Data processing device, control method thereof, and program

Abstract

In conventional data processing devices such as MFPs that can connect to multiple lines, there was a possibility that unintended data transfers occurred between lines when receiving data via the Internet fax function. [Solution] In the MFP100, transfer restriction conditions (Figures 11A and 11B) are set for each transfer condition related to the Internet fax function. Data sent from an external device is received by the Internet fax function via one of several network interfaces. Based on information indicating the network interface used during reception and destination information according to the transfer conditions, it is decided whether or not to transmit the received data (S12004-S12009). For data that is determined to be transmitted, transmission is performed using the destination information via one of the multiple network interfaces (S12014). For data that is determined not to be transmitted, transmission using the destination information is not performed (S12010-S12013).

Description

Technical Field

[0001] The present invention relates to a data processing apparatus, a control method thereof, and a program.

Background Art

[0002] In recent years, there are multifunction devices equipped with a plurality of network interfaces (network lines) and capable of connecting to multiple networks. Such a multifunction device can be connected to different networks with a single device. For example, a multifunction device can be connected to both a public Internet line and a private intranet line without using other devices. As a result, when the multifunction device transmits a scanned image to a file server, for example, it can be directly transmitted not only to the intranet-side file server but also to the Internet-side file server.

[0003] Patent Document 1 discloses a technique for determining whether to permit data transmission based on the network line used for reception and the network line used for transmission.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] Here, some multifunction devices have a file server function or an Internet fax function, and there are cases where they not only transmit images but also receive images. Furthermore, some multifunction printers have a receive-and-forward function that allows them to transfer data received via Internet fax or other means to another device. In such multifunction printers, the receive-and-forward function automatically sends the received data to the destination, which means that data may be sent to prohibited lines due to unintended transfers.

[0006] Furthermore, there are cases where the network lines on the intranet side and the network lines on the internet side are connected by a gateway. Communications such as SMTP (Simple Mail Transfer protocol), which are used to send and receive email messages, can pass through gateways. For example, when transferring received data via email, the mail server on the intranet side and the mail server on the internet side are connected by a gateway. In such cases, the technology described in Patent Document 1 determines whether or not to send the data based on the network interface line on which the data was received and the network interface line on which the data was sent, so there is a possibility that the data may be sent to a line that is prohibited from receiving data via the gateway. Data processing devices such as multifunction printers have had this problem.

[0007] This invention was made to solve the above-mentioned problems. The purpose of this invention is to provide a mechanism that can suppress unintended data transfer between multiple network interfaces for data received via Internet fax functionality. [Means for solving the problem]

[0008] The present invention relates to a data processing device having an Internet fax function and equipped with a plurality of network interfaces, comprising: a receiving means for receiving data transmitted from an external device via one of the plurality of network interfaces using the Internet fax function; a determining means for determining whether or not to transmit the data received by the receiving means based on network information indicating the network interface used by the receiving means when receiving the data and destination information in accordance with transfer conditions relating to the Internet fax function; and a transmitting means for transmitting data received by the receiving means that the determining means has determined should be transmitted, via one of the plurality of network interfaces using the destination information, wherein data received by the receiving means that the determining means has determined not to transmit is not transmitted using the destination information. [Effects of the Invention]

[0009] According to the present invention, it is possible to suppress unintended data transfer between multiple network interfaces for data received via the Internet fax function. [Brief explanation of the drawing]

[0010] [Figure 1] A diagram illustrating the system configuration of this embodiment. [Figure 2] A block diagram illustrating the hardware configuration of the MFP controller section. [Figure 3] A block diagram illustrating the hardware configuration of client terminals and mail servers. [Figure 4] A block diagram showing the software configuration executed in the MFP controller section. [Figure 5] This diagram illustrates a screen for configuring network data isolation settings. [Figure 6] An example diagram showing the forwarding settings list screen. [Figure 7A] Figure illustrating a screen for transfer settings. [Figure 7B] Figure illustrating a screen for transfer settings. [Figure 7C] Figure illustrating a screen for transfer settings. [Figure 7D] Figure illustrating a screen for transfer settings. [Figure 7E] Figure illustrating a screen for transfer settings. [Figure 8] Figure illustrating an address book screen in the first embodiment. [Figure 9] Figure showing an example of an email sent when received transfer is restricted in the first embodiment. [Figure 10] Figure showing an example of a data structure for recording network data separation settings of an MFP. [Figure 11A] Figure showing an example of a data structure for recording transfer settings of an MFP. [Figure 11B] Figure showing an example of a data structure for recording transfer settings of an MFP. [Figure 12] Flowchart showing an example of transfer processing in an MFP in the first embodiment. [Figure 13A] Figure showing an example of a screen of an address book corresponding to a group destination in the second embodiment. [Figure 13B] Figure showing an example of a screen of an address book corresponding to a group destination in the second embodiment. [Figure 13C] Figure showing an example of a screen of an address book corresponding to a group destination in the second embodiment. [Figure 14] Figure showing an example of a screen for performing transfer settings of a group destination displayed on an MFP in the second embodiment. [Figure 15A] An example of an email sent when received transfer is restricted for a group destination in the second embodiment [Figure 15B] Figure showing an example of an email sent when received transfer is restricted in the second embodiment. [Figure 16A] ​ [Figure 16B] A flowchart showing an example of a transfer process corresponding to a group destination in an MFP in the second embodiment. [Modes for carrying out the invention]

[0011] Embodiments of the present invention will be described below with reference to the drawings. However, not all features described in these embodiments are necessarily essential to the solution of the present invention.

