Printing apparatus, method for controlling a printing apparatus, information processing apparatus, method for controlling an information processing apparatus, and program

The printing apparatus improves security by controlling and restricting operations on specific jobs, including disabling the standard document printing function and deleting template jobs, effectively preventing information leakage in mobile printers.

JP2026078805APending Publication Date: 2026-05-15CANON KK
View PDF 1 Cites 0 Cited by

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
CANON KK
Filing Date
2024-10-29
Publication Date
2026-05-15

AI Technical Summary

Technical Problem

There is a need for enhanced security in printing devices, particularly mobile printers, to prevent information leakage when template jobs containing confidential information are stored and to allow disabling the standard document printing function without requiring firmware updates.

Method used

A printing apparatus with control means to receive, store, and restrict operations on specific jobs, including disabling the standard document printing function, and delete template jobs from non-volatile memory, with remote UI authentication for operation restrictions.

Benefits of technology

Enhances security by preventing storage and access to template jobs with confidential information, reducing the risk of information leakage and eliminating the need for firmware updates.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2026078805000001_ABST
    Figure 2026078805000001_ABST
Patent Text Reader

Abstract

Further improvements in security for printing equipment. [Solution] The printing device includes: receiving means for receiving print jobs; storage control means for storing the received specific job in non-volatile memory if the received print job is a specific job that includes an instruction to store the print job in the printing device; operation means for accepting operations on the specific job stored in non-volatile memory; setting means capable of disabling operations related to the specific job; and control means for restricting operations related to the specific job, including control for deleting the specific job stored in non-volatile memory based on the setting means disabling operations related to the specific job.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to a printing apparatus, a control method of the printing apparatus, an information processing apparatus, a control method of the information processing apparatus, and a program.

Background Art

[0002] A printing apparatus has a function that enables storing a print job received from a host computer in a non-volatile memory and reading it out at a desired timing, which is called box printing or the like.

[0003] Patent Document 1 discloses a technique for deleting or moving related data (e.g., a print job) when a componentized program for providing a box printing function is deleted.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] Further improvement in security in a printing apparatus is required.

Means for Solving the Problems

[0006] A printing apparatus according to one aspect of the present disclosure is characterized by comprising: receiving means for receiving a print job; storage control means for performing control to store the received specific job in a non-volatile memory if the received print job is a specific job that includes an instruction to store the print job in the printing apparatus; operation means for accepting operations on the specific job stored in the non-volatile memory; setting means capable of disabling operations related to the specific job; and control means for performing control to restrict operations related to the specific job, including control to delete the specific job stored in the non-volatile memory based on the setting means disabling operations related to the specific job. [Effects of the Invention]

[0007] This disclosure makes it possible to further improve security in printing devices. [Brief explanation of the drawing]

[0008] [Figure 1] This is a diagram showing an example of a host computer configuration. [Figure 2] This is a diagram showing an example of a printer configuration. [Figure 3] This is a schematic diagram illustrating an example of a template job. [Figure 4] This diagram shows the screen transitions displayed on the printer's display unit. [Figure 5] This diagram shows the transitions between the remote UI operation screens. [Figure 6] This flowchart shows an example of the process for changing the settings of the standard document printing function. [Figure 7] This figure shows an example of an operation restriction screen displayed on the printer's display unit. [Figure 8] This figure shows an example of the transitions in the printer driver's print settings screen. [Figure 9] This flowchart shows an example of the processing that occurs when a template job is received. [Modes for carrying out the invention]

[0009] Preferred embodiments of this disclosure will be described in detail below with reference to the attached drawings. Note that the following embodiments are not limiting to the scope of this disclosure, and not all combinations of features described in the following embodiments are essential to the solutions of this disclosure. The same reference numerals are used for identical components.

[0010] <<First Embodiment>> <Overview> This embodiment describes an example of improving security in a printing device (hereinafter also referred to as a printer). As mentioned above, there is a function called box printing that allows the printing device to store print jobs received from a host computer in non-volatile memory and read them at a desired time. In this embodiment, the box printing function installed in the printer is referred to as the standard document printing function, and the print jobs handled by the standard document printing function are referred to as template jobs or specific jobs.

[0011] As mentioned earlier, a technique has been proposed to delete associated data when deleting the program for the modularized box print function, but there is still room for further improvement in terms of security. For example, as an example of a printing device, mobile printers that are portable and battery-powered have become popular in recent years. When using such mobile printers, further improvements in security are required. For example, if a mobile printer containing template jobs with confidential information is carried around and lost, there is a risk that the confidential information may be leaked. Considering this point, it is necessary to make it possible to disable the standard document printing function itself, which is a function installed in mobile printers.

[0012] On the other hand, in the mobile printer, there may be a case where the user wants to use the fixed-form document printing function again. If the fixed-form document printing function is deleted in such a case, it will be necessary to update the firmware itself in order to use the fixed-form document printing function again, which will cause some trouble.

[0013] Therefore, in this embodiment, an example of enabling the invalidation of the fixed-form document printing function itself will be described. Here, even when the fixed-form document printing function itself is invalidated, there is a risk that confidential information may leak in a state where a template job containing confidential information is stored. Usually, if the fixed-form document printing function is invalidated, although it is not possible to access the template job itself accessed by the function, if data exists, there may be a risk of information leakage.

