Image processing apparatus and encryption setting method

Abstract

To provide an image processing apparatus or the like capable of enhancing the operability with respect to encryption setting such as selection of an encryption level to image data and setting of an encryption password.SOLUTION: An image processing apparatus including a transmission unit configured to transmit transmission data to a designated destination, and a control unit configured to control encryption of the transmission data based on an encryption setting set by a user, wherein the control unit encrypts the transmission data based on an application setting of either collective application for collectively applying the encryption setting to the transmission data to a plurality of the destinations or individual application for individually applying the encryption setting to the transmission data to the plurality of the destinations, and the transmission unit transmits the encrypted transmission data to the plurality of the destinations.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to an image processing device and the like. [Background technology]

[0002] For example, Patent Document 1 describes an image processing device that allows the user to select an encryption level for image data and set an encryption password when encrypting image data obtained by scanning a document and storing the encrypted image data in memory. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-054876 Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present disclosure is to provide an image processing device or the like that can improve operability regarding encryption settings such as selection of an encryption level for image data and setting of an encryption password. [Means for solving the problem]

[0005] In order to solve the above problem, the image processing device of the present disclosure comprises a transmission unit that transmits transmission data to a specified destination, and a control unit that controls encryption of the transmission data based on encryption settings set by a user, and the control unit encrypts the transmission data based on either an application setting of batch application, which applies the encryption settings to the transmission data for multiple destinations collectively, or an application setting of individual application, which applies the encryption settings to the transmission data for the multiple destinations individually, and the transmission unit transmits the encrypted transmission data to the multiple destinations.

[0006] In addition, the encryption setting method according to the present disclosure is characterized in that it controls encryption of transmission data based on encryption settings set by a user, encrypts the transmission data based on either a batch application setting in which the encryption settings are applied collectively to the transmission data for the multiple destinations, or an individual application setting in which the encryption settings are applied individually to the transmission data for the multiple destinations, and transmits the encrypted transmission data to the multiple destinations. [Effects of the Invention]

[0007] According to the present disclosure, it is possible to provide an image processing device or the like that is capable of improving operability regarding encryption settings such as selection of an encryption level for image data and setting of an encryption password. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a diagram illustrating the overall configuration of a multifunction peripheral according to a first embodiment. [Figure 2] FIG. 2 is a diagram illustrating the functional configuration of the multifunction peripheral according to the first embodiment. [Figure 3] 1 is a flowchart illustrating a processing flow according to the first embodiment. [Figure 4] 1 is a flowchart illustrating a processing flow according to the first embodiment. [Figure 5] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 6] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 7] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 8] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 9] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 10] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 11] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 12]FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 13] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 14] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 15] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 16] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 17] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 18] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 19] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 20] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 21] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. [Figure 22] FIG. 2 is a diagram illustrating an example of operation according to the first embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] For example, when encrypting image data in Portable Document Format (PDF) format obtained by scanning a document and sending it to multiple destinations, up until now, the user has not been required to enter an encryption level or encryption password for each destination, and the encryption level and encryption password set by the user have been applied to the encryption of all image data (hereinafter sometimes referred to as transmission data) for multiple destinations.

[0010] On the other hand, if a user wants to set different encryption levels or different encryption passwords for the data sent to each destination, the user must execute the sending job multiple times for each destination, which is time-consuming and inconvenient.

[0011] Regarding the application of encryption settings such as selecting an encryption level for transmitted data and setting an encryption password, no consideration has been given to whether the encryption settings should be applied to multiple destinations all at once, applied individually to each destination, or whether it should be possible to select any of the settings to be applied.

[0012] The image processing device of the present disclosure that solves the above-mentioned problems will be described in the following embodiments with reference to the drawings. Note that the following embodiments are merely examples of the invention described in the claims, and the technical scope of the present invention is not limited to the description of the following embodiments.

[0013] [1 First Embodiment] [1.1 Functional Configuration] 1 is a diagram illustrating the overall configuration of a multifunction peripheral 10 as an image processing apparatus. FIG. 3 is a functional configuration diagram of the multifunction peripheral 10.

[0014] The multifunction device 10 is an image processing device that can perform jobs related to various functions, such as copy, fax, scan, and e-mail functions, in a single housing. Note that, in this disclosure, an example of a multifunction device will be described as one form of an image processing device, but the image processing device is not limited to a multifunction device, and may be, for example, an e-mail sending device, an information processing device (terminal device) that complies with a communication protocol such as SMB (Server Message Block) or FTP (File Transfer Protocol), etc., as long as it is configured to be able to output image data that has been input as encrypted transmission data.

[0015] The multifunction peripheral 10 includes a control unit 11, a display unit 13, an operation input unit 15, a communication unit 17, a storage unit 19, and an image processing unit 21.

[0016] The control unit 11 controls the entire multifunction device 10. The control unit 11 can be configured with one or more arithmetic units (for example, a CPU (Central Processing Unit), an SoC (System on Chip), etc.). The control unit 11 realizes the functions of the multifunction device 10 by reading and executing various programs stored in the storage unit 19.

[0017] The display unit 13 is a display device (display panel) that displays various information to the user, etc. The display unit 13 can be configured, for example, with an LCD (Liquid Crystal Display), an organic EL (Electro-Luminescence) display, etc. The display unit 13 displays, for example, a home screen (not shown) and an operation screen such as an encryption setting screen (described later).

[0018] The operation input unit 15 is an input device that accepts information input by a user or the like. The operation input unit 15 can be configured with various input devices, such as operation keys such as hardware keys or software keys, buttons, etc. The operation input unit 15 can be configured as a touch panel that allows input via the display unit 13. When configured as a touch panel, the operation input unit 15 can detect a user's touch, tap, swipe, etc. on an object displayed via the display unit 13, and acquire the coordinate position and pressure-sensitive information of the touch panel information. In this case, the input method of the touch panel can be, for example, a general input method such as a resistive film method, an infrared method, an electromagnetic induction method, or a capacitive method.

[0019] The communication unit 17 functions as a transmitting / receiving unit, and is a functional unit that transmits encrypted transmission data, etc. to a specified destination and receives encrypted image data, etc. from other devices. Such communication unit 17 has a wired / wireless interface or both for communicating with other devices via a network NW such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, a telephone line, a FAX line, etc. The communication unit 17 may also have an interface related to a short-range wireless communication technology such as Bluetooth (registered trademark), NFC (Near Field Communication), Wi-Fi (registered trademark), ZigBee (registered trademark), IrDA (Infrared Data Association), or wireless USB (Universal Serial Bus).

