Image forming apparatus

Abstract

To achieve both maintenance of safety and improvement of convenience.SOLUTION: An image forming apparatus comprises: a processing unit that processes image information by using any one or more of a plurality of types of functions; a reading unit that reads a printed medium; and an extraction unit that extracts additional information embedded in the medium as a digital watermark from the image information read from the medium. When any one of more of the plurality of types of functions are used, the processing unit restricts processing on the image information having the additional information embedded therein, on the basis of an attribute included in the additional information and determining whether to restrict processing for each of the plurality of types of functions.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to an image forming apparatus. [Background technology]

[0002] 2. Description of the Related Art Image forming apparatuses having a copying function, such as personal computers, printers, and copiers, have been widely used.

[0003] Patent document 1 proposes a technology for preserving confidential information contained in an original image by determining whether the operator is an authorized person based on information embedded in the original image, and controlling whether or not to perform image formation based on the determination result. Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, image forming devices have tended to be equipped with a variety of functions. As a result, image forming devices can perform various processes on scanned documents using the functions. However, no consideration has been given to whether or not to permit each process for each function of the image forming device.

[0005] In view of the above-mentioned problems, an embodiment of the present invention aims to maintain security and improve convenience at the same time by considering whether or not to permit processing for each function. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems, the present invention provides an image forming device that includes a processing unit that processes image information using any one or more of a plurality of types of functions, a reading unit that reads printed media, and an extraction unit that extracts additional information embedded in the media as an electronic watermark from the image information read from the media, and when using any one or more of the plurality of types of functions, the processing unit restricts the processing of the image information in which the additional information is embedded based on attributes contained in the additional information that define whether or not to restrict processing for each of the plurality of types of functions. [Effects of the Invention]

[0007] According to the embodiment of the present invention, by considering whether or not to permit processing for each function, it is possible to maintain security and improve convenience in accordance with the user's purpose. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing an example of a schematic configuration of an entire image processing system including an image forming apparatus according to the first embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of the configuration of a control unit of the image forming apparatus according to the first embodiment. [Figure 3] FIG. 3 is an example of a functional block diagram showing a configuration for performing processing related to digital watermarks, which the image processing apparatus according to the first embodiment has. [Figure 4] FIG. 4 is a diagram illustrating digital watermark information used in the image forming apparatus according to the first embodiment. [Figure 5] FIG. 5 is a diagram illustrating an example of the data structure of digital watermark information read by the watermark information reading unit according to the first embodiment. [Figure 6] FIG. 6 is a diagram illustrating an example of the data structure of the function restriction information when ID="1". [Figure 7] FIG. 7 is a conceptual diagram showing the restrictions on processing based on function restriction information in the image forming apparatus according to the first embodiment. [Figure 8]FIG. 8 is a flowchart showing the processing performed in the image forming apparatus according to the first embodiment. [Figure 9] FIG. 9 is a diagram illustrating an example of the data structure of the function restriction information when ID="2". [Figure 10] FIG. 10 is a flowchart showing the processing performed in the image forming apparatus according to the second embodiment. [Figure 11] FIG. 11 is a flowchart showing the processing performed in the image forming apparatus according to the third embodiment. [Figure 12] FIG. 12 is a diagram illustrating an example of the data structure of the function restriction information when ID="4". [Figure 13] FIG. 13 is a diagram showing an example of an authority decision table used in the fourth embodiment. [Figure 14] FIG. 14 is a flowchart showing the processing performed in the image forming apparatus according to the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of an image forming apparatus according to the present invention will be described in detail below with reference to the accompanying drawings.

[0010] (First embodiment) The image forming apparatus according to the present embodiment may be, for example, a multifunction full-color digital copier (MFP (Multifunction Peripheral)) that forms color images by electrophotography. Fig. 1 is a diagram showing an example of the schematic configuration of an entire image processing system including the image forming apparatus according to the present embodiment.

[0011] Image forming apparatus 1 according to this embodiment is made up of the following units: automatic document feeder (hereinafter referred to as "ADF") 230, user interface unit 90, color scanner (image reading device) 210, color printer 100, and facsimile control unit (hereinafter referred to as "FCU"). Note that user interface unit 90 and color scanner 210 equipped with ADF 230 are units that can be separated from color printer 100. Color scanner 210 reads an original image.

[0012] The color printer 100 according to this embodiment also includes a controller board, which will be described later, and prints images under the control of the controller board. The printed paper is discharged to a paper discharge stack (not shown).

[0013] The controller board is connected to a network such as a LAN (Local Area Network) to which a personal computer (hereinafter referred to as "PC") PC is connected. The PC PC can send and receive information to and from the image forming apparatus 1 via the network such as the LAN.

[0014] In addition, the FCU in the controller board is connected to a PBX exchange which is connected to a telephone line PN (facsimile communication line).

[0015] FIG. 2 is a block diagram showing an example of the configuration of the control unit of the image forming apparatus 1 according to this embodiment.

[0016] Image forming apparatus 1 according to this embodiment includes an engine 260 that reads and color prints original images, a controller board 270, and a user interface unit 90. Engine 260 includes a CPU (Central Processing Unit) 261 that controls the process of reading and printing original images, an image input / output processing unit 262, a color scanner 210, an ADF 230, and a color printer 100.

[0017] The color scanner 210 includes a reading unit 211, a CCD 207, and an AFE (Analogue Front End) 212, as well as a control board with a power equipment driver, sensor input, and controller, a sensor board unit (SBU), various sensors such as a document detection sensor, HP sensor, pressure plate open / close sensor, and base point sensor, power equipment such as a cooling fan and pulse motor, and a scanner motor driver.

[0018] The document image read by the reading unit 211 is focused on a CCD (3-line CCD) 207 that includes three line sensors (each with different spectral sensitivity characteristics) for color reading (reading R, G, and B color pixels). The CCD 207 outputs analog image signals of the R, G, and B color pixels to the AFE 212. The AFE 212 performs analog signal processing and A / D conversion processing on the analog image signals.

