

To enable processing for an information leakage risk of a print job to be performed in an early stage in a case in which an image forming device satisfies a predetermined condition.SOLUTION: Provided is a job management system including a server and an image forming device. The server has execution means for, in a case in which an information leakage risk is included in a print job and the image forming device satisfies a predetermined condition in execution of the print job, executing predetermined processing. In the image forming device, in a case in which an information leakage risk is not included in the print job or the image forming device does not satisfy the predetermined condition in execution of the print job, the print job is executed. At least one of a place condition and a time condition is included in the predetermined condition. At least any of cancellation of the print job, a notification about inclusion of the information leakage risk, and control so as not to provide the print job as a print target of the image forming device is included in the predetermined processing.SELECTED DRAWING: Figure 5

Description

Technical Field

[0001] The present disclosure relates to a job management system and a method for processing a job management system.

Background Art

[0002] In recent years, cloud print services that input print jobs via the cloud and send print jobs to image forming apparatuses have begun to spread. Further, due to the diversification of work styles, there is a demand to print documents on client terminals not only in the office but also from image forming apparatuses installed at home or satellite offices.

[0003] With such diversification of print destinations, the risk of information leakage has increased, and thus there is a use case in which it is desired to monitor print contents and prevent printing that may pose a risk of information leakage.

[0004] For example, Patent Document 1 discloses a technique in which keywords that may pose a risk of information leakage are registered in the system in advance, and when such keywords are present in a document at the time of print execution, the administrator is notified. In Patent Document 1, it is possible to monitor print contents so that they can be output after confirmation by the administrator, thereby ensuring print security.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0006] Since it is common for monitoring conditions to include the location and time of output as detection conditions for monitoring, the monitoring process is uniformly performed at the time of output. However, even if there is a monitoring condition that can notify the administrator earlier than the time of output, it will be uniformly notified at the time of output. For example, in the case where a print job is input by specifying an output destination device at the time of input, since the output location is known, although the monitoring process can be applied at the time of job input, there is a problem that it is uniformly performed at the time of output.

[0007] An object of the present disclosure is to enable a processing for information leakage risk of a print job to be performed at an early stage when an image forming apparatus satisfies a predetermined condition.

Means for Solving the Problem

[0008] A job management system is a job management system including a server and an image forming apparatus. The server has an execution means for executing a predetermined process when a print job includes an information leakage risk and the image forming apparatus satisfies a predetermined condition when executing the print job. In the image forming apparatus, when the print job does not include an information leakage risk or the image forming apparatus does not satisfy the predetermined condition when executing the print job, the print job is executed. The predetermined condition includes at least one of a location condition and a time condition. The predetermined process includes at least one of canceling the print job, notifying that an information leakage risk is included, and controlling not to provide the print job as a print target of the image forming apparatus.

Effect of the Invention

[0009] According to the present disclosure, when an image forming apparatus satisfies a predetermined condition, a process for information leakage risk of a print job can be performed at an early stage.

Brief Description of the Drawings

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Embodiments for Carrying Out the Invention

[0011] Hereinafter, embodiments will be described with reference to the drawings.

[0012] (First Embodiment) FIG. 1 is a diagram showing a configuration example of a job management system 120 according to the first embodiment. The job management system 120 includes a network 100, an image forming apparatus 101, a client terminal 102, and a print monitoring server 111.

[0013] The network 100 is, for example, the Internet. The network 100 is connected to a print monitoring server 111, an image forming apparatus 101, and a client terminal 102.

[0014] The print monitoring server 111 receives and stores print jobs from the client terminal 102. Further, the print monitoring server 111 executes risk detection processing on the print jobs, and when receiving a job from the image forming apparatus 101 or the client terminal 102, discriminates the risk of the job according to conditions specified in advance for the job. The means for discriminating the risk is, for example, keyword extraction by full-text search or recognizing whether personal information is included.

[0015] In addition, when the print monitoring server 111 determines that the received job has a risk, it executes a job stop process for canceling the execution of the job or an administrator notification process for notifying the administrator by means such as email based on the settings.

[0016] Moreover, regardless of the form of the print monitoring server 111, in addition to an on-premises server, it may be a cloud server.

[0017] The image forming apparatus 101 has functions such as scanning, printing, copying, FAX, and transmission, and executes jobs according to user operations. Further, the image forming apparatus 101 has a function of acquiring a job from the print monitoring server 111 and performing image processing such as printing. To realize these functions, the image forming apparatus 101 may be a digital multi-function peripheral (MFP).

[0018] Hereinafter, it is assumed that a plurality of the image forming apparatuses 101 and client terminals 102 may exist respectively.

[0019] FIG. 2 is a block diagram showing a hardware configuration example of each of the image forming apparatus 101, the print monitoring server 111, and the client terminal 102 in FIG. 1. A general information processing apparatus hardware configuration can be applied to the image forming apparatus 101, the print monitoring server 111, and the client terminal 102 respectively.

[0020] The image forming apparatus 101 includes a bus 200, a CPU 201, a ROM 202, a RAM 203, a storage device 204, a communication device 205, an input device 206, a display device 207, a scanner device 208, and a printer device 209. The print monitoring server 111 and the client terminal 102 have the same configuration as the image forming apparatus 101, but may not have the scanner device 208 and the printer device 209.

[0021] The CPU 201 comprehensively controls the entire hardware and controls each component connected to the bus 200 to execute each function such as printing and scanning.

[0022] The ROM 202 is a read-only memory for data, and stores, for example, a basic control program executed by the CPU 201.

[0023] The RAM 203 is a memory capable of reading / writing data, and is used, for example, as a working memory of the CPU 201.

[0024] The storage device 204 is used as a storage area for temporary data while the CPU 201 is executing each program, and for permanent data. For example, the storage device 204 is often an HDD, but it may also be an SSD or a device that can read / write data by loading external media such as a CD, DVD, or memory card.

[0025] The communication device 205 connects the client terminal 102, the print monitoring server 111, or the image forming device 101 to the network 100, enabling data communication between the devices using TCP / IP.

[0026] The input device 206 is an operation unit for accepting input operations of characters and data by the user, and is, for example, a keyboard, a mouse, a hard key, or a touch panel.

[0027] The display device 207 is a device for displaying various screens, such as a liquid crystal display or a touch panel. A user gives instructions via the input device 206 on a user interface screen displayed on the display device 207. For example, the instructions include an instruction to the image forming device 101 to execute a job, an instruction to set up the print monitoring server 111, etc.

[0028] In the image forming apparatus 101, a scanner device 208 and a printer device 209 are also connected to the bus 200. The print monitoring server 111 and the client terminal 102 may be configured not to include the scanner device 208 and the printer device 209.

[0029] Fig. 3 is a block diagram showing an example of the functional configuration of the print monitoring server 111 in Fig. 1. The functional configuration shown in Fig. 3 is realized by the CPU 201 reading a program stored in the ROM 202, for example, into the RAM 203 and executing it.