[0012] [First Embodiment] Figure 1 is a diagram illustrating a system configuration showing one embodiment of the present invention. The system in this embodiment includes MFP100, MFP110, mail server 120, mail server 130, and client terminal 140. MFP100, MFP110, and mail server 120 are connected via network 150. Mail server 130 and client terminal 140 are connected via network 160.

[0013] The MFP100 has multiple network interfaces (network I / F) and is connected to networks 150 and 160. The MFP100 functions as a data processing device capable of sending and receiving data via these networks. For example, the MFP100 can receive data sent from an external device via one of the multiple network I / F using its Internet fax function, and then send the received data and destination information according to transfer conditions via one of the multiple network I / F. The MFP100 also has a network data isolation function. The network data isolation function restricts data exchange between network 150 and network 160. Networks 150 and 160 are interconnected by a gateway 170.

[0014] The MFP100 and MFP110 are image forming machines that scan images, print images using a printer, and send and receive faxes. The MFP100 and MFP110 have an operation unit 102 for user input and output. The MFP100 also has a printer unit 103 for outputting electronic data to paper media. The MFP100 also has a scanner unit 104 for reading paper media and converting it into electronic data. The operation unit 102, printer unit 103, and scanner unit 104 are connected to the controller unit 101 and perform their functions as a multifunction device according to the control of the controller unit 101.

[0015] Mail servers 120 and 130 are servers that send and receive emails. Mail server software 122 and 132 interpret the SMTP and POP protocols to send and receive emails. Since the mail servers are publicly known, a description of their configuration will be omitted.

[0016] The client terminal 140 is a device used by the user, and the email software 141 communicates with the email server software 131 to send and receive emails. Examples of client terminals include notebook PCs (personal computers) and tablet devices.

[0017] It should be noted that Figure 1 only describes the configuration for illustrating this embodiment; therefore, other configurations may be included as long as they satisfy the requirements for implementing the present invention, and it goes without saying that the connection configurations between each component are not limited to these.

[0018] Here, for example, let's assume that network 150 is the intranet and network 160 is the internet. In the network data isolation function described above, let's assume that the MFP100 is configured not to transfer data received on the intranet side (network 150) to the internet (network 160).

[0019] It is assumed that the MFP100's forwarding function is configured to forward received data via email. Furthermore, it is assumed that the MFP100 has email server 120 on network 150 configured as the email server for sending emails.

[0020] Suppose that data is sent from MFP 110 on network 150 to MFP 100 via Internet fax. Upon receiving this data, MFP 100 activates its forwarding function and sends the received data via email. At this time, the email server 120 configured on MFP 100 is located on network 150, and therefore is not subject to the network data isolation function's limitations. If the received data is forwarded as email to email server 120, email server 120 is connected to network 160 via gateway 170, and the email is relayed to email server 130 on network 160. Then, suppose a client terminal 140 on network 160 receives the email from email server 130. In this case, as a result, the data received by MFP 100 from network 150 is sent to network 160, which should be prohibited from forwarding. Thus, even if the network data isolation function's restrictions are applied by focusing only on the line, there is a possibility that received data may be sent to the restricted line. This embodiment describes a configuration that suppresses the occurrence of such a situation.

[0021] Figure 2 is a block diagram illustrating the hardware configuration of the controller unit 101 of the MFP. CPU201 performs the main arithmetic processing within the controller. CPU201 is connected to DRAM202 via a bus. DRAM202 is used by the CPU201 as working memory to temporarily store program data representing arithmetic instructions and data to be processed during the calculation process.

[0022] Furthermore, the CPU 201 is connected to the I / O controller 203 via a bus. The I / O controller 203 performs input and output to various devices according to instructions from the CPU 201. A SATA (Serial Advanced Technology Attachment) interface 205 is connected to the I / O controller 203, and a Flash ROM 210 is connected to the SATA interface 205. The CPU 201 uses the Flash ROM 210 to permanently store programs and document files necessary for implementing the MFP's functions. Instead of Flash ROM, a mass storage device such as an HDD (Hard Disk Drive) or SSD (Solid State Drive) may also be connected.

[0023] Furthermore, the I / O controller 203 is connected to network I / F 220 and network I / F 221. In this embodiment, there are two network I / Fs, but a configuration with three or more network I / Fs is also possible. Wired LAN devices and wireless LAN devices are connected to network interfaces 220 and 221.