[0014] In this embodiment, an example of enabling the invalidation of the fixed-form document printing function and invalidating the storage of the template job when the fixed-form document printing function is invalidated will be described. To invalidate the storage of the template job means, for example, performing storage control such as deleting an already stored template job or not accepting the storage of a new template job. An example of suppressing the risk of information leakage and improving security will be described.

[0015] Incidentally, here, the mobile printer is used as an example for the explanation, and in the explanation of the embodiments described below, the printing device will also be described as a mobile printer. However, the printing device described in this embodiment is not limited to a mobile printer.

[0016] <Configuration> Figure 1 shows an example of the configuration of a host computer 100. The host computer 100 has a CPU 101, HDD 102, RAM 103, operation unit 104, display unit 105, wired digital interface 106, and wireless LAN interface 107. These components are connected by a bus 108. The host computer 100 can be any information processing device, and specifically, it may be a general PC (Personal Computer) or a mobile device such as a smartphone or tablet.

[0017] The CPU 101 is the CPU that controls the entire device. The HDD 102 is a hard disk that stores various programs and other data. Note that other types of non-volatile storage devices (e.g., flash memory) may be used instead of the HDD 102. The RAM 103 is RAM used as a program load area and a work area for the CPU 101. The operation unit 104 is an input device that receives input from the user. The display unit 105 is a display device that displays various information. A touch panel display, for example, in which the operation unit 104 and the display unit 105 are integrated, may be used.

[0018] The wireless LAN interface 107 is a communication interface that supports standards such as IEEE 802.11a. The host computer 100 can connect to an IP (Internet Protocol) network via the wireless LAN interface 107. Furthermore, the wireless LAN interface 107 also functions as a wireless LAN access point, and this function can be used to connect to a printer 200 equipped with a wireless LAN interface 208. The wired digital interface 106 is a digital interface such as USB, IEEE 1394, or HDMI (registered trademark), and is used to connect to external devices via a wired connection. If the printer 200 has a compatible interface, it is also possible to connect to the printer 200 using the wired digital interface 106 instead of the wireless LAN interface 107.

[0019] Note that, as an example of the connection between the host computer 100 and the printer 200, an example in which the host computer 100 has a function as a wireless LAN access point has been described. However, the connection form in the present embodiment is not limited to the above, and various connection forms can be applied. For example, the printer 200 may have a function as a wireless LAN access point. Alternatively, the host computer 100 and the printer 200 may be connected via a router (not shown). This router may be any one used for connecting the host computer 100 and the printer 200.

[0020] The program executed by the CPU 101 may be installed in advance in the HDD 102 or an alternative non-volatile memory (not shown). Alternatively, a program provided via a network may be used.

[0021] FIG. 2 is a diagram mainly showing an example of the configuration of the printer 200. The printer 200 includes a CPU 201, a ROM 202, a RAM 203, an operation unit 204, a display unit 205, a recording unit 206, and an image processing unit 207. The printer 200 also includes a wireless LAN interface 208, a wired digital interface 210, a battery unit 211, and a non-volatile memory 212. These are interconnected via a bus 209.

[0022] The CPU 201 is a CPU that controls the entire device. The ROM 202 is a ROM that stores programs. The RAM 203 is a RAM used as a work area for the CPU 201. The CPU 201 executes the programs stored in the ROM 202 and controls various functions provided by the printer 200.

[0023] The wireless LAN interface 208 can communicate with wireless LAN access points that support standards such as IEEE 802.11a. The printer 200 can communicate with other devices using the TCP / IP protocol via the wireless LAN interface 208. The printer 200 can also communicate with the host computer 100, which functions as a wireless LAN access point. The wired digital interface 210 is a digital interface such as USB, IEEE 1394, or HDMI, and is used to connect to external devices via a wired connection. If the host computer 100 has a compatible interface, it is also possible to connect to the host computer 100 using the wired digital interface 210 instead of the wireless LAN interface 208.

[0024] The host computer 100 is equipped with a printer driver 150 that, upon receiving a print command from a user, can send a print job containing image information to be printed and print settings such as print quality to the printer 200. The printer driver 150 is a program stored in the host computer 100's HDD 102 or elsewhere, and the CPU 101 functions as the printer driver 150 by reading the program from the HDD 102 into RAM 103 and executing it. When the print job generated by the printer driver 150 is sent from the host computer 100 to the printer 200, the printer 200 receives the print job via the wireless LAN interface 208 and stores the data related to the print job in RAM 203.

[0025] The image processing unit 207 reads image data from the RAM 203 and performs various image processing operations. For example, the image processing unit 207 performs various image processing operations such as decoding, image analysis, conversion from luminance signals (RGB) to density signals (CMYK), scaling, gamma conversion, and halftoning, which are compatible with various image data formats. The image processing unit 207 generates printable image data (hereinafter referred to as print data) through image processing and writes it to the RAM 203.

[0026] When the print data stored in RAM 203 reaches a predetermined amount, the recording unit 206 performs a recording operation. The recording unit 206 reads the print data stored in RAM 203 under the control of CPU 201 and outputs it as a hard copy. The recording unit 206 includes a control unit for a paper transport motor, a control unit for a head equipped with ink ejection nozzles, and a control unit for a motor that moves the head position.