[0030] The print monitoring server 111 includes a setting management unit 301 , a device cooperation unit 302 , a UI control unit 303 , a data storage unit 304 , and a print monitoring unit 305 .

[0031] The setting management unit 301 stores the settings related to the various functions of the print monitoring server 111 in a storage device 204 such as the RAM 203 or the HDD, and reads them from the RAM 203 or the storage device 204.

[0032] The setting management unit 301 includes an account setting management unit 3011 and an administrator setting management unit 3012.

[0033] When registering a user, the account setting management unit 3011 stores the user's information in the account data storage unit 3042 of the data storage unit 304. The user's information includes, but is not limited to, the account name, login password, information on devices registered in the print monitoring server 111, etc.

[0034] The administrator setting management unit 3012 manages the operation settings of the print monitoring server 111, the notification destination information for administrator notification processing, etc.

[0035] The device connection unit 302 manages the image forming apparatus 101 registered in the print monitoring server 111. The device connection unit 302 includes a device management unit 3021 and a print job management unit 3022.

[0036] The device management unit 3021 manages the status of the image forming apparatus 101 registered in the print monitoring server 111.

[0037] When a print request is made from the image forming apparatus 101, the print job management unit 3022 reads the target job data from the print job storage unit 3044 of the data storage unit 304 and transmits it to the image forming apparatus 101. Also, when a job stop process is executed, the print job management unit 3022 also performs a process of canceling the job.

[0038] In response to a request from the image forming apparatus 101 or the client terminal 102, the UI control unit 303 generates and transmits a screen. The UI control unit 303 includes a user portal 3031 and an administrator portal 3032.

[0039] The user portal 3031 can drag and drop the print jobs displayed on the display device 207 of the client terminal 102 or check the status of the print jobs.

[0040] In addition to changing the account settings displayed on the display device 207 of the client terminal 102, the operation settings of the print monitoring server 111, and the risk detection conditions for job analysis, the administrator portal 3032 can view the print job history.

[0041] The data storage unit 304 stores each data in response to requests from the setting management unit 301 or the print job management unit 3022. The data storage unit 304 includes a detection condition storage unit 3041, an account data storage unit 3042, a risk detection history storage unit 3043, and a print job storage unit 3044.

[0042] The detection condition storage unit 3041 stores the detection conditions set by the administrator.

[0043] The account data storage unit 3042 stores user and administrator information.

[0044] The risk detection history storage unit 3043 stores whether a risk has been detected in the jobs for which risk analysis has been performed.

[0045] The print job storage unit 3044 stores the input print jobs and the execution history of the jobs.

[0046] The print monitoring unit 305 performs risk analysis processing on the print jobs input by the user, and also performs job stop and administrator notification processing. The print monitoring unit 305 includes a risk analysis unit 3051 and a job stop / notification processing execution unit 3052.

[0047] After a print job is stored in the print job storage unit 3044 by the print job management unit 3022, the risk analysis unit 3051 performs a risk analysis to determine whether the job includes a risk of information leakage. The risk analysis is performed under the conditions stored in the detection condition storage unit 3041, and the analysis results are stored in the risk detection history storage unit 3043.

[0048] The job stop / notification processing execution unit 3052 performs processing when the job contains a risk of information leakage as a result of the analysis performed by the risk analysis unit 3051. The processing contents include stopping the execution of the job via the print job management unit 3022 and sending a notification to the notification destination stored in the administrator setting management unit 3012.

[0049] Fig. 4 is a block diagram showing an example of the functional configuration of the image forming apparatus 101 in Fig. 1. The functional configuration shown in Fig. 4 is realized by the CPU 201 reading a program stored in the ROM 202, for example, into the RAM 203 and executing it.

[0050] The image forming apparatus 101 includes an external collaboration unit 401 , a job control unit 402 , a communication unit 403 , an execution environment determination unit 404 , and a screen control unit 405 .

[0051] The external collaboration unit 401 manages collaboration between the image forming apparatus 101 and the print monitoring server 111 via the communication unit 403. Specifically, the external collaboration unit 401 transmits environmental information of the image forming apparatus 101 to the device collaboration unit 302 of the print monitoring server 111, and requests jobs from the print monitoring server 111.

[0052] A job control unit 402 requests a print job from the print monitoring server 111 via the external linking unit 401 and executes the job.

[0053] A communication unit 403 transmits and receives status information of the image forming apparatus 101, job history information, and the print job itself.

[0054] The execution environment determination unit 404 acquires the environmental information of the image forming apparatus 101, such as location and time information, and transmits them to the print monitoring server 111 via the external cooperation unit 401.

[0055] The screen control unit 405 displays the screen of the image forming apparatus 101 and also displays a selection screen for jobs to perform print output.

[0056] FIG. 5 is a flowchart showing the processing method of the print monitoring server 111, and is a flowchart when the print monitoring server 111 operates with job stop setting.

[0057] In step S501, the print job management unit 3022 of the device cooperation unit 302 receives a print job specified for the image forming apparatus 101 from the client terminal 102, and saves the print job in the print job storage unit 3044 of the data storage unit 304. The user designates the image forming apparatus 101 as the print output destination via the client terminal 102 and transmits the print job to the print monitoring server 111. The print job includes information of the designated image forming apparatus 101.

[0058] In step S502, the risk analysis unit 3051 of the print monitoring unit 305 performs risk analysis on the print job saved in step S501 using the detection conditions saved in the detection condition storage unit 3041 of the data storage unit 304.

[0059] Specifically, the risk analysis unit 3051 detects whether or not the information leakage risk is included in the information of the print job by risk analysis. The information of the print job includes, for example, the job name (file name), the text to be printed, and the job image to be printed. The job name indicates the name of the print job. The job image is the image to be printed, and keywords are extracted by OCR (Optical Character Recognition).

[0060] For example, a case will be described in which "Job Stop Setting" is selected in the setting target selection dropdown 1001 in Fig. 10. If the job name includes an individual keyword 1003 such as "confidential," "secret," "classified," or "confidential," the risk analysis unit 3051 determines that there is a risk of information leakage. Also, if characters extracted from the job image include an individual keyword 1003 such as "confidential," "secret," "classified," or "confidential," the risk analysis unit 3051 determines that there is a risk of information leakage.

[0061] In step S503, the risk analysis unit 3051 determines whether the print job information includes a risk of information leakage. If the print job information includes a risk of information leakage, the process proceeds to step S504. If the print job information does not include a risk of information leakage, the process proceeds to step S508.

[0062] In step S504, the print monitoring server 111 determines whether the detected information on the risk of information leakage includes printing environment conditions, such as location and time, as conditions for stopping the job. If the printing environment conditions are included, the process proceeds to step S505. If the printing environment conditions are not included, the process proceeds to step S507.

[0063] If the risk analysis unit 3051 detects multiple pieces of information on the risk of information leakage, and if all of the pieces of information on the risk of information leakage contain the above-mentioned printing environment conditions, the process proceeds to step S505. If even one piece of information on the risk of information leakage does not contain the above-mentioned printing environment conditions, the process proceeds to step S507.

