Image processing apparatus and setting method

Abstract

For example, it is an object of the present invention to provide an image processing apparatus capable of setting a plurality of encryption levels and ensuring security according to the encryption level.SOLUTION: An image processing apparatus of the present disclosure includes an acquisition unit that acquires image data from an image, and a control unit that encrypts the image data on the basis of a key and outputs the encrypted image data as a file, in which the control unit changes an input condition for inputting the key on the basis of encryption strength when the image data is encrypted.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present disclosure relates to an image processing device and the like. [Background technology]

[0002] For example, as shown in Patent Document 1, an encryption device is known that provides multiple levels of strength for encrypting data to ensure security. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2006-054876 Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present disclosure is to provide an image processing device or the like that can ensure security according to the encryption level, for example, for an image processing device that can set a plurality of encryption levels. [Means for solving the problem]

[0005] The image processing device of the present disclosure includes an acquisition unit that acquires image data from an image, and a control unit that encrypts the image data based on a key and outputs the encrypted image data as a file, and the control unit changes the input conditions for inputting the key based on the encryption strength when encrypting the image data.

[0006] The setting method disclosed herein includes an acquisition step of acquiring image data from an image, and a control step of encrypting the image data based on a key and outputting the encrypted image data as a file, wherein the control step changes the input conditions for inputting the key based on the encryption strength when encrypting the image data. [Effects of the Invention]

[0007] According to the present disclosure, for example, it is possible to provide an image processing device or the like that can ensure security according to the encryption level for an image processing device that can set a plurality of encryption levels. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a perspective view for explaining the overall configuration in a first embodiment. [Figure 2] FIG. 1 is a diagram illustrating a configuration of an image forming apparatus according to a first embodiment. [Figure 3] FIG. 2 is a diagram illustrating a software configuration according to the first embodiment. [Figure 4] 3A is a diagram illustrating an example of system setting information, FIG. 3B is a diagram illustrating an example of job setting information, and FIG. 3C is a diagram illustrating an example of encryption method information in the first embodiment. [Figure 5] FIG. 2 is a diagram illustrating a processing flow in the first embodiment. [Figure 6] FIG. 2 is a diagram illustrating a processing flow in the first embodiment. [Figure 7] FIG. 2 is a diagram illustrating an example of operation in the first embodiment. [Figure 8] FIG. 2 is a diagram illustrating an example of operation in the first embodiment. [Figure 9] FIG. 2 is a diagram illustrating an example of operation in the first embodiment. [Figure 10] FIG. 10 is a diagram illustrating a processing flow in the second embodiment. [Figure 11] FIG. 10 is a diagram illustrating a processing flow in the second embodiment. [Figure 12] FIG. 10 is a diagram illustrating an example of operation in the second embodiment. [Figure 13] FIG. 10 is a diagram for explaining a software configuration in a third embodiment. [Figure 14] FIG. 10 is a diagram illustrating a processing flow in the third embodiment. [Figure 15] FIG. 10 is a diagram illustrating a processing flow in the third embodiment. [Figure 16] FIG. 11 is a diagram illustrating the flow of a password input process in the third embodiment. [Figure 17] FIG. 11 is a diagram illustrating the flow of a password judgment process in the third embodiment. [Figure 18] FIG. 10 is a diagram illustrating an example of operation in the third embodiment. [Figure 19] FIG. 10 is a diagram illustrating an example of operation in the third embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] Generally, an image processing device performs various processes on an acquired image and outputs the image. The image processing device can store the output image in a storage unit, for example. The image processing device can be provided in various devices. Here, the image processing device can be provided in, for example, an image forming device such as an MFP (Multifunction Peripheral / Printer / Product) that can store a large number of images in a storage unit and transmit the output images via a telecommunications line.

[0010] In an image forming apparatus equipped with an image processing apparatus, for example, an image to be processed may contain confidential information. In such a case, in order to ensure the confidentiality of image data based on the image, for example, the image data may be encrypted. Various encryption methods are known for performing such encryption. In this case, if a user requires high confidentiality, for example, it is necessary to select an encryption method with a higher encryption level (encryption strength).

[0011] However, when a user selects a higher encryption strength, if the image forming device does not control the setting information required for encryption, such as information such as password input rules, there is a problem in that security corresponding to the higher encryption strength cannot be ensured.

[0012] An image processing device that solves these problems will be described below in the following embodiments with reference to the drawings. Note that the following embodiments are merely examples of the invention described in the claims, and the technical scope of the present disclosure is not limited to the description of the following embodiments.

[0013] [1. First embodiment] A first embodiment will be described below. Note that the first embodiment will be described using the following as an example. In the following embodiment, a case will be described in which an image processing device of the present disclosure is applied to an image forming device, but the image processing device of the present disclosure can also be applied to devices other than image forming devices.

[0014] [1.1 Overall structure] FIG. 1 is a perspective view illustrating an image forming apparatus 10. As shown in FIG.

[0015] The image forming apparatus 10 is, for example, a device called a multifunction peripheral or an MFP. For example, when the image forming apparatus 10 executes a job (print job), it can form an image on a recording medium, such as paper. The image forming apparatus 10 can execute jobs for a plurality of processes, such as copy processing, fax processing, scan processing, and print processing.

[0016] In addition, during the scanning process, the image forming device 10 can, for example, acquire an image, store the acquired image in a storage device or the like (scan and save), or send the image to a specified recipient (scan and send) using a network (NW) or the like.

[0017] Furthermore, the network (NW) connecting the image forming device 10 may be any communication line or communication system, such as a wired or wireless LAN (Local Area Network), VLAN (Virtual Local Area Network), the Internet, a public line network, mobile communications (e.g., mobile communications such as 4G / 5G / 6G), or a next-generation telephone network.

[0018] [1.2 Hardware Configuration] The hardware configuration of the image forming apparatus 10 will be described below with reference to the drawing. Figure 2 shows an example of the hardware configuration of the image forming apparatus 10.

[0019] As shown in FIG. 2, the image forming apparatus 10 has a control unit 100, a storage 110 as a storage device (storage unit), a ROM (Read Only Memory) 120, and a RAM (Random Access Memory) 130, a display unit 140, an operation unit 150, an image forming unit 160, an image reading unit 165, and a communication unit 170.

[0020] The control unit 100 controls the entire image forming apparatus 10. The control unit 100 realizes various functions by reading and executing various programs stored in a storage device (for example, storage 110 or ROM 120). The control unit 100 may be realized by one or more control devices / arithmetic units (CPUs (Central Processing Units), SoCs (System on a Chip)). The control unit 100 may also be configured by one or more control circuits.

[0021] The storage 110 is a non-volatile storage device capable of storing programs and data. For example, the storage 110 may be configured as one or more storage devices such as a hard disk drive (HDD) or a solid state drive (SSD). The storage 110 may also be configured as an external device such as a USB memory that can be connected to the image forming apparatus 10. The storage 110 may also be a storage area on a cloud, for example.

[0022] The ROM 120 is a non-volatile memory that can retain programs and data even when the power is turned off.

[0023] The RAM 130 is a main memory that is mainly used when the control unit 100 executes processing. The RAM 130 is a rewritable memory that temporarily stores programs read from the storage 110 or the ROM 120, and data including execution results.