[0024] Furthermore, the I / O controller 203 is connected to the panel interface 206, and the CPU 201 provides user-facing input / output to the control unit 102 via the panel interface 206. Furthermore, the printer interface 207 is connected to the I / O controller 203, and the CPU 201 uses the printer unit 103 via the printer interface 207 to perform paper output processing.

[0025] The MFP100 has various applications for utilizing its functions. These functions include, for example, copying, sending, faxing, and a mailbox. Each function is described below.

[0026] (Copy function) For example, when performing the copy function in the MFP100, the CPU201 reads program data from the Flash ROM210 to the DRAM202 via the SATA I / F205. Then, according to the program read into the DRAM202, the CPU201 detects a copy instruction from the user to the control unit 102 via the panel I / F206. Upon detecting the copy instruction, the CPU201 receives the original document as electronic data from the scanner unit 104 via the scanner I / F208 and stores it in the DRAM202. Furthermore, the CPU201 performs color conversion processing and other operations on the image data stored in the DRAM202 to make it suitable for output. Finally, the CPU201 transfers the image data stored in the DRAM202 to the printer unit 103 via the printer I / F207 and performs the output process to paper media.

[0027] (Sending function) In the transmission function, the process by which the CPU 201 detects a transmission instruction from the user is the same as in the copy function described above. The transmission instruction includes the transmission protocol, destination specification, and image format specified by the user. The transmission protocol may be SMB or FTP, and the destination specification may be UNC (Universal Naming Convention), for example. The image format may be JPEG or PDF. When the CPU 201 detects a transmission instruction, it receives the original document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. Furthermore, the CPU 201 performs image format conversion and other operations on the image data stored in the DRAM 202 as specified by the user. Then, the CPU 201 transmits the image data stored in the DRAM 202 to the destination via the network I / F 220 and 221 using the protocol specified by the user. The destination may be a storage server, and transmission may be performed using an authorization mechanism with an access token.

[0028] (Fax function) In the fax function, the process by which the CPU 201 detects a fax instruction from the user is the same as in the copy function described above. When the CPU 201 detects a fax instruction, it receives the document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. Furthermore, the CPU 201 performs image format conversion for fax on the image data stored in the DRAM 202. Then, the CPU 201 transfers the image data stored in the DRAM 202 to the fax telephone number specified in the fax instruction via a telephone network (not shown) to which the fax I / F 209 is connected. Faxing via a telephone line is just one example; it could also be Internet fax. Internet fax is a function that sends and receives faxes via the internet. The document is sent as an image file attached to an email. When the CPU 201 detects the reception of a fax image via the network I / F 220 or 221, it transfers the received image file to the printer unit 103 via the printer I / F 207 and prints it. Furthermore, it is possible to temporarily save the image file of the data received by the CPU201 without printing it. For example, the CPU201 can store the image file of the received data in the Flash ROM210 connected via the SATA I / F205.

[0029] (Box function) The box function allows the CPU 201 to save scanned images to the internal storage area of ​​the MFP 100 or to memory media connected to the MFP 100. Furthermore, the MFP 100 can function as a file server, allowing images stored on the MFP 100 to be shared with external PCs (not shown) or other MFPs. In the box function, the process by which the CPU 201 detects a box save instruction from the user is the same as that for the copy function described above. The box save instruction includes the user's specified save location and image format. The save location is either the internal storage of the MFP 100 or a path to memory media connected to the MFP 100. Image formats include JPEG and PDF. Upon detecting a box save instruction, the CPU 201 receives the original document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. The CPU 201 then performs image format conversion and other operations on the image data stored in the DRAM 202, as specified by the user. The CPU 201 then transfers the image data stored in the DRAM 202 to a user-specified storage location, such as the Flash ROM 210 inside the MFP100 or an unillustrated memory media, via the SATA I / F 205. In the fax function, instead of printing the received image, it may be converted to a format viewable on a PC and saved to the box. Furthermore, as a box function, the MFP100 acts as a file server, such as an SMB server, making the contents of the Flash ROM 211 publicly available. The box function is activated when the CPU 201 detects external box access requests via the network I / F 204. These box access requests include the path to the target image file. The CPU 201 then transfers the image data stored in the Flash ROM 210 corresponding to the specified image file path to the source of the box access request via the network I / F 204. There are two types of boxes for storing received fax images: the fax box and the system box. The system box is a temporary storage location for fax documents when image data received via fax is received in memory without being printed. Only one system box exists in the device.A fax box is a storage location where received fax documents are temporarily saved when they meet the forwarding conditions, as described later in the receive forwarding settings. Multiple fax boxes exist, and each box can be protected by a password. Please note that the above is just one example of the MFP100's functions, and other functions may also be included.

[0030] Figure 3 is a block diagram illustrating the hardware configuration of client terminal 140, mail server 120, and mail server 130. CPU301 is connected to DRAM302 via a bus. DRAM302 is used by the CPU301 as working memory to temporarily store program data representing arithmetic instructions and data to be processed during the calculation process.