[0064] For example, the case where "Job Stop Setting" is selected in the setting target selection drop-down 1001 of FIG. 10 will be described. When either or both of the location of the location condition setting 1004 corresponding to the detected individual keyword 1003 and the time of the time condition setting 1005 are set, the print monitoring server 111 proceeds to step S505. Also, when neither the location of the location condition setting 1004 corresponding to the detected individual keyword 1003 nor the time of the time condition setting 1005 is set, the print monitoring server 111 proceeds to step S507.

[0065] In addition, when a plurality of individual keywords 1003 are detected, when either or both of the location of the location condition setting 1004 corresponding to all of the individual keywords 1003 and the time of the time condition setting 1005 are set, the process proceeds to step S505. Also, when neither the location of the location condition setting 1004 corresponding to any one of the detected individual keywords 1003 nor the time of the time condition setting 1005 is set, the process proceeds to step S507. <00.....

[0066]

[0067] First, the location information of the image forming apparatus 101 will be described. Regarding the location information of the image forming apparatus 101, a device administrator of the company to which the user of the image forming apparatus 101 belongs can set a setting value corresponding to the location condition setting 1004 in Fig. 10 as location information from the input device 206 or the remote UI of the image forming apparatus 101. For example, the location information of the image forming apparatus 101 is within the company, at home, or at a satellite (office). Here, the image forming apparatuses 101 for home use and satellite use are installed after setting their setting values in advance before installation and delivery. Note that it is also possible for the user of the image forming apparatus 101 to perform input settings according to the instructions of the company administrator.

[0068] In addition, after setting the position information obtained by incorporating GPS in the image forming apparatus 101 as location information, the location information can also be acquired from the image forming apparatus 101. In that case, as for the location condition setting 1004, the administrator needs to define and set the location information of "within the company" and "satellite" in advance. And when location information other than the defined setting is acquired, it can be regarded as "at home".

[0069] Alternatively, the Wi-Fi access point information of the image forming apparatus 101 may be treated as location information. Also in this case, as for the location condition, access point information other than "within the company" and "satellite" can be regarded as "at home".

[0070] Next, the time information of the image forming apparatus 101 will be described. The image forming apparatus 101 has a clock and manages the current time corresponding to the orientation in synchronization with a clock server (NTP) or the like. The image forming apparatus 101 uses that time to record logs when recording logs such as login, job execution, and error occurrence. Even if the image forming apparatus 101 is not synchronized with the clock server, the date and time of its orientation are initially set at the time of installation. In Fig. 9, the time zone when job execution is not allowed is specified as the job execution time, and the print monitoring server 111 determines whether the time information acquired from the image forming apparatus 101 is included in this time zone.

[0071] Since the printing monitoring server 111 determines by regarding the timing when the job release instruction is received as the job execution time, it may check the current time of the destination where the image forming apparatus 101 is installed at the timing when the job instruction is received and make the determination in S506. In that case, the printing monitoring server 111 does not need to acquire the time information from the image forming apparatus 101.

[0072] In step S506, the printing monitoring server 111 determines whether or not the printing environment of the image forming apparatus 101 acquired in step S505 satisfies the printing environment conditions set in the job stop conditions stored in the detection condition storage unit 3041. If the printing environment satisfies the printing environment conditions, the process proceeds to step S507. If the printing environment does not satisfy the printing environment conditions, the process proceeds to step S508.

[0073] In FIG. 10, when the detected individual keyword 1003 is "confidential information outside the company", the location of the acquired image forming apparatus 101 is "satellite office" in the location condition setting 1004, and the time of the acquired image forming apparatus 101 is "22:00 - 6:00" in the time condition setting 1005, the process proceeds to step S507. Otherwise, the process proceeds to step S508. Here, the location condition setting 1004 is the setting of the location condition, and the time condition setting 1005 is the setting of the time condition. The above printing environment conditions include the location condition and the location condition.

[0074] Here, the "confidential information" in FIG. 9 will be described. The printing monitoring server 111 determines that it is confidential information when the attribute information (such as the file name) of the printing job and the text and image data to be printed contain a confidential information keyword. In the case of image data, OCR is performed to extract the keyword. The confidential information keywords are, for example, the individual keywords 1003 in FIG. 10, such as "confidential information outside the company", "secret", "confidential", "confidential", etc.

[0075] Next, the "personal information" in FIG. 9 will be described. The print monitoring server 111 determines that it is personal information when personal information keyword is included in the attribute information (such as file name) of the print job and the text and image data to be printed. Examples of personal information keywords include private profiles such as the user's name, address, phone number, face photo, and information about privately owned items. This determination is made by rule-based determination or estimation using a machine learning model.

[0076] In step S507, the job stop / notification processing execution unit 3052 stops the execution of the above print job by executing the cancel processing of the above print job. The details of this processing will be described with reference to FIG. 7 described later. Then, the processing proceeds to step S509.

[0077] In step S508, the print job management unit 3022 controls to transmit a print job (print output instruction) including print data to the image forming apparatus 101 via the network 100. Then, the image forming apparatus 101 executes the print output of the print data included in the print job via the job control unit 402 based on the print job received via the communication unit 403.

[0078] In the image forming apparatus 101, if the print job does not include an information leakage risk or the image forming apparatus 101 does not satisfy the print environment conditions when executing the print job, the print job is executed.

[0079] In step S509, the print job management unit 3022 stores the job execution history of the print job, the information leakage risk information detected by the risk analysis unit 3051, and the information of the processing result performed by the job stop / notification processing execution unit 3052 in the risk detection history storage unit 3043. After that processing, the flowchart of FIG. 5 ends.

[0080] FIG. 6 is a flowchart showing a processing method of the print monitoring server 111, and is a flowchart when the print monitoring server 111 performs a job stop process in hold printing.

[0081] In step S601, the print monitoring server 111 performs the same job submission process as step S501 in FIG. 5.

[0082] In step S602, the print monitoring server 111 performs the same risk analysis process as step S502 in FIG. 5.

[0083] In step S603, the print monitoring server 111 performs the same determination process as step S503 in FIG. 5. If an information leakage risk is included, the process proceeds to step S604. If no information leakage risk is included, the process proceeds to step S609.

[0084] In step S604, the print monitoring server 111 performs the same determination process as step S504 in FIG. 5. If the print environment conditions are included, the process proceeds to step S605. If the print environment conditions are not included, the process proceeds to step S608.

[0085] In step S605, the print job management unit 3022 of the print monitoring server 111 receives a print request for the print job from the image forming apparatus 101 via the network 100 in response to a user operation for selecting a print job (print data) in the image forming apparatus 101.

[0086] In step S606, the print job management unit 3022 of the print monitoring server 111 acquires a print environment from the execution environment determination unit 404 of the image forming apparatus 101 that performed the selection operation of the print job for hold printing in step S605. The print environment is the same as the print environment in step S505 of FIG. 5.

[0087] In step S607, the print monitoring server 111 performs the same determination process as step S506 in FIG. 5. If the printing environment satisfies the printing environment conditions, the process proceeds to step S608. If the printing environment does not satisfy the printing environment conditions, the process proceeds to step S610.