[0027] The control unit 204 allows the user to turn the printer 200 on or off, and cancel print jobs, etc., through key input. The display unit 205 notifies the user of the progress of the print job and any errors such as paper jams. The control unit 204 and the display unit 205 may be configured as an integrated unit. The non-volatile memory 212 stores the data for the template job 301 shown in Figure 3, which will be described later. The battery unit 211 supplies power to the printer 200. The printer 200 in this embodiment is a mobile printer configured to continue operating even if there is no external power supply, as the battery unit 211 will supply power.

[0028] Figure 3 is a schematic diagram showing an example of a template job. Template job 301 is a type of print job, and like the print jobs described above, it contains print settings 302, image A303, and image B304 as print setting information and image information. Note that the example of template job 301 shown in Figure 3 is just one example, and template jobs are not limited to those shown in Figure 3. Template job 301 is generated by the printer driver 150, like the print jobs described above, and is temporarily stored in RAM 203 via the wireless LAN interface 208. Among print jobs, a unique characteristic of template jobs is that a parameter indicating that it should be saved as a template job is attached to the job. Template job 301 differs from other print jobs in that it is stored in non-volatile memory 212 from RAM 203 of the printer 200. In other words, after a print job sent from the printer driver 150 is stored in RAM 203, if it is a template job with a parameter indicating it is a template job, it is further sent from RAM 203 to non-volatile memory 212 and stored there.

[0029] The template job 301 is not deleted from the non-volatile memory 212 until it is instructed to be deleted from the printer 200's operation unit 204 or the host computer 100's operation unit 104. In this embodiment, the template job 301 can also be deleted from the non-volatile memory 212 based on an operation to disable the standard document printing function, which will be described later. When the operation unit 204 receives an instruction to select and print one template job 301, the template job is stored in the RAM 203 from the non-volatile memory 212. Thereafter, it is recorded and output as a hard copy by the image processing unit 207 and the recording unit 206, just like other print jobs. Note that while normal print jobs are deleted from the printer 200 after the printing process is completed, template jobs are deleted from the RAM 203 after the printing process is completed, but not from the non-volatile memory 212.

[0030] Figure 4 shows the screen transitions displayed on the display unit 205 of the printer 200 for operating the template job 301. The screen transitions shown in Figure 4 are controlled by the CPU 201 of the printer 200. The function selection screen 410 is a screen for selecting various functions of the printer 200. When the template job print button 411 is pressed on the function selection screen 410, the display unit 205 transitions to the template job selection screen 420. On the template job selection screen 420, the user can select any template job from the template jobs stored in the non-volatile memory 212. When the selection of a template job is accepted on the template job selection screen 420, the display unit 205 transitions to the template job operation selection screen 430.

[0031] The template job operation selection screen 430 is configured to accept the selection between a print operation and a printable copy display operation. Although not shown in the diagram, the template job operation selection screen 430 is also configured to accept the operation to delete a template job.

[0032] When the print button 431 is pressed on the template job operation selection screen 430, the display unit 205 transitions to the print quantity selection screen 450. On the print quantity selection screen 450, an area 451 for specifying the number of copies is displayed, and the user can set the desired number of copies by specifying the area 451. When the print start button 452 is pressed, the printing process for the number of copies set in area 451 is performed using the image processing unit 207 and the recording unit 206, and the output is recorded as a hard copy.

[0033] When the printable copies button 432 is pressed on the template job operation selection screen 430, the display unit 205 transitions to the printable copies display screen 440. The printable copies display screen 440 displays the number of copies of the selected template job that can be printed. As mentioned above, the printer 200 in this embodiment is a mobile printer with a battery unit 211. Therefore, the number of copies when charging using an external power supply and the number of copies when using the battery with the battery unit 211 as the power source are displayed. When the back button 441 is pressed, the display unit 205 transitions to the template job operation selection screen 430.

[0034] Figure 5 shows the transition of the remote UI operation screen displayed on the display unit 105 of the host computer 100. The remote UI is software that allows access to the printer 200 from the host computer 100 via the network using a web browser. The remote UI is different software from the printer driver 150. By using the remote UI, it is possible to perform operations equivalent to those on the printer 200's operation panel (operation unit 204), such as checking the status of the printer 200 and making various settings.

[0035] In this embodiment, the operation restriction of the standard document printing function is configured to be performed via a remote UI. That is, as explained in Figure 4, the operation restriction of the standard document printing function cannot be performed through the function selection screen 410 of the printer 200, but is configured to be performed via the remote UI. Unlike the display unit 205 of the printer body, the remote UI has a security guard function using password authentication. The reason for configuring the system to allow operation restriction of the standard document printing function via the remote UI is to ensure that only administrator users who know the password can switch the operation restriction of the standard document printing function on or off. The display unit 205 of the printer body usually does not use password authentication to improve user convenience. Therefore, if the operation restriction menu for the standard document printing function is also placed on the display unit 205 of the printer 200, it would be possible to restrict the operation of the standard document printing function without password authentication protection. In other words, since it would be impossible to distinguish between administrator users and general users, there is a concern that the operation restriction settings may be changed without the administrator user's intention. Therefore, in this embodiment, the system is configured to restrict the operation of the standard document printing function through a remote UI that has a security guard function using password authentication.