[0020] The storage unit 19 is one or more storage devices that store various programs and various data required for the operation of the multifunction device 10. The storage unit 19 can be configured with storage devices such as RAM (Random Access Memory), SSD (Solid State Drive), HDD (Hard Disk Drive), and ROM (Read Only Memory).

[0021] In the first embodiment, the memory unit 19 stores a control program 191, a display control program 192, a job control program 193, and an encryption program 194, and reserves a setting information memory area 195, a destination information memory area 196, a screen information memory area 197, and a job memory area 198.

[0022] The control program 191 is a program that is read by the control unit 11 after the device is started up. The control unit 11 that reads the control program 191 functions as an OS (Operating System) and controls the operation of hardware such as the display unit 13, the operation input unit 15, the communication unit 17, and the image processing unit 21.

[0023] The display control program 192 is a program that the control unit 11 reads out when controlling the output of an operation screen displayed on the display unit 13 or the operation input unit 15 configured as a touch panel. The control unit 11 that reads out the display control program 192 displays, on the display unit 13, a collective application screen, an individual application screen, or a selection screen for user settings that accepts selection of collective application or individual application, etc., related to encryption settings, based on the settings of the system settings that have been set in advance, as device settings that will be described later.

[0024] The job control program 193 is a program that the control unit 11 reads when executing a print job related to printing, copying, etc., or a transmission job related to sending image data (transmission data) via e-mail, SMB, FTP, etc. The control unit 11 that reads the job control program 193 changes the device mode to a job mode for executing each job and executes various jobs. When executing a job, the control unit 11 can display a job setting screen on the display unit 13 as an operation screen, where the job setting screen accepts the user's selection of setting values ​​and functions required for executing the job, as necessary. The control unit 11 can execute the job based on the setting values ​​and functions accepted via the job setting screen.

[0025] The encryption program 194 is a program read by the control unit 11 when encrypting image data such as transmission data. After reading the encryption program 194, the control unit 11 uses an encryption password input by the user to encrypt the transmission data at an encryption level such as RC4 128 bit, AES 128 bit, or AES 256 bit. In this disclosure, encryption-related settings including the encryption level to be applied to the transmission data to be encrypted and the encryption password used for encryption (or decryption) are referred to as encryption settings. However, the encryption settings may include other setting values ​​and information other than the encryption level and encryption password, as long as they are encryption-related settings. Furthermore, after reading the encryption program 194, the control unit 11 accepts selection values ​​and setting values ​​input by the user related to the encryption settings and registers them in the setting information storage area 195 as encryption settings.

[0026] The encryption program 194 includes an encryption application determination program 1941. The control unit 11 reads the encryption application determination program 1941 and determines whether the user has selected one of the following encryption application settings: a batch application setting, which applies encryption settings collectively to transmission data for multiple destinations, or an individual application setting, which applies encryption settings individually to transmission data for each destination included in the multiple destinations. Then, the control unit 11 encrypts the transmission data that is subject to encryption application, depending on the selected application setting.

[0027] The setting information storage area 195 is a storage area that stores the selected value of the encryption level related to the encryption setting, the encryption password, the setting values ​​and selection information input by the user via the job setting screen, and various setting information required for the operation of the multifunction device 10.

[0028] The destination information storage area 196 is a storage area for storing destination information including the destination of transmission data. The destination information may be, for example, an e-mail address specifying the destination of e-mail, or a user-specified address such as a file path or IP address specifying the storage location of a file via SMB or FTP, but is not particularly limited as long as it is information capable of specifying the destination of transmission data, and may be identification information specific to the device, such as a MAC address (Media Access Control Address).

[0029] The screen information storage area 197 is a storage area for storing display content necessary for displaying operation screens such as a job setting screen, a setting screen relating to encryption setting, and a selection screen.

[0030] The job storage area 198 is a storage area for storing various jobs such as transmission jobs and print jobs related to printing, copying, etc. The job storage area 198 can also store results generated by the execution of a job. For example, if the executed job is a scan job, the control unit 11 stores image data generated by the image processing unit 21 (image input unit 213) in the job storage area 198. If the job type of the executed job is, for example, scan to email, the control unit 11 may prepare the image data for transmission and store it in the job storage area 198 as transmission data, or it is also possible to store the transmission data after encryption.

[0031] Image processing unit 21 includes image forming unit 211 and image input unit 213. Image forming unit 211 feeds paper as a sheet-like medium from paper feed unit 25, forms an image on the paper based on image data, and then discharges the paper to paper discharge unit 27. Image forming unit 211 can be configured, for example, by a laser printer that employs an electrophotographic system.

[0032] The image input unit 213 generates image data by scanning an original. The image input unit 213 can be configured as a scanner device having, for example, an image sensor such as a CCD (Charge Coupled Device) or a CIS (Contact Image Sensor), an automatic document feeder (ADF), a flatbed for placing and reading an original, or the like. The image input unit 213 is not particularly limited in configuration as long as it is capable of generating image information by reading a reflected light image from an original image with an image sensor. The image input unit 213 can also be configured as an interface capable of acquiring image information stored in a storage medium such as a USB memory or image data transmitted from a device (not shown, such as an information processing device). The image processing unit 21 may generate transmission data by performing, for example, shading correction or density correction on the image data input from the image input unit 213.

[0033] [1.2 Processing flow] Next, the flow of processing according to the first embodiment will be described. Fig. 3 is a flowchart illustrating processing related to registration of encryption settings. The processing described in Fig. 3 is processing executed by the control unit 11 by reading out the control program 191, display control program 192, encryption program 194, etc. The encryption setting illustrated in Fig. 3 can be performed as one of the setting items included in the system setting (device setting).

[0034] When the process starts, the control unit 11 determines whether or not an encryption level setting by the user has been accepted (step S100). If it is determined that an encryption level setting has been accepted, the control unit 11 registers the accepted encryption level in the storage unit 19 (step S100; Yes → step S110). If it is determined that an encryption level setting has not been accepted, the control unit 11 waits until an encryption level setting is accepted (step S100; No).