[0088] In step S608, the print monitoring server 111 performs the same job stop process as step S507 in FIG. 5. Then, the process proceeds to step S611.

[0089] In step S609, the print monitoring server 111 performs the same print output instruction reception process as step S605. Then, the process proceeds to step S610.

[0090] In step S610, the print monitoring server 111 performs the same print output process as step S508 in FIG. 5. Then, the process proceeds to step S611.

[0091] In step S611, the print monitoring server 111 performs the same risk detection history recording process as step S509 in FIG. 5. After this process, the flowchart in FIG. 6 ends.

[0092] FIG. 7 is a flowchart showing the details of the job cancellation process in step S507 of FIG. 5 and step S608 of FIG. 6. In the print monitoring server 111, the job stop / notification process execution unit 3052 of the print monitoring unit 305 stops the execution of the print job in which an information leakage risk is detected.

[0093] In step S701, the job stop / notification process execution unit 3052 cancels the print job via the print job management unit 3022 of the device cooperation unit 302.

[0094] In step S702, the job stop / notification process execution unit 3052 notifies the user who submitted the print job that the execution of the print job has been canceled. The notification means is, for example, an email, a display on the portal screen of the user portal 3031, or a chatbot.

[0095] In step S703, the job stop / notification process execution unit 3052 determines whether or not a toggle button 905 for notifying the administrator when a job is stopped is set to ON in FIG. 9, which will be described later. If the toggle button 905 is set to ON, the process proceeds to step S704. If the toggle button 905 is not set to ON, the process of the flowchart in FIG. 7 ends.

[0096] In step S704, the job stop / notification process execution unit 3052 determines whether the administrator notification conditions for the information leakage risk detected in step S502 or S602 include a setting of a printing environment condition. If a setting of a printing environment condition is included, the process proceeds to step S705. If a setting of a printing environment condition is not included, the process proceeds to step S706.

[0097] For example, a case will be described where "Administrator notification settings" is selected in the setting target selection dropdown 1001 in Fig. 10. If either or both of the location in the location condition setting 1004 and the time in the time condition setting 1005 corresponding to the individual keyword 1003 detected in step S502 or S602 are set, the process proceeds to step S705. On the other hand, if neither the location in the location condition setting 1004 nor the time in the time condition setting 1005 corresponding to the detected individual keyword 1003 is set, the process proceeds to step S706.

[0098] In step S705, the job stop / notification process execution unit 3052 determines whether the printing environment acquired in step S505 or S606 satisfies the printing environment conditions set in the administrator notification conditions. If so, the process proceeds to step S706. If not, the process of the flowchart in FIG. 7 ends.

[0099] 10, if the detected individual keyword 1003 is "confidential," the location of the acquired image forming device 101 is "satellite office" in the location condition setting 1004, and the time of the acquired image forming device 101 is "22:00-6:00" in the time condition setting 1005, the process proceeds to step S706. Otherwise, the process of the flowchart in FIG. 7 ends.

[0100] In step S706, the job stop / notification process execution unit 3052 notifies the administrator that an information leakage risk has been detected. At this time, the job stop / notification process execution unit 3052 acquires the notification destination set in the administrator setting management unit 3012 of the setting management unit 301 and notifies the administrator. The notification has the content of the notification email 1700 in Fig. 17, for example. Thereafter, the processing of the flowchart in Fig. 7 ends.

[0101] FIG. 8 is a diagram showing an administrator setting screen 800 of the job stop / notification process execution unit 3052 that is set by the administrator setting management unit 3012 of the print monitoring server 111 and displayed on the client terminal 102 via the administrator portal 3032.

[0102] The operation mode setting 801 selects the operation of the job stop / notification processing execution unit 3052. The job stop of the operation mode setting 801 is an operation to stop the print job when a risk of information leakage is detected. The administrator notification of the operation mode setting 801 is an operation to notify the administrator of information about the print job when a risk of information leakage is detected. For example, the first embodiment is the operation when the job stop is selected.

[0103] In the detection keyword setting 802, keywords and detection conditions are designated which are stored in the detection condition storage unit 3041 and are detected as information leakage risks by the risk analysis unit 3051.

[0104] Clicking the save button 803 or the cancel button 804 saves or cancels each setting in the detection condition save section 3041 .

[0105] 9 is a diagram showing an example of a job stop advanced settings screen 900. The job stop advanced settings screen 900 is a screen for configuring the operation of the job stop processing of the job stop / notification processing execution unit 3052, which is set by the administrator setting management unit 3012 of the print monitoring server 111 and is displayed on the client terminal 102 via the administrator portal 3032.

[0106] An environmental condition setting 901 is an item for setting whether to consider printing environmental conditions such as the execution time and execution location of a print job as a condition for stopping a job. A check box or toggle button is used to specify ON / OFF of the printing environmental conditions.

[0107] Checkboxes 902 are checkboxes for selecting the destination to which the printing environment conditions are to be applied. In the example of Fig. 9, personal information and confidential information are checked, and the printing environment conditions are applied to personal information and confidential information.

[0108] The environmental condition specification area 903 specifies the printing environmental conditions for stopping a job for each of the personal information and confidential information for which the application of printing environmental conditions is specified in the checkboxes 902. Items that can be specified include the job execution location and job execution time. When the risk analysis unit 3051 detects a risk of information leakage, the job is stopped if the printing environmental conditions specified in the environmental condition specification area 903 match the printing environment of the image forming apparatus 101.

[0109] 9, when a risk of personal information leakage is detected, the print job is stopped if the job execution location is at home or a satellite office. The print job is also stopped if the job execution time is between 10:00 PM and 6:00 AM. The print environment conditions specified in the environment condition specification area 903 may be AND conditions, OR conditions, or a combination of conditions.

[0110] The keyword advanced setting button 904 is a link to the keyword individual setting screen 1000 shown in FIG.

[0111] The toggle button 905 is an item for selecting job stop in the operation mode setting 801 of FIG. 8, and when the job stop is performed, it is an item for selecting whether to notify the administrator together with the job stop operation. The ON / OFF of the condition is specified by a checkbox or a toggle button. The selection of this toggle button 905 corresponds to the determination in step S703 of FIG. 7.

[0112] The save button 906 or the cancel button 907 is used to save or cancel to the detection condition storage unit 3041 for each setting.

[0113] FIG. 10 is a diagram showing an example of a keyword individual setting screen 1000 in which the print environment conditions can be set for each keyword stored in the detection condition storage unit 3041 and used when the information leakage risk detection is performed by the risk analysis unit 3051.

[0114] In the setting target selection drop-down 1001, select whether to perform individual setting of each keyword for job stop setting or administrator notification setting.

[0115] The keyword individual setting table 1002 is a table in which the individual keyword 1003, the location condition setting 1004, and the time condition setting 1005 are listed.

[0116] The individual keyword 1003 is obtained and displayed from the keyword stored in the detection condition storage unit 3041.