[0036] The screen transitions shown in Figure 5 are controlled by the CPU 101 of the host computer 100. The remote UI top screen 510 is an example of a screen displayed on the display unit 105 of the host computer 100 when the host computer 100 connects the printer 200 and the remote UI. The remote UI top screen 510 includes an area showing the status of the printer 200 and an area showing the ink amount (ink level). The remote UI top screen 510 includes a logon button 511. When the logon button 511 is pressed, the display unit 105 of the host computer 100 transitions to the remote UI password input screen 520. When a password is entered in the password input area 521 on the remote UI password input screen 520 and the OK button 522 is pressed, the remote UI authentication process is performed. If authentication is successful, the display unit 105 transitions to the remote UI menu screen 530.

[0037] The remote UI menu screen 530 contains various menus. When a selection is made for security settings 531, the display unit 105 transitions to the remote UI security screen 540. The remote UI security screen 540 contains various security setting items. When a selection is made for operation restrictions 541 on the remote UI security screen 540, the display unit 105 transitions to the remote UI operation restriction screen 550.

[0038] On the Remote UI Operation Restriction Screen 550, the user can switch the operation restriction of the standard document printing function on and off. The standard document printing item on the Remote UI Operation Restriction Screen 550 includes a checkbox 551. When checkbox 551 is checked and the OK button 552 is pressed, the operation restriction of the standard document printing function is set to ON. When checkbox 551 is unchecked, or when it is unchecked from a checked state and the OK button 552 is pressed, the operation restriction of the standard document printing function is set to OFF. Setting the operation restriction of the standard document printing function to ON means that the standard document printing function is disabled, i.e., the standard document printing function is disabled. Setting the operation restriction of the standard document printing function to OFF means that the standard document printing function is enabled, i.e., the standard document printing function is enabled. In this embodiment, when the operation restriction for the standard document printing function is set to ON, the printer 200 deletes jobs related to the standard document printing function (i.e., template jobs) from the non-volatile memory 212. In this embodiment, when the printer 200 deletes template jobs from the non-volatile memory 212 based on the operation restriction for the standard document printing function being set to ON, the deletion is performed without contacting or notifying the user. However, when the operation restriction for the standard document printing function is OFF and a template job is deleted via the operation unit 204 of the printer 200, in this embodiment, a notification asking the user whether it is OK to delete the job is displayed on the display unit 205 of the printer 200.

[0039] Thus, when the checkbox 551 is checked on the remote UI operation restriction screen 550 and the OK button 552 is pressed, the standard document printing function is disabled and the template job is deleted from the non-volatile memory 212. When the standard document printing function is disabled, the printer 200 is configured not to store template jobs in the non-volatile memory 212. As will be described later, if the printer 200 can notify the printer driver 150 of its status, it notifies the printer driver 150 that the standard document printing function is disabled and controls the printer driver 150 not to send template jobs. Also, if the printer 200 cannot notify the printer driver 150 of its status, it discards template jobs sent from the printer driver 150.

[0040] Furthermore, when the standard document printing function is disabled, if the checkbox 551 is unchecked on the remote UI operation restriction screen 550 and the OK button 552 is pressed, the standard document printing function will be enabled. After the standard document printing function is enabled, when a template job is sent to the printer 200, the printer 200 stores the template job in the non-volatile memory 212.

[0041] Figure 6 is a flowchart showing an example of the process for changing the settings of the standard document printing function. The process shown in the flowchart in Figure 6 is realized when the CPU 201 of the printer 200 reads a program stored in ROM 202, etc., into RAM 203 and executes it. Note that some or all of the functions of the steps in Figure 6 may be realized by hardware such as an ASIC or electronic circuit. The symbol "S" in the description of each process means that it is a step in the flowchart (the same applies to flowcharts in this specification hereafter). The process shown in the flowchart in Figure 6 is started when the printer 200 accepts a remote UI connection from the host computer 100 and the OK button 552 on the remote UI operation restriction screen 550 in Figure 5 is pressed.

[0042] In S601, CPU201 checks the current operational restriction status of the standard document printing function. If it determines that the standard document printing function is currently restricted (i.e., disabled), CPU201 proceeds to S602. If it determines that the function is not restricted (i.e., enabled), CPU201 proceeds to S604.

[0043] In S602, CPU201 determines whether to release the operation restriction. That is, CPU201 determines whether the OK button 552 was pressed while the checkbox 551 was unchecked. If it determines to release the operation restriction, CPU201 proceeds to S603. If it determines not to release the operation restriction, CPU201 terminates the process shown in the flowchart in Figure 6. That is, if no instruction to release the operation restriction is received while the operation restriction is in place, the operation restriction will continue, and CPU201 terminates the process shown in the flowchart in Figure 6.

[0044] In S603, CPU201 changes the operation restriction to off. That is, it switches the standard document printing function from disabled to enabled. For example, it enables the storage of new template jobs in the non-volatile memory 212. Also, on the function selection screen 410 of the printer 200, it enables the control to transition to the template job selection screen 420 when the template job print button 411 is pressed. As will be described later, these are the functions and screens that are restricted when the operation restriction of the standard document printing function is turned on. When the function restriction is turned off, the printer 200 enables these functions and screens. Then, CPU201 terminates the processing of the flowchart shown in Figure 6.

[0045] In S604, if it is determined that the operation is not restricted, the CPU 201 determines whether to set an operation restriction. That is, the CPU 201 determines whether the OK button 552 was pressed while the checkbox 551 was checked. If it is determined that an operation restriction should be set, the CPU 201 proceeds to S605. If it is determined that an operation restriction should not be set, the CPU 201 terminates the process shown in the flowchart in Figure 6. That is, if it does not receive an instruction to set an operation restriction while the operation is not restricted, the CPU 201 terminates the process shown in the flowchart in Figure 6 in order to maintain the state where no operation restriction is applied.