[0024] The display unit 140 is a display device capable of displaying various types of information and various screens such as an execution screen. The display unit 140 may be, for example, a liquid crystal display (LCD), an organic electroluminescence (EL) display, an electrophoretic display, or other display device. The display unit 140 also includes an interface to which a display device can be connected. For example, the display unit 140 may be configured as an external display device connected via an HDMI (registered trademark) High-Definition Multimedia Interface, a DVI (Digital Visual Interface), or a Display Port.

[0025] The operation unit 150 is an operation device that can accept operation input from a user. For example, it may be software keys displayed on a touch panel integrated with the display unit 140, or hardware keys such as operation buttons. The operation unit 150 may also be an operation device such as a keyboard or a mouse. The operation unit 150 may also include an interface (e.g., USB) to which an operation device can be connected. For example, the image forming apparatus 10 may be connected to a different operation device (e.g., a keyboard or a mouse) via an interface.

[0026] The image forming unit 160 forms an image, for example, on recording paper. The image forming unit 160 includes, for example, an image carrier, and forms a toner image on the image carrier and transfers the toner image on the image carrier onto recording paper to form an image. The image forming unit 160 may be configured as an image forming device such as a printer. The image forming unit 160 may also form an image electronically as an image file.

[0027] Image reading unit 165 reads an original (image) and outputs it as image data. Image reading unit 165 is, for example, a scanner, and may be a reading device using a CCD (Charge Coupled Device), a CIS (Contact Image Sensor), or a CMOS (Complementary Metal-Oxide-Semiconductor) image sensor.

[0028] The communication unit 170 is a communication interface for communicating with other devices. For example, it may be a network interface that can provide wired or wireless connection. In this embodiment, communication with other devices is possible via a network (NW).

[0029] [1.3 Software Configuration] The main software configuration of the image forming apparatus 10 will be described with reference to Fig. 3. Note that the software configuration shown in Fig. 3 mainly describes the configuration required in this embodiment, and other configurations are omitted.

[0030] For example, the control unit 100 can realize the encryption processing unit 1010 by reading and executing a program stored in a memory unit (storage 110, ROM 120).

[0031] The encryption processing unit 1010 executes, for example, an encryption process on the acquired image data. Here, encryption refers to, for example, converting the acquired image data to make it unreadable to third parties. The encryption processing unit 1010 may encrypt the image data using an encryption method such as AES (Advanced Encryption Standard), RC4 (Rivest Cipher 4), or DES (Data Encryption Standard).

[0032] The storage 110 allocates a system setting information storage area 1105 for storing system setting information. The system setting information is, for example, setting information necessary for the image forming apparatus 10 to operate. An example of the system setting information stored in the system setting information storage area 1105 will now be described with reference to FIG. 4(a). The system setting information storage area 1105 stores setting items (e.g., "default encryption method") and setting values ​​(e.g., "AES256") of the setting information necessary for the image forming apparatus 10 to operate.

[0033] The storage 110 also allocates a job setting information storage area 1110 for storing job setting information. The job setting information is, for example, setting information related to a job executed by the image forming apparatus 10. An example of the job setting information stored in the job setting information storage area 1110 will be described with reference to FIG. 4B. The job setting information storage area 1110 stores setting items (e.g., "encryption method") and setting values ​​(e.g., "AES256") of setting information related to a scan job of the image forming apparatus 10. The job setting information is, for example, setting information related to a scan job, and specifically, information on the job type (here, the job type indicates the type of job executed by the image forming apparatus 10; for example, in the case of a scan job, it is "scan and save" or "scan and send"), information on image reading conditions (e.g., resolution, color information such as black and white or color, compression rate, etc.), information on the file format (format) used when outputting image data as a file (e.g., JPG format, GIF format, TIFF format, PDF format, etc.), information on the image encryption process, etc.

[0034] Furthermore, the storage 110 allocates a file information storage area 1120 for storing file information. The file information is information about a file to be output when the image forming apparatus 10 outputs a file. For example, it may be information about a format when the image forming apparatus 10 outputs an acquired image. The file format when output may be, for example, a file format used in a general information processing apparatus. The file information may also store, for example, a file name, information about image data, and additional information including attributes.

[0035] The storage 110 also reserves an encryption method information storage area 1130 for storing encryption method information. The encryption method information is, for example, information obtained by grouping encryption methods selectable by the image forming apparatus 10 according to encryption strength. In this embodiment, for example, the encryption strength of a group with strong encryption strength is designated as a first strength. Then, for example, a group with encryption strength weaker than that of the group belonging to the first strength is designated as a group belonging to a second strength. As a method for grouping according to encryption strength, for example, the encryption method may be grouped according to the key length of a key (encrypted password) that can be stored or the type of characters that can be stored. The encryption method information stores the encryption method and the encryption strength.

[0036] The encryption method for the group belonging to the first strength may be, for example, AES 256 bit, and the encryption method for the group belonging to the second strength may be, for example, AES 128 bit or RC4 128 bit.

[0037] An example of encryption method information stored in the encryption method information storage area 1130 will now be described with reference to Fig. 4(c). The encryption method (e.g., "AES256") and encryption strength (e.g., "1") that can be selected by the image forming apparatus 10 are stored. Here, the encryption strength may be information including, for example, "1" indicating a group belonging to a first strength and "2" indicating a group belonging to a second strength.

[0038] [1.4 Processing flow] The processing flow in this embodiment will be described below with reference to Figures 5 and 6. Figures 5 and 6 are diagrams showing the flow of the initial setting processing in this embodiment. Note that each component described in Figure 2 or Figure 3 may execute the processing of each step.

[0039] First, the control unit 100 displays a job setting screen (S102). Here, the job setting screen may be, for example, a display screen that displays setting items and setting values ​​related to the scan process (scan job) executed by the image forming apparatus 10 and allows the setting values ​​to be changed, and may be displayed on the display unit 140 as the job setting screen.

[0040] Next, when setting a format for outputting image data as a file, the control unit 100 performs a format setting process (S104; Yes → S106). Here, setting a format refers to, for example, setting a new format for storing image data as an output file, changing an initial format, or changing an already set format. The control unit 100 may determine that a format is to be set when, for example, the user selects an operation button for setting a format included in the job setting screen.

[0041] In addition, in the format setting process, for example, a format setting screen may be displayed. For example, the control unit 100 may display, on the display unit 140, a display screen on which a format for outputting image data can be selected and a display screen on which it can be selected whether or not to perform encryption processing, as format setting screens.

[0042] Here, for example, when the user selects to execute encryption processing, the control unit 100 stores that encryption processing is to be executed on the job setting information stored in the job setting information storage area 1110.

[0043] Next, the control unit 100 determines whether or not the user has selected an operation to execute a job (S108). Note that the control unit 100 also executes process S108 when the format for outputting image data as a file is not set (S104; No→S108). The control unit 100 may determine whether or not the user has selected an operation to instruct execution of a job based on, for example, whether or not the user has selected a key (e.g., an execution key) to instruct an operation to execute a job.

