Image processing apparatus, control method of image processing apparatus, and program

Abstract

To prevent deterioration in an accuracy of a risk analysis and to suppress deterioration in a scanning speed.SOLUTION: An image processing apparatus with a scanner according to the present invention includes control means configured to perform control to: execute a scanning of the scanner at a resolution higher than a designated resolution when a predetermined condition for determining that a risk analysis is necessary is satisfied and a designated resolution of scanning of the scanner is lower than a threshold; and execute the scanning of the scanner in the designated resolution when a predetermined condition for determining that the risk analysis is necessary is not satisfied or the designated resolution of the scanning of the scanner is equal to or higher the threshold value.SELECTED DRAWING: Figure 7

Description

[Technical Field]

[0001] The present disclosure relates to an image processing device, a control method for an image processing device, and a program. [Background technology]

[0002] Conventionally, there have been audit systems that generate job logs containing image data when a job such as printing is executed within an image forming apparatus and transmit the job logs to a server to perform an audit. These audit systems can record job logs containing image data for jobs such as printing, copying, scanning, and faxing executed on the image forming apparatus.

[0003] Patent Document 1 discloses an image processing system in which a server transmits a print job to an image forming device, and the image forming device generates and prints an image log based on the print job. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 5929487 Summary of the Invention [Problem to be solved by the invention]

[0005] The audit system performs an information leakage risk analysis based on the job log, and has a function to notify the administrator if it determines that there is an information leakage risk. For example, if the date and time a job was executed late at night, the administrator will be notified. Alternatively, the system extracts characters from the image content of the job and notifies the administrator if it contains a character string that poses an information leakage risk.

[0006] However, in the information leakage risk analysis process of the audit system, if the reading resolution during scanning is low, the accuracy of character extraction from the image decreases, which poses a problem in that the accuracy of the information leakage risk analysis decreases.

[0007] However, if the scanning resolution is always set to high, the scanning speed will decrease even when high resolution is not required. For example, when executing a function to scan and save the document to a specified location on an image forming device, there is a function to specify the scan resolution.

[0008] Generally, the lower the resolution, the faster the scan speed and the smaller the file size, so if a user wants to scan quickly or save a smaller file size, they may specify a low scan resolution.

[0009] In this case, if the specified scan resolution is a value that affects the accuracy of character extraction from the image, the accuracy of the information leakage risk analysis will decrease. On the other hand, this problem can be solved by always maintaining the scan resolution, but in that case, the problem of always slowing down the scan speed will arise.

[0010] The present disclosure aims to prevent a decrease in the accuracy of risk analysis and suppress a decrease in scan speed. [Means for solving the problem]

[0011] The image processing device is an image processing device equipped with a scanner, and has a control means that, when predetermined conditions for determining that risk analysis is necessary are met and the designated resolution for scanning by the scanner is lower than a threshold, controls the scanner to scan at a resolution higher than the designated resolution, and when predetermined conditions for determining that risk analysis is necessary are not met or the designated resolution for scanning by the scanner is equal to or higher than a threshold, controls the scanner to scan at the designated resolution. [Effects of the Invention]

[0012] According to the present disclosure, it is possible to prevent a decrease in the accuracy of risk analysis and suppress a decrease in scan speed. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 illustrates an example of the configuration of an image forming system. [Figure 2] FIG. 2 is a block diagram illustrating an example of a hardware configuration of an image forming apparatus. [Figure 3] FIG. 2 is a block diagram illustrating an example of a functional configuration of the image forming apparatus. [Figure 4] FIG. 2 is a block diagram illustrating an example of a functional configuration of a server. [Figure 5] FIG. 10 is a diagram illustrating an example of a scan screen of the image forming apparatus. [Figure 6] FIG. 10 is a diagram illustrating an example of a setting screen for information leakage risk analysis. [Figure 7] 10 is a flowchart when a user executes scanning using the image forming apparatus. [Figure 8] 10 is a flowchart of job log transmission by the image forming apparatus. [Figure 9] 10 is a flowchart when the server receives a job log of the image forming apparatus. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, the embodiments will be described with reference to the drawings.