[0046] In S605, CPU201 changes the operation restriction to ON. That is, it switches the standard document printing function from enabled to disabled. Next, in S606, CPU201 deletes the template jobs stored in non-volatile memory 212. It also disables the storage of new template jobs in non-volatile memory 212. An example of disabling the storage of template jobs in non-volatile memory 212 will be described later. Turning on the operation restriction of the standard document printing function can be presumed to be an indication that the user does not want to intentionally store template jobs in the printer itself. For this reason, template jobs that were already stored in non-volatile memory 212 should not remain in the printer, so the process of deleting them is performed. In addition, on the function selection screen 410 of the printer 200, the control that transitions to the template job selection screen 420 when the template job print button 411 is pressed is disabled. Then, CPU201 terminates the processing of the flowchart shown in Figure 6.

[0047] In this embodiment, a screen is not displayed to notify the user that the template job will be deleted when the operation restriction of the standard document printing function is switched from off to on. However, the printer 200 may display a screen on the display unit 205 to ask the user if there is a problem with the template job being deleted before the operation restriction is switched from off to on. Alternatively, the printer 200 may display a screen on the display unit 205 to notify the user that the template job has been deleted after the operation restriction has been switched from off to on. The printer 200 may then be configured to delete the template job after the notification. Furthermore, if the notification screen is a screen that requests confirmation from the user, the printer 200 may be configured to delete the template job after obtaining user confirmation.

[0048] Similarly, a message informing the user that the template job will be deleted may be displayed on the remote UI screen. For example, on the remote UI operation restriction screen 550, if the OK button 552 is pressed with the checkbox 551 newly checked, a message informing the user that the template job will be deleted may be displayed.

[0049] Figure 7 shows an example of an operation restriction screen displayed on the display unit 205 of the printer 200. The function selection screen 410 is the same as the example described in Figure 4. When the operation restriction for the standard document print function is turned on, and the template job print button 411 is pressed, the display unit 205 transitions to the operation restriction screen 710 shown in Figure 7, instead of the template job selection screen 420 shown in Figure 4. On the operation restriction screen 710, a message 711 is displayed indicating that the operation is being restricted.

[0050] Figure 8 shows an example of the transitions in the print settings screen of the printer driver 150 running on the host computer 100. In this embodiment, the host computer 100 is unable to obtain the restriction status of the standard document printing function on the printer 200. One example of when the restriction status cannot be obtained is when one-way communication is set in the settings of the printer driver 150. When one-way communication is set, communication for job execution from the printer driver 150 to the printer 200 is possible, but communication for status responses from the printer 200 to the printer driver 150 is not possible.

[0051] Thus, if the printer driver 150 is unable to obtain the restricted status of the printer 200's standard document printing function, and receives a command from the user to save a template job, the printer driver 150 will notify the user of a predetermined message. The warning screen 820 in Figure 8 is an example of such a predetermined message.

[0052] The print settings screen 810 shown in Figure 8 includes a checkbox 811 labeled "Save as a standard document to the printer" to receive instructions to save a template job. When this checkbox 811, which functions as a reception unit, is checked, the printer driver 150 displays a warning screen 820 regarding the storage of the template job. The warning screen 820 displays a message prompting the user to confirm that the template job has been saved, such as "After printing, please check the printer to confirm that it has been saved." The message is not limited to this example; any message that notifies the user that the template job may not be saved and prompts them to confirm that the template job has been saved is acceptable. This warning screen 820 is output regardless of the setting of the standard document printing function's limitations. That is, whether the standard document printing function's limitations are on or off, the warning screen 820 is displayed when the checkbox 811 is checked. When the OK button 822 is pressed on the warning screen 820, the display unit 105 transitions to the print settings screen 830. The print settings screen 830 is the settings screen that appears after the checkbox 811 has been checked on the print settings screen 810.

[0053] When the OK button is pressed with checkbox 811 checked, the printer driver 150 sends a print job to the printer 200 with parameters indicating that it is a template job. That is, a print job including an instruction to store the template job in the printer 200 is sent to the printer 200. This template job is sent from the printer driver 150 to the printer 200 regardless of the setting of the restriction on the standard document printing function. As mentioned above, this is because the printer driver 150 in this embodiment cannot obtain the restriction status of the standard document printing function in the printer 200. The above is an example of how the printer driver 150 handles cases where it cannot obtain the restriction status of the standard document printing function in the printer 200.

[0054] Furthermore, if the host computer 100 can obtain the restriction status of the printer 200's standard document printing function, it may perform a different process than the example described above. For example, the printer driver 150 or other software running on the host computer 100 may notify the user of the restriction status of the printer's standard document printing function. That is, if the restriction on the standard document printing function is on, the printer driver 150, etc., may be configured to notify the user that the standard document printing function is disabled, and to notify the user that the standard document printing function is disabled if the restriction is off. Alternatively, the host computer 100 may control the system so that it cannot instruct the user to store a template job in the printer on the print settings screen 810 if the restriction on the standard document printing function is on. Specifically, the checkbox 811 may be configured so that it cannot be checked, for example, by graying it out. Then, the host computer 100 may perform control to notify the user that the standard document printing function is disabled.