[0035] Next, the control unit 11 determines whether or not an encryption level / password application setting has been accepted (step S120). In the encryption level / password application setting, the control unit 11 accepts a selection of one of the application settings: collective application, individual application, or user setting that accepts a selection of collective application or individual application for the encryption setting. If it is determined that an encryption level / password application setting has been accepted, the control unit 11 registers the accepted encryption level / password application setting in the storage unit 19 (step S120; Yes → step S130). At this time, when applying an encryption setting individually, which will be described later, a process of registering an application destination to which the encryption setting is to be collectively applied for data sent to multiple destinations may be performed. Note that if it is determined that an encryption level / password application setting has not been accepted, the control unit 11 returns the process to step S120.

[0036] In step S140, the control unit 11 determines whether or not a one-time password notification destination setting has been accepted. Note that generating a one-time password is not essential, and selecting individual application is effective in simplifying password setting for each destination, compared to selecting collective application of encryption settings. The process of step S140 is not essential, and can be performed only when individual application is selected in step S120. In the one-time password notification destination setting, the control unit 11 accepts a one-time password notification destination setting for decrypting encrypted transmission data after transmitting the transmission data. If it is determined that the encrypted one-time password notification destination setting has been accepted, the control unit 11 registers the accepted one-time password notification destination setting in the storage unit 19 (step S140; Yes→step S150). If it is determined that the one-time password notification destination setting has not been accepted, the control unit 11 skips the process of step S150 and proceeds to step S160 (step S140; No→step S160).

[0037] Then, the control unit 11 determines whether the user authentication function is enabled (step S160). If it is determined that the user authentication function is enabled (step S160; Yes), the control unit 11 determines whether authorization setting for encryption setting has been made for each user to be authenticated (step S170). If it is determined that authorization setting for encryption setting has been made for each user, the control unit 11 registers the setting and ends the process (step S170; Yes → step S180). Note that if it is determined that the user authentication function is disabled (step S160; No) or if it is determined that authorization setting for encryption setting has not been made for each user (step S170; No), the control unit 11 ends the process.

[0038] Next, the process from applying the encryption setting to transmitting the encrypted transmission data when executing a transmission job will be described using the flowchart in Fig. 4. The process described in Fig. 4 is executed by the control unit 11 by reading out the control program 191, the display control program 192, the job control program 193, the encryption program 194 (encryption application determination program 1941), etc.

[0039] When the process starts, the control unit 11 reads out the encryption level / password application settings registered in step S130 of Fig. 3 (step S200). Based on the read encryption level / password application settings, the control unit 11 determines whether the application settings are user settings (step S210).

[0040] If it is determined that a user setting has been registered as the encryption level / password application setting, the control unit 11 displays a selection screen on the display unit 13 for accepting a selection of batch application or individual application (step S210; Yes→step S220). Next, the control unit 11 accepts the user's selection of batch application or individual application (step S230). Note that if it is determined that a user setting has not been registered as the encryption level / password application setting, the control unit 11 proceeds to step S240 (step S210; No→step S240).

[0041] Then, the control unit 11 determines whether or not the user has selected "Bulk Application" via the selection screen or in the encryption level / password application setting read out in step S200 (step S240).

[0042] If it is determined that batch application is selected, the control unit 11 encrypts the transmission data corresponding to multiple destinations collectively (by applying the same encryption settings) (step S240; Yes → step S250).The control unit 11 then transmits the transmission data encrypted by applying the same encryption settings to all destinations included in the multiple destinations, and ends the process (step S260).

[0043] Incidentally, if it is determined in step S240 that collective application has not been selected, the control unit 11 performs individual encryption processing of the transmission data (step S240; No→step S270).

[0044] At this time, the control unit 11 determines whether or not collective application to at least some of the multiple destinations has been selected (step S280). If it is determined that collective application to at least some of the multiple destinations has not been selected, the control unit 11 transmits the encrypted transmission data by applying individual encryption settings to each of the multiple destinations, and ends the process (step S280; No -> step S260).

[0045] On the other hand, if it is determined that batch application to at least some of the multiple destinations has been selected, the control unit 11 determines whether the batch application is to be applied to multiple destinations that share a domain (step S280; Yes → step S290). If it is determined that batch application is to be applied to multiple destinations that share a domain, the control unit 11 displays an input screen for applying batch application to the shared domain and accepts necessary settings via the input screen (step S290; Yes → step S300). Then, the control unit 11 applies the same encryption settings to the transmission data for the multiple destinations related to the shared domain to encrypt them all at once, and then transmits the encrypted transmission data to the multiple destinations that share the domain, and ends the process (step S250 → step S260).

[0046] On the other hand, if it is determined that the batch application is not to be applied to multiple destinations having a shared domain, the control unit 11 determines whether the batch application is to be applied to a group destination that combines multiple destinations into a single destination (step S290; No → step S310). If it is determined that the batch application is to be applied to a group destination, the control unit 11 displays an input screen for applying the batch application to the group destination and accepts necessary settings via the input screen (step S310; Yes → step S320). Then, the control unit 11 applies the same encryption settings to the transmission data for the multiple destinations related to the group destination to encrypt them all at once, and then transmits the encrypted transmission data to the multiple destinations included in the group destination, and ends the process (step S250 → step S260).

[0047] On the other hand, if it is determined that the batch application is not to be applied to a group destination, the control unit 11 determines whether the batch application is to be applied to a specific plurality of destinations (step S310; No → step S330). If it is determined that the batch application is to be applied to a specific plurality of destinations, the control unit 11 displays an input screen for applying the batch application to the specific plurality of destinations and accepts necessary settings via the input screen (step S330; Yes → step S340). Then, the control unit 11 applies the same encryption settings to the transmission data for the multiple destinations related to the specific plurality of destinations to encrypt them all at once, and then transmits the encrypted transmission data to the multiple destinations included in the specific plurality of destinations, and ends the process (step S250 → step S260).

[0048] If it is determined that the batch application is not to be applied to a specific plurality of destinations, the control unit 11 determines that the batch application is to be applied to destinations related to a specific job type. Then, the control unit 11 displays an input screen for applying the batch application to destinations related to a specific job type, and accepts necessary settings via the input screen (step S330; No → step S350). Then, the control unit 11 applies the same encryption settings to the transmission data for the multiple destinations related to the destinations of the specific job type, encrypts them all at once, and then transmits the encrypted transmission data to the multiple destinations included in the destinations of the specific job type, and ends the process (step S250 → step S260).