[0015] 1 is a diagram showing an example of the configuration of an image forming system 110 according to this embodiment. The image forming system 110 includes a network 100, an image forming apparatus 101, a server 102, and a client terminal 103.

[0016] The network 100 is a communication network. An image forming apparatus 101, a server 102, and a client terminal 103 are connected to the network 100. The network 100 is, for example, the Internet, a LAN, a WAN, a telephone line, a dedicated digital line, an ATM, or the like. Alternatively, the network 100 is a communication network realized by a combination of these.

[0017] Although FIG. 1 shows one image forming apparatus 101, one server 102, and one client terminal 103, a plurality of each of these apparatuses may be connected to the network 100.

[0018] The image forming apparatus 101 has functions such as scanning, printing, copying, faxing, and transmission, and executes jobs in response to user operations. The image forming apparatus 101 also has a function of acquiring jobs from a server 102 and performing image processing such as printing. To realize these functions, the image forming apparatus 101 may be a digital multifunction peripheral (MFP: Multi Function Peripheral).

[0019] The server 102 has functions such as management of the image forming apparatus 101, management of users, management of print jobs, and management of job history. The server 102 shown here is mainly assumed to be an application server realized on a cloud platform. The image forming apparatus 101 and the client terminal 103 realize various functions by communicating with the application server 102 realized on the cloud platform. Note that the server 102 may also be realized by a server representing a single general information processing apparatus.

[0020] The client terminal 103 is a terminal used to access the server 102 via a web browser. The client terminal 103 submits a document it owns to the server 102, and prints the document on the image forming apparatus 101 via the server 102.

[0021] Fig. 2 is a block diagram showing an example of the hardware configuration of the image forming apparatus 101 shown in Fig. 1. The image forming apparatus 101 has a bus 200, a CPU 201, a ROM 202, a RAM 203, a storage device 204, a communication device 205, an input device 206, a display device 207, a scanner device 208, and a printer device 209.

[0022] The CPU 201 controls the overall hardware, controls each unit connected to the bus 200, and executes each function, such as printing and scanning.

[0023] The ROM 202 is a memory dedicated to reading data, and stores, for example, a basic control program for the image forming apparatus 101 .

[0024] The RAM 203 is a memory from which data can be read and written, and is used as a working memory for the CPU 201, for example.

[0025] The storage device 204 is used as a storage area for temporary data while each program is running and for permanent data. For example, the storage device 204 is often an HDD, but it may also be an SSD or a device that can read and write data by loading external media such as a CD, DVD, or memory card.

[0026] A communication device 205 connects the image forming device 101 to a LAN or the Internet, enabling data communication between devices using TCP / IP.

[0027] The input device 206 is an operation unit for accepting input operations of characters and data by the user, and is, for example, a keyboard, a mouse, a hard key, or a touch panel.

[0028] The display device 207 is a device for displaying various screens, such as a liquid crystal display or a touch panel. A user gives instructions via the input device 206 on a user interface screen displayed on the display device 207, and issues job execution instructions to the image forming apparatus 101.

[0029] The scanner device 208 generates scan data (images) by reading (scanning) an original. The printer device 209 prints documents or images on a print medium (paper, etc.).

[0030] The server 102 and the client terminal 103 in Fig. 1 are similar to the image forming apparatus 101 in Fig. 2 except that the scanner device 208 and the printer device 209 have been removed. The server 102 and the client terminal 103 each have a bus 200, a CPU 201, a ROM 202, a RAM 203, a storage device 204, a communication device 205, an input device 206, and a display device 207. The server 102 and the client terminal 103 can be configured with the same hardware as a general information processing device.