[0019] The CPU 261 controls the color scanner 210, the ADF 230, and the color printer 100 in response to a user's operation input via the user interface unit 90, and controls the process of reading an original image and the process of printing the image under the control of the controller board 270. For example, in an operation input instructing reading of an original image, one of the ACS reading mode, color reading mode, and monochrome reading mode can be specified as the original reading mode. The ACS reading mode is a mode in which the multifunction peripheral MF1 determines whether the original image is color or monochrome, the color reading mode is a mode in which the original image is read as a color image, and the monochrome reading mode is a mode in which the original image is read as a monochrome image. Then, in response to the specification of the original reading mode, the CPU 261 selects and sets an operating mode for the color scanner 210 and the ADF 230, including the CCD 207, and selects and sets a mode for the scanner image processing unit 263. Specifically, when the ACS reading mode is designated as the reading mode for the original document, the CPU 261 sets the reading mode for the original document image to the ACS reading mode, sets the color scanner 210 including the CCD 207 and the ADF 230 to the color / monochrome simultaneous operation mode, and sets the scanner image processing unit 263 (described later) to the ACS mode. Also, when the color reading mode is designated as the reading mode for the original document, the CPU 261 sets the reading mode for the original document image to the color reading mode, sets the color scanner 210 including the CCD 207 and the ADF 230 to the color operation mode, and sets the scanner image processing unit 263 to the color mode. Also, when the monochrome reading mode is designated as the reading mode for the original document or when no original reading mode is designated, the CPU 261 sets the reading mode for the original document image to the monochrome reading mode, sets the color scanner 210 including the CCD 207 and the ADF 230 to the color / monochrome simultaneous operation mode, and sets the scanner image processing unit 263 to the monochrome mode.

[0020] The image input / output processing unit 262 is configured by, for example, an ASIC (Application Specific IC), and includes a scanner image processing unit 263, a printer image processing unit 264, and an image processing I / F (Interface circuit) 265.

[0021] The scanner image processing unit 263 reads the printed medium via the color scanner 210 and generates R, G, and B image data from the read original image. The scanner image processing unit 263 then performs shading correction, reading gamma correction, MTF correction, and the like on each of the R, G, and B image data. The scanner image processing unit 263 may convert the corrected R, G, and B image data into M, C, Y, and K image data (recording color data) as necessary.

[0022] The printer image processing unit 264 converts the R, G, B image data or the M, C, Y, K image data into M, C, Y, K image data that matches the image expression characteristics of the writing units for each of the M, C, Y, K colors of the color printer 100.

[0023] Printer image processing unit 264 outputs the converted image data to color printer 100. Color printer 100 then becomes capable of printing using the input image data.

[0024] An image processing I / F (Interface circuit) 265 transmits R, G, B image data or M, C, Y, K image data read from the original to an image storage control unit 273. The image processing I / F 265 transmits the R, G, B image data or M, C, Y, K image data received from the image storage control unit 273 to a printer image processing unit 264.

[0025] The controller board 270 includes a hard disk drive (hereinafter referred to as "HDD") 271, a CPU 272, an image storage control unit 273, a local memory (MEM-C) 276, a north bridge (hereinafter referred to as "NB") 278, a system memory (MEM-P) 279, a NIC (Network Interface Card) 280, a USB interface 281, an IEEE1394 interface 282, a Centronics interface 283, an MLB 284, and a south bridge (hereinafter referred to as "SB") 285.

[0026] The user interface unit 90 is connected to the image storage control unit 273 of the controller board 270. The FCU 287 is also connected to the image storage control unit 273 via a PCI bus.

[0027] The CPU 272 can send and receive document and image information to and from a personal computer PC connected to a network such as a LAN or other personal computers connected via the Internet via a NIC 280. It can also communicate with personal computers, printers, digital cameras, etc. using a USB interface 281, an IEEE 1394 interface, or a Centronics interface 283.

[0028] The SB 285, the NIC 280, the USB interface 281, the IEEE1394 interface 282, the Centronics interface 283, and the MLB 284 are connected to the NB 278 via an internal bus.

[0029] The MLB 284 is a board that connects to the engine 260 via an internal bus, converts externally input document and image data into image data (image data), and outputs the converted image data to the engine 260.

[0030] The image storage control unit 273 of the controller board 270 is connected to a local memory 276, an HDD 271, etc., and the CPU 272 and the image storage control unit 273 are connected via an NB 278 of the CPU chipset. The image storage control unit 273 and the NB 278 are connected via an AGP (Accelerated Graphics Port).

[0031] The CPU 272 controls the entire image forming apparatus 1 .

[0032] The NB 278 is a bridge for connecting the CPU 272 , the system memory 279 , the SB 285 , and the image storage control unit 273 .

[0033] The system memory 279 is a memory used as a drawing memory for the image forming apparatus 1, etc.

[0034] The SB285 is a bridge for connecting the NB278, the MLB284, the ROM286, and peripheral devices via the internal bus and various interfaces.

[0035] The local memory 276 is a memory used as an image buffer for copying and a code buffer.

[0036] The HDD 271 (an example of a storage unit) is a memory for accumulating and saving various data such as image data, document data, programs, font data, form data, and LUTs (Look Up Tables). The programs stored in the HDD 271 include programs for realizing functions that the image forming apparatus 1 can execute (for example, copy, scan, and fax). Furthermore, the HDD 271 stores information about users who can use the image forming apparatus 1 (an example of user information), information about the administrator of the image forming apparatus 1 (an example of administrator information), and the like.

[0037] The user interface unit 90 is an operation unit that accepts input operations by the user and displays information for the user.

[0038] <About the image processing device functions> FIG. 3 is an example of a functional block diagram showing a configuration for performing processing related to digital watermarking, which is included in the image forming apparatus 1 according to this embodiment.

[0039] As shown in FIG. 3, the configuration for performing processing related to digital watermarking includes a color scanner 210, an image input / output processing unit 262, a controller board 270, and a user interface unit 90.

[0040] The CPU of the controller board (an example of a processing unit) 270 reads out an application stored in the HDD 271 and executes the application. The application corresponds to a function that can be executed by the image forming apparatus 1. As a result, the controller board 270 processes image data using one or more of the multiple types of functions installed in the image forming apparatus 1.

[0041] The printer image processing unit 264 provided in the image input / output processing unit 262 includes a watermark information embedding unit 311 .

[0042] The watermark information embedding unit 311 embeds digital watermark information in image data to be printed. For example, the controller board 270 outputs digital watermark information generated in advance to the image input / output processing unit 262 via the image processing I / F 265. This enables the watermark information embedding unit 311 to embed the digital watermark information. The method for embedding digital watermark information will be described later.