[0044] When the control unit 100 determines that the user has selected an operation to instruct execution of a job, it reads out the job setting information (S108; Yes→S110). The control unit 100 may temporarily read out information on the setting items and setting values ​​of the job setting information stored in the job setting information storage area 1110, for example, to the RAM 130. On the other hand, when the control unit 100 determines that the user has not selected an operation to instruct execution of a job, it may repeat the process from S104 again (S108; No→S104). Furthermore, the control unit 100 may change other settings (for example, settings at the time of job execution) by the user before the operation to instruct execution of a job is selected.

[0045] Next, the control unit 100 determines whether file encryption has been selected (S112). For example, if the job setting information read from the job setting information storage area 1110 stores that the file is to be encrypted, the control unit 100 may determine that file encryption has been selected. If the control unit 100 determines that file encryption has been selected, the control unit 100 may set an initial encryption method. For example, the control unit 100 may obtain a setting value for a default encryption method from the system setting information and store it as the setting value for the encryption method in the read job setting information (S112; Yes → S113). Alternatively, the initial value for the encryption method may be in a state where no encryption method has been selected.

[0046] Next, the control unit 100 determines whether the setting value of the encryption method that has been read is the first strength (S114). Here, as a method for the control unit 100 to determine whether the encryption strength of the encryption method is the first strength, for example, the control unit 100 may compare the encryption method of the read job setting information with the encryption methods stored in the encryption method information storage area 1130, and determine that the encryption method is the first strength if the encryption method stored in the job setting information is classified into a group that belongs to the first strength.

[0047] When the control unit 100 determines that the encryption strength of the encryption method is the first strength, it applies a first input condition to the conditions for entering a password (S114; Yes → S116). Here, the first input condition refers to, for example, an input condition that matches the key length of an encrypted password that can be set as an encryption method of a group belonging to the first strength, or the character type that can be stored as an encrypted password. Note that, as the first input condition, for example, if the encryption method is AES256 bit, the key length may be up to 127 characters, or more preferably, the key length may be 33 to 127 characters.

[0048] On the other hand, if the control unit 100 determines that the encryption strength of the encryption method used to encrypt the file is not the first strength, it applies a second input condition to the input condition for the encryption password (S114; No → S118). Here, the second input condition, like the first input condition, refers to an input condition that matches an encryption password that can be stored by an encryption method in the group belonging to the second strength. Note that, as the second input condition, for example, if the encryption method is AES128bit, the number of characters may be up to 32 as the key length. More preferably, the number of characters may be 1 to 32 as the key length.

[0049] Next, the control unit 100 displays an encryption setting screen (S120). The control unit 100 may display, on the display unit 140, a display screen that includes setting items and setting values ​​related to encryption from the read job setting information, and allows the setting values ​​to be changed and a scan job to be executed, as the encryption setting screen.

[0050] Here, the control unit 100 may, for example, perform a process of prohibiting the input of an encryption password for a file to be encrypted and output that does not meet the first input condition or the second input condition.

[0051] Next, the control unit 100 determines whether or not there is a change in the setting value of the encryption method (encryption strength related to encryption) displayed on the encryption setting screen (S122). If the control unit 100 determines that there is a change in the encryption strength (encryption method), it changes, for example, the setting value of the encryption method in the read job setting information (S122; Yes → S123). Next, the control unit 100 executes the process S114 again.

[0052] On the other hand, when it is determined that there is no change in encryption strength, the control unit 100 determines whether the encryption setting is complete (S122; No → S124). Here, as a method for determining that the encryption setting is complete, for example, it may be determined that the encryption setting is complete when a scan job execution button (for example, the save button B106) displayed on the encryption setting screen is selected.

[0053] If the control unit 100 determines that the encryption settings have been completed, it stores the encryption setting values ​​as job setting information (S124; Yes → S126). On the other hand, if the control unit 100 determines that the encryption settings have not been completed, it determines whether the encryption strength has been changed (S124; No → S122).

[0054] Next, the control unit 100 acquires the image data (S128). The control unit 100 acquires the image data from the image reading unit 165 based on, for example, setting information related to image reading conditions included in the job setting information stored in the job setting information storage area 1110. The control unit 100 may temporarily store the acquired image data in, for example, the RAM 130.

[0055] Next, the control unit 100 encrypts the image data and outputs the encrypted file (S130). The control unit 100 encrypts the image data acquired by the encryption processing unit 1010 according to the encryption method stored in the job setting information storage area 1110, for example, and outputs the encrypted file. Next, the control unit 100 executes a job based on the job setting information stored in the job setting information storage area 1110 (S131).

[0056] For example, when the control unit 100 executes a scan / transmission job, it transmits the encrypted file to the destination specified in the job setting information in accordance with the job setting.

[0057] If control unit 100 determines that file encryption has not been selected, it acquires image data from image reading unit 165 based on setting information regarding image reading conditions included in the job setting information (S112; No→S132). Next, control unit 100 outputs the image data as a file in the format specified in the job setting information (S134). Next, control unit 100 executes the job based on the read job setting information (S136).

[0058] For example, when the control unit 100 executes a scan-and-save job, it saves the output file in the save destination of the file information storage area 1120 specified in the job setting information.

[0059] [1.5 Example of operation] FIG. 7 is a diagram showing an example of a display screen including a message displayed to the user as a result of the operation of the image forming apparatus 10 in this embodiment.

[0060] FIG. 7A illustrates an example of a display screen W100 displayed on the display unit 140 of the image forming apparatus 10. The display screen W100 illustrates an example of a job setting screen (display screen) including a message displayed to the user when the image forming apparatus 10 executes a scan job. The display screen W100 displays a message M100 reading, "Please set up the scan. Click [Start] to scan the document," and a start button B102. Furthermore, an area R100 of the display screen W100 displays a file name input form F100 and check boxes for the file save destination and for creating a downloadable file. Furthermore, an area R102 of the display screen W100 displays a selectable format button B100 and buttons for various other scan job settings (color mode, resolution, document, density, and bulk document mode). Furthermore, the display screen W100 displays an other item button B103.

[0061] Here, the user selects the file name input form F100 and enters the file name "Scan_20240122_234558." Note that entering a file name is not required; for example, the control unit 100 may display an automatically generated file name as the default file name in the file name input form F100. Next, when the user selects the start button B102, which is an execution key, the control unit 100 executes a scan based on the job setting information stored in the job setting information storage area 1110 and saves the unencrypted file in a specified folder. Note that file information can be changed in FIG. 7(a). Specifically, when a button displayed in area R102 is selected, the file information, etc., can be changed corresponding to the button. For example, when the user selects the format button B100, the control unit 100 displays the display screen W102 and window display (format setting screen) W104 shown in FIG. 7(b). Furthermore, when the user selects the other items button B103, for example, area R100 is pulled down to display additional settings not displayed therein.

[0062] 7(b) is a diagram showing an example of a display screen W102 displayed on the display unit 140 of the image forming apparatus 10 and a window display W104 displayed superimposed on the display screen W102. On the display screen W102, for example, the window display W104 is displayed as a dialog, and a start button B102 which is an execution key.

[0063] Here, the window display W104 displays a message M102 saying "Processing may take some time depending on the format" and an OK button B105. Furthermore, an area R104 of the window display W104 displays selection buttons that allow you to select various file formats, a button "PDF (Portable Document Format) button B104" that indicates the format of the identified and displayed file, and an encryption input form F102.