[0049] Incidentally, in FIG. 4, the processes relating to steps S290 to S350 are described as a series of consecutive processes, but these consecutive processes may be independent single processes, and for example, control may be performed such that the applicable destinations to which the same encryption settings are collectively applied are limited to destinations relating to a shared domain.

[0050] [1.3 Example of operation] Next, an example of operation according to the first embodiment will be described. Fig. 5 is a diagram illustrating an example of the configuration of encryption setting screens W10 to W14 that accept encryption settings by a user. Note that encryption settings using encryption setting screens W10 to W14 illustrated in Fig. 5 and settings related to operation authority granted to authenticated users illustrated in Fig. 6 will be described as being performed as one of the setting items included in system settings (device settings).

[0051] The encryption setting screen W10 shown in FIG. 5(a) is an example of the configuration of an encryption setting screen that accepts the user's selection of an encryption level, and is an example of the operation corresponding to the process related to step S100 in FIG.

[0052] The encryption setting screen W10 includes an encryption level selection pull-down menu P10 and a usage encryption level check box C10. The encryption level selection pull-down menu P10 is a pull-down menu that accepts the user's selection of the encryption level they wish to apply. Although not shown in FIG. 5(a), the encryption level selection pull-down menu P10 allows the user to select one of the encryption levels, for example, RC4 128-bit, AES 128-bit, or AES 256-bit.

[0053] The encryption level check box C10 is a check box that accepts a user's selection when limiting the encryption level to be used. Figure 5(a) shows an example in which the encryption level to be used can be limited to AES 256-bit. When the user checks the check box, the control unit 11 limits (fixes) the encryption level for the transmission data to AES 256-bit and performs encryption. Therefore, as shown in the input screen W33 described below, the encryption level cannot be selected on the job setting screen.

[0054] The encryption setting screen W12 shown in FIG. 5(b) is an example of the configuration of an encryption setting screen that accepts the user's selection of encryption level / password application settings, and is an example of the operation corresponding to the process related to step S120 in FIG.

[0055] The encryption setting screen W12 includes an application setting selection pull-down menu P12 and an application destination selection pull-down menu P14. The application setting selection pull-down menu P12 is a pull-down menu that accepts the user's selection of the application setting they wish to apply. The application setting selection pull-down menu P12 allows the user to select one of the application settings: batch application, individual application, or user settings that accept a selection of the application setting: batch application or individual application. FIG. 5(b) shows the user selecting batch application as the application setting. The application destination selection pull-down menu P14 is a pull-down menu that accepts the selection of application destinations when applying encryption settings individually to data sent to at least some of multiple destinations at the time of applying encryption settings in a batch. The application destination selection pull-down menu P14 can accept the selection of one or more of a destination with a shared domain, a group destination that combines multiple destinations into one destination, multiple specific destinations, or a destination related to a specific job type, and Fig. 5(b) shows that the user has selected a shared domain (a destination with a shared domain) as the application destination to which encryption settings will be applied collectively. Note that the application destination selection pull-down menu P14 may be disabled (grayed out) so that the user cannot select it until individual application is selected in the application setting selection pull-down menu P12.

[0056] The encryption setting screen W14 shown in Fig. 5(c) is an example of the configuration of an encryption setting screen that accepts the user's input of the destinations to which the one-time password will be sent, and is an example of the operation corresponding to the process related to step S140 in Fig. 3. Note that the generation of a one-time password is not essential, and is effective only when "Individual application" is selected in the application setting selection pull-down menu P12, and is effective in that it simplifies the setting of a password for each destination.

[0057] The encryption setting screen W14 is a screen for setting the notification destination of the one-time password generated based on instructions from the user, and includes a password notification destination input box Bx10. The password notification destination input box Bx10 is an input box that accepts input of the desired one-time password notification destination by the user, and Figure 5(c) shows that the user has entered "aaa@example.com" as the notification destination.

[0058] FIG. 6 shows an example of the configuration of a user setting screen W16 that accepts settings related to the operation authority to be granted to the user to be authenticated, and is an example of the operation corresponding to step S170 in FIG.

[0059] The user settings screen W16 includes encryption setting application authority in addition to items related to operation authority granted to the authenticated user by the administrator (user) of the multifunction device 10, such as the usage limit group, authority group, and favorite operation group. The encryption setting application authority includes an application setting selection pull-down menu P16, similar to the encryption setting screen W12 in FIG. 5(b).

[0060] In the application setting selection pull-down menu P16, as in the application setting selection pull-down menu P12, it is possible to select one of the application settings: batch application, individual application, or user setting. Note that for a user who has been granted batch application via the application setting selection pull-down menu P16, even if user setting is selected as the application setting in the application setting selection pull-down menu P12, the batch application selected via the application setting selection pull-down menu P16 takes precedence. In other words, in an operation mode that requires user authentication when using the multifunction peripheral 10, the encryption setting application authority granted to the user (e.g., batch application) is applied regardless of the application setting for the device (e.g., user setting).

[0061] 7 is a diagram illustrating an example of the configuration of a selection screen W30 that the control unit 11 displays by superimposing it on the job setting screen W20 for e-mail. The selection screen W30 is an example of operation corresponding to step S210 (; Yes) and step S220 in FIG. 4, and is a selection screen that is displayed when the encryption level / password application setting is set to user setting, but is not displayed when the encryption level / password application setting is set to batch application or individual application. The selection screen W30 is displayed, for example, when a setting button for encrypting transmission data is selected on the job setting screen W20 for e-mail, or when a start button is selected to instruct the start of job execution when the setting for encrypting transmission data is enabled and multiple destinations are selected as destinations for the transmission data.

[0062] The selection screen W30 includes an apply all button B10, an apply individual button B12, and a cancel button B14.

[0063] The Bulk Apply button B10 is a button that accepts a user instruction to select bulk application as the applied settings. The Individual Apply button B12 is a button that accepts a user instruction to select individual application as the applied settings. The Cancel button B14 is a button that accepts a user instruction to cancel the applied settings.