[0043] As shown in FIG. 3, the scanner image processing unit 263 includes a watermark information extraction unit 301 , a function restriction determination unit 302 , an image editing unit 303 , a function instruction unit 304 , and an acquisition unit 305 .

[0044] The acquisition unit 305 acquires various information. For example, the acquisition unit 305 acquires, via the image processing I / F 265, user identification information read from an IC card authentication device (not shown) provided in the user interface unit 90.

[0045] The watermark information extraction unit 301 extracts digital watermark information (an example of additional information) embedded in the original image from the R, G, and B image data generated by reading the original image with the color scanner 210. Any method may be used to embed the digital watermark information in the original image, and for example, the method shown in FIG.

[0046] <An example of a digital watermark> Fig. 4 is a diagram illustrating digital watermark information used in the image forming apparatus 1 according to this embodiment. Fig. 4 shows an example in which information is embedded in units of one bit as digital watermark information by adding or removing minute dots on the outline of a character. In Fig. 4, two minute dots 401 and 402 are added to the character "D." An example of a method for embedding and reading digital watermark information will be briefly described below.

[0047] (i) The watermark information embedding unit 311 identifies a character string to be embedded from among the character strings present in the image data to be printed based on a predetermined rule, and performs edge detection on the identified character string. The length of the identified character string, etc., is determined according to the amount of data to be embedded as digital watermark information. In the example shown in Figure 4, the watermark information embedding unit 311 identifies a character string containing "D" based on a predetermined rule, and then performs edge detection on the outer edge of each character included in the identified character string.

[0048] (ii) The watermark information embedding unit 311 adds or removes minute dots on the inside or outside of the outer edge of each character of the specified character string, including the character "D," in a predetermined order starting from a starting point determined by the algorithm. For example, adding a minute dot corresponds to "1," and removing a minute dot corresponds to "0." In the example shown in FIG. 4, two minute dots (or removals) are added to the character "D," thereby embedding two bits of information. The watermark information embedding unit 311 similarly adds or removes minute dots for each character of the specified character string in a predetermined order starting from a starting point determined by the algorithm. Therefore, digital watermark information is formed by adding one or more digital signals of "1" or "0" to each character of the specified character string. The watermark information embedding unit 311 converts information of a bit string of a predetermined length into binary information and embeds it on the outer edge of each character of the specified character string.

[0049] (iii) When scanning a document, the watermark information extraction unit 301 identifies character strings from which digital watermark information is to be extracted based on a predetermined rule among the character strings present in the scanned image data, and detects the outer edge of each character of the identified character string. The watermark information extraction unit 301 detects the addition or deletion of minute dots from the inside or outside of the outer edge of each character of the identified character string, in order from a starting point determined by an algorithm. Thus, the watermark information extraction unit 301 can extract digital watermark information from the image data. The watermark information extraction unit 301 converts the read binary information into numbers or characters for each bit string of a predetermined length.

[0050] In this embodiment, the method for identifying a character string when embedding and the method for identifying a character string when reading are made common, thereby making it possible to read the embedded digital watermark information. Note that the above-described method for embedding and reading digital watermark information is shown as an example, and other methods for embedding and reading digital watermark information may also be used. For example, a method for embedding and reading digital watermark information in image data such as a picture, graph, or diagram may also be used.

[0051] Returning to FIG. 3, the function restriction determination unit 302 determines whether or not the function set by the user can be executed in the image forming apparatus 1 based on the function restriction information included in the digital watermark information.

[0052] The digital watermark information according to this embodiment will now be described. Fig. 5 is a diagram illustrating the data structure of the digital watermark information extracted by the watermark information extraction unit 301 according to this embodiment. As shown in Fig. 5, the digital watermark information stores an ID, function restriction information, time information, print owner information, and location information in association with each other.

[0053] The ID is identification information that indicates the function restriction method of the image forming apparatus 1 using the function restriction information. For example, a numerical value for identifying the function restriction method is stored in the ID. The image forming apparatus 1 then switches the function restriction method depending on the numerical value stored in the ID. In this embodiment, a case where "1" is stored in the ID will be described.

[0054] The time information stores information indicating a time limit for which processing by the image forming apparatus 1 is permitted.

[0055] The printer information stores identification information of the user who printed the document image.

[0056] The location information stores information indicating the location where the image forming apparatus 1 that allows processing by the image forming apparatus 1 is installed.

[0057] The function restriction information stores information necessary for restricting functions of the image forming apparatus 1. In this embodiment, 10 bits are reserved for the function restriction information, but the amount of data for restricting functions is not limited to 10 bits, and may be less than 9 bits or 11 bits or more.

[0058] FIG. 6 is a diagram illustrating the data structure of function restriction information when ID="1". As shown in FIG. 6, when ID="1", a copy prohibition flag indicating whether copying is prohibited is stored in bit 0. When bit 0 is "1", the image data to be copied is deleted during copying, and image data representing a predetermined pattern is printed. The predetermined pattern may be, for example, a striped pattern at a predetermined interval, a solid pattern filled with a single color, or a pattern with a predetermined character string (for example, "Copy Prohibited"). When bit 0 is "0", copying of the image data to be copied is permitted during copying. Note that the restriction on the execution of the function does not limit the printing of image data representing a predetermined pattern, but may also stop printing altogether.

[0059] Bit 1 stores a scan prohibition flag that indicates whether scanning is prohibited. When bit 1 is "1", the image data of the scanned object is deleted when scanning and saving of that image data is stopped (an example of suppression). When bit 1 is "0", saving of the image data of the scanned object is permitted when scanning. Note that the restriction on the execution of the function is not limited to suppressing saving, and instead of the image data of the scanned object, image data filled with a specified pattern may be saved.

[0060] Bit 2 stores a fax prohibition flag that indicates whether faxing is prohibited. When bit 1 is "1", the image data to be faxed is deleted and the transmission of the image data is stopped (an example of suppression). When bit 1 is "0", the saving of the image data to be faxed is permitted when faxing. Note that the restriction on the execution of the function is not limited to the suppression of transmission, and instead of the image data to be faxed, image data filled with a specified pattern may be sent.