[0117] The location condition setting 1004 is an item for setting the location condition for the individual keyword 1003. In the location condition setting 1004, for each individual keyword 1003, it is set whether to use locations such as in the company, at home, and satellite offices as the print environment conditions. The setting information in the location condition setting 1004 is saved to the detection condition storage unit 3041.

[0118] The time condition setting 1005 is an item for setting a time condition for the individual keyword 1003. In the time condition setting 1005, the time condition is specified in a section, such as "22:00 - 6:00". Also, a plurality of sections may be set as the time condition. The setting information in the time condition setting 1005 is saved to the detection condition storage unit 3041.

[0119] The save button 1006 or the cancel button 1007 is used to save or cancel each setting to the detection condition storage unit 3041.

[0120] (Second Embodiment) In the first embodiment, the print monitoring server 111 receives the input of a print job. When the risk analysis unit 3051 determines that there is an information leakage risk in the print job in the information leakage risk detection process, the job stop / notification process execution unit 3052 performs a process of stopping the execution of the job.

[0121] However, particularly in the case of the hold print in FIG. 6, after the print output instruction is given, if the print job is determined to be a job to be stopped, it is inconvenient for the user to recognize for the first time that the job cannot be output.

[0122] FIG. 11 is a flowchart showing a processing method of the print monitoring server 111 according to the second embodiment for solving the above problems. The print monitoring server 111 determines and acquires the print execution environment at the timing when it receives a user operation to start selecting a print job (print data) in the image forming apparatus 101, and displays only the printable jobs in the print job list.

[0123] In step S1101, the print monitoring server 111 performs the same job submission process as step S501 in FIG. 5.

[0124] In step S1102, the print monitoring server 111 performs the same risk analysis process as step S502 in FIG. 5.

[0125] In step S1103, the print monitoring server 111 performs the same determination process as step S503 in FIG. 5. If an information leakage risk is included, the process proceeds to step S1104. If no information leakage risk is included, the process proceeds to step S1107.

[0126] In step S1104, the print monitoring server 111 performs the same determination process as step S504 in FIG. 5. If the print environment conditions are included, the process proceeds to step S1105. If the print environment conditions are not included, the process proceeds to step S1109.

[0127] In step S1105, the print monitoring server 111 performs a process of creating a print job list that is displayed when receiving a user operation for selecting a print job in the image forming apparatus 101. The details will be described with reference to FIG. 12 described later.

[0128] In step S1106, the print monitoring server 111 performs the same print output instruction reception process as step S605 in FIG. 6. After that, the process proceeds to step S1108.

[0129] In step S1107, the print monitoring server 111 performs the same print output instruction reception process as step S605 in FIG. 6. After that, the process proceeds to step S1108.

[0130] In step S1108, the print monitoring server 111 performs the same print output process as step S508 in FIG. 5. After that, the process proceeds to step S1110.

[0131] In step S1109, the print monitoring server 111 performs the same job stop process as step S507 in FIG. 5. After that, the process proceeds to step S1110.

[0132] In step S1110, the print monitoring server 111 performs the same risk detection history recording process as step S509 in FIG. 5. After this process, the process of the flowchart in FIG. 11 ends.

[0133] FIG. 12 is a flowchart showing the details of the print job list creation process in step S1105 of FIG.

[0134] In step S1201, when the print monitoring server 111 receives a print job list display request from the image forming apparatus 101, it acquires the printing environment of the image forming apparatus 101 from the execution environment determination unit 404. The printing environment of the image forming apparatus 101 is the same as the printing environment in FIG.

[0135] In step S1202, the UI control unit 303 of the print monitoring server 111 acquires, from the print job storage unit 3044, a list of print jobs submitted by the user attempting to display the print job list on the image forming apparatus 101.

[0136] In step S1203, the UI control unit 303 of the print monitoring server 111 starts creating a print job list.

[0137] In step S1204, the UI control unit 303 of the print monitoring server 111 reads one print job from the list of print jobs acquired in step S1202.

[0138] In step S1205, the UI control unit 303 of the print monitoring server 111 determines whether the printing environment of the image forming apparatus 101 acquired in step S1201 for the print job read in step S1204 satisfies the printing environment conditions determined in step S1104 of Fig. 11. If it does, the process proceeds to step S1206. If it does not, the process proceeds to step S1207.

[0139] In step S1206, the UI control unit 303 of the print monitoring server 111 performs control to add the print job read in step S1204 to the print job list, after which the process proceeds to step S1208.

[0140] In step S1207, the UI control unit 303 of the print monitoring server 111 performs control to prevent the print job read in step S1204 from being added to the print job list, thereby performing control to prevent the print job from being offered as a print target for the image forming apparatus 101. Thereafter, the process proceeds to step S1208.

[0141] In step S1208, the UI control unit 303 of the print monitoring server 111 determines whether all print jobs in the list of print jobs acquired in step S1202 have been read. If there are print jobs that have not been read, the process returns to step S1204, and the process for the next print job is repeated. If all print jobs have been read, the process proceeds to step S1209.

[0142] In step S1209, the UI control unit 303 of the print monitoring server 111 completes the creation of the print job list.

[0143] In step S1210, the UI control unit 303 of the print monitoring server 111 controls the display device 207 of the image forming apparatus 101 to display the print job list created in the processing up to step S1209 via the screen control unit 405 of the image forming apparatus 101. After this processing, the processing of the flowchart in FIG. 12 ends.

[0144] 11, the image forming apparatus 101 transmits a print request for a print job selected in response to a user operation from the print jobs in the print job list displayed in step S1210 to the print monitoring server 111. The print job management unit 3022 of the print monitoring server 111 receives the print request for the print job from the image forming apparatus 101 via the network 100.

[0145] (Third embodiment) In the first and second embodiments, the content corresponding to the case where job stop is selected in the operation mode setting 801 on the administrator setting screen 800 in Fig. 8 has been described. Specifically, when the print monitoring server 111 receives a print job and determines in the risk detection process performed by the risk analysis unit 3051 that there is a risk of information leakage in the print job, the job stop / notification process execution unit 3052 performs a process to stop execution of the job.

[0146] The third embodiment corresponds to the operation when administrator notification is specified in the operation mode setting 801. Administrator notification is an operation to notify an administrator specified by the administrator setting management unit 3012 of the print monitoring server 111 of the risk of information leakage by email or the like when an submitted print job includes a risk of information leakage.

[0147] FIG. 13 is a flowchart showing a processing method of the print monitoring server 111 according to the third embodiment, and is a flowchart when the print monitoring server 111 operates with administrator notification settings.

[0148] In step S1301, the print monitoring server 111 performs the same job submission process as in step S501 in FIG.

[0149] In step S1302, the print monitoring server 111 performs the same risk analysis process as in step S502 in FIG.

[0150] In step S1303, the print monitoring server 111 performs the same determination process as in step S503 in Fig. 5. If the risk of information leakage is included, the process proceeds to step S1304. If the risk of information leakage is not included, the process proceeds to step S1308.