[0031] The CPU 301 is connected to the I / O controller 303 via a bus. The I / O controller 303 is connected to the network interface 304. The network interface 304 is connected to wired LAN devices, wireless LAN devices, or data communication devices. The CPU 301 controls the wired LAN devices, wireless LAN devices, and data communication devices via the network interface 304, thereby enabling communication on the network 150.

[0032] Furthermore, the I / O controller 303 performs input and output to various devices according to instructions from the CPU 301. A SATA (Serial Advanced Technology Attachment) interface 305 is connected to the I / O controller 303, and the HDD 306 is connected to the interface. Other mass storage devices such as SSDs may be connected instead of an HDD. The CPU 301 uses the HDD 306 to permanently store settings for programs such as the email software 141 and the email server software 122 and 132.

[0033] Furthermore, an input / output interface (I / F) 307 is connected to the I / O controller 303, and the CPU 301 implements input / output for users of the client terminal 140, mail server 120, and mail server 130, which are connected via the I / O interface 307. For example, a touch panel that also functions as an input / output interface may be connected to the I / O interface 307, or an output device such as a display and an input device such as a keyboard may be connected to the I / O interface 307. Note that the mail software 141, mail server software 122, and mail server software 131 running on the client terminal 140, mail server 120, and mail server 130 are known software configurations and are not essential to this embodiment, so details are omitted.

[0034] Figure 4 is a block diagram showing the software configuration executed in the controller unit 101 of the MFP100. The functions of the software configuration shown in this figure are realized by the CPU 201 in the controller unit 101 of the MFP100 reading the program stored in the Flash ROM 211 into the DRAM 202 and executing it.

[0035] The operation control unit 401 controls the display of a user-facing screen image on the operation unit 102, and also controls the detection of user operations via the operation unit 102 and the execution of processes associated with screen components such as buttons displayed on the screen. The data storage unit 402 stores data in the Flash ROM 211 and reads data from the Flash ROM 211 in accordance with requests from other control units.

[0036] The job control unit 403 controls the execution of jobs according to instructions from other control units. The image processing unit 404 processes the image data into a format suitable for each application, according to instructions from the job control unit 403. The printing processing unit 405 prints and outputs an image onto paper media via the printer interface 207, following instructions from the job control unit 403. The scanning processing unit 406 reads the set document via the scanner I / F 208 in accordance with instructions from the job control unit 403.

[0037] The network control unit 407 performs data input and output from LAN, Wi-Fi, and public network via network I / F 220 and 221 according to instructions from each control unit. The data storage unit 402 makes the data stored in the Flash ROM 210 accessible from external devices via the network control unit 407. Examples of data stored in the Flash ROM 210 include images such as PDF, JPEG, and TIFF.

[0038] The FAX control unit 408 receives and processes FAX data received from the network control unit 407 according to instructions from the job control unit 403, and issues printing instructions to the print processing unit 405, or converts the FAX data into an image such as PDF or JPEG and stores it in the data storage unit 402. The FAX control unit 408 also processes the image data read by the reading processing unit 406 and transmits it as FAX data via the network control unit 407.

[0039] The network data isolation control unit 409 determines whether it is possible to transmit data to network interfaces 220 and 221. For example, the network data isolation control unit 409 determines whether the received data was received from network interface 220 or 221 and whether it is possible to perform processing via the network interface used by the destination. If it is not possible, the network data isolation control unit 409 controls the network control unit 407 to prevent it from performing the transmission.

[0040] The transfer control unit 410 processes the transfer of received image data to other devices. For example, it processes the transfer of image data received via the fax function to email, internet fax, a file server, or other fax machines. For instance, the transfer control unit 410 uses the network control unit 407 to receive the image data, converts it into an image according to the settings using the image processing unit 404, and temporarily stores it in the data storage unit 402. The transfer control unit 410 then uses the network control unit 407 again to send the image data temporarily stored in the data storage unit 402 to the destination. At this time, the transfer control unit 410 uses the network data separation control unit 409 to determine whether reception and transfer are possible. Details of this determination will be described later.

[0041] Figure 5 illustrates a screen on the MFP100 for configuring network data isolation settings to perform data separation for multiple network interfaces. Figure 5(a) shows an example screen for configuring whether or not to perform network data isolation, as used by the MFP100 administrator. Radio buttons 5001 and 5002 are for network isolation settings, and only one can be selected. Select button 5001 to perform network data isolation, and button 5002 to not perform network data isolation.

[0042] When the OK button 5004 is pressed, the network data isolation settings made in Figure 5(a) are saved to the Flash ROM 210, for example, as shown in Figure 10, item 10001, which will be described later. If the cancel button 5003 is pressed, the network data isolation settings made in Figure 5(a) will not be saved and will be discarded.