[0061] Furthermore, bit 3 stores an administrator privilege flag indicating whether or not users other than the administrator are prohibited from performing processes using the image forming device 1. When bit 3 is "1," the administrator is allowed to perform processes using the image forming device 1, and when bit 3 is "0," the execution of processes using the image forming device 1 is restricted regardless of whether the user is an administrator or not.

[0062] Furthermore, bit 4 stores a restriction flag after the specified time indicating whether or not the image forming device 1 can execute the process until the time specified in the time information. If bit 4 is "1", the image forming device 1 can execute the process until the specified time, and if it is "0", the execution of the process by the image forming device 1 is restricted regardless of whether or not it is within the specified time.

[0063] Furthermore, bit 5 stores a non-designated user restriction flag indicating whether or not to restrict the execution of processing by the image forming device 1 by users other than those designated in the print user information. When bit 5 is "1," the image forming device 1 is allowed to execute processing for users designated in the print user information, and when bit 5 is "0," the image forming device 1 is restricted from executing processing regardless of whether the user is designated in the print user information or not.

[0064] Furthermore, bit 6 stores a non-location restriction flag indicating whether or not to restrict the execution of the process for image forming devices 1 other than those installed in the location specified by the location information. When bit 6 is "1," the process can be executed for image forming devices 1 installed in the location specified by the location information, and when bit 6 is "0," the process is restricted regardless of whether the image forming device 1 is installed in the location specified by the location information or not.

[0065] Furthermore, bit 7 stores a flag indicating whether or not to restrict fax transmission to companies other than those in the predetermined group. If bit 7 is "1," fax transmission to group companies is permitted, and if it is "0," fax transmission is restricted regardless of whether the company is a group company or not.

[0066] Furthermore, bit 8 stores a non-predetermined resolution suppression flag that indicates whether or not image data can be saved only at a predetermined resolution when scanned. When bit 8 is "1," image data can be saved only at the predetermined resolution, and when it is "0," saving of image data is restricted regardless of whether it is the predetermined resolution or not.

[0067] Furthermore, bit 9 stores a stamp printing flag indicating whether or not to print a stamp when processing is performed by the image forming apparatus 1. When bit 9 is "1", a stamp is printed when processing is performed by the image forming apparatus 1, and when bit 9 is "0", printing of a stamp is suppressed when processing is performed by the image forming apparatus 1.

[0068] In this embodiment, a case will be described in which the processing of image data is restricted using bits 0 to 2 of the function restriction information shown in FIG.

[0069] 3, the image editing unit 303 performs editing processing on the image data generated by the scanner image processing unit 263 based on the determination result by the function restriction determination unit 302. For example, if the copy prohibition flag stored in the function restriction information is "1" and an operation to execute copying has been received from the user, the image editing unit 303 deletes the image data generated by the scanner image processing unit 263 and reads out image data expressing a predetermined pattern for copying. The controller board 270 then performs control related to copying using the read image data of the predetermined pattern.

[0070] The function instruction unit 304 outputs instruction information indicating whether or not to restrict the execution of a function based on the determination result by the function restriction determination unit 302. The instruction information is input to the controller board 270 via the image processing I / F 265.

[0071] The controller board 270 controls the functions based on instruction information from the function instruction unit 304. As a result, when using any one or more of a plurality of types of functions, the controller board 270 can restrict the processing of image data in which digital watermark information has been embedded based on various flags (an example of an attribute) stored in function restriction information included in the digital watermark information. In this embodiment, an example will be described in which a flag set for each function is used as an example of an attribute for determining whether or not to restrict processing for each function, but the present invention is not limited to the method using a flag, and any attribute can be used as long as it is possible to determine whether or not to restrict processing for each function.

[0072] In this embodiment, the multiple types of functions executable by the image forming apparatus 1 are described as a copy function, a scan function, and a fax function. However, in this embodiment, the multiple types of functions are not limited to the copy function, the scan function, and the fax function, and may include any two or more of the copy function, the scan function, and the fax function. Furthermore, the functions executable by the image forming apparatus 1 may include other functions.

[0073] FIG. 7 is a conceptual diagram showing the restrictions on processing based on the function restriction information in the image forming apparatus 1 according to this embodiment.

[0074] In the example shown in FIG. 7, the scanner image processing unit 263 of the image forming apparatus 1 uses the color scanner 210 to read the original image of the sheet-like member 701, thereby generating R, G, and B image data.

[0075] The watermark information extraction unit 301 then extracts the embedded digital watermark information from image data obtained by combining R, G, and B image data generated by the color scanner 210 reading the document image. Furthermore, the function restriction determination unit 302 extracts function restriction information from the digital watermark information and determines whether processing is possible for each function based on the function restriction information. The image editing unit 303 then edits the image data based on the determination result. Furthermore, the function instruction unit 304 outputs instruction information to the controller board 270 based on the determination result. The controller board 270 then switches whether or not to restrict the functions set by the user based on the instruction information.

[0076] If the function instructed to be executed by the user is copying, the function restriction determination unit 302 refers to the copy prohibition flag. If the copy prohibition flag stored in bit 0 included in the function restriction information is '0', the function restriction determination unit 302 determines that copying is permitted. The controller board 270 then controls the printer image processing unit 264 to execute copying. As a result, the printer image processing unit 264 converts the image data to be copied into M, C, Y, and K image data, and executes image formation on a sheet-like material using the converted image data. As a result, a sheet-like material 711 representing the image data is output.

[0077] Furthermore, if the copy prohibition flag stored in bit 0 included in the function restriction information is '1,' the function restriction determination unit 302 determines that copying is not permitted. The image editing unit 303 then deletes the image data to be copied and reads image data representing a predetermined pattern (an example of a different image). The controller board 270 then controls the printer image processing unit 264 to form an image using the image data representing the predetermined pattern. As a result, the printer image processing unit 264 outputs a sheet-like member 712 filled with the predetermined pattern. Therefore, since the sheet-like member 712 is filled with the predetermined pattern, unauthorized use can be prevented. The predetermined pattern represented on the sheet-like member 712 shown in FIG. 7 is merely an example; any pattern may be used as long as it allows the user to recognize that functions such as copying are not permitted.