[0031] Fig. 3 is a block diagram showing an example of the functional configuration of the image forming apparatus 101 in Fig. 1. The functional configuration shown in Fig. 3 is realized by the CPU 201 reading a program stored in, for example, the ROM 202 into the RAM 203 and executing it. Furthermore, a description of the functional configuration that is not related to this embodiment will be omitted.

[0032] The image forming apparatus 101 includes a job control unit 301 , a setting management unit 302 , a communication unit 303 , a job log generation unit 304 , and a UI control unit 305 .

[0033] The job control unit 301 performs processing related to the generation of output from the printer device 209 of the image forming apparatus 101 and processing related to the generation of input from the scanner device 208. In addition, the job control unit 301 is responsible for overall control related to input / output jobs of the image forming apparatus 101, such as copying and fax transmission / reception.

[0034] The setting management unit 302 manages settings related to input / output jobs of the image forming apparatus 101. For example, the setting management unit 302 also manages settings such as the resolution setting for input processing from the scanner device 208.

[0035] The communication unit 303 is responsible for communication processing that connects the image forming apparatus 101 with other devices. For example, the communication unit 303 transmits a job log to the server 102.

[0036] A job log generating unit 304 generates job log information including an image of the job processed by the job control unit 301. The generated job log is transmitted to the server 102 via the communication unit 303.

[0037] The UI control unit 305 controls the user interface (UI) of the input device 206 and display device 207 of the image forming apparatus 101. For example, the UI control unit 305 displays on the display device 207 an operation screen that enables the user to change the resolution setting for input processing of the scanner device 208.

[0038] Fig. 4 is a block diagram showing an example of the functional configuration of the server 102 in Fig. 1. The functional configuration shown in Fig. 4 is realized by the CPU 201 reading a program stored in the storage device 204, for example, into the RAM 203, and executing it. The server 102 described here is a service provided to companies or groups that use the service, and the unit of provision is called a tenant.

[0039] The server 102 includes a user management unit 401 , a device management unit 402 , a job management unit 403 , a setting management unit 404 , a risk analysis unit 405 , a UI control unit 406 , and a communication unit 407 .

[0040] The user management unit 401 manages users who use the server 102 on a tenant-by-tenant basis. The administrator registers users who want to use the server 102 in the tenant. User information such as an email address can be registered in association with a user name.

[0041] The device management unit 402 manages devices that use the server 102 on a tenant-by-tenant basis. A user or an administrator registers a device that the user or administrator wants to manage in the server 102 to a tenant. The user can log in to the registered device and use the device.

[0042] The job management unit 403 manages jobs submitted to the server 102 on a tenant-by-tenant basis. The job management unit 403 also manages the job log of the image forming apparatus 101. The job log indicates information that records what type of job was used, when, by whom, and on what device.

[0043] The setting management unit 404 manages the setting values ​​of the functions provided by the server 102. For example, the setting management unit 404 manages the setting of conditions for determining the risk of information leakage by the risk analysis unit 405, which will be described later.

[0044] The risk analysis unit 405 analyzes whether the job processing executed by the user matches the setting conditions for information leakage risk analysis. The setting conditions can be set based on the user who executed the job, the time, whether the job name or job image contains a specific keyword, etc. Specific setting conditions will be described later using an example of the setting screen in FIG. 6.

[0045] The UI control unit 406 controls the screens displayed on the web browser for the UI and UI operations required for the functions provided by the server 102 .

[0046] The communication unit 407 controls the overall communication process for connecting to the server 102. Specifically, the communication unit 407 exchanges information related to print processing with a device (image forming apparatus 101) registered in the device management unit 402.

[0047] 5 is a diagram showing an example of a scan screen 500 displayed on the display device 207 (input device 206) of the image forming apparatus 101. The scan screen 500 is a setting screen for the scanner device 208 in FIG.

[0048] A button 501 is a scan destination setting button. The scan destination can be specified by pressing the scan destination setting button 501. For example, an arbitrary email address from an address book of the image forming apparatus 101 or an arbitrary folder in cloud storage can be specified.