[0064] When the control unit 11 receives an instruction from the user to select either the All Apply button B10 or the Individual Apply button B12 via the selection screen W30, it executes the processing from step S230 onwards in Fig. 4. Furthermore, when the control unit 11 receives an instruction from the user to select the Cancel button B14 via the selection screen W30, it terminates the display of the selection screen W30 and displays the previous screen, for example, the job setting screen W20, in which the setting to encrypt the transmission data has been made and multiple destinations have been selected as destinations for the transmission data, if the selection screen W30 was displayed by selecting the Start button to instruct the user to start executing a job.

[0065] FIG. 8(a) shows an example of the input screen W31 displayed by the control unit 11 when the user selects the Batch Apply button B10 on the selection screen W30 shown in FIG. 7. FIGS. 8(a) and 8(b) show an example of the operation corresponding to step S240 in FIG. 4. The input screen W31 includes a notification prompting the user to enter an encryption password to be applied collectively to PDFs (transmission data) for multiple destinations: "Please enter the password for the encrypted PDF." The input screen W31 also includes an encryption level selection pull-down menu P18, a password input box Bx12, an Execute button B16, and a Cancel button B18. The input screen W31 is also displayed when "Batch Apply" is selected as the application setting in the application setting selection pull-down menu P12 on the encryption setting screen W12 shown in FIG. 5(b), i.e., when "Batch Apply" is selected in the system settings (device settings).

[0066] The encryption level selection pull-down menu P18 is a pull-down menu that allows the user to select the encryption level they wish to apply. Although not shown in Figure 8(a), the encryption level selection pull-down menu P10 allows the user to select one of the following encryption levels: RC4 128-bit, AES 128-bit, or AES 256-bit.

[0067] The password input box Bx12 is an input box that accepts input of an encryption password used when encrypting the PDF as transmission data according to the encryption level selected via the encryption level selection pull-down menu P18. The input conditions for the encryption password may be changed depending on the encryption level selected via the encryption level selection pull-down menu P18.

[0068] The Execute button B16 is a button that accepts an execution instruction to collectively apply the encryption level selected via the encryption level selection pull-down menu P18 and the encryption password entered via the password input box Bx12 as encryption settings to data (PDF) to be sent to multiple destinations. When the control unit 11 accepts a selection instruction from the Execute button B16, it executes encryption of the send data. The control unit 11 may also execute transmission of the encrypted send data to multiple destinations. The Cancel button B18 is a button that accepts an instruction to cancel the selection instruction via the encryption level selection pull-down menu P18 and the input instruction via the password input box Bx12. When the control unit 11 accepts a selection instruction from the Cancel button B18, it ends the reception operation via the input screen W31, terminates the display of the input screen W31, and returns the display to the previous screen (in this case, the selection screen W30). As shown in FIG. 8, when the cancel button B18 displayed together with the (job) execution button is selected by the user, it is possible to cancel the job itself and display, for example, the initial screen of the email setting screen W20.

[0069] Fig. 8(b) is an example of the configuration of another input screen W33 that is displayed by the control unit 11 when the user selects the batch apply button B10 on the selection screen W30 illustrated in Fig. 7. The input screen W33 illustrated in Fig. 8(b) is an input screen that is displayed by the control unit 11 when the encryption level check box C10 is checked on the encryption setting screen W10 of Fig. 5(a) and the encryption level to be used for encryption has been selected in advance.

[0070] On the input screen W33 shown in Fig. 8(b), the encryption level to be used is preselected (limited), so the encryption level selection pull-down menu P18 for accepting the selection of the encryption level is not displayed, and the encryption level that is set (fixed) as the encryption level to be used is displayed (for example, AES 256 bit). The configurations of the password input box Bx12, the execute button B16, and the cancel button B18 can be the same as those in Fig. 8(a), so a description thereof will be omitted here.

[0071] 9 shows an example of the input screen W35 displayed by the control unit 11 when the user selects the Individual Apply button B12 on the selection screen W30 illustrated in FIG. 7. The input screen W35 includes a notification prompting the user to enter an encryption password for individually encrypting the PDF (transmission data) for one destination (e.g., aaa@example.com) among multiple destinations selected as the destination of the transmission data, such as "Please set the encryption to be applied to aaa@example.com." It also includes an encryption level selection pull-down menu P18, a password input box Bx12, a Next Destination button B20, a Cancel button B18, and an Apply All button B22. The configurations of the encryption level selection pull-down menu P18, the password input box Bx12, and the Cancel button B18 can be the same as those shown in FIG. 8(a) or 8(b), and therefore will not be described here.

[0072] The Next Destination button B20 is a button that accepts an instruction to display an input screen for setting encryption for the next destination included in the multiple destinations selected as destinations for transmission data. When the user selects the Next Destination button B20, the control unit 11 displays an input screen in which "aaa@example.com" included in the notification on the input screen W35 is replaced with the next destination (e.g., bbb@example.jp) for which encryption settings have not been set. The control unit 11 accepts encryption settings for the transmission data to be sent to the next destination via the displayed input screen and applies the accepted encryption settings to the transmission data to the next destination. Note that when the user selects the Next Destination button B20, and input and acceptance of encryption settings for all destinations specified as destinations for transmission data is completed, the control unit 11 displays the Execute button B16 instead of the Next Destination button B20 and the Apply All button B22, and can accept an instruction to execute the job. In addition, the input screens that the control unit 11 displays in response to the selection instruction of the Next Destination button B20 are the same as those for the input screen W39 of Figure 11, the input screen W41 of Figure 13, the input screen W43 of Figure 16, the input screen W47 of Figure 18, the input screen W49 of Figure 19, and the input screen W53 of Figure 21.

[0073] The Bulk Apply button B22 is a button that accepts a selection instruction for bulk application, which applies encryption settings to multiple pieces of transmission data collectively when there are multiple pieces of transmission data to which encryption settings are individually applied. When the user selects the Bulk Apply button B22, the control unit 11 displays an input screen for applying bulk application to the applicable destinations accepted via the applicable destination selection pull-down menu P14 on the encryption setting screen W12.

[0074] If the destinations to which the encryption settings are to be applied in bulk are not selected via the destination selection pull-down menu P14 on the encryption settings screen W12, the destinations to which the encryption settings are to be applied in bulk can be accepted, for example, via the destination selection screen W37 shown in Figure 10.