[0078] When the function instructed to be executed by the user is scanning, the function restriction determination unit 302 refers to the scan prohibition flag. If the scan prohibition flag stored in bit 1 included in the function restriction information is '0', the function restriction determination unit 302 determines that scanning is permitted. Then, the controller board 270 controls the storage of the image data to be scanned in a storage area of ​​the HDD 271 that corresponds to the destination set by the user.

[0079] Furthermore, if the scan prohibition flag stored in bit 1 included in the function restriction information is '1', the function restriction determination unit 302 determines that scanning is not permitted. If it is determined that scanning is not permitted, the image editing unit 303 deletes the image data to be scanned. The function instruction unit 304 outputs instruction information indicating that scanning is not permitted to the controller board 270. Then, the controller board 270 stops (suppresses) saving to the HDD 271 in accordance with the instruction information. This makes it possible to prevent information leakage due to unauthorized use or mistake.

[0080] If the function instructed to be executed by the user is a fax function, the function restriction determination unit 302 refers to the fax prohibition flag. If the fax prohibition flag stored in bit 2 included in the function restriction information is '0', the function restriction determination unit 302 determines that fax transmission is permitted. Then, the controller board 270 performs processing to transmit the image data to be transmitted to the destination set by the user via the PBX exchange.

[0081] Furthermore, if the FAX prohibition flag stored in bit 2 included in the function restriction information is '1', the function restriction determination unit 302 determines that FAX transmission is not permitted. If it is determined that FAX transmission is not permitted, the image editing unit 303 deletes the image data to be FAXed. The function instruction unit 304 outputs instruction information to the controller board 270 indicating that FAX transmission is not permitted. Then, the controller board 270 stops (suppresses) FAX transmission in accordance with the instruction information. This makes it possible to prevent information leakage due to fraudulent use or mistakes.

[0082] FIG. 8 is a flowchart showing the processing performed by the image forming apparatus 1 according to this embodiment.

[0083] First, the scanner image processing unit 263 uses the color scanner 210 to read an original image of a sheet-like material, thereby generating R, G, and B image data (S1801).

[0084] Next, the watermark information extraction unit 301 extracts the digital watermark information embedded in the document image from the R, G, and B image data (S1802).

[0085] The watermark information extraction unit 301 determines whether the ID included in the digital watermark information is '1' (S1803). If it is determined that the ID is not '1' (S1803: NO), the process shown in other embodiments is performed (S1804), and the process ends.

[0086] On the other hand, if the watermark information extraction unit 301 determines that the ID is '1' (S1803: YES), the acquisition unit 305 acquires information indicating the function instructed to be executed by the user via the user interface unit 90 (S1805).

[0087] Next, the function restriction determination unit 302 determines whether the function instructed to be executed by the user is permitted according to the function restriction information (S1806).

[0088] If it is determined that permission is granted (S1806: YES), the controller board 270 executes an application corresponding to the function instructed to be executed, and the application performs processing using R, G, and B image data (S1807).

[0089] If it is determined that the function is not permitted (S1806: NO), the image editing unit 303 deletes the R, G, and B image data, and the function instruction unit 304 transmits instruction information to the controller board 270 to suppress the instructed function, and the controller board 270 restricts the execution of the function (S1808). The restriction on the execution of a function is as described above, so a detailed explanation will be omitted. Furthermore, if the instructed function is copying, the controller board 270 may control the output of a sheet-like material bearing a predetermined pattern, instead of suppressing the output.

[0090] The image forming apparatus 1 according to this embodiment has the above-described configuration, and can control whether or not to execute each function instructed to be executed by the user.

[0091] (Second embodiment) In the above-described embodiment, the control when the ID of the digital watermark information is "1" has been described. In the second embodiment, the control when the ID of the digital watermark information is "2" will be described.

[0092] The function restriction information to be stored changes depending on the ID of the digital watermark information. Therefore, the function restriction information when the ID of the digital watermark information is "2" will be described.

[0093] Fig. 9 is a diagram illustrating the data structure of function restriction information when ID="2". As shown in Fig. 9, when ID="2", a copy prohibition flag indicating whether copying is prohibited or not is stored using a total of 2 bits, bit 0 to bit 1. For example, when the copy prohibition flag="0", copying is permitted; when the copy prohibition flag="1", a warning is output when copying is performed; and when the copy prohibition flag="2" or "3", the image data to be copied is deleted and a sheet-like member representing a predetermined pattern is output.

[0094] A scan prohibition flag indicating whether scanning is prohibited or not is stored in a total of 2 bits, bits 2 to 3. For example, when the scan prohibition flag is "0", saving of the image data of the scanned object is permitted when scanning, when the scan prohibition flag is "1", a warning is output when saving the image data of the scanned object, when the scan prohibition flag is "2", saving of the image data of the scanned object is permitted only in a storage area corresponding to a specific destination, and when the scan prohibition flag is "3", the image data of the scanned object is deleted and the image data is prevented from being saved in HDD 271.

[0095] A fax prohibition flag indicating whether faxing is prohibited or not is stored in a total of 2 bits, bits 4 to 5. For example, if the fax prohibition flag is "0", the sending of image data to be faxed is permitted during faxing, if the fax prohibition flag is "1", a warning is output when image data is sent by fax, if the fax prohibition flag is "2", the sending of image data is permitted only to specific destinations, and if the fax prohibition flag is "3", the image data to be faxed is deleted and fax sending is suppressed.

[0096] Bits 6 to 9 are the same as bits 3 to 6 of the function restriction information in the first embodiment, and so a description thereof will be omitted.

[0097] FIG. 10 is a flowchart showing the processing performed by the image forming apparatus 1 according to this embodiment.

[0098] First, the scanner image processing unit 263 uses the color scanner 210 to read an original image of a sheet-like material, thereby generating R, G, and B image data (S2001).

[0099] Next, the watermark information extraction unit 301 extracts the digital watermark information embedded in the document image from the R, G, and B image data (S2002).

[0100] The function restriction determination unit 302 determines whether the ID included in the digital watermark information is '2' (S2003). If it is determined that the ID is not '2' (S2003: NO), the function restriction determination unit 302 performs the processing shown in other embodiments (S2004) and ends the processing.

[0101] On the other hand, if the function restriction determination unit 302 determines that the ID is '2' (S2003: YES), the acquisition unit 305 acquires information indicating the function instructed to be executed by the user via the user interface unit 90 (S2005).