[0049] Button 502 is a scan file format setting button, which allows the user to specify the file format of the scan data, such as PDF or JPEG.

[0050] Button 503 is a scan data color selection button, which allows the user to specify the color to be read when the scan data is saved. The read color can be selected from automatic selection, full color, grayscale, and black and white binary.

[0051] Button 504 is a scan resolution specification button, which allows you to specify the reading resolution when scanning. If you want high-quality scan data but the data size is large, specify a high resolution. If you want low-quality scan data but the data size is small, specify a low resolution.

[0052] Button 505 is a paper size specification button, which allows the user to specify the reading size of the scanned document. If automatic is specified as the reading size, the scanner device 208 reads the document at the automatic size. If an arbitrary paper size is specified as the reading size, the scanner device 208 reads the document at that size.

[0053] A button 506 is a scan and transmission execution button. When the scan and transmission execution button 506 is pressed, the image forming apparatus 101 executes scanning and transmission under the conditions specified by the buttons 501 to 505.

[0054] FIG. 6 is a diagram showing an example of a setting screen for information leakage risk analysis in the risk analysis unit 405 of FIG. 4, and is displayed on the display device 207 of the server 102. In FIG.

[0055] A dialog 601 is an information leakage risk analysis setting dialog, and it is possible to set conditions for determining whether or not there is a risk of information leakage for a job processed by the image forming apparatus 101 .

[0056] A check box 602 is an administrator notification check box. When the check box 602 is turned on, the administrator is notified by any method when a job including an information leakage risk is detected.

[0057] A setting area 603 is an area for setting information leakage risk analysis job information, and has items for setting information leakage risk analysis conditions for job information such as a job name and a user name.

[0058] An input box 604 is a job name input box. If the job name includes the input character string in the input box 604, the risk analysis unit 405 determines that the job involves a risk of information leakage. Generally, the name of the file that was printed becomes the job name.

[0059] The input box 605 is a user name input box. When a job is executed by a user with a user name that matches the input character string in the input box 605, the risk analysis unit 405 determines that the job involves a risk of information leakage. For example, when a resignation letter from a specific user is received and the user needs to be monitored, the settings in the input box 605 are used.

[0060] The input box 606 is a time input box. If a job is executed outside the range of the input time in the input box 606, the risk analysis unit 405 determines that the job involves a risk of information leakage. For example, when it is desired to monitor execution outside of working hours, such as early in the morning or late at night, the setting in the input box 606 is used.

[0061] A check box 607 is a check box for sending to an address other than the address book. When the check box 607 is turned on, the risk analysis unit 405 determines that the job involves a risk of information leakage if an arbitrary email address other than that in the address book is entered as the destination for scan transmission.

[0062] Checkbox 608 is a cloud storage transmission checkbox. When checkbox 608 is turned on, the risk analysis unit 405 determines that the job involves a risk of information leakage if cloud storage is specified as the destination for scan transmission.

[0063] An input box 609 is an exception storage setting input box. Even if the cloud storage transmission checkbox 608 is turned on, the storage specified in the input box 609 is excluded from the information leakage risk assessment. For example, a storage destination that is managed by the company and approved as a storage destination is specified in the input box 609.

[0064] The setting area 610 is an information leakage risk analysis job image setting area, and has an item for setting information leakage risk analysis conditions for character information extracted from the job image using OCR (Optical Character Recognition) technology.

[0065] The input box 611 is a job image keyword input box. If the input character string in the input box 611 is included in a character string extracted from the job image, the risk analysis unit 405 determines that the job involves a risk of information leakage. For example, in the input box 611, "trade secret," "confidential," "confidential," etc. are specified.

[0066] A button 612 is an OK button, which is used to confirm the settings entered in the information leakage risk analysis setting dialog 601 .

[0067] A button 613 is a cancel button, which cancels the settings input in the information leakage risk analysis setting dialog 601 .