[0064] Here, when the user selects the PDF button B104, the control unit 100 sets the format of the file to be output to PDF in the file information storage area 1120. Furthermore, when the user selects the encryption input form F102, the control unit 100 displays a check mark in the check box displayed in the encryption input form F102. When the user selects the OK button B105, the control unit 100 closes the window display W104, stores the execution of the encryption process in the job setting information storage area 1110, terminates the window display W104, and displays a character string indicating the format setting information (e.g., encrypted PDF) on the format button B100. The format setting information displayed on the format button B100 is not limited to a character string, and may be an icon image indicating the format setting information, or the like. Then, when the user selects the start button B102, the control unit 100 displays the display screen W106 and window display (encryption setting screen) W108 of FIG. 8.

[0065] 8 is a diagram showing an example of a display screen W106 displayed on the display unit 140 of the image forming apparatus 10 and a window display W108 displayed superimposed on the display screen W106. On the display screen W106, for example, the window display W108 is displayed as a dialog. In an area R106 of the window display W108, an encryption level input form F104, an encryption password input form F106, a save button B106 as an execute button for instructing execution of the job, a cancel button B108 for instructing cancellation of encryption settings, and input forms for other encryption settings (password for changing authority, printing permission, changes permission, image and text copy / extraction, accessibility).

[0066] The control unit 100 may display AES256 bit as the initial encryption level in the encryption level input form F104 based on the system setting information. If there is no initial value, the control unit 100 may display a blank or a predetermined symbol.

[0067] Furthermore, the control unit 100 can display an execute button with a different message displayed depending on the job type. For example, if the job type stored in the job setting information is scan and save, the control unit 100 displays a save button B106. For example, if the job type stored in the job setting information is scan and send, the control unit 100 can display a send button instead of the save button B106. Furthermore, the control unit 100 may change the display mode of the execute button depending on the state before transitioning to the screen displaying the execute button. Furthermore, in this embodiment, the execute button displays messages such as "Save" and "Send" depending on the job type, but the execute button may be displayed using different graphics (different button shapes), or the same wording (for example, execute, OK) may be displayed regardless of the job type.

[0068] Here, when the user selects the encryption level input form F104, the control unit 100 displays the encryption level input form F104 in a pull-down menu, and displays encryption methods such as AES 128 bit and RC4 128 bit in addition to AES 256 bit. Next, assume that the user selects the encryption password input form F106 and enters an encryption password. Here, for example, if the encryption level selected in the encryption level input form F104 is AES 256 bit, the control unit 100 allows up to 127 characters to be entered in the encryption password input form F106.

[0069] Next, suppose the user selects AES 128-bit in the encryption level input form F104. The control unit 100 then allows up to 32 characters to be input into the encryption password input form F106, prohibiting input of 33 or more characters. When the user selects the Save button B106, the control unit 100 executes scanning based on the job setting information stored in the job setting information storage area 1110 and saves the encrypted file in a specified folder. When the user selects the Cancel button B108, the control unit 100 returns to the previous state and displays the screen. For example, the control unit 100 may close the window display W108 in FIG. 8 and display only the display screen W106, or may display the display screen W102 in FIG. 7(b) in the state immediately after the OK button B105 was selected.

[0070] 9A shows an example of a display screen W110 displayed on the display unit 140 of the image forming apparatus 10 in place of the display screen W106 and the window display W108 shown in FIG. 8, and an example of a window display (encryption setting screen) W112 displayed superimposed on the display screen W110. The window display W112 shows an example of an encryption setting screen (display screen) including a message displayed to the user when, for example, the user selects the start button B102 on the display screen W102 in a state where the window display W104 has been closed and a character string indicating format setting information (e.g., "Encrypted PDF") is displayed in the format button B100, and RC4 128-bit has been selected as the initial encryption method. For example, the window display W112 is displayed as a dialog box on the display screen W110. The window display W112 displays a message M104 saying, "Please enter the password for the encrypted PDF." Furthermore, an encryption level input form F108, a password (1 to 32 characters) input form F110, a save button B106, and a cancel button B108 are displayed in an area R108 of the window display W112.

[0071] Here, when the user selects the encryption level input form F108, the control unit 100 displays the encryption level input form F108 in a pull-down menu, and displays encryption methods such as AES 256 bit and AES 128 bit in addition to RC4 128 bit. Next, assume that the user selects the password (1 to 32 characters) input form F110 and enters an encryption password. Here, because RC4 128 bit is selected in the encryption level input form F108, the control unit 100 allows, for example, entry of 1 to 32 characters in the encryption password input form F110, and prohibits entry of less than 1 character or more than 32 characters.

[0072] Next, suppose the user selects AES 256-bit in the encryption level input form F108. Then, the control unit 100 displays the display screen W114 and window display W116 of FIG. 9(b). Then, when the user selects the save button B106 after entering the encryption password, the control unit 100 executes a scan based on the job setting information stored in the job setting information storage area 1110, and saves the encrypted file in a specified folder. Note that when the user selects the cancel button B108, the control unit 100 returns to the previous state and displays the file. For example, the control unit 100 may display the display screen W110 of FIG. 9(a) and a window display W112 superimposed on the display screen W110.

[0073] 9B is a diagram showing an example of a display screen W114 displayed on the display unit 140 of the image forming apparatus 10 in place of the display screen W106 shown in FIG. 8, and a window display (encryption setting screen) W116 displayed superimposed on the display screen W114. In this case, the display screen W114 is a diagram showing an example of an encryption setting screen (display screen) including a message displayed to the user when, for example, the window display W104 is closed and a character string indicating format setting information (e.g., "Encrypted PDF") is displayed in the format button B100, and the user selects the start button B102, and AES 256-bit is selected as the initial encryption method. For example, a window display W116 is displayed as a dialog box on the display screen W114. The window display W116 displays a message M104 saying, "Please enter the password for the encrypted PDF." Furthermore, an encryption level input form F112, a password (4 to 127 characters) input form F114, a save button B106, and a cancel button B108 are displayed in an area R110 of the window display W116.

[0074] Here, when the user selects the encryption level input form F112, the control unit 100 displays the encryption level input form F112 in a pull-down menu, and displays encryption methods such as AES 128 bit and RC4 128 bit in addition to AES 256 bit. Next, assume that the user selects the password (4 to 127 characters) input form F114 and enters an encryption password. Here, because AES 256 bit is selected in the encryption level input form F112, the control unit 100 allows, for example, entry of 4 to 127 characters in the encryption password input form F110, and prohibits entry of more than 128 characters or less than 3 characters.

[0075] Next, suppose the user selects RC4 128 bit in the encryption level input form F112. Then, the control unit 100 displays the display screen W110 and window display W112 of FIG. 9(a). Then, when the user selects the save button B106 after entering the encryption password, the control unit 100 executes scanning based on the job setting information stored in the job setting information storage area 1110, and saves the encrypted file in a specified folder. Note that when the user selects the cancel button B108, the control unit 100 returns to the previous state and displays the file. For example, the control unit 100 may display the display screen W114 of FIG. 9(b) and a window display W116 superimposed on the display screen W114.