[0102] Next, the function restriction determination unit 302 determines whether the prohibition flag corresponding to the function instructed to be executed by the user is "0" in the function restriction information (S2006).

[0103] If it is determined that the prohibition flag is set to "0" (S2006: YES), the controller board 270 executes an application corresponding to the function that has been instructed to be executed, and the application performs processing using R, G, and B image data (S2007).

[0104] If it is determined that the prohibition flag is not set to "0" (S2006: NO), the function restriction determination unit 302 determines whether the prohibition flag corresponding to the function instructed to be executed by the user is set to "1" (S2008).

[0105] If it is determined that the prohibition flag is set to "1" (S2008: YES), the function instruction unit 304 instructs the user interface unit 90 to output a warning, and the controller board 270 executes an application corresponding to the instructed function, and the application performs processing using R, G, and B image data (S2009). As a result, the user interface unit (an example of an output control unit) 90 outputs screen information (an example of warning information) displaying a warning in accordance with instructions based on the function restriction information before the controller board 270 performs processing using the image data. By outputting a warning even when processing is performed normally, it is possible to prevent information leakage due to mistakes, etc. In this way, it is possible to warn the user using the image forming apparatus 1, thereby improving safety.

[0106] If it is determined that the prohibition flag is not set to "1" (S2008: NO), the function restriction determination unit 302 determines whether the prohibition flag corresponding to the function instructed to be executed by the user is set to "2" (S2010).

[0107] If it is determined that the prohibition flag is set to "2" (S2010: YES), the function restriction determination unit 302 determines whether the function set for the user is copying (S2011). If the function restriction determination unit 302 determines that the function set for the user is copying (S2011: YES), the control proceeds to S2013.

[0108] On the other hand, if the function restriction determination unit 302 determines that the function set by the user is not copying (S2011: NO), the controller board 270 executes an application corresponding to the function instructed to be executed, and the application outputs (e.g., saves or transmits) the results of processing using R, G, and B image data only to a specific destination (S2012).

[0109] On the other hand, if it is determined in S2010 that the prohibition flag is not set to "2" (in other words, the prohibition flag is set to "3") (S2010: YES), or if it is determined that the function set by the user is copying (S2011: YES), the image editing unit 303 deletes the R, G, and B image data, and the function instruction unit 304 transmits instruction information to the controller board 270 to suppress the function instructed to be executed, and the controller board 270 restricts execution of the function (S2013). The restriction on function execution is as described above, so a detailed explanation will be omitted. Furthermore, if the function instructed to be executed is copying, the controller board 270 may control the controller board 270 to output a sheet-like material on which a predetermined pattern is displayed, instead of suppressing output.

[0110] (Third embodiment) In the third embodiment, control when the ID of the digital watermark information is "3" will be described. The function restriction information when the ID of the digital watermark information is "3" is the same as in the first embodiment, but a case will be described in which, of the function restriction information shown in FIG. 6, in addition to bits 0 to 2, bit 3 is used to restrict the processing of image data. Specifically, this is an example in which a function is executed when execution is permitted based on either the determination result based on bits 0 to 2 or the determination result based on bit 3. Bit 3 stores administrator authority. In this embodiment, user identification information representing the administrator is stored in HDD 271.

[0111] When the function restriction determination unit 302 determines that bit 3 is "1", the controller board 270 switches whether to restrict the processing of image data in which electronic watermark information is embedded based on the function restriction information (an example of an attribute), depending on whether the identification information indicating the administrator stored in the HDD 271 matches the identification information of the user using the image forming device 1.

[0112] In this embodiment, the administrator can use all functions of the image forming device 1, while other users have their functions restricted by bits 0 to 2. This embodiment is not limiting, and it is sufficient if the functions available on the image forming device 1 can be switched depending on whether the user is the administrator or not.

[0113] FIG. 11 is a flowchart showing the processing performed by the image forming apparatus 1 according to this embodiment.

[0114] First, the scanner image processing unit 263 uses the color scanner 210 to read an original image of a sheet-like material, thereby generating R, G, and B image data (S2101).

[0115] Next, the watermark information extraction unit 301 extracts the digital watermark information embedded in the document image from the R, G, and B image data (S2102).

[0116] The watermark information extraction unit 301 determines whether the ID included in the digital watermark information is '3' (S2103). If it is determined that the ID is not '3' (S2103: NO), the process shown in other embodiments is performed (S2104), and the process ends.

[0117] On the other hand, if the watermark information extraction unit 301 determines that the ID is '3' (S2103: YES), the acquisition unit 305 acquires information indicating the function instructed to be executed by the user via the user interface unit 90 (S2105).

[0118] The acquiring unit 305 acquires the identification information of the user who is using the image forming apparatus 1 (S2106). For example, the acquiring unit 305 may acquire the user identification information read from an IC card authentication device provided in the user interface unit 90, or may acquire the user identification information input to the user interface unit 90.

[0119] The function restriction determination unit 302 determines whether the administrator authority (bit 3 of the function restriction information) stored in the function restriction information is "1" (S2107). If it is determined to be "1" (S2107: YES), it determines whether the user identification information matches the identification information representing the administrator stored in the HDD 271 (S2108).

[0120] If it is determined that they match (S2108: YES), the controller board 270 executes an application corresponding to the function instructed to be executed, and the application performs processing using R, G, and B image data (S2109).

[0121] If it is determined in S2107 that the administrator authority is not "1" (S2107: NO), or if it is determined in S2108 that the identification information does not match (S2108: NO), the function restriction determination unit 302 determines whether the function instructed to be executed by the user is permitted by the function restriction information (S2110).

[0122] If it is determined that the function is permitted (S2110: YES), the controller board 270 executes an application corresponding to the function instructed to be executed, and the application performs processing using R, G, and B image data (S2109).

[0123] If it is determined that the function is not permitted (S2110: NO), the image editing unit 303 deletes the R, G, and B image data, and the function instruction unit 304 transmits instruction information to the controller board 270 to suppress the instructed function, and the controller board 270 restricts the execution of the function (S2111). The restriction on the execution of a function is as described above, so a detailed explanation will be omitted. Furthermore, if the instructed function is copying, the controller board 270 may control the output of a sheet-like material on which a predetermined pattern is displayed, instead of suppressing the output.