[0075] The application destination selection screen W37 illustrated in FIG. 10 includes a selection area R10 that accepts the selection of one or more of the following as targets to which encryption settings are to be applied collectively: a destination with a shared domain (shared domain), a group destination (group destination) that groups multiple destinations into a single destination, multiple specific destinations selected by the user (specific multiple destinations), or a destination related to a specific job type (specific job type), as well as a Set button B24 and a Cancel button B26. After selecting the desired application destination via the selection area R10, the user can collectively encrypt transmission data for the selected application destinations by selecting the Set button B24. The Cancel button B26 is a button that accepts an instruction to cancel the destination selection via the application destination selection screen W37. When the control unit 11 accepts the selection instruction of the Cancel button B26, it terminates the display of the application destination selection screen W37 and displays the previous screen (in this case, the input screen W35).

[0076] Incidentally, the batch application button B22 included in the input screen W35 of Figure 9 and the application destination selection screen W37 that is displayed upon receiving a selection instruction for the batch application button B22 can also be omitted if the application destinations to be subject to batch application are set in advance in the system settings (device settings).

[0077] Fig. 11 shows an example of the configuration of the input screen W39 displayed by the control unit 11 when a destination having a shared domain (shared domain) is selected as the destination to which encryption settings are to be applied collectively, and is an example of the operation corresponding to the processing of step S300 in Fig. 4. The input screen W39 includes an Apply to Same Domain button B28 instead of the Apply to All button B22 of the input screen W35 shown as an example in Fig. 9. The configuration other than the Apply to Same Domain button B28 can be the same as that of the input screen W35, and therefore a description thereof will be omitted here.

[0078] The Apply to Same Domain button B28 is a button that accepts an instruction to select destinations that have the same (shared) domain (@example.com) as "aaa@example.com" as destinations to which the encryption settings are to be applied in bulk. When an instruction to select the Apply to Same Domain button B28 is accepted, the control unit 11 displays an application confirmation screen W70, which will be described in the next figure.

[0079] 12 is a diagram illustrating an example of the configuration of the application confirmation screen W70. The application confirmation screen W70 includes a notification message "Do you want to apply the following settings to @example.com?", which indicates that the encryption settings will be applied collectively to all destinations with the same domain (@example.com) other than "aaa@example.com," the encryption level "RC4 128 bit" selected on the input screen W39, a password input box Bx12, a password display restriction icon I10, a Yes button B30, and a Cancel button B32.

[0080] The password input box Bx12 displays the encrypted password entered on the input screen W39 in obscured letters "****". The password display restriction icon I10 is an icon that accepts an instruction to display the encrypted password entered in the password input box Bx12. FIG. 12 shows the encrypted password entered in the password input box Bx12 in obscured letters (the icon's eye is crossed out). When the user selects the password display restriction icon I10, the icon's display state changes, and the encrypted password entered in the password input box Bx12 can be made visible (the icon's eye is crossed out; for example, see FIG. 15).

[0081] The Yes button B30 is a button that accepts an instruction to input an instruction to apply the encryption settings displayed on the application confirmation screen W70. Note that, once the input and acceptance of encryption settings for all destinations specified as the destination of transmission data has been completed, the control unit 11 displays the Execute button B16 in place of the Yes button B30, and can accept an instruction to execute the job. Note that the same applies to the Yes button B30 included in the application confirmation screen W72 of FIG. 15 and the Yes button B30 included in the password generation screen W74 of FIG. 22. The Cancel button B32 is a button that accepts an instruction to cancel the application of the encryption settings displayed on the application confirmation screen W70. When the control unit 11 accepts an instruction to select the Cancel button B32, it ends the display of the application confirmation screen W70 and displays the previous screen (in this case, the input screen W39).

[0082] Fig. 13 shows an example of the configuration of an input screen W41 displayed by the control unit 11 when a group destination (group destination), which groups multiple destinations into a single destination, is selected as the target for applying encryption settings collectively, and is an example of operation corresponding to the processing of step S320 in Fig. 4. The input screen W41 includes an Apply to destinations in group button B34 instead of the Apply all at once button B22 of the input screen W35 shown as an example in Fig. 9. The configuration other than the Apply to destinations in group button B34 can be the same as that of the input screen W35, and therefore will not be described here.

[0083] The Apply to Destinations in Group button B34 is a button that accepts an instruction to select a group destination, which is a group of multiple destinations grouped together, in addition to "aaa@example.com" as a destination to which the encryption setting is to be applied collectively. A specific example of a group destination will now be described with reference to FIG. 14.

[0084] Fig. 14 is a table illustrating an example of multiple destinations other than "aaa@example.com" that belong to group destination A (group A), which is an example of a group. Note that Fig. 14 illustrates an example in which multiple destinations that belong to a group are managed in table T10, but multiple destinations may also be managed in a database format.

[0085] Table T10 includes, as management items, destination name, type, address, and destination selection check box C12.

[0086] The destination name represents the destination names of multiple destinations belonging to the destination group A. Fig. 14 shows that the destinations belonging to the destination group A are represented by three destination names: "tanakasmb", "yamada_email", and "yamada_ftp".

[0087] The type indicates the type of communication protocol used by each destination or the functions conforming to that protocol, and the address indicates the address of the destination based on the type. For example, the destination indicated by the destination name "tanakasmb" has a type of shared folder (file sharing) conforming to the SMB communication protocol, and its address is \\B1234567L\Users\s987654\Desktop\tanakasmb.

[0088] The destination selection checkboxes C12 are checkboxes that accept the selection of destinations to be excluded from the application of encryption settings. By checking the destination selection checkbox C12 corresponding to each destination name, the user can exclude that destination from the collective application of encryption settings. Figure 14 shows that all destinations associated with the three destination names are subject to encryption settings.

[0089] 14 may be displayed on the display unit 13 when the user selects the Apply to destinations in a group button B34 on the input screen W41, or may be configured to accept the selection of destinations to be excluded from the collective application of encryption settings during system setup (device setup). Note that if settings have already been made during system setup, when an instruction to select button B34 is accepted on the input screen W41, the application confirmation screen W72 may be displayed without displaying table T10.

[0090] Figure 15 is a diagram illustrating an example of the configuration of the application confirmation screen W72 that is displayed on the display unit 13 when the Apply button B34 is selected for a destination within a group on the input screen W41, or after selecting a destination to exclude from the applicable destination in the table T10 illustrated in Figure 14.