[0076] 9(a) and 9(b), for example, if the user changes the encryption level after inputting a password in each of the password input forms F110 and F114, the control unit 100 may cancel the password input in each of the password input forms F110 and F114. Alternatively, for example, if the password that has already been input is a password that satisfies the input conditions for the changed encryption level, the control unit 100 may use the password as is without canceling it.

[0077] In this embodiment, the format setting screen and the encryption setting screen are displayed as dialog windows on the job setting screen. Here, for example, each setting screen may be transitioned from the job setting screen and displayed on the display unit 140, or may be displayed as a pull-down menu on the display unit 140. Furthermore, the encryption setting screen may at least display, for example, the encryption level and a password input form.

[0078] [1.6 Effects, etc.] In this way, the present disclosure enables control to change the input conditions for the encrypted password to the optimum one depending on the encryption strength of the encryption method selected by the user. Therefore, the control unit 100 can control, for example, the input rules for the encrypted password, thereby ensuring security according to the encryption strength of the encryption method selected by the user.

[0079] In addition, by displaying the encrypted PDF settings screen after issuing a command to start scanning, it is possible to separate the encrypted PDF settings from other settings, making operation simpler. Furthermore, by controlling the number of characters in the encryption password according to the encryption level (encryption strength), it is possible to set an encryption password with security strength that matches the encryption level.

[0080] [2. Second Embodiment] The second embodiment will be described below. In the second embodiment, a default value is set for the encryption method, and furthermore, an operation to change the encryption method on the encryption setting screen can be prohibited.

[0081] In the second embodiment, explanations of the same hardware and software configurations as those in the first embodiment will be omitted, and the explanation will focus on the differences from the first embodiment.

[0082] [2.1 Processing flow] Figures 10 and 11 are diagrams illustrating the processing flow in this embodiment. Figure 10 replaces Figure 5 in the first embodiment. S202 and S204 are executed before S102 in Figure 5, and S206 and S208 are executed after S116 or S118.

[0083] First, the control unit 100 displays an encryption method setting screen (S202). Here, the encryption method setting screen is, for example, a display screen on which a default encryption method can be selected. Furthermore, the encryption method setting screen may also be configured to enable or disable fixing the encryption method (prohibiting changes).

[0084] Next, the control unit 100 stores, for example, the change in the encryption method made by the user on the encryption method setting screen in the system setting information storage area 1105 as a change in the system setting information (S204).

[0085] The control unit 100 also determines whether the encryption method is fixed or not from the system setting information (S206). Here, if the system setting information stores that prohibition of changing the encryption method is enabled, or if the setting value of the default encryption method stores a specific value (e.g., AES256 bit), the control unit 100 may determine that the encryption method is fixed and cannot be selected or changed.

[0086] If the control unit 100 determines that the encryption method is fixed, it displays an encryption setting screen on the display unit 140, which prohibits the operation of changing the encryption method setting value (S206; Yes → S208). For example, the control unit 100 may fix the selection field for the encryption method setting value or gray it out so that it cannot be selected.

[0087] Then, the control unit 100 determines whether or not the encryption setting is complete (S208→S124).

[0088] On the other hand, when the control unit 100 determines that the encryption method is not fixed, it displays an encryption setting screen (S206; No→S120).

[0089] [2.2 Example of operation] FIG. 12 is a diagram showing an example of a display screen including a message displayed to the user as a result of the operation of the image forming apparatus 10 in this embodiment.

[0090] 12(a) is a diagram showing an example of a display screen W200 displayed on the display unit 140 of the image forming apparatus 10. The display screen W200 is a diagram showing an example of an encryption method setting screen (display screen) including a message displayed to the user for setting a default value for the encryption method before the image forming apparatus 10 executes a scan job, for example. The display screen W200 displays a message M200 saying "Encryption Setting," a default encryption level input form F202, a register (U) button B200, and an update (R) button B202.

[0091] Here, when the user selects the default encryption level input form F202, the control unit 100 displays the default encryption level input form F202 in a pull-down menu, and displays encryption methods such as AES 128 bit and RC4 128 bit in addition to AES 256 bit. Then, when the user selects the Update (R) button B202, the control unit 100 stores, for example, AES 256 bit displayed in the default encryption level input form F202 as the default encryption level in the system setting information storage area 1105. On the other hand, when the user selects the Register (U) button B200, the control unit 100 stores the default encryption level in the same way as the Update (R) button B202, closes the display screen W200 of FIG. 12(a), and displays, for example, a home screen or a job setting screen.

[0092] FIG. 12B shows an example of a display screen W202 displayed on the display unit 140 of the image forming apparatus 10 and a window display W204 displayed superimposed on the display screen W202. The display screen W202 shows an example of an encryption setting screen (display screen) including a message displayed to the user when the user selects the start button B102, which is an execution key, on the display screen W102 in a state where the window display W104 of FIG. 7B is closed and a character string indicating format setting information (e.g., encrypted PDF) is displayed in the format button B100. The window display W204 is displayed as a dialog box on the display screen W202, for example. An area R200 of the window display W204 displays an encryption level input form F204, an encryption password input form F206, a save button B106, a cancel button B108, and other encryption setting input forms (password for changing permissions, printing permission, changes permission, image and text copy / extraction, accessibility). Note that the window display W204 may optionally display one or more items in the input form for other encryption settings, or may not display any items at all. Note that the window display W204 in Fig. 12(b) may be displayed, for example, as the window display W116 in Fig. 9(b).

[0093] If the user selects the encryption level input form F204, the control unit 100 prohibits changes to the encryption level input form F204 and displays no options other than the default setting, AES 256 bit. Next, assume that the user selects the encryption password input form F206 and enters an encryption password. For example, since the encryption level selected in the encryption level input form F204 is AES 256 bit and changes to the encryption level are prohibited, the control unit 100 permits entry of 4 to 127 characters in the encryption password input form F106. If the user selects the Save button B106, the control unit 100 executes a scan based on the job setting information stored in the job setting information storage area 1110 and saves the encrypted file, for example, in a destination (folder) specified by the user. If the user selects the Cancel button B108, the control unit 100 displays the display screen W100 shown in FIG. 7(a).

[0094] [2.3 Effects, etc.] In this way, the control unit 100 can determine a default encryption method and execute encryption. This eliminates the need for the user to determine an encryption method every time a scan job is executed, thereby reducing the time and effort required for operation.

[0095] Furthermore, the user can set an encryption level in advance and encrypt data at that encryption level.

[0096] 3. Third Embodiment The third embodiment will be described below. For example, in the case of scan transmission, the encryption setting screen is always displayed, and in the case of scan saving, which adds a confidential attribute and a confidential password (second password) to the file, the second password can be set as the first password, and the display of the encryption setting screen can be omitted.

[0097] In the third embodiment, the description of the same hardware and software configurations as those in the first embodiment will be omitted, and the description will focus on the differences from the first embodiment.

[0098] [3.1 Software Configuration] The main software configuration of the image forming apparatus 10 will be described with reference to Fig. 13. Note that the software configuration shown in Fig. 13 mainly describes the configuration required in this embodiment, and other configurations are omitted.