[0055] Figure 9 is a flowchart illustrating an example of the processing performed when a template job is received by the printer 200. The processing shown in the flowchart in Figure 9 is also achieved when the CPU 201 of the printer 200 reads a program stored in ROM 202, etc., into RAM 203 and executes it. The processing shown in the flowchart in Figure 9 is initiated when the printer 200 receives a template job 301 issued by the printer driver 150 and transmitted via the wireless LAN interface 208, etc.

[0056] In S901, CPU201 checks the status of the operation restriction for the standard document printing function. If the standard document printing function is under operation restriction (operation restriction on), CPU201 proceeds to S902. If it is not under operation restriction, CPU201 proceeds to S904.

[0057] First, we will explain the normal case, when operation is not restricted. In S904, the CPU 201 stores the received template job that triggered the processing of this flowchart in the non-volatile memory 212. Subsequently, in S905, the CPU 201 notifies the user that the template job has been stored. For example, the CPU 201 displays a screen (not shown) on the display unit 205 that includes a notification indicating that the template job has been stored. Then, the CPU 201 terminates the processing of the flowchart shown in Figure 9. When the printer 200 stores a template job, it becomes selectable as a template job on the template job selection screen 420 in Figure 4. Then, as shown in Figure 4, it becomes possible to receive operation instructions for that template job.

[0058] Next, we will explain the processing during the operation restriction. In S902, CPU201 performs a process to discard the received template job that triggered the processing in this flowchart. Subsequently, in S903, CPU201 displays a screen (not shown) on display unit 205 that includes a notification indicating that the template job has been discarded. Then, CPU201 terminates the processing shown in the flowchart in Figure 9.

[0059] In this example, notification to the user is provided by the display unit 205 of the printer 200, but this is not the only example. For example, if the host computer 100 is configured to recognize how it has issued template jobs, the user may be notified of the handling of the template job via the display unit 105 on the host computer 100. As explained in Figure 8, when a template job is submitted, the printer driver 150 notifies the user via a warning screen 820 that the template job will not be stored if the operation restriction is turned on. Therefore, the process in S903 to notify the user via the display unit 205, etc., that the received template job has been discarded may be omitted.

[0060] As described above, this embodiment further enhances security in the printing device. Specifically, according to this embodiment, when the standard document printing function is disabled, a process is performed to disable template jobs. The process of disabling template jobs includes deleting template jobs already stored in the non-volatile memory 212. Furthermore, the process of deleting template jobs includes a process that prevents new template jobs from being stored in the non-volatile memory 212 by discarding any print jobs that have been newly received as template jobs. This control prevents new template jobs containing confidential information from being stored in the printer 200. Moreover, even if a template job containing confidential information is stored, the stored template job is deleted based on the fact that the function has been disabled. Therefore, the risk of information leakage can be reduced.

[0061] <<Second Embodiment>> This embodiment describes the operational limitations of the standard document printing function in a mode that can be started by a special operation, different from the startup mode normally used by the user (hereinafter referred to as "user mode") (hereinafter referred to as "special mode"). The example described in the first embodiment corresponds to an example started in user mode.

[0062] The device configuration and processing control in this embodiment are basically the same as those described in the first embodiment. The differences will be explained below.

[0063] Special modes can be activated by special operations that are not normally performed by a user. For example, to start the printer 200 in user mode, the power key on the control panel 204 is pressed once, and the printer 200 starts in user mode. To start the printer 200 in special mode, the printer 200 starts in special mode by an operation different from that of user mode, such as pressing the power key and the cancel key on the control panel 204 together.

[0064] When the printer 200 is started in special mode, it starts up with a different startup screen than in user mode. In this embodiment, the control panel 204 of the printer 200 started in special mode is configured not to accept any operations. Instead, the printer 200 is configured to accept operations only through dedicated software (hereinafter referred to as "dedicated software") installed on the host computer 100 connected to the printer 200 via USB. Since the control panel 204 does not accept any operations in special mode, the special mode is terminated by cutting off the power supply to the printer 200 from an external source. For this reason, power is not supplied by the battery unit 211 in special mode.

[0065] The dedicated software allows for the restriction of the standard document printing function. Based on user instructions, the dedicated software sets the restriction of the standard document printing function to ON and sends this setting information to the printer 200. Upon receiving the setting information from the dedicated software, the printer 200 stores the setting to turn on the restriction of the standard document printing function in the non-volatile memory 212. Then, by cutting off the power supply to the printer from the outside, the printer 200 exits special mode. After that, when power is supplied to the printer from the outside again and it starts up in user mode, the printer 200 will restrict the operation of the standard document printing function based on the setting to turn on the restriction stored in the non-volatile memory 212.

[0066] The operation restriction screen displayed on the display unit 205, the control on the host computer, and the discard control when a template job is received, which occur when operation restrictions are turned on in special mode, are the same as in the example described in the first embodiment. Furthermore, the system may be configured to explicitly notify the user that the printer 200 is operating with the operation restrictions of the standard document printing function turned on by special mode.