[0043] Figure 5(b) shows an example screen for configuring which combination of lines is allowed to transmit data between multiple network interfaces when data separation is enabled in Figure 5(a) (when ON5001 is selected). Hereafter, network interface 220 will be referred to as line 1, and network interface 221 as line 2.

[0044] 5101 is a setting that determines whether or not to allow the transmission of data received on line 1 to line 2. In the example in Figure 5(b), it is set to "allow," meaning that data received on line 1 can be transmitted to line 2. 5102 is a setting that determines whether or not to allow the transmission of data received on line 2 to line 1. In the example in Figure 5(b), it is set to "Prohibited," meaning that it is impossible to transmit data received on line 2 to line 1, and attempting to do so will result in an error.

[0045] In this embodiment, there are no restrictions on transmission between the same lines, such as transmitting data received on line 1 to line 1, or transmitting data received on line 2 to line 2. Although not shown in Figure 5(b), settings may be provided to allow or disallow data transmission between the same lines. Alternatively, if additional lines exist, it may be possible to allow selection of the source and destination lines separately.

[0046] When the OK button 5104 is pressed, the network data communication settings made in Figure 5(b) are saved to the Flash ROM 210, for example, as shown in Figure 10, 10002 and 10003, which will be described later. If the cancel button 5103 is pressed, the network data-to-data communication settings made in Figure 5(b) will not be saved and will be discarded.

[0047] In this embodiment, examples are shown of settings to allow or disallow the transmission of data received on line 1 to line 2, and to allow or disallow the transmission of data received on line 2 to line 1, regardless of the functions installed in the MFP100. However, a mechanism may be used to allow data transmission to the network interface for each function installed in the MFP100. For example, the transmission function may be allowed to transmit to line 2, but the box function may be set not to allow the transmission of data received on line 1 to line 2.

[0048] Figures 6 and 7A to 7E illustrate the screens displayed on the MFP100 when configuring transfer settings. Figure 6 is an example of the transfer settings list screen. The forwarding settings list 6000 displays a list of registered forwarding settings.

[0049] 6001 is an ON / OFF toggle switch, which allows you to enable (ON) or disable (OFF) transfers for each transfer condition displayed in the transfer settings list 6000. 6002 is a display of a registered forwarding condition name. In the example in Figure 6, two transfer settings are registered: "Transfer to Sales Department" and "Transfer to ABC Trading Co., Ltd.", with "Transfer to Sales Department" set to OFF and "Transfer to ABC Trading Co., Ltd." set to ON.

[0050] Button 6003 is the new registration button. Pressing this button allows you to set up a new transfer, and the basic transfer settings screen shown in Figure 7A (described later) will be displayed. Button 6004 is an edit button, which can be pressed when a registered transfer setting is selected in the transfer setting list 6000. When this button is pressed, the basic settings screen for the transfer setting shown in Figure 7A will be displayed with the settings of the selected transfer setting applied.

[0051] Button 6005 is the delete button. It can be pressed when a registered transfer setting is selected in the transfer settings list 6000. Pressing this button will delete the settings of the selected transfer setting. 6010 is the close button; pressing this button will close the transfer settings screen shown in Figure 6.

[0052] Figures 7A to 7E illustrate the screens used to configure transfer settings. Note that, hereafter, Figures 7A to 7E may be collectively referred to as "Figure 7".

[0053] Figure 7A is an example of a screen for configuring the basic settings of the transfer settings, and it can be accessed from the transfer settings list screen in Figure 6. Button 7001 is for setting the transfer condition name. When button 7001 is pressed, a keyboard (not shown) appears, allowing you to set the name of the transfer condition. The transfer condition name set here will be displayed in area 7020.

[0054] Button 7002 is used to set transfer conditions. Pressing button 7002 displays the transfer condition setting screen shown in Figure 7B, which will be described later. The transfer conditions set here are displayed in area 7021. Button 7003 is used to set the forwarding destination. When button 7003 is pressed, the address book screen shown in Figure 8 is displayed. The forwarding destination selected on the address book screen is displayed in area 7022. The address book screen will now be explained using Figure 8.

[0055] Figure 8 is a diagram illustrating the address book screen in the first embodiment. 8000 is the address book display area, where a list of registered address books is displayed. In the example in Figure 8, three address books are displayed.

[0056] Type 8001 displays the type of address. The type of address refers to the protocol used for transmission, such as fax, email, internet fax, or file server. The name 8002 displays the name registered in the address book. The recipient 8003 field displays a recipient from the address book, corresponding to the type 8001. For example, if type 8001 is a fax, recipient 8003 will be a phone number; if type 8001 is an email, recipient 8003 will be an email address.

[0057] Button 8004 is the new registration button. When this button is pressed, a screen will appear (not shown in the illustration) where you can set the name, type, and recipient, allowing you to create a new address book. 8005 is the edit button, which displays a screen where you can change the name, type, and destination of the address selected in area 8000, allowing you to modify the contents of the registered address book. 8006 is the delete button, which allows you to delete the registered address book selected in the address book display area 8000. 8010 is the close button, which closes the address book screen. The address selected in the address book display area 8000 in Figure 8 is set as the forwarding destination 7003 in Figure 7A.