[0068] Fig. 7 is a flowchart showing a control method of the image forming system 110, and is a flowchart showing the processing when a user executes a scan on the image forming apparatus 101. Fig. 7 shows the processing when the scan transmission execution button 506 of the image forming apparatus 101 in Fig. 5 is pressed. The image forming apparatus 101 is an example of an image processing apparatus.

[0069] In step S701, when the scan transmission execution button 506 is pressed, the image forming apparatus 101 generates job information and transmits the scan transmission job information from the communication unit 303 to the communication unit 407 of the server 102. Thereafter, the image forming apparatus 101 performs the processing of FIG. 7 based on the job information. The communication unit 407 of the server 102 receives the job information from the image forming apparatus 101.

[0070] The risk analysis unit 405 of the server 102 performs a preliminary risk analysis process based on the received job information and transmits the results of the preliminary risk analysis process to the image forming apparatus 101. In the preliminary risk analysis process, the risk analysis unit 405 performs an information leakage risk analysis process based on the job information before scan transmission is executed, and determines whether the job information includes a risk of information leakage. Specifically, the risk analysis unit 405 determines whether the user name and time in the job information, the destination specified by the scan transmission destination setting button 501, and the like, satisfy the conditions set in the information leakage risk analysis job information setting area 603. The conditions set in the setting area 603 are conditions for determining whether the job information includes a risk of information leakage.

[0071] If the conditions are met, the risk analysis unit 405 determines that the job information includes a risk of information leakage, and if the conditions are not met, the risk analysis unit 405 determines that the job information does not include a risk of information leakage. For example, if the destination set by the scan destination setting button 501 is an email transmission outside the address book and the non-address book transmission check box 607 is ON, the risk analysis unit 405 determines that there is a risk of information leakage. After step S701, the process proceeds to step S702.

[0072] In step S702, the communication unit 303 of the image forming apparatus 101 receives the result of the advance risk analysis process from the server 102. The job control unit 301 of the image forming apparatus 101 determines whether the job information includes a risk of information leakage based on the result of the advance risk analysis process.

[0073] If the job information does not include a risk of information leakage, the risk analysis process for the job image in step S904 in Fig. 9 is required, and the predetermined condition for determining that risk analysis is required is met, so the process proceeds to step S703. If the job information includes a risk of information leakage, the risk analysis process for the job image in step S904 in Fig. 9 is not required, and the predetermined condition for determining that risk analysis is required is not met, so the process proceeds to step S705.

[0074] Here, the above-mentioned predetermined condition is a condition for determining whether the job information does not involve a risk of information leakage.

[0075] In step S703, the job control unit 301 of the image forming apparatus 101 determines whether the specified resolution for scanning by the scanner device 208 is lower than a threshold value. Specifically, the job control unit 301 determines whether the resolution specified by the scan resolution specification button 504 is lower than a threshold value stored in the job control unit 301.

[0076] For example, the threshold is 300 dpi x 300 dpi. If the resolution specified by the scan resolution specification button 504 is 200 dpi x 200 dpi, the job control unit 301 determines that the specified resolution is lower than the threshold. If the specified resolution is lower than the threshold, the process proceeds to step S704. If the specified resolution is equal to or greater than the threshold, the process proceeds to step S705.

[0077] In step S704, the job control unit 301 of the image forming apparatus changes the scan resolution of the scanner device 208 to the threshold value. At this time, the job control unit 301 temporarily saves the value of the specified resolution. After step S704, the process proceeds to step S705.

[0078] In step S705, the job control unit 301 of the image forming apparatus 101 controls the scanner device 208 to execute a scan process. Specifically, the job control unit 301 controls the scanner device 208 to execute a scan process of the document based on the settings of the scan file format setting button 502, the scan data color selection button 503, the scan resolution specification button 504, and the paper size specification button 505 specified on the scan screen in Fig. 5, and generates scan data.