[0099] For example, the control unit 100 can realize the password judgment unit 1020 by reading and executing a program stored in a memory unit (storage 110, ROM 120).

[0100] The password judgment unit 1020 judges whether the password satisfies the password policy (constraints) as an encrypted password. Here, the constraints are conditions imposed on the characters that make up the password. Specifically, the following conditions may be satisfied: The password contains more than the specified number of characters. The number of characters entered in the password is within the specified range. The password does not contain any characters that cannot be used. It determines such things as:

[0101] In this embodiment, for an encryption method belonging to a first strength, the password judgment unit 1020 may determine that a password satisfies the password policy if the password has a character length that can be set for the first strength, preferably if the character length is 4 to 127 characters. Similarly, for an encryption method belonging to a second strength, the password judgment unit 1020 may determine that a password has a character length that can be set for the second strength, preferably if the character length is 1 to 32 characters.

[0102] [3.2 Processing flow] [3.2.1 Main Processing] Figures 14 and 15 are diagrams for explaining the flow of main processing in this embodiment. Figure 14 replaces Figure 5 of the first embodiment. S302 is executed between S104 and S108 in Figure 5, and S304, S306, and S308 are executed between S113 and S114. Also, Figure 15 replaces Figure 6 of the first embodiment.

[0103] First, the control unit 100 executes a password input process (S302). The password input process will be described later. The control unit 100 also determines whether the type of job to be executed (job type) stored in the read job setting information is scan-to-save (S304). If the control unit 100 determines that the job type is not scan-to-save, it determines whether the encryption strength of the encryption method is the first strength (S304; No→S114).

[0104] On the other hand, if the control unit 100 determines that the job type is scan and save, it executes a password determination process (S304; Yes→S306). The password determination process will be described later. Next, the control unit 100 determines whether a first password is stored (entered) in the read job setting information (S308).

[0105] If the control unit 100 determines that the first password has been input, it stores the job setting information (S308; Yes→S126). On the other hand, if the control unit 100 determines that the first password has not been input, it determines whether the encryption strength of the encryption method is the first strength (S308; No→S114). Note that, as a different process, for example, when there is no change in the job setting information, the control unit 100 does not need to store the job setting information again, and it is sufficient to acquire the image data.

[0106] The above-described operation flow is an example, and some different processes may be performed. In this embodiment, for example, in the process of S308, a process may be performed in which the user selects to display an encryption setting screen in order to set a password other than the first password (for example, accessibility, a password for changing authority, etc.).

[0107] [3.2.2 Password entry processing] FIG. 16 is a diagram illustrating the flow of password input processing in this embodiment.

[0108] The control unit 100 determines whether an attribute has been selected (S322). For example, the control unit 100 may determine that an attribute has been selected when a setting item related to an attribute or an icon related to attribute setting is selected by the user from among the setting items displayed on the job setting screen.

[0109] Note that the attribute here refers to, for example, additional information that can be added to a file. The control unit 100 can, for example, read the attribute information added to a file, identify the file, and perform certain processing on the file. An example of attribute information is confidential attribute information that can specify a recipient so that a specific recipient can use the file in a scan job, or can protect the file with a password.

[0110] Here, as confidential attribute information, for example, confidential attribute information that identifies that processing is to be performed on the file and a confidential password (second password) are stored in the file. In a scan job, for example, a scan-and-save job, the control unit 100 can permit a specific user who is the recipient of the file to use the file saved in the folder by inputting the second password.

[0111] If the control unit 100 determines that an attribute has been selected, it displays an attribute setting screen (S322; Yes → S324). The control unit 100 may display, on the display unit 140, a display screen that includes setting items and setting values ​​related to attributes by using any method such as a dialog or a pull-down menu on the job setting screen, and allows the setting values ​​to be changed, as the attribute setting screen.

[0112] Next, the control unit 100 determines whether the confidential attribute has been selected (S326). The control unit 100 may determine that the confidential attribute has been selected when the job setting information storage area 1110 stores the confidential attribute as attribute information, or may determine that the confidential attribute has been selected when the job type is scan and save.

[0113] When the control unit 100 determines that the confidential attribute is selected, it determines whether or not a second password is stored (set) in the job setting information (S326; Yes→S328).When the control unit 100 determines that the second password is not set, it may determine whether or not to display a second password setting screen, for example, whether or not an instruction to display the second password setting screen from the user has been accepted (S328; No→S330).

[0114] When it is determined that the second password setting screen is to be displayed, the control unit 100 displays the second password setting screen (S330; Yes→S336).

[0115] Here, the control unit 100 may display, as the second password setting screen, a display screen that prompts the user to input a confidential password (second password) on the display unit 140 by using any method such as a dialog or a pull-down menu.

[0116] Next, the control unit 100 determines whether or not the second password has been entered (S342).

[0117] Here, as a method of determining whether or not the second password entry is complete, for example, when the user selects the enter key or the execute key on the second password setting screen, the control unit 100 may determine that the second password entry is complete. If the control unit 100 determines that the second password entry is not complete, it repeats the process until it determines that the second password entry is complete (S342; No→S342).

[0118] On the other hand, when the control unit 100 determines that the second password input has been completed, it stores the second password in the job setting information (S342; Yes → S344). On the other hand, when the control unit 100 determines that the attribute has not been selected (S322; No), the confidential attribute has not been selected (S326; No), the control unit 100 determines that the second password has been set (S328; Yes), or the second password setting screen is not displayed (S330; No), it ends the password input process.

[0119] [3.2.3 Password Judgment Processing] FIG. 17 is a diagram illustrating the flow of the password judgment process in this embodiment.

[0120] The control unit 100 reads out the attributes (S362). The control unit 100 reads out, for example, information relating to the attributes from the job setting information stored in the job setting information storage area 1110.

[0121] Next, the control unit 100 determines whether the attribute of the job is confidential based on the job setting information (S364). If the attribute of the job is confidential, the control unit 100 determines, for example, whether a second password is stored in the job setting information (S364; Yes → S365). If the control unit 100 determines that a second password is stored, it reads the second password from the job setting information stored in the job setting information storage area 1110 (S365; Yes → S366).

[0122] Next, the control unit 100 determines whether the second password satisfies the constraints for use as the first password (S368). Here, the control unit 100 determines, by the password judgment unit 1020, whether the set value of the second password satisfies the constraints.

[0123] When the control unit 100 determines that the setting value of the second password satisfies the constraint condition, it displays a display screen including a message inquiring the user whether to use the second password as the first password (S368; Yes → 370). Here, the control unit 100 may, for example, display on the display unit 140 a notification that the setting value of the second password satisfies the constraint condition together with the display screen including the message inquiring the user whether to use the second password as the first password as well.

[0124] Next, the control unit 100 determines whether to set the second password as the first password (S374). For example, if the user selects on the display screen that the second password should also be used as the first password, the control unit 100 may determine that the second password should be set as the first password.

[0125] If the control unit 100 determines that the second password should be set as the first password, it stores the second password as the first password (S374; Yes→S376). The control unit 100 may, for example, change the setting value of the second password included in the job setting information to the setting value of the first password. On the other hand, if the control unit 100 determines that the second password should not be set as the first password, it ends the password determination process (S374; No→End of password determination process).