[0124] By having the above-described configuration, the image forming apparatus 1 according to this embodiment can switch whether or not to permit execution of a function instructed to be executed by a user, depending on whether or not the user is an administrator. In this embodiment, an example using the function restriction information shown in FIG. 6 has been described. However, this embodiment is not limited to the example using the function restriction information shown in FIG. 6, and the function restriction information shown in FIG. 9 may also be used. For example, if execution of a function is permitted based on either the determination result based on bits 0 to 5 of the function restriction information shown in FIG. 9 or the determination result based on bit 6, the function may be executed.

[0125] (Modification of the third embodiment) In the third embodiment, an example has been described in which the function restriction determination unit 302 determines whether a user is an administrator. However, the determination of a user is not limited to a determination based on whether the user is an administrator. Therefore, in a modified example of the third embodiment, an example of a determination based on print user information will be described.

[0126] In this modification, as in the third embodiment, a control will be described for the case where the ID of the digital watermark information is "3." Then, a case will be described in which, of the function restriction information shown in Fig. 6, in addition to bits 0 to 2, bit 5 is used to restrict the processing of image data.

[0127] Bit 5 stores a non-designated user restriction flag indicating whether or not to restrict access to users other than the designated user. The designated user in this modified example refers to the user (printer) who previously printed the sheet-like material scanned by the image forming apparatus 1. In other words, this modified example is an example in which the original user who printed the sheet-like material can use all functions, while other users have the functions restricted by bits 0 to 2.

[0128] When the function restriction determination unit 302 determines that bit 5 is "1", the controller board 270 switches whether or not to restrict the processing of image data in which electronic watermark information is embedded based on the function restriction information (an example of an attribute), depending on whether the identification information stored in the printer information of the electronic watermark information matches the identification information of the user using the image forming device 1.

[0129] The processing procedure of this modified example is the same as the processing procedure of the third embodiment shown in Fig. 11 except for S2107 and S2108. The processing performed instead of S2107 and S2108 will be described.

[0130] In this modification, instead of the process of S2107, the function restriction determination unit 302 determines whether the non-designated user restriction flag (bit 5 of the function restriction information) stored in the function restriction information is "1" (S2107). If it is determined to be "1", instead of the process of S2108, it determines whether the user identification information matches the identification information stored in the print user information of the digital watermark information. Then, depending on the determination result, it switches between performing the process of S2110 or the process of S2109. The other processes are the same as those in the third embodiment, so a description thereof will be omitted.

[0131] In the third embodiment and this modification, a case has been described in which the restrictions on image data processing are switched by combining bits 0 to 2 and bit 3 or bit 5 of the function restriction information. However, this embodiment shows one mode of switching restrictions on processing, and restrictions on image data processing may be switched by using a different combination of function restriction information.

[0132] For example, the control may be switched in the above-described procedure by combining bits 0 to 2 of the function restriction information shown in Fig. 6 with bit 4 indicating whether the time is within the specified time period, or by combining bits 0 to 2 of the function restriction information with bit 6 indicating whether the location is outside the specified location. Similarly, restrictions on image data processing may be switched in accordance with various combinations of the bit information stored in the function restriction information. Furthermore, image data processing may be restricted only by each of bits 3 to 8 of the function restriction information shown in Fig. 6.

[0133] (Fourth embodiment) In the fourth embodiment, a control will be described when the ID of the digital watermark information is "4." In this embodiment, instead of using a prohibition flag set for each function, a document management level (an example of a management level) indicating whether each function is executable or not is used as an attribute that determines whether processing is restricted or not.

[0134] The function restriction information to be stored changes depending on the ID of the digital watermark information. Therefore, the function restriction information when the digital watermark information ID is "4" will be described.

[0135] Fig. 12 is a diagram illustrating the data structure of function restriction information when ID="4". As shown in Fig. 12, when ID="4", the document management level is stored in a total of 2 bits, bit 3 to bit 4. A numerical value between "0" and "3" is stored in the document management level.

[0136] In the image forming apparatus 1 according to this embodiment, a user authority is set as a numerical value for each user who uses the image forming apparatus 1. The user authority for each user is indicated by a numerical value from "1" to "4" and is stored in, for example, the HDD 271.

[0137] Then, the function restriction determination unit 302 determines the functions available to the user who is using the image forming apparatus 1, based on the authority of the user and the document management level of the user. In this embodiment, an authority determination table is stored in the HDD 271 to make this determination.

[0138] Fig. 13 is a diagram showing an example of an authority determination table used in this embodiment. The authority management table shown in Fig. 13 stores management information indicating whether or not to restrict processing using each function, in association with user authority and a management level assigned to the sheet medium.

[0139] For example, the management information stores that when the document management level is "1", there are no restrictions, in other words, all functions can be used without restrictions, regardless of whether the user authority is "1" to "4".

[0140] For example, the management information stores information that when the document management level is "2", only copying is permitted when the user authority is "1", and when the user authority is "2" to "4", all functions can be used without restrictions.

[0141] For example, the management information stores the following information: when the document management level is "3," if the user authority is "1," all output (saving, printing, or sending) is prohibited; when the user authority is "2," only copying is permitted; when the user authority is "3," copying and sending to specific destinations are permitted; and when the user authority is "4," all functions can be used without restriction.

[0142] For example, the management information stores the following information: when the document management level is "4", all output (saving, printing, or sending) is prohibited when the user authority is "1" to "2", when the user authority is "3" only copying is permitted, and when the user authority is "4", all functions can be used without restriction.

[0143] This embodiment shows an example of an authority determination table, and the management information indicating the permissions of executable functions according to the document management level and user authority may be determined according to the implementation.

[0144] The controller board 270 then restricts the processing of image data in which electronic watermark information is embedded based on the document management level (an example of a management level) stored in the function restriction information of the electronic watermark information, the user authority of the user using the image forming device 1, and the management information stored in the authority determination table.

[0145] FIG. 14 is a flowchart showing the processing performed by the image forming apparatus 1 according to this embodiment.

[0146] First, the scanner image processing unit 263 uses the color scanner 210 to read an original image of a sheet-like material, thereby generating R, G, and B image data (S2401).

[0147] Next, the watermark information extraction unit 301 extracts the digital watermark information embedded in the document image from the R, G, and B image data (S2402).