[0079] When processing step S704, the job control unit 301 controls the scanner device 208 to execute the scan processing at the resolution changed in step S704, rather than the resolution specified by the scan resolution specification button 504.

[0080] As described above, if the process of step S704 is not performed, the job control unit 301 controls the scanner device 208 to scan at the resolution specified by the scan resolution specification button 504. If the process of step S704 is performed, the job control unit 301 controls the scanner device 208 to scan at the resolution indicated by the threshold value. Here, the threshold value indicates a resolution higher than the resolution specified by the scan resolution specification button 504. After step S705, the process proceeds to step S706.

[0081] In step S706, the job control unit 301 of the image forming apparatus determines whether the specified resolution was changed to the threshold value in step S704. If the setting was changed in step S704, the process proceeds to step S707. If the setting was not changed in step S704, the process proceeds to step S708.

[0082] In step S707, the job control unit 301 of the image forming apparatus converts the scan data generated in step S705 into scan data with the resolution originally specified by the scan resolution specification button 504. Specifically, the job control unit 301 converts the resolution of the scan data so that it becomes scan data with the specified resolution saved during the processing of step S704. After step S707, the process proceeds to step S708.

[0083] In step S708, the job control unit 301 of the image forming apparatus controls the transmission of the above scan data to the specified destination via the communication unit 303. Specifically, the job control unit 301 controls the transmission of the scan data to the destination specified by the scan destination setting button 501. After step S708, the processing of the flowchart in FIG. 7 ends.

[0084] FIG. 8 is a flowchart showing a process for generating a job log after the image forming apparatus 101 executes a job.

[0085] In step S801, the job log generation unit 304 generates a job log for job execution. The generated job log includes job information, the results of the advance risk analysis process, and a job image. The job information includes the job name, user name, execution date and time, and job type.

[0086] The generation of a job image involves conversion into an image file in a general-purpose format. The job image is an image based on the job executed at the time of each job execution. For example, in the case of a scan transmission job or a scan job, the job image is generated based on the scan data from the scan execution process in step S705. The job log generation unit 304 generates the job image based on the scan data generated by the scan execution in step S705.

[0087] Therefore, if the resolution at the time of scanning is low, the job image will also be image data at the resolution at the time of scanning. Since a certain level of resolution or higher is required in step S904 of Fig. 9 for the process of extracting character information from a job image, which will be described later, if the specified resolution is lower than the threshold, as in step S704 of Fig. 7, the specified resolution is changed to the threshold and then scanning is performed in step S705. After step S801, the process proceeds to step S802.

[0088] In step S802, the job log generation unit 304 transmits the generated job log to the server 102 via the communication unit 303. The job log generation unit 304 transmits the job log including the job image to the server 102 via the communication unit 303 to determine whether the character information extracted from the job image in Fig. 9 includes a risk of information leakage.

[0089] This concludes the flowchart of FIG.

[0090] FIG. 9 is a flowchart when the server 102 receives a job log from the image forming apparatus 101.

[0091] In step S901, the job management unit 403 records the received job log. The job log includes job information (job name, user name, execution date and time, job type), the results of the preliminary risk analysis process, and job images. Job types include print, scan, copy, fax transmission, and fax reception. After step S901, the process proceeds to step S902.

[0092] In step S902, the risk analysis unit 405 determines whether the job information includes a risk of information leakage based on the results of the above-described advance risk analysis process. If the job information includes a risk of information leakage, the process proceeds to step S903. If the job information does not include a risk of information leakage, the process proceeds to step S904.

[0093] In step S904, the risk analysis unit 405 extracts text information from the job image using OCR. The text information extraction process in step S904 will have low extraction accuracy if the job image does not have a certain level of resolution. To prevent this from happening, steps S702, S703, and S704 in FIG. 7 increase the resolution during scanning, and a job image based on this is generated in step S801. These processes prevent a decrease in the accuracy of information leakage risk analysis due to a decrease in character extraction accuracy caused by specifying a low resolution during scanning. After step S904, the process proceeds to step S905.