[0126] Furthermore, if the attribute is not confidential (S364; No), if the second password is not stored (S365; No), or if the constraints are not satisfied (S368; No), the control unit 100 ends the password judgment process.

[0127] Note that the above-described operational flow is an example, and some different processing may be performed. In this embodiment, for example, the processing of S368 and S370 may be omitted and the processing of S374 may be changed so that, when a second password is stored in the job setting information, the second password is stored as the first password after notifying the user that the second password will be set as the first password. Alternatively, the processing of S368, S370, and S374 may be omitted and, when a second password is set, the second password may be stored as the first password.

[0128] [3.3 Example of operation] FIG. 18 is a diagram showing an example of a display screen including a message displayed to the user as a result of the operation of the image forming apparatus 10 in this embodiment.

[0129] FIG. 18(a) is a diagram showing an example of a display screen W300 displayed on the display unit 140 of the image forming apparatus 10. The display screen W300 shows an example of a job setting screen and an attribute setting screen, including a message displayed to the user when the user selects the Other Items button B103 in FIG. 7(a), for example. Area R300 of the display screen W300 displays a file name input form F300, a user name input form F302, an attribute input form F304, a confidential password input form F306, a file save destination, and a check box for creating a downloadable file. Furthermore, the display screen W300 displays a start button B102, which is an execution key.

[0130] Here, the user selects the file name input form F300 and enters "Scan_20240122_234558" as the file name. Next, the user selects the user name input form F302 and enters "User01" as the recipient. Note that entering the file name and user name is not essential. For example, the control unit 100 may display an automatically generated file name as the default file name, or may display "User Name Unknown" as the default user name when authentication is OFF. Next, the user selects the attribute input form F304 and selects the confidential attribute from the options displayed in a pull-down menu (shared, protected, confidential). Finally, the user selects the confidential password input form F306 and enters a confidential password. Here, the control unit 100 may apply the number of password characters (input conditions) that can be entered into the confidential password input form F306 depending on, for example, the encryption level, or may apply an arbitrary number of characters depending on the administrator's settings regardless of the encryption level. When the user selects the start button B102, the control unit 100 displays the display screen W302 in Fig. 18(b). As an example, the control unit 100 may allow the confidential password to be used as the encryption password only when "Create a downloadable file" is enabled. This allows the user to create a downloadable file as an encrypted PDF when making it confidential.

[0131] 18(b) is a diagram showing an example of a display screen W302 displayed on display unit 140 of image forming apparatus 10 and a window display W304 displayed superimposed on display screen W302. Display screen W302 is a diagram showing an example of a display screen including a message that is displayed to the user when, for example, the user selects start button B102 on display screen W300 in FIG. 18(a) and the confidential password satisfies the password policy.

[0132] On the display screen W302, for example, a window display W304 is displayed as a dialog. On the window display W304, a message M300 asking "Do you want to use the confidential password as the encryption password as well?", a Yes button B300, and a No button B302 are displayed. Here, when the Yes button B300 is selected, the control unit 100 may store the second password as the first password, and may execute a scan based on the job setting information stored in the job setting information storage area 1110, for example, and save the encrypted file in a specified folder.

[0133] If other encryption setting items (for example, a password for changing authority, accessibility, etc.) can be set, and the user selects the Yes button B300, the control unit 100 may store the second password as the first password and display, for example, the display screen W308 and window display W309 in Fig. 19(a). On the other hand, if the user selects the No button B302, the control unit 100 does not store the first password and displays, for example, the display screen W308 and window display W309 in Fig. 19(a).

[0134] 19(a)。 Furthermore, for example, if the confidential password does not satisfy the requirements for the encryption password (password policy), the control unit 100 may not store the second password as the first password and may simply display the display screen W308 and window display W309 of Fig. 19(a). Also, the control unit 100 may notify the user that the confidential password does not satisfy the requirements for the encryption password (password policy), or may display a display screen (encryption setting screen) for entering only the encryption password.

[0135] 19(a) is a diagram showing an example of a display screen W308 displayed on the display unit 140 of the image forming apparatus 10 and a window display W309 displayed superimposed on the display screen W308. The display screen W308 is a diagram showing an example of an encryption setting screen (display screen) including a message displayed to the user when, for example, the user selects the No button B302 in the window display W304 displayed superimposed on the display screen W302 of FIG. 18(b) and when the confidential password (second password) entered by the user in the confidential password input form F306 on the display screen W300 does not satisfy the password policy.

[0136] On the display screen W308, for example, a window display W309 is displayed as a dialog. In the area R302 of the window display W309, an encryption level input form F308, an encryption password input form F310, a Save button B106, a Cancel button B108, and an input form for other encryption settings (password for changing permissions, print permission, change permission, image and text copy / extraction, accessibility) are displayed. The display screen W308 may optionally display one or more items in the input form for other encryption settings, or it may not display them at all. The window display W309 in FIG. 19(a) may be displayed, for example, as the window display W112 in FIG. 9(a).

[0137] If the user selects the encryption level input form F308, the control unit 100 displays the encryption level input form F308 in a pull-down menu, and displays encryption methods such as AES 128 bit and RC4 128 bit in addition to AES 256 bit.

[0138] Next, the user selects the encryption password input form F310. If the user selects the No button B302 on the display screen W302 of FIG. 18(b) and does not use the confidential password as the encryption password, the control unit 100 displays the encryption password with nothing entered. Similarly, if the confidential password does not satisfy the password policy, the control unit 100 displays the encryption password with nothing entered. On the other hand, when the Yes button B300 is selected on the display screen W302 of FIG. 18(b), for example, to display the display screen W308, the control unit 100 may display the encryption password with the encryption password already entered.

[0139] When the user selects the save button B106, the control unit 100 executes scanning and saves the encrypted file in the specified folder based on the job setting information stored in the job setting information storage area 1110. When the user selects the cancel button B108, the control unit 100 displays the display screen W300 in FIG. 18(a).

[0140] 19(b) is a diagram showing an example of a display screen W312 displayed on the display unit 140 of the image forming apparatus 10 and a window display W314 displayed superimposed on the display screen W312. The display screen W312 is a diagram showing an example of a second password setting screen (display screen) including a message that is displayed to the user when, for example, the user selects the confidential password input form F306 on the display screen W300 of FIG. 18(a), instead of directly entering data into the confidential password input form F306. On the display screen W312, for example, a window display W314 is displayed as a dialog. The window display W314 displays a message M304 saying "Please enter your confidential password," a confidential password input form F318, and an OK button B304.

[0141] Here, the user selects the confidential password input form F318 and enters the confidential password. Next, when the user selects the OK button B304, the control unit 100 stores the password entered in the confidential password input form F318 as the second password in the job setting information storage area 1110. Next, the control unit 100 displays the confidential password input form F306 on the display screen W300 of FIG. 18(a) with the stored confidential password (second password) entered. Here, since the control unit 100 only needs to indicate that a confidential password has been entered, it may display the password by replacing it with a predetermined symbol character or character string such as "*".