[0151] In step S1304, the print monitoring server 111 determines whether the detected information on the risk of information leakage includes printing environment conditions, such as location and time, as conditions for notifying the administrator. If the printing environment conditions are included, the process proceeds to step S1305. If the printing environment conditions are not included, the process proceeds to step S1307.

[0152] In addition, when the risk analysis unit 3051 detects information on multiple information leakage risks, if the information on all the information leakage risks includes the above printing environment conditions, the process proceeds to step S1305. If even one of the information on the multiple information leakage risks does not include the above printing environment conditions, the process proceeds to step S1307.

[0153] For example, the case where "administrator notification setting" is selected in the setting target selection drop-down 1001 of FIG. 10 will be described. When either or both of the location of the location condition setting 1004 corresponding to the detected individual keyword 1003 and the time of the time condition setting 1005 are set, the printing monitoring server 111 proceeds to step S1305. Also, when neither the location of the location condition setting 1004 corresponding to the detected individual keyword 1003 nor the time of the time condition setting 1005 is set, the printing monitoring server 111 proceeds to step S1307.

[0154] In addition, when multiple individual keywords 1003 are detected, when either or both of the location of the location condition setting 1004 corresponding to all the detected individual keywords 1003 and the time of the time condition setting 1005 are set, the process proceeds to step S1305. Also, when neither the location of the location condition setting 1004 corresponding to even one of the detected individual keywords 1003 nor the time of the time condition setting 1005 is set, the process proceeds to step S1307.

[0155] In step S1305, the printing monitoring server 111 performs the same printing environment determination process as step S505 in FIG. 5.

[0156] In step S1306, the print monitoring server 111 determines whether the printing environment of the image forming apparatus 101 acquired in step S1305 satisfies the printing environment conditions set in the administrator notification conditions stored in the detection condition storage unit 3041. If the printing environment satisfies the printing environment conditions, the process proceeds to step S1307. If the printing environment does not satisfy the printing environment conditions, the process proceeds to step S1308.

[0157] In FIG. 10, when the detected individual keyword 1003 is "confidential information outside the company", the location of the acquired image forming apparatus 101 is "satellite office" in the location condition setting 1004, and the time of the acquired image forming apparatus 101 is "22:00 - 6:00" in the time condition setting 1005, the process proceeds to step S1307. Otherwise, the process proceeds to step S1308.

[0158] In step S1307, the job stop / notification process execution unit 3052 of the print monitoring server 111 notifies the administrator that the print job contains a risk of information leakage. The details will be described with reference to FIG. 15 below.

[0159] In step S1308, the print monitoring server 111 performs the same print output process as in step S508.

[0160] In step S1309, the print monitoring server 111 performs the same risk detection history recording process as in step S509 of FIG. 5. After this process, the process of the flowchart in FIG. 13 ends.

[0161] FIG. 14 is a flowchart showing another processing method of the print monitoring server 111 according to the third embodiment, and is a flowchart when the print monitoring server 111 operates in the administrator notification setting in hold printing.

[0162] In step S1401, the print monitoring server 111 performs the same job submission process as in step S501 of FIG. 5.

[0163] In step S1402, the print monitoring server 111 performs the same risk analysis process as step S502 in FIG. 5.

[0164] In step S1403, the print monitoring server 111 performs the same determination process as step S503 in FIG. 5. If an information leakage risk is included, the process proceeds to step S1404. If no information leakage risk is included, the process proceeds to step S1406.

[0165] In step S1404, the print monitoring server 111 performs the same determination process as S1304 in FIG. 13. If the print environment conditions are included, the process proceeds to step S1407. If the print environment conditions are not included, the process proceeds to step S1405.

[0166] In step S1405, the print monitoring server 111 performs the same administrator notification process as step S1307 in FIG. 13. The job stop / notification process execution unit 3052 can notify the administrator without waiting for the reception of the print output instruction in step S1406. Then, the process proceeds to step S1406.

[0167] In step S1406, the print monitoring server 111 performs the same print output instruction reception process as step S605 in FIG. 6. Then, the process proceeds to step S1411.

[0168] In step S1407, the print monitoring server 111 performs the same print output instruction reception process as step S605 in FIG. 6.

[0169] In step S1408, the print monitoring server 111 performs the same print environment determination process as step S606 in FIG. 6.

[0170] In step S1409, the print monitoring server 111 determines whether the printing environment of the image forming apparatus 101 acquired in step S1408 satisfies the printing environment conditions set in the administrator notification conditions stored in the detection condition storage unit 3041. If the printing environment satisfies the printing environment conditions, the process proceeds to step S1410. If the printing environment does not satisfy the printing environment conditions, the process proceeds to step S1411.

[0171] In step S1410, the print monitoring server 111 performs the same administrator notification process as in step S1307 in FIG.

[0172] In step S1411, the print monitoring server 111 performs the same print output process as in step S508 in FIG.

[0173] In step S1412, the print monitoring server 111 performs the same risk detection history recording process as in step S509 in Fig. 5. After this process, the process of the flowchart in Fig. 14 ends.

[0174] Fig. 15 is a flowchart showing details of the notification process in step S1307 in Fig. 13 and step S1410 in Fig. 14. In the print monitoring server 111, the job stop / notification process execution unit 3052 of the print monitoring unit 305 notifies the administrator before the print job in which an information leakage risk has been detected is executed.

[0175] In step S1501, the job stop / notification processing execution unit 3052 of the print monitoring server 111 notifies the administrator via the print job management unit 3022 of the device cooperation unit 302 that the print job contains a risk of information leakage. An example of a notification email 1700 is shown in FIG. 17, which will be described later.

[0176] In step S1502, the job stop / notification processing execution unit 3052 determines, in FIG. 16 described later, whether the toggle button 1606 for stopping the job after notification is set to ON when notifying the administrator. If the toggle button 1606 is set to ON, the process proceeds to step S1503. If the toggle button 1606 is not set to ON, the process of the flowchart in FIG. 15 ends.

[0177] In step S1503, the job stop / notification processing execution unit 3052 determines whether the information on the information leakage risk detected by the risk analysis unit 3051 includes printing environment conditions such as location and time as job stop conditions. If it includes the printing environment conditions, the process proceeds to step S1504. If it does not include the printing environment conditions, the process proceeds to step S1505.

[0178] In step S1504, the job stop / notification processing execution unit 3052 determines whether the printing environment of the image forming apparatus 101 satisfies the printing environment conditions set as job stop conditions. If it satisfies, the process proceeds to S1505. If it does not satisfy, the process of the flowchart in FIG. 15 ends.

[0179] In step S1505, the job stop / notification processing execution unit 3052 cancels the execution of the print job.

[0180] In step S1506, the job stop / notification processing execution unit 3052 notifies the user who executed the job that the execution of the print job was canceled in step S1505. After this process, the process of the flowchart in FIG. 15 ends, and without performing the processes of step S1308 in FIG. 13 and step S1411 in FIG. 14, the process proceeds to step S1309 in FIG. 13 or step S1412 in FIG. 14.