[0067] On the other hand, if the operation restriction is turned on by the special mode, the control via the remote UI will be different from the example described in the first embodiment. Turning on the operation restriction by the special mode is treated as a setting at a higher level than that of users operating in user mode, including administrator users. For this reason, users operating in user mode, including administrator users, are configured not to change the operation restriction setting using the remote UI if the operation restriction for the standard document print function has already been turned on by the special mode. Therefore, when the operation restriction is turned on by the special mode, the remote UI is controlled so that the operation restriction menu for the standard document print function shown on the remote UI operation restriction screen 550 cannot be selected. Alternatively, it is controlled so that it is not possible to transition to the remote UI operation restriction screen 550. This control prevents users from changing the operation restriction setting for the standard document print function using the remote UI. Note that when the remote UI operation restriction screen 550 is displayed, the user may be explicitly notified that the system is operating with the operation restriction already set by the special mode. To perform this type of control, in this embodiment, if the operation restriction setting for the standard document printing function is performed in special mode, information indicating that the setting was performed via special mode is also stored in the non-volatile memory 212.

[0068] As described above, this embodiment makes it possible to control the operational restrictions of the standard document printing function by distinguishing between user mode and special mode. This prevents, for example, the operational restrictions from being changed via user mode when operational restrictions are turned on in special mode. Therefore, security can be improved.

[0069] <<Other Embodiments>> The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions.

[0070] The disclosure of this embodiment includes configurations represented by the following examples of information processing devices, control methods for information processing devices, and programs.

[0071] <Configuration 1> A printing device, A receiving means for receiving print jobs, If the received print job is a specific job that includes an instruction to store the print job in the printing device, the storage control means performs control to store the received specific job in a non-volatile memory. An operation means for receiving operations on a specific job stored in the non-volatile memory, A setting means that allows the operation related to the aforementioned specific job to be disabled, A control means that performs control to restrict operations related to the specific job, including control to delete the specific job stored in the non-volatile memory, based on the setting means that the operations related to the specific job have been disabled. A printing apparatus characterized by having the following features.

[0072] <Configuration 2> The printing apparatus according to configuration 1, characterized in that the control means controls the operation related to the specific job by preventing the operation means from accepting operations related to the specific job.

[0073] <Structure 3> The printing apparatus according to configuration 2, characterized in that the control means, when it receives an operation related to the specific job from the operating means, displays a screen indicating that the specific job cannot be operated, thereby controlling the operation means to not accept operations related to the specific job from the operating means.

[0074] <Structure 4> The printing apparatus according to any one of configurations 1 to 3, characterized in that the control means controls the storage control means to prevent it from performing the control to store the received specific job in non-volatile memory, as a control to restrict operations related to the specific job.

[0075] <Composition 5> The printing apparatus according to configuration 4, characterized in that, if the operation related to the specific job is set to be disabled, the storage control means discards the specific job newly received by the receiving means based on the control by the control means.

[0076] <Composition 6> The printing apparatus according to configuration 5, characterized in that the control means performs control to notify the printing apparatus or the information processing apparatus that transmitted the specific job that the specific job has been discarded when the storage control means discards the specific job newly received by the receiving means.

[0077] <Composition 7> The printing apparatus according to any one of configurations 1 to 6, characterized in that the control means notifies the information processing device that transmits the print job that the operation related to the specific job is restricted, based on the setting means that the operation related to the specific job has been disabled.

[0078] <Structure 8> The printing apparatus according to any one of configurations 1 to 7, characterized in that the control means notifies that the specific job stored in the non-volatile memory will be deleted based on the setting means that the operation related to the specific job has been disabled, and then deletes the specific job stored in the non-volatile memory after giving the notification.

[0079] <Composition 9> The printing apparatus according to any one of configurations 1 to 8, characterized in that the setting means can perform settings based on instructions from an information processing device remotely connected to the printing apparatus.

[0080] <Composition 10> The printing apparatus according to configuration 9, characterized in that the setting means can perform settings based on instructions via a screen after authentication to the printing apparatus has been successfully performed on the remotely connected information processing device.

[0081] <Composition 11> The operating means is also configured to accept operations on the printing device. The printing apparatus according to configuration 9 or 10, characterized in that the setting means is configured not to accept settings via the operating means.

[0082] <Composition 12> The printing apparatus is configured to be able to start in either a first mode or a second mode which is at a higher level than the first mode. The printing apparatus according to any one of configurations 1 to 11, characterized in that the setting means is configured to disable the operation related to the specific job in either the first mode or the second mode, and if the operation related to the specific job is disabled in the second mode, the setting means is configured so that the setting of the operation related to the specific job cannot be changed in the first mode.

[0083] <Composition 13> A control means for displaying a screen for setting print settings for a print job on the display unit, A receiving means that accepts an operation on the screen to indicate that the print job for which the print settings are being applied is a specific job that includes an instruction to store the print job in the printing device, When the aforementioned operation is received on the screen, a notification means provides that the printer may not store the specific job, regardless of whether the printer has disabled the operation related to the specific job. After notification is made by the notification means, a transmission means transmits the specific job to the printing device, An information processing device characterized by having the following features.

[0084] <Composition 14> A method for controlling a printing device, The steps include receiving a print job and If the received print job is a specific job that includes an instruction to store the print job in the printing device, the steps include: performing control to store the received specific job in non-volatile memory; The steps include receiving an operation for a specific job stored in the non-volatile memory, The steps include: disabling the operation related to the aforementioned specific job, The steps include: performing control to restrict operations related to the specified job, including control to delete the specified job stored in the non-volatile memory based on the fact that the operations related to the specified job have been disabled; A method for controlling a printing apparatus, characterized by having the following features.