[0091] The application confirmation screen W72 illustrated in Figure 15 can be configured in the same way as the application confirmation screen W70 illustrated in Figure 12, except for the notification ``Do you want to apply the following settings to other destinations in group destination A?'' that indicates that the encryption settings will be applied to all destinations belonging to group destination A at once, and therefore will not be explained here.

[0092] FIG. 15 also shows a state in which the password display restriction icon I10 is selected by the user, and the encrypted password entered in the password input box Bx12 is made visible.

[0093] Fig. 16 shows an example of the configuration of the input screen W43 displayed by the control unit 11 when multiple specific destinations are selected as targets for applying encryption settings collectively, and is an example of the operation corresponding to the processing of step S340 in Fig. 4. The input screen W43 includes a button B36 for applying to specific destinations collectively, instead of the button B22 for applying to all at once on the input screen W35 shown as an example in Fig. 9. The configuration other than the button B36 for applying to specific destinations collectively can be the same as that of the input screen W35, and therefore a description thereof will be omitted here.

[0094] The Apply to Specific Destinations All at Once button B36 is a button that accepts an instruction to select multiple specific destinations, including "aaa@example.com," as destinations to which the encryption settings will be applied all at once. When the instruction to select the Apply to Specific Destinations All at Once button B36 is accepted, the control unit 11 displays a destination selection screen W45, which will be described in the next figure.

[0095] The destination selection screen W45 includes a selection area R12 for accepting an instruction to select destinations as destinations to which encryption settings will be applied collectively, a Set button B24, and a Cancel button B26. After selecting the desired destinations via the selection area R12, the user can collectively encrypt the transmission data for the selected destinations by selecting the Set button B24. Note that FIG. 17 shows an example in which two addresses, "aaa@example.com" and "yamada_taro@example.com," have been selected as specific destinations. The Cancel button B26 is a button for accepting an instruction to cancel the destination selection via the destination selection screen W45. When the control unit 11 accepts an instruction to select the Cancel button B26, it terminates the display of the destination selection screen W45 and displays the previous screen (in this case, the input screen W43).

[0096] FIG. 18 is a diagram illustrating one configuration of the input screen W47 that is displayed on the display unit 13 when the setting button B24 on the destination selection screen W45 is selected.

[0097] The input screen W47 shown in Figure 18 as an example has the same configuration as Figure 16, etc., except for the notification "Please set the encryption settings to apply to multiple destinations" that prompts the user to enter PDF encryption settings to be applied to multiple destinations, and the explanation here is omitted, as it can be configured the same as Figure 16, etc., except for the button B36 to apply to specific destinations all at once. Note that if encryption settings are configured on the input screen W43 and the input screen W47 is displayed by selecting the button B36 to apply to specific destinations all at once, the encryption settings configured on the input screen W43 may be reflected in the display.

[0098] Figure 19 shows an example of the configuration of the input screen W49 that the control unit 11 displays when a destination related to a specific job type is selected as the applicable destination to which encryption settings are to be applied collectively, and is an example of the operation corresponding to the processing of step S350 in Figure 4. The input screen W49 includes a button B38 for applying to specific jobs collectively instead of the button B22 for applying to all at once on the input screen W35 shown as an example in Figure 9. The configuration other than the button B38 for applying to specific jobs collectively can be the same as that of the input screen W35, so a description thereof will be omitted here.

[0099] The Apply to Specific Jobs in Bulk button B38 is a button that accepts an instruction to select a specific job type as the destination to which the encryption settings will be applied in bulk. When the selection instruction of the Apply to Specific Jobs in Bulk button B38 is accepted, the control unit 11 displays a specific job type selection screen W51, which will be described in the next figure.

[0100] The specific job type selection screen W51 includes a selection area R14 that accepts an instruction to select a specific job type as the destination to which the encryption settings will be applied collectively, a Set button B24, and a Cancel button B26. After selecting the desired job type via the selection area R14, the user can collectively encrypt transmission data for destinations related to the selected job type by selecting the Set button B24. Note that FIG. 20 shows an example in which the user has selected two job types, "E-mail" and "FTP," as specific job types. The Cancel button B26 is a button that accepts an instruction to cancel the job type selection via the specific job type selection screen W51. When the control unit 11 accepts an instruction to select the Cancel button B26, it terminates the display of the specific job type selection screen W51 and displays the previous screen (in this case, the input screen W49).

[0101] Fig. 21 shows an example of the configuration of the input screen W53 that the control unit 11 displays when generating a one-time password during encryption setup, such as when the user selects the Individual Apply button B12 on the selection screen W30 illustrated in Fig. 7. The input screen W53 includes a password generation button B40 instead of the Bulk Apply button B22 on the input screen W35 illustrated in Fig. 9. The configuration of the input screen W53 other than the password generation button B40 can be the same as that of the input screen W35, and therefore will not be described here.

[0102] The Generate Password button B40 is a button that accepts input of an instruction to automatically generate a one-time password related to the encryption setting. When the Generate Password button B40 is selected and an instruction is accepted, the control unit 11 displays a password generation screen W74, which will be described in the next figure (FIG. 22).

[0103] The password generation screen W74 can be configured in the same way as the application confirmation screens W70, W72, etc. illustrated in Figures 12 and 15, etc., except for the notification "A password has been generated. Do you want to apply it?" asking whether or not to apply the generated password to the encryption settings and the regeneration button B42, so a description thereof will be omitted here.

[0104] The Regenerate button B42 is a button for accepting an instruction to regenerate a one-time password. When an instruction to regenerate is accepted through the Regenerate button B42, the control unit 11 generates a new one-time password.

[0105] When the Yes button B30 is selected, the control unit 11 applies the encryption setting to the transmission data, transmits the encrypted transmission data, and when transmission of the encrypted transmission data is completed, transmits the set one-time password to the notification destination entered in the password notification destination input box Bx10 on the encryption setting screen W14. Note that the generated one-time password may be displayed on the display unit 13 as a QR code (registered trademark), for example, and the QR code (registered trademark) may be read by a terminal device or the like.