[0058] Now, let's return to the explanation of Figure 7A. Button 7004 is used to set the file format. Pressing button 7004 allows you to select the file format to be used for transfer. If an email address or file server with a valid file format is selected as the transfer destination (7003), the file will be transferred in the image format set by button 7004. Available file formats include TIFF and PDF.

[0059] Button 7005 is used to set the transfer time. Pressing button 7005 displays a screen (not shown) where you can set the time for the transfer to be performed. If a transfer time is set, the received image data will not be transferred immediately after reception, but will not be transferred until the time specified by transfer time 7005.

[0060] Button 7006 is used to set up a forwarding completion notification. When button 7006 is pressed, the address book selection screen shown in Figure 8 is displayed, allowing you to select the email address to which an email will be sent when the forwarding is performed. If an email address for the forwarding completion notification is set in the forwarding time specification 7006, an email containing the contents of the forwarding will be sent to the set email address.

[0061] 7010 is the cancel button, which exits the screen shown in Figure 7A without saving the transfer settings configured on the screen in Figure 7 to the Flash ROM 210. 7011 is the OK button, which saves the transfer settings configured on the screen in Figure A to the Flash ROM 210, for example, as shown in Figures 11A and 11B later, and exits the screen in Figure 7A.

[0062] Figure 7B shows an example of a screen for setting transfer conditions, which is called from the aforementioned transfer condition 7002. 7101 is the destination condition for the received data, and is set according to the destination entered in 7102 and the conditional expression selected in 7103. An example of a value set in 7101 is the value written in the To header in the case of Internet fax. Examples of conditional expressions for 7103 include "equals," "not equal to," "starts with," "ends with," and "contains." For example, if "mfp100@foo.com" is entered in 7102 and "equals" is selected in 7103, the condition will be matched when the destination of the received data matches "mfp100@foo.com." The same applies if 7103 is "not equal to." Also, if "mfp100" is entered in 7102 and "starts with" is selected in 7103, the condition will be matched when the destination of the received data starts with "mfp100." The same applies if 7103 is "ends with" or "contains." Note that the conditional expression for 7103 is not limited to this one; other conditional expressions are also acceptable.

[0063] 7104 is the sender condition for the received data, and is set according to the destination entered in 7105 and the conditional expression selected in 7106. An example of a value set in 7104 is the value listed in the From header in the case of Internet fax. The only difference between 7101 and 7104 is the destination and sender; the settings for 7102, 7103 and 7105 and 7106 are the same.

[0064] 7107 is a condition for the subject of the received data, and is set according to the recipient entered in 7108 and the conditional expression selected in 7109. An example of a value set in 7107 is the value listed in the Subject header in the case of Internet fax. The only difference between 7101 and 7107 is the recipient and subject; the settings for 7102, 7103 and 7108 and 7109 are the same. In the example in Figure 7B, the following conditions are set: no recipient conditions, sender's name starts with "mfp200", and subject includes "quote".

[0065] Button 7110 is used to set transfer restrictions (restriction information for limiting transfers). Pressing button 7110 displays the transfer restriction settings screen shown in Figure 7C, which will be described later. Note that button 7110 is only displayed when the option to perform network data isolation is checked on the screen shown in Figure 5(a) for setting whether or not to perform network data isolation. 7111 is the settings button, which sets the transfer conditions entered in Figure 7B and returns to the screen in Figure 7A.

[0066] Figure 7C shows an example of a screen for setting transfer limits, which is accessed via button 7110 in Figure 7B. 7201 is a checkbox for setting transfer restrictions, and can be toggled between ON (checked) and OFF (unchecked). When checkbox 7201 is set to ON (transfer restrictions are applied), settings 7202 and 7203 can be configured. When checkbox 7201 is set to OFF (transfer restrictions are not applied), settings 7202 and 7203 cannot be configured.

[0067] 7202 is a selection of a network interface line to restrict the transfer of received data, and either line 1 or line 2 can be selected. In this embodiment, two lines are selected, but in the case of equipment with three or more lines, it is also possible to set transfer restrictions for each line.

[0068] Button 7203 is used to set the destination type for forwarding restrictions, which sets the type of destination that should be restricted as the forwarding destination for the line selected in 7202. When button 7203 is pressed, the destination type setting screen for forwarding restrictions, as shown in Figure 7D below, is displayed. 7204 displays the types of destinations that should be restricted as forwarding destinations, as set in 7203, and the settings for the action taken when forwarding is restricted. 7210 is a settings button that sets the transfer limit entered in Figure 7C and returns to the screen in Figure 7B.

[0069] Figure 7D is an example of a screen for setting the types of destinations that should be restricted as forwarding destinations, and it is called from the aforementioned 7203. 7301 sets whether to allow or deny email as the type of destination for forwarding. 7302 sets whether to allow or prohibit Internet faxes as a type of forwarding destination.