[0148] The function restriction determination unit 302 determines whether the ID included in the digital watermark information is '4' (S2403). If it is determined that the ID is not '4' (S2403: NO), the function restriction determination unit 302 performs the processing shown in other embodiments (S2404) and ends the processing.

[0149] On the other hand, if the function restriction determination unit 302 determines that the ID is '4' (S2403: YES), the function restriction determination unit 302 acquires the document management level stored in the function restriction information of the digital watermark information (S2405).

[0150] The acquiring unit 305 acquires the identification information of the user who is using the image forming apparatus 1 (S2406). For example, the acquiring unit 305 may acquire the user identification information read from an IC card authentication device provided in the user interface unit 90, or may acquire the user identification information input to the user interface unit 90.

[0151] The acquiring unit 305 acquires the user authority associated with the acquired user identification information (S2407). For example, the user authority for each user is indicated by a number from "1" to "4", and the acquiring unit 305 acquires the user authority associated with the user from the user management information stored in the HDD 271, for example.

[0152] The acquisition unit 305 acquires information indicating the function instructed to be executed by the user via the user interface unit 90 (S2408).

[0153] Then, the function restriction determining unit 302 reads out information about executable functions associated with the acquired user authority and document management level from the authority management table (S2409).

[0154] The function restriction determination unit 302 determines whether the information on the executable function is "unrestricted" (S2410). If it is determined to be "unrestricted" (S2410: YES), the controller board 270 executes an application corresponding to the function instructed to be executed by the user, and the application performs processing using R, G, B image data (S2411).

[0155] If it is determined that the function is not "unrestricted" (S2410: NO), the function restriction determination unit 302 determines whether the information on the executable function is "copy only permitted" (S2412). If it is determined that the information on the executable function is "copy only permitted" (S2412: YES), the controller board 270 executes an application only if the function instructed to be executed by the user is copying, and the application performs processing using R, G, B image data (S2413).

[0156] If it is determined that the information on executable functions is not "copy only permitted" (S2412: NO), the function restriction determination unit 302 determines whether or not the information on executable functions is "only copy and sending to specific destinations permitted" (S2414). If it is determined that the information on executable functions is "only copy and sending to specific destinations permitted" (S2414: YES), the controller board 270 executes an application only when the function instructed to be executed by the user is copy, or when the function instructed to be executed is FAX and the destination is a specific destination, and the application performs processing using R, G, B image data (S2415).

[0157] If it is determined that "only copying and sending to specific destinations is permitted" is not permitted (S2414: NO), it is deemed that "output is prohibited," and the image editing unit 303 deletes the R, G, and B image data, and the function instruction unit 304 transmits instruction information to the controller board 270 to suppress the function instructed to be executed, and the controller board 270 restricts execution of the function (S21416). The restriction on function execution is as described above, so a detailed explanation will be omitted. Furthermore, if the function instructed to be executed is copying, the controller board 270 may control the output of a sheet-like material on which a predetermined pattern is displayed, instead of suppressing output.

[0158] In this embodiment, executable functions are restricted depending on user authority, so that execution of functions installed in the image forming apparatus 1 can be restricted depending on the user, thereby improving safety.

[0159] In the above-described embodiment, the function restriction determination unit 302 of the image input / output processing unit 262 performs the determination, and the controller board 270 performs control in accordance with the determination result. However, this embodiment is merely an example, and the present invention may be implemented in other ways. For example, the function restriction determination unit 302 may be provided within the controller board 270, and the determination may be performed within the controller board 270.

[0160] In the image forming devices according to the above-described embodiments and variations, it is possible to switch whether or not to allow processing to be executed for each function by making a judgment based on the electronic watermark information and function restriction information, thereby achieving both maintaining security and improving convenience.

[0161] Although several forms for carrying out the present invention have been described above, the present invention is not limited to these embodiments, and various modifications and substitutions can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0162] 1. Image forming device 90 User Interface Section 100 color printers 210 color scanner 230 Automatic document feeder 260 Engine 261 CPU 262 Image Input / Output Processing Unit 263 Scanner Image Processing Unit 301 Watermark information extraction unit 302 Functionality restriction determination unit 303 Image Editing Department 304 Function instruction section 305 Acquisition Department 264 Printer Image Processing Unit 265 Image Processing I / F 270 controller board 271 HDD [Prior art documents] [Patent documents]

[0163] [Patent Document 1] Japanese Patent Application Laid-Open No. 2007-166225

Claims

1. a processing unit that processes image information using one or more of a plurality of types of functions; a reading unit that reads the printed medium; an extracting unit that extracts additional information embedded in the medium as a digital watermark from the image information read from the medium; when using any one or more of the plurality of types of functions, the processing unit restricts processing of the image information in which the additional information is embedded, based on attributes included in the additional information that define whether or not to restrict processing for each of the plurality of types of functions. Image forming device.

2. The limitation of the processing by the processing unit is to process a different image instead of the read image information. The image forming apparatus according to claim 1 .

3. The restriction on the processing by the processing unit is to suppress output of the read image information using the function. The image forming apparatus according to claim 1 .

4. The plurality of types of functions processed by the processing unit include any two or more of a copy function, a scan function, and a FAX function. The image forming apparatus according to claim 1 .

5. a storage unit that stores administrator information; an acquisition unit that acquires user information of a user who uses the image forming apparatus, the processing unit switches whether or not to restrict processing of the image information in which the additional information is embedded based on the attribute, depending on whether or not the administrator information stored in the storage unit matches the user information. The image forming apparatus according to claim 1 .

6. an acquisition unit that acquires user information of a user who uses the image forming apparatus, the processing unit switches whether or not to restrict processing of the image information in which the additional information is embedded based on the attribute, depending on whether or not identification information of the user who output the medium, which is included in the additional information, matches the user information. The image forming apparatus according to claim 1 .

7. a storage unit for storing management information indicating whether or not processing is to be restricted for each of the functions, the management information being associated with the authority of the user and the management level assigned to the medium; an acquisition unit that acquires the authority of a user who is using the image forming apparatus, the processing unit restricts processing of the image information in which the additional information is embedded, based on the management level included in the additional information, the authority acquired by the acquisition unit, and the management information. The image forming apparatus according to claim 1 .

8. an output control unit that outputs warning information based on the attribute included in the additional information before processing the image information; The image forming apparatus according to claim 1 , further comprising:

Images