[0094] In step S905, the risk analysis unit 405 determines, through risk analysis processing, whether the characters extracted in step S904 pose a risk of information leakage. Specifically, the risk analysis unit 405 determines whether the extracted character string contains the character string information set in the job image keyword input box 611. If the character string information is included, the extracted characters pose a risk of information leakage, and the processing proceeds to step S903. If the character string information is not included, the extracted characters do not pose a risk of information leakage, and the processing proceeds to step S906.

[0095] In step S906, the job management unit 403 records the risk analysis result indicating that the job does not include a risk of information leakage as a job log. After step S906, the flowchart in FIG.

[0096] In step S903, the job management unit 403 records the risk analysis result indicating that the job includes a risk of information leakage as a job log. After step S903, the process proceeds to step S907.

[0097] In step S907, the risk analysis unit 405 determines whether or not a setting is made to notify the administrator when an information leakage risk is included. Specifically, the risk analysis unit 405 determines whether or not the administrator notification checkbox 602 in FIG. 6 is ON.

[0098] If the administrator notification check box 602 is ON, the setting to notify the administrator has been made, and the process proceeds to step S908. If the administrator notification check box 602 is not ON, the setting to notify the administrator has not been made, and the flowchart in FIG. 9 ends.

[0099] In step S908, the risk analysis unit 405 notifies the administrator that the job being executed includes a risk of information leakage. Specifically, the risk analysis unit 405 sends an email using the email address of the target person based on the information of the administrator user managed by the user management unit 401. Note that a method other than email may be used as long as it can notify the administrator.

[0100] This concludes the flowchart in FIG.

[0101] In this embodiment, the conditions for analyzing the risk of information leakage can be set on the setting screen in FIG. 6. However, conditions that are generally considered to pose a high risk of information leakage may be set as the default settings. For example, the check box 607 for sending emails other than to the address book and the check box 608 for sending to cloud storage may be set to ON by default. The same idea may also be applied to keywords for job names and job images. For example, keywords such as "confidential," "classified," and "confidential" may be set as default values.

[0102] The image forming apparatus 101 or the server 102 may be configured to allow a user or administrator to select either a scan speed priority mode or an accuracy priority mode. In the accuracy priority mode, the image forming apparatus 101 performs the processing of the flowchart in Fig. 7. In the scan speed priority mode, the image forming apparatus 101 does not change the specified resolution in step S704 of the flowchart in Fig. 7.

[0103] Also, in step S702 of Figure 7, if the image forming device 101 is unable to receive the results of the preliminary risk analysis process within a specified time due to communication conditions, it can determine that the job information does not contain a risk of information leakage.

[0104] As described above, according to this embodiment, in step S701, the server 102 performs a preliminary information leakage risk analysis based on job information excluding the job image. If the preliminary information leakage risk analysis indicates an information leakage risk and low resolution is specified during scanning, the image forming apparatus 101 continues scanning at low resolution. On the other hand, if the preliminary information leakage risk analysis indicates no information leakage risk, the image forming apparatus 101 scans at a higher resolution than the specified resolution in order to perform information leakage risk analysis using the job image of FIG. 9. This prevents a decrease in the accuracy of the information leakage risk analysis and minimizes a decrease in scan speed when low resolution is specified during scanning.

[0105] (Other embodiments) The present disclosure can also be realized by a process in which a program that realizes one or more functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in the computer of the system or device read and execute the program. The present disclosure can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0106] It should be noted that the above-described embodiments merely illustrate specific examples of implementing the present disclosure, and the technical scope of the present disclosure should not be construed as being limited by these embodiments. In other words, the present disclosure can be implemented in various forms without departing from its technical concept or main features.