[0070] 7303 configures whether to allow or deny file servers as the destination type. In the example in Figure 7D, the configuration shows whether to allow or deny file servers as the destination type, but it is also possible to configure whether to allow or deny each protocol, such as SMB or FTP.

[0071] 7304 sets whether to allow or prohibit faxes as the type of destination for forwarding. Button 7305 is used to configure the action taken when receiving and forwarding is prohibited. Pressing button 7305 displays the forwarding prohibition action setting screen shown in Figure 7E, which will be described later. 7310 is a settings button that sets the type of destination to be restricted as a forwarding destination, as entered in Figure 7D, and returns to the screen in Figure 7C.

[0072] Figure 7E is an example of a screen for configuring the operation when receiving and transferring data is restricted, and it is accessed by button 7305 in Figure 7D. Radio buttons 7401 and 7402 are for configuring the action to take when receiving and forwarding is restricted and not performed; only one of them can be selected. Button 7401 is used to configure the system to save received data to the system box if the transfer is restricted and cannot be performed. Button 7402 is used to configure the system to save received data to a fax box if the transfer is restricted and cannot be performed.

[0073] Furthermore, if you set the fax to be saved to a fax box using button 7402, you can further specify the destination box using button 7403, and the number of the specified file box will be displayed. When saving to a fax box, specifying a fax box with a password set protects access to received data that is prohibited from being forwarded.

[0074] 7404 is a checkbox that determines whether or not to send an email when receiving and forwarding is restricted. When checkbox 7404 is checked, the forwarding completion notification button 7006 in Figure 7A is also turned ON. In this case, if an email address to which the forwarding completion notification will be sent is not set in 7006, a screen for setting the email address may be displayed to prompt the user to set it. 7410 is a setting button that configures the action to take when the transfer entered in Figure 7E is restricted, and then returns to the screen in Figure 7D.

[0075] Figure 9 shows an example of an email that is sent when email forwarding is restricted on device 7404. The contents of the received data are recorded in column 9001. In the example in Figure 9, the number that received the data was 0115, the date and time of receipt was "2024 / 05 / 08 17:24", the number of pages of the received data was 2, it was received via Internet fax, and the sender was "mfp100@zzz.co.jp".

[0076] 9002 specifies the forwarding conditions under which forwarding is restricted. In the example in Figure 9, the forwarding condition name is "Forwarding to ABC Trading Co., Ltd." and the forwarding destination is "salse@abc.co.jp". Item 9003 will state the reason why the transfer was restricted and could not be performed. 9004 indicates the location where received data that was not forwarded was stored.

[0077] Figure 10 shows an example of a data structure for recording network data isolation settings in this embodiment. The network data isolation control unit 409 uses the operation control unit 401 to acquire the settings shown in Figure 5 and saves them to the Flash ROM 210 as shown in Figure 10.

[0078] 10001 is a setting to determine whether or not to perform network data isolation. If 5001 in Figure 5(a) is checked, it is ON, and if 5002 is checked, it is OFF. 10002 is a setting value that determines whether or not to allow the transmission of data received on line 1 to line 2, and is set according to 5101 in Figure 5(b). 10003 is a setting value that determines whether or not to allow the transmission of data received on line 2 to line 1, and is set according to 5102 in Figure 5(b).

[0079] Figures 11A and 11B show an example of a data structure for recording transfer settings in this embodiment. The transfer control unit 410 uses the operation control unit 401 to acquire the settings shown in Figure 7 and saves them to the Flash ROM 210 as shown in Figures 11A and 11B.

[0080] Figure 11A shows an example of a data structure for setting transfer conditions. 11001 is the transfer condition ID, which is an ID that uniquely identifies the transfer condition within the MFP100. The transfer condition ID is issued within the MFP100 when a new transfer condition is registered.

[0081] 11002 is the setting value for the transfer condition name, and the name set in 7001 in Figure 7A is recorded there. 11003 is for setting the transfer conditions, and the value set in Figure 7B is stored there. 11004 is the destination setting value, and the destination selected in 7003 in Figure 7A is recorded there. 11005 is the file format setting value, and the file format selected in 7004 in Figure 7A is recorded. If the destination is a fax machine or other device that does not transfer files, this field will be left blank.

[0082] 11006 is the transfer time setting, which is the transfer time set in 7005 in Figure 7A. If no transfer time is set, 11006 will be blank. 11007 is the setting for forwarding completion notification, and the email address selected in 7006 in Figure 7A will be set. If forwarding completion notification is not sent, 11007 will be left blank.

[0083] 11008 is for setting transfer restrictions. If transfer restrictions are set, the transfer restriction ID, which will be described later in Figure 11B, will be recorded in 11008. If transfer restrictions are not set, 11008 will be left blank. 11009 is a setting to enable or disable the transfer condition, and is set in 6001 in Figure 6. It is set to ON if enabled and OFF if disabled. In this embodiment, it is set to enabled (ON) when the transfer condition is registered.