[0142] In this embodiment, the password entered into each input form is hidden on the display screen so that the entered password cannot be seen from the display screen (for example, by replacing it with "*"), but for example, the password may be displayed so that the entered password can be seen from the display screen. Also, a switch button that allows the user to switch between showing and hiding the password may be displayed on the display screen.

[0143] In this manner, in this embodiment, when the confidential attribute is selected, if a confidential password (second password) has already been set and the confidential password (second password) is stored as the encryption password (first password), a process is executed to set the confidential password (second password) as the encryption password (first password) without displaying the encryption setting screen. If the confidential password (second password) is not stored as the encryption password (first password), input of the encryption password (first password) can be accepted on the encryption setting screen displayed by the control unit 100.

[0144] Furthermore, when the confidential attribute is not selected, such as in the case of a scan transmission job, the control unit 100 accepts input of the encryption strength (encryption level) and the corresponding encryption password on the encryption setting screen displayed. The user can set a desired, more secure password as the confidential password and also use it as the encryption password.

[0145] Furthermore, in this embodiment, when a confidential password (second password) is set, the control unit 100 may change the encryption strength to a specific encryption strength, for example, by changing the specific encryption strength to the first encryption strength, and in the case of scan and save, an encryption method with higher encryption strength can be set.

[0146] In this embodiment, the password judgment unit 1020 judges whether the input confidential password satisfies the password policy (constraints) for an encrypted password. Here, for example, if the input confidential password is designed to satisfy the password policy for an encrypted password, the password judgment unit 1020 may not be provided. For example, the control unit 100 may judge whether a confidential password (second password) has been input, and if it has been input, may display the display screen W302 of FIG. 18(b) indicating that the confidential password can be used as an encrypted password (first password).

[0147] [3.4 Effects, etc.] In this way, when a confidential password is used as the encryption password, if a confidential password has already been set, the control unit 100 can set the confidential password as the encryption password and execute the process. Furthermore, if a confidential password has not yet been set, the control unit 100 can display an encryption setting screen to allow the user to set the encryption password. Therefore, the encryption password required for saving / sending an encrypted file can be appropriately set while reducing the user's input effort.

[0148] Furthermore, when the confidential attribute is selected, encryption can be performed by setting an encryption password with a key length (for example, 33 digits or more) that can be used with a highly secure encryption method (for example, AES 256 bit).In addition, when scanning and sending, an encryption setting screen can be displayed to set the encryption password and encryption level, and when scanning and saving, the display of the encryption setting screen can be omitted if a confidential password has been entered in advance, making it possible to control the display of the encryption setting screen according to the type of job.

[0149] [4. Modifications] The present disclosure is not limited to the above-described embodiments, and various modifications are possible. In other words, embodiments obtained by combining technical means that are appropriately modified within the scope of the present disclosure are also included in the technical scope.

[0150] In the above-described embodiment, an image forming apparatus has been described as an example of an image processing apparatus. However, the image processing apparatus can also be applied to other devices. For example, an example of an image processing apparatus may be an information processing apparatus such as a smartphone or a tablet.

[0151] Although the above-mentioned embodiments are described separately for convenience of explanation, they can be combined to the extent possible. Furthermore, the present invention intends to obtain rights to any of the technologies described in the specification through amendments or divisional applications, etc.

[0152] In addition, the programs that run on each device in each embodiment are programs that control the CPU, etc. (programs that make a computer function) so as to realize the functions of the above-described embodiments. Information handled by these devices is temporarily stored in a temporary storage device (e.g., RAM) during processing, and then stored in various storage devices such as ROMs and HDDs, and is read, modified, and written by the CPU as needed.

[0153] Here, the recording medium for storing the program may be any of semiconductor media (e.g., ROM, non-volatile memory card, etc.), optical recording media / magneto-optical recording media (e.g., DVD (Digital Versatile Disc), CD (Compact Disc), BD (Blu-ray (registered trademark) Disc), etc.), magnetic recording media (e.g., magnetic tape, flexible disk, etc.), etc.

[0154] Furthermore, when distributing the program in the market, the program can be stored in a portable recording medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server device is also included in the present disclosure.

[0155] Furthermore, the above-mentioned data may not be stored within the device, but may be stored in an external device and called up as needed. For example, the data may be stored in a NAS (Network Attached Storage) or on the cloud.

[0156] The scope of the present disclosure is not limited to the configurations explicitly described in the specification, but also includes combinations of the technologies disclosed in the specification. The configurations of the present disclosure for which a patent is sought are set forth in the appended claims, but it is not intended to exclude them from the technical scope on the grounds that they are not set forth in the claims.

[0157] Furthermore, in the above-mentioned specification, the statements "in the case of" and "when" are given as examples and are not intended to limit the configuration to the described contents. The disclosure also includes configurations that are not in these cases or situations, even if they would be obvious to a person skilled in the art, and the applicant intends to obtain rights to them.

[0158] Furthermore, the order of the processes and data flow described in the specification is not limited to the order described. For example, the patent also discloses configurations in which some processes are deleted or the order is changed, and the patent holder intends to obtain the rights to such configurations.

[0159] Furthermore, although the functions described in the embodiments are executed by each device, they may be realized by one device or may further utilize an external server.

[0160] Furthermore, each functional block or feature of the device used in the above-described embodiments may be implemented or performed by an electrical circuit, for example, an integrated circuit or multiple integrated circuits. The electrical circuit designed to perform the functions described herein may include a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or a combination thereof. The general-purpose processor may be a microprocessor, or a conventional processor, controller, microcontroller, or state machine. The electrical circuit may be composed of digital circuits or analog circuits. Furthermore, as advances in semiconductor technology emerge, one or more aspects of the present disclosure may utilize new integrated circuits based on that technology. [Explanation of symbols]

[0161] 10 Image forming device 100 control section 110 Storage 120 ROM 130 RAM 140 Display section 150 Operation section 160 Image forming unit 165 Image reading unit 170 Communications Department

Claims

1. an acquisition unit that acquires image data from an image; a control unit that encrypts the image data based on a key and outputs the encrypted image data as a file; Preparation, the control unit changes an input condition for inputting the key based on an encryption strength when encrypting the image data. Image processing device.

2. The image processing apparatus according to claim 1 , wherein the encryption strength is classified according to the key length of the key that can be input corresponding to the encryption method for performing the encryption.

3. Further having a display unit, The image processing device according to claim 2 , wherein the control unit displays on the display unit a setting screen on which the key can be input within the range of the key length based on the input conditions.

4. The image processing device according to claim 3 , wherein the control unit prohibits a change of the encryption method on the setting screen when the encryption method is fixed as a default value.

5. the file includes the key as a first password; Furthermore, a second password can be set as the first password for a specific user to use the file, The control unit sets the second password as the first password. The image processing device according to claim 1 .

6. When the second password is stored as the first password, the control unit sets the second password as the first password. The image processing device according to claim 5 .

7. Further having a display unit, The image processing device according to claim 5 , wherein the control unit displays a setting screen on the display unit that allows the user to set the first password when the second password is not stored as the first password.

8. an acquisition step of acquiring image data from the image; a control step of encrypting the image data based on a key and outputting the encrypted image data as a file; Including, The control step changes an input condition for inputting the key based on encryption strength when encrypting the image data. How to set it up.

Images