[0181] FIG. 16 is a diagram showing an example of an administrator notification detailed setting screen 1600 that sets the operation settings of the administrator notification process of the job stop / notification process execution unit 3052, which is set by the administrator setting management unit 3012 of the print monitoring server 111. The administrator notification detailed setting screen 1600 is displayed on the client terminal 102 via the administrator portal 3032.

[0182] In the notification destination setting 1601, the notification destination in the administrator notification process described in FIG. 15 is specified. The notification destination is the supervisor of the print job execution user stored in the account data storage unit 3042 or the email address is directly specified.

[0183] The environment condition setting 1602 is an item for setting whether to consider print environment conditions such as job execution time and job execution location as conditions for administrator notification. The ON / OFF of the print environment conditions is specified using a checkbox or a toggle button.

[0184] The checkbox 1603 is a checkbox for selecting the application destination of the print environment conditions. In the example of FIG. 16, personal information and confidential information are checked, and the print environment conditions are applied.

[0185] The environment condition specification area 1604 specifies the print environment conditions for which administrator notification is to be performed for each item for which the application of the print environment conditions is specified by the checkbox 1603. As specifiable items, the job execution location, job execution time, etc. can be specified. When an information leakage risk is detected by the risk analysis unit 3051, if the item specified in the environment condition specification area 1604 matches the print environment, the administrator notification process is performed. In the example of FIG. 16, when an information leakage risk is detected, if the job execution location is at home or a satellite office, the administrator is notified. Also, if the job execution time is between 22:00 and 6:00, the administrator is notified. The conditions specified in the environment condition specification area 1604 may be AND conditions or OR conditions.

[0186] The keyword detailed setting button 1605 is a link to the keyword individual setting screen where the printing environment conditions can be set for each keyword described in FIG. 10.

[0187] The toggle button 1606 is an item for selecting administrator notification in the operation mode setting 801 of FIG. 8 and selecting whether to stop the print job together with the notification process when the administrator notification is performed. The ON / OFF of the condition is specified by a toggle button or a checkbox. The selection of the toggle button 1606 corresponds to the branch of the determination process in step S1502 of FIG. 15.

[0188] FIG. 17 is a diagram showing an example of a notification email 1700 sent to the administrator specified in the notification destination setting 1601 of FIG. 16 in step S1501 of the administrator notification process of FIG. 15.

[0189] The body of the notification email 1700 includes the information leakage risk information detected by the risk analysis unit 3051, the job name, and the information of the executing user.

[0190] The detailed confirmation link 1701 is a link to the risk job information screen described in FIG. 18 below, where the details of the information leakage risk information detected in the print job can be viewed.

[0191] FIG. 18 is a diagram showing an example of a risk job information screen 1800 displayed on the client terminal 102 via the administrator portal 3032 of the print monitoring server 111. On the risk job information screen 1800, the information leakage risk information detected by the risk analysis unit 3051 can be viewed.

[0192] The risk job list 1801 can be selected and viewed to display a list of jobs in which the risk analysis unit 3051 has detected an information leakage risk.

[0193] The risk job detailed information 1802 displays the detailed information of the job selected in the risk job list 1801. In addition to the executing user, job name, execution date and time, execution device, and detected information leakage risk information, the risk job detailed information 1802 can also view the image of the executing job and the like.

[0194] The yes button 1803 and the no button 1804 are components according to the fourth embodiment described below, and when the output of the print job has not been completed, it is possible to instruct whether to cancel the job.

[0195] (Fourth Embodiment) In the third embodiment, when the print monitoring server 111 receives the input of a print job and determines in the risk detection process performed by the risk analysis unit 3051 that the print job has an information leakage risk, the job stop / notification processing execution unit 3052 performs a process of notifying the administrator.

[0196] However, even if the administrator who receives the notification views the job information and recognizes that the job execution is truly dangerous, there is a problem that it is time-consuming to stop the execution of the job. For example, procedures such as identifying the job from the jobs spooled in the print job storage unit 3044 and manually canceling it are required.

[0197] Therefore, in the fourth embodiment, means for stopping the execution of the job are provided in the administrator notification.

[0198] FIG. 19 is a flowchart showing a processing method of the print monitoring server 111 according to the fourth embodiment. FIG. 19 is a process that replaces FIG. 15 and is a flowchart that enables the administrator to stop the print job. The process of FIG. 19 is performed as the notification process in step S1307 of FIG. 13 and step S1410 of FIG. 14 in the second embodiment.

[0199] In step S1901, the print monitoring server 111 performs the same administrator notification process as step S1501 in FIG. 15.

[0200] In step S1902, the print monitoring server 111 performs the same determination process as step S1502 in FIG. 15. When the toggle button 1606 in FIG. 16 is set to ON, the process proceeds to step S1903. When the toggle button 1606 is not set to ON, the process of the flowchart in FIG. 19 ends.

[0201] In step S1903, the job stop / notification process execution unit 3052 of the print monitoring server 111 receives whether or not a job stop instruction has been given by the administrator via the yes button 1803 or the no button 1804 in FIG. 18.

[0202] In step S1904, the job stop / notification process execution unit 3052 of the print monitoring server 111 determines which of the yes button 1803 and the no button 1804 has been pressed. When a job stop instruction is given by pressing the yes button 1803, the process proceeds to step S1905. When a job stop instruction is not given by pressing the no button 1804, the process of the flowchart in FIG. 19 ends.

[0203] In step S1905, the print monitoring server 111 performs the same job cancellation process as step S1505 in FIG. 15.

[0204] In step S1906, the print monitoring server 111 performs the same cancellation notification process to the user as step S1506 in FIG. 15. After this process, the process of the flowchart in FIG. 19 ends.

[0205] As described above, according to the first to fourth embodiments, the print monitoring server 111 can branch the process according to the printing environment of the image forming apparatus 101, and can provide means for performing monitoring processes at earlier stages according to normal printing and hold printing, respectively.

[0206] For example, when the print monitoring server 111 detects an individual keyword 1003 suspected of information leakage risk, it is possible to execute a print job within the company but stop the execution of the print job outside the company. In addition, the print monitoring server 111 can also give priority to notifying a print job with a higher information leakage risk, such as suppressing the notification for in-company printing but notifying for out-of-company printing, and notifying the administrator.

[0207] (Other Embodiments) The present disclosure can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program. It can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

[0208] Note that the above-described embodiments are merely specific examples for implementing the present disclosure, and the technical scope of the present disclosure is not limitedly interpreted by these. That is, the present disclosure can be implemented in various forms without departing from its technical idea or its main features.