[0084] Figure 11B shows an example of the data structure for transfer limit settings. 11101 is a transfer restriction ID, which is an ID that uniquely identifies a transfer restriction within the MFP100. The transfer restriction ID is issued within the MFP100 when a new transfer restriction is registered. Note that 11101 corresponds to 11008 in the data structure of the transfer settings in Figure 11A.

[0085] 11102 is a restricted line setting, and it records the line that restricts the transfer set in 7202 in Figure 7C. 11103 is a transfer limit setting, and the settings configured in 7301, 7302, 7303, and 7304 in Figure 7D are recorded. 11104 is the setting for the transfer restriction operation, and the settings configured in 7401, 7402, 7403, and 7404 in Figure 7E are recorded.

[0086] Figure 12 is a flowchart illustrating an example of the process when the MFP100 of the first embodiment receives data from another device and performs a transfer function. The process shown in this flowchart is realized when the CPU201 of the MFP100 in Figure 12 reads a program stored in the Flash ROM211 into the DRAM202 and executes it. When the MFP100 starts up, the processing shown in this flowchart begins.

[0087] In S12001, the MFP100 checks whether it has received data from other devices. Specifically, the network control unit 407 monitors and checks network interfaces 220 and 221. If no data is received from other devices at this point (resulting in a "No" response in S12001), the MFP100 proceeds to S12015. The process in S12015 will be described later.

[0088] On the other hand, if data is received from another device (if S12001 is answered with Yes), the MFP100 proceeds to process S12002. In S12002, the network control unit 407 performs data reception processing. Note that detailed explanation of data reception processing is omitted as it is not essential to the present invention. Next, in S12003, the transfer control unit 410 checks with the network control unit 407 to obtain which line the data received in S12002 was received from.

[0089] Next, in S12004, the transfer control unit 410 determines whether a transfer setting exists. Specifically, the transfer control unit 410 checks whether a transfer condition setting like that shown in Figure 11A exists. If no transfer conditions are set at this point (i.e., No in S12004), the transfer process will not be executed, and the transfer control unit 410 proceeds to S12015. On the other hand, if a transfer condition setting exists (if Yes in S12004), the transfer control unit 410 proceeds to S12005.

[0090] In S12005, the transfer control unit 410 determines whether the data received and processed in S12002 matches the transfer conditions. Specifically, the transfer control unit 410 obtains the destination, sender, and subject from the network control unit 407. Furthermore, the transfer control unit 410 checks whether any of the obtained destination, sender, and subject match the transfer condition settings stored in 11003 in Figure 11A.

[0091] If no match is found at this point (the result is "No" in S1205), the transfer control unit 410 determines that there is no need to transfer the data and does not execute the transfer process, so it proceeds to S12015. On the other hand, if a match exists (if the answer is Yes in S1205), the transfer control unit 410 determines that a transfer is necessary and proceeds to S12006. In this embodiment, the forwarding conditions are set to recipient, sender, and subject, but other conditions may be used. In that case, the necessary information for the other conditions will be obtained and used to make the determination.

[0092] In S12006, the transfer control unit 410 determines whether network data isolation is enabled. The transfer control unit 410 checks with the network data isolation control unit 409 to confirm whether the network data isolation setting, as shown in 10001 in Figure 10, is ON or OFF. If the network data isolation setting is OFF, the transfer control unit 410 determines that network data isolation is invalid (determining No in S12006) and that the transfer can be executed, so it proceeds to S12014. The processing in S12014 will be described later. On the other hand, if the network data isolation setting is ON, the transfer control unit 410 determines that network data isolation is effective (determines Yes in S12006) and proceeds to S12007.

[0093] In S12007, the transfer control unit 410 determines whether the transfer is restricted for the transfer conditions matched in S12005. Specifically, the transfer control unit 410 checks whether the transfer restriction ID of the transfer restriction setting shown in Figure 11B is set for the transfer restriction 1108 of the matched transfer conditions. If no transfer restriction ID is set, the transfer control unit 410 determines that no transfer restriction setting exists (determining "No" in S12007) and that transfer is possible, so proceeds to S12014. On the other hand, if a transfer restriction ID is set, the transfer control unit 410 determines that a transfer restriction setting exists (determining Yes in S12007) and proceeds to S12008.

[0094] In S12008, the transfer control unit 410 determines whether the transfer of the data processed in S12002 is restricted to the line from which it was received. Specifically, the transfer control unit 410 checks whether the receiving line of the received data acquired in S12003 matches the restricted line of the transfer restriction setting for the matched transfer setting (a restricted line like 11102 in Figure 11B). If the lines do not match, the transfer control unit 410 determines that the transfer is not restricted (determining "No" in S12008) and proceeds to S12014. On the other hand, if the lines match, the transfer control unit 410 determines