[0106] As described above, according to the first embodiment, the encryption settings, such as the selection of the encryption level for the transmission data and the setting of the encryption password, can be encrypted based on either a batch application, in which the encryption settings are applied collectively to the transmission data for multiple destinations, or an individual application, in which the encryption settings are applied individually to the transmission data for each of the multiple destinations, thereby improving the operability of the encryption settings for the transmission data. Also, in the first embodiment, the application settings, either batch application or individual application, can be selected for each job (user setting), allowing the user to easily set the desired encryption settings.

[0107] Furthermore, according to the first embodiment, even after selecting individual application, it is possible to apply encryption settings collectively to at least some of the other multiple destinations in addition to the destination to which the individual application is applied, thereby ensuring convenience when setting encryption for transmission data even for users who want to apply encryption settings individually to multiple destinations.

[0108] [2 Second Embodiment] In the second embodiment, when encryption settings are applied individually, the destinations to which the encryption settings are applied collectively are set by combining destinations that share a domain, a group destination that combines multiple destinations into one destination, multiple specific destinations, and destinations related to a specific job type. Note that these combinations can be set in advance in the system settings, or can be set on the operation screen for each job.

[0109] In the second embodiment, for example, the applicable destinations to which encryption settings are collectively applied can be set as a combination of a destination with a shared domain and a destination related to a specific job type. Note that the combination of applicable destinations is not limited to a destination with a shared domain and a destination related to a specific job type, but may also be a combination of a group destination and multiple specific destinations. The combination of applicable destinations to which encryption settings are collectively applied can be set and changed as appropriate by the user.

[0110] As described above, according to the second embodiment, in addition to the effects of the first embodiment, the applicable destinations to which encryption settings are applied collectively can be set by a combination of destinations with a shared domain, a group destination that combines multiple destinations into one destination, multiple specific destinations, or destinations related to a specific job type, thereby further expanding the freedom of selection of applicable destinations for encryption settings.

[0111] The present disclosure is not limited to the above-described embodiments, and various modifications are possible. In other words, embodiments obtained by combining technical means that are appropriately modified within the scope of the gist of the present disclosure are also included in the technical scope of the present disclosure.

[0112] Furthermore, although the above-described embodiments are described separately for the sake of convenience, they may of course be combined and executed within the scope of technical feasibility.

[0113] In addition, the programs that run on each device in the embodiments are programs that control the CPU, etc. (programs that make a computer function) so as to realize the functions of the above-described embodiments. Information handled by these devices is temporarily stored in a temporary storage device (e.g., RAM) during processing, and then stored in various storage devices such as ROMs (Read Only Memories) and HDDs, and is read, modified, and written by the CPU as needed.

[0114] Here, the computer-readable non-transitory recording medium on which the program is recorded in the information processing device may be any of semiconductor media (e.g., ROM, non-volatile memory card, etc.), optical recording media / magneto-optical recording media (e.g., DVD (Digital Versatile Disc), MO (Magneto Optical Disc), MD (Mini Disc), CD (Compact Disc), BD (Blu-ray (registered trademark) Disc, etc.)), magnetic recording media (e.g., magnetic tape, flexible disk, etc.). In this case, the program recorded on the recording medium is read by the computer of the information processing device and executed by the computer, thereby realizing not only the functions of the above-mentioned embodiments, but also the functions of the present disclosure, which are realized by processing in cooperation with an operating system or other application programs, etc., based on instructions from the program.

[0115] Furthermore, when distributing the program on the market, the program can be stored in a portable recording medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server computer is of course also included in the present disclosure.

[0116] Additionally, each functional block or feature of the device used in the above-described embodiments may be implemented or performed by an electrical circuit, such as an integrated circuit or multiple integrated circuits. The electrical circuit designed to realize the functions described herein may include a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or a combination thereof. The general-purpose processor may be a microprocessor, or a conventional processor, controller, microcontroller, or state machine. The electrical circuit may be composed of digital circuits or analog circuits. Furthermore, as advances in semiconductor technology emerge, one or more aspects of the present disclosure may utilize new integrated circuits based on that technology. [Explanation of symbols]

[0117] 10 Multifunction device 11 Control section 13 Display section 15 Operation input section 17 Communications Department 19 Memory section 191 Control Program 192 Display Control Program 193 Job Control Program 194 Encryption Program 1941 Encryption Applicability Assessment Program 195 Setting information storage area 196 Destination information storage area 197 Screen information storage area 198 Job Storage

Claims

1. a transmitting unit that transmits transmission data to a specified destination; a control unit that controls encryption of the transmission data based on an encryption setting set by a user; The control unit encrypting the transmission data based on an application setting of either a batch application in which the encryption setting is applied collectively to the transmission data for the plurality of destinations or an individual application in which the encryption setting is applied individually to the transmission data for the plurality of destinations; The transmission unit The image processing apparatus transmits the encrypted transmission data to the plurality of destinations.

2. The control unit 2. The image processing apparatus according to claim 1, wherein the application setting is any one of the collective application, the individual application, and a user setting that allows selection of the collective application or the individual application as the apparatus setting.

3. The control unit 3. The image processing apparatus according to claim 2, wherein the application setting is one of the collective application, the individual application, and the user setting, and is accepted as the apparatus setting for each user.

4. A display unit is provided, The control unit 3. The image processing device according to claim 2, wherein when the user setting is selected as the device setting, a selection screen is displayed on the display unit to accept the selection of the application setting, either the batch application or the individual application.

5. The control unit 5. The image processing apparatus according to claim 4, wherein an input screen for accepting input of at least an encryption level and an encryption password as the encryption settings is displayed on the display unit in accordance with a selection result accepted via the selection screen.

6. The control unit The image processing device according to claim 5, characterized in that, when the individual application is selected as the application setting, the encryption setting received via the input screen is applied collectively to the transmission data for at least some of the multiple destinations.

7. At least some of the destinations include:

7. The image processing apparatus according to claim 6, wherein the destinations include at least one of a destination having a shared domain, a group destination in which a plurality of the destinations are grouped together as one destination, a plurality of specific destinations, or a destination related to a specific job type.

8. Controls encryption of transmitted data based on encryption settings set by the user, encrypting the transmission data based on an application setting of either a batch application in which the encryption setting is applied collectively to the transmission data for the plurality of destinations or an individual application in which the encryption setting is applied individually to the transmission data for the plurality of destinations; an encryption setting method for transmitting the encrypted transmission data to the plurality of destinations;

Images