[0107] The disclosure of this embodiment includes the following configuration, method, and program. (Configuration 1) An image processing device including a scanner, When a predetermined condition for determining that a risk analysis is necessary is satisfied and the designated resolution of the scan by the scanner is lower than a threshold value, the scanner is controlled to perform the scan at a resolution higher than the designated resolution; An image processing device characterized by having a control means that controls the scanner to scan at the specified resolution when specified conditions for determining that risk analysis is necessary are not met or when the specified resolution for the scanner's scan is equal to or higher than a threshold. (Configuration 2) the control means controls the execution of scanning by the scanner based on job information; 2. The image processing apparatus according to configuration 1, wherein the predetermined condition is a condition for determining whether the job information does not involve a risk of information leakage. (Configuration 3) The image processing device according to configuration 2, wherein the control means generates a job image based on scan data generated by the scanner executing a scan, and transmits the job image to determine whether character information extracted from the job image contains a risk of information leakage. (Configuration 4) The image processing device according to configuration 3, wherein when the control means controls the scanner to perform scanning at a resolution higher than the specified resolution, the control means converts the scan data generated by the scanner performing the scan into scan data of the specified resolution. (Configuration 5) 5. The image processing apparatus according to configuration 4, wherein the control means controls the scan data at the specified resolution to be sent to a specified destination. (Method 1) A method for controlling an image processing device equipped with a scanner, comprising: When a predetermined condition for determining that a risk analysis is necessary is satisfied and the designated resolution of the scan of the scanner is lower than a threshold, controlling the scan execution of the scanner so that the scan is performed at a resolution higher than the designated resolution; If a predetermined condition for determining that a risk analysis is necessary is not met, or if a designated resolution for scanning by the scanner is equal to or greater than a threshold, controlling the execution of scanning by the scanner so that scanning is performed at the designated resolution; 1. A method for controlling an image processing apparatus, comprising: (Program 1) A program for causing a computer to function as the image processing device according to any one of the first to fifth aspects. [Explanation of symbols]

[0108] 301 job control unit, 302 setting management unit, 303 communication unit, 304 job log generation unit, 305 UI control unit, 401 user management unit, 402 device management unit, 403 job management unit, 404 setting management unit, 405 risk analysis unit, 406 UI control unit, 407 communication unit

Claims

1. An image processing device including a scanner, When a predetermined condition for determining that a risk analysis is necessary is satisfied and the designated resolution of the scan by the scanner is lower than a threshold value, the scanner is controlled to perform the scan at a resolution higher than the designated resolution; An image processing device characterized by having a control means that controls the scanner to scan at the specified resolution when specified conditions for determining that risk analysis is necessary are not met or when the specified resolution for the scanner's scan is equal to or higher than a threshold.

2. the control means controls the execution of scanning by the scanner based on job information; 2. The image processing apparatus according to claim 1, wherein the predetermined condition is a condition for determining that the job information does not involve a risk of information leakage.

3. The image processing device according to claim 2, characterized in that the control means generates a job image based on scan data generated by the scanner's scan execution, and transmits the job image to determine whether character information extracted from the job image contains a risk of information leakage.

4. 4. The image processing device according to claim 3, wherein when the control means controls the scanner to perform scanning at a resolution higher than the specified resolution, the control means converts the scan data generated by the scanner's scan execution into scan data of the specified resolution.

5. 5. The image processing apparatus according to claim 4, wherein said control means controls so that the scan data at the specified resolution is transmitted to a specified destination.

6. A method for controlling an image processing device equipped with a scanner, comprising: When a predetermined condition for determining that a risk analysis is necessary is satisfied and the designated resolution of the scan of the scanner is lower than a threshold, controlling the scan execution of the scanner so that the scan is performed at a resolution higher than the designated resolution; If a predetermined condition for determining that a risk analysis is necessary is not met, or if a designated resolution for scanning by the scanner is equal to or greater than a threshold, controlling the execution of scanning by the scanner so that scanning is performed at the designated resolution; 1. A method for controlling an image processing apparatus, comprising:

7. A program for causing a computer to function as the image processing device according to any one of claims 1 to 5.

Images