[0209] The disclosure of the present embodiment includes the following configurations and methods. (Configuration 1) A job management system including a server and an image forming apparatus, wherein the server has execution means for executing a predetermined process when an information leakage risk is included in a print job and the image forming apparatus satisfies a predetermined condition when executing the print job, and in the image forming apparatus, when an information leakage risk is not included in the print job or the image forming apparatus does not satisfy the predetermined condition when executing the print job, the print job is executed, wherein the predetermined condition includes at least one of a location condition and a time condition. ​​The predetermined processing includes at least any one of canceling a print job, notifying that an information leakage risk is included, and controlling not to provide a print job as a print target of the image forming apparatus. A job management system characterized by this. (Configuration 2) When the execution means includes an information leakage risk in the print job, and the location of the image forming apparatus satisfies the location condition, or the time of the image forming apparatus satisfies the time condition, the job management system according to Configuration 1, characterized in that control is performed to cancel the print job. (Configuration 3) When the execution means includes an information leakage risk in the print job, and the location of the image forming apparatus satisfies the location condition, or the time of the image forming apparatus satisfies the time condition, and a print request for the print job is received from the image forming apparatus, control is performed to cancel the print job. When the execution means does not include an information leakage risk in the print job and a print request for the print job is received from the image forming apparatus, the job management system according to Configuration 1, characterized in that control is performed to perform a process of transmitting the print job to the image forming apparatus. (Configuration 4) When the execution means includes an information leakage risk in the print job, and the location of the image forming apparatus satisfies the location condition, or the time of the image forming apparatus satisfies the time condition, the job management system according to Configuration 1, characterized in that control is performed to notify that the information leakage risk is included. (Configuration 5) When the execution means includes an information leakage risk in the print job, and the location of the image forming apparatus satisfies the location condition, or the time of the image forming apparatus satisfies the time condition, and a print request for the print job is received from the image forming apparatus, control is performed to notify that the information leakage risk is included. When the execution means determines that the print job does not include an information leakage risk and receives a print request for the print job from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus. The job management system according to Configuration 1 is characterized in this way. (Configuration 6) The execution means When the print job includes an information leakage risk and the location of the image forming apparatus satisfies the location condition, the execution means controls to perform a process of not adding the print job to the print job list displayed on the image forming apparatus. When the print job includes an information leakage risk and the location of the image forming apparatus does not satisfy the location condition, the execution means controls to perform a process of adding the print job to the print job list displayed on the image forming apparatus. The execution means controls to display the print job list on the image forming apparatus. When the execution means receives a print request for a print job selected from the print job list from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus. The job management system according to Configuration 1 is characterized in this way. (Configuration 7) The execution means When the print job includes an information leakage risk and the time of the image forming apparatus satisfies the time condition, the execution means controls to perform a process of not adding the print job to the print job list displayed on the image forming apparatus. When the print job includes an information leakage risk and the time of the image forming apparatus does not satisfy the time condition, the execution means controls to perform a process of notifying the print job to the print job list displayed on the image forming apparatus. The execution means controls to display the print job list on the image forming apparatus. When the execution means receives a print request for a print job selected from the print job list from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus. The job management system according to Configuration 1 is characterized in this way. (Method 1) A processing method for a job management system including a server and an image forming apparatus, wherein: when the server determines that a print job includes a risk of information leakage and the image forming apparatus satisfies a predetermined condition when executing the print job, the server has an execution step of executing a predetermined process; in the image forming apparatus, when the print job does not include a risk of information leakage or the image forming apparatus does not satisfy the predetermined condition when executing the print job, the print job is executed; the predetermined condition includes at least one of a location condition and a time condition; the predetermined process includes at least one of canceling the print job, notifying that a risk of information leakage is included, and controlling not to provide the print job as a print target of the image forming apparatus. A processing method for a job management system, characterized by the above.

Description of Signs

[0210] 301 Setting management unit, 302 Device cooperation unit, 303 UI control unit, 304 Data storage unit, 305 Print monitoring unit

Claims

1. A job management system including a server and an image forming apparatus, wherein the server has an execution means for executing a predetermined process when the print job includes a risk of information leakage and the image forming apparatus satisfies a predetermined condition when executing the print job, and in the image forming apparatus, when the print job does not include a risk of information leakage or the image forming apparatus does not satisfy the predetermined condition when executing the print job, the print job is executed, wherein the predetermined condition includes at least one of a location condition and a time condition, and the predetermined process includes at least one of canceling the print job, notifying that the risk of information leakage is included, and controlling not to provide the print job as a printing target of the image forming apparatus. A job management system characterized by the above.

2. The execution means controls to cancel the print job when the print job includes a risk of information leakage and the location of the image forming apparatus satisfies the location condition or the time of the image forming apparatus satisfies the time condition, according to the job management system described in Claim 1.

3. The execution means controls to cancel the print job when the print job includes a risk of information leakage, the location of the image forming apparatus satisfies the location condition or the time of the image forming apparatus satisfies the time condition, and a print request for the print job is received from the image forming apparatus. The execution means controls to perform a process of transmitting the print job to the image forming apparatus when the print job does not include a risk of information leakage and a print request for the print job is received from the image forming apparatus, according to the job management system described in Claim 1.

4. The execution means controls to notify that the risk of information leakage is included when the print job includes a risk of information leakage and the location of the image forming apparatus satisfies the location condition or the time of the image forming apparatus satisfies the time condition, according to the job management system described in Claim 1.

5. ​ ​ ​ When the execution means includes an information leakage risk in a print job, and the location of the image forming apparatus satisfies the location condition, or the time of the image forming apparatus satisfies the time condition, and a print request for the print job is received from the image forming apparatus, the execution means controls to notify that the information leakage risk is included. The job management system according to claim 1, wherein when the execution means does not include an information leakage risk in a print job and a print request for the print job is received from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus.

6. The execution means When an information leakage risk is included in a print job and the location of the image forming apparatus satisfies the location condition, the execution means controls to perform a process of not adding the print job to a print job list displayed on the image forming apparatus. When an information leakage risk is included in a print job and the location of the image forming apparatus does not satisfy the location condition, the execution means controls to perform a process of adding the print job to a print job list displayed on the image forming apparatus. The job management system according to claim 1, wherein the execution means controls to display the print job list on the image forming apparatus, and when a print request for a print job selected from the print job list is received from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus.

7. The execution means When an information leakage risk is included in a print job and the time of the image forming apparatus satisfies the time condition, the execution means controls to perform a process of not adding the print job to a print job list displayed on the image forming apparatus. When an information leakage risk is included in a print job and the time of the image forming apparatus does not satisfy the time condition, the execution means controls to perform a process of notifying the print job to a print job list displayed on the image forming apparatus. The job management system according to claim 1, wherein the execution means controls to display the print job list on the image forming apparatus, and when a print request for a print job selected from the print job list is received from the image forming apparatus, the execution means controls to perform a process of transmitting the print job to the image forming apparatus.

8. A processing method for a job management system including a server and an image forming apparatus, The server has an execution step of executing a predetermined process when the print job includes an information leakage risk and the image forming apparatus satisfies a predetermined condition when executing the print job. In the image forming apparatus, when the print job does not include an information leakage risk or the image forming apparatus does not satisfy the predetermined condition when executing the print job, the print job is executed. The predetermined condition includes at least one of a location condition and a time condition. The predetermined process includes at least one of canceling the print job, notifying that an information leakage risk is included, and controlling not to provide the print job as a printing target of the image forming apparatus. A processing method of a job management system, characterized by the above.

Images