[0085] <Composition 15> The steps include: displaying the screen for setting print settings for a print job on the display unit, The steps include: accepting an operation on the screen to indicate that the print job for which the print settings are being applied is a specific job that includes an instruction to store the print job in the printing device; When the operation described above is received on the screen, the printer notifies that the specific job may not be stored in the printer, regardless of whether the printer has disabled the operation related to the specific job. After the notification is given, the steps include sending the specific job to the printing device, A control method for an information processing device, characterized by having the following features.

[0086] <Composition 16> A program for causing a computer to function as one of the means of a printing apparatus described in any one of configurations 1 to 12.

[0087] <Composition 17> A program for causing a computer to function as each of the means of the information processing device described in configuration 13. [Explanation of Symbols]

[0088] 200 printers 201 CPU 212 Non-volatile memory

Claims

1. A printing device, A receiving means for receiving print jobs, If the received print job is a specific job that includes an instruction to store the print job in the printing device, the storage control means performs control to store the received specific job in a non-volatile memory. An operation means for receiving operations on a specific job stored in the non-volatile memory, A setting means that allows the operation related to the aforementioned specific job to be disabled, A control means that performs control to restrict operations related to the specific job, including control to delete the specific job stored in the non-volatile memory, based on the setting means that the operations related to the specific job have been disabled. A printing apparatus characterized by having the following features.

2. The printing apparatus according to claim 1, characterized in that the control means controls the operation related to the specific job by preventing the operation means from accepting operations related to the specific job.

3. The printing apparatus according to claim 2, characterized in that the control means, when it receives an operation related to the specific job from the operating means, displays a screen indicating that the specific job cannot be operated, thereby controlling the operation means to not accept an operation related to the specific job from the operating means.

4. The printing apparatus according to claim 1, characterized in that the control means controls the storage control means to prevent it from performing the control to store the received specific job in the non-volatile memory, as a control to restrict the operation related to the specific job.

5. The printing apparatus according to claim 4, characterized in that, if the operation related to the specific job is set to be disabled, the storage control means discards the specific job newly received by the receiving means based on the control by the control means.

6. The printing apparatus according to claim 5, characterized in that the control means performs control to notify the printing apparatus or the information processing apparatus that transmitted the specific job that the specific job has been discarded when the storage control means discards the specific job newly received by the receiving means.

7. The printing apparatus according to claim 1, characterized in that the control means notifies the information processing device that transmits the print job that the operation related to the specific job is restricted, based on the setting means that the operation related to the specific job has been disabled.

8. The printing apparatus according to claim 1, characterized in that the control means notifies that the specific job stored in the non-volatile memory will be deleted based on the setting means that the operation related to the specific job has been disabled, and then deletes the specific job stored in the non-volatile memory after giving the notification.

9. The printing apparatus according to claim 1, characterized in that the setting means can perform settings based on instructions from an information processing device remotely connected to the printing apparatus.

10. The printing apparatus according to claim 9, characterized in that the setting means can be configured based on instructions via a screen after authentication to the printing apparatus has been successfully performed on the remotely connected information processing device.

11. The operating means is also configured to accept operations on the printing device. The printing apparatus according to claim 9, characterized in that the setting means is configured not to accept settings via the operating means.

12. The printing apparatus is configured to be able to be started in either a first mode or a second mode which is at a higher level than the first mode. The printing apparatus according to claim 1, characterized in that the setting means is configured to disable the operation related to the specific job in either the first mode or the second mode, and if the operation related to the specific job is disabled in the second mode, the setting of the operation related to the specific job cannot be changed in the first mode.

13. A control means for displaying a screen for setting print settings for a print job on the display unit, A receiving means that accepts an operation on the screen to indicate that the print job for which the print settings are being applied is a specific job that includes an instruction to store the print job in the printing device, When the aforementioned operation is received on the screen, a notification means provides that the printer may not store the specific job, regardless of whether the printer has disabled the operation related to the specific job. After notification is made by the notification means, a transmission means transmits the specific job to the printing device, An information processing device characterized by having the following features.

14. A method for controlling a printing device, The steps include receiving a print job and If the received print job is a specific job that includes an instruction to store the print job in the printing device, the steps include: performing control to store the received specific job in non-volatile memory; The steps include receiving an operation for a specific job stored in the non-volatile memory, The steps include: disabling the operation related to the aforementioned specific job, The steps include: performing control to restrict operations related to the specified job, including control to delete the specified job stored in the non-volatile memory based on the fact that the operations related to the specified job have been disabled; A method for controlling a printing apparatus, characterized by having the following features.

15. The steps include: displaying the screen for setting print settings for a print job on the display unit, The steps include: accepting an operation on the screen to indicate that the print job for which the print settings are being applied is a specific job that includes an instruction to store the print job in the printing device; When the operation described above is received on the screen, the printer notifies that the specific job may not be stored in the printer, regardless of whether the printer has disabled the operation related to the specific job. After the notification is given, the steps include sending the specific job to the printing device, A control method for an information processing device, characterized by having the following features.

16. A program for causing a computer to function as one of the means of a printing apparatus according to any one of claims 1 to 12.

17. A program for causing a computer to function as each of the means of the information processing apparatus described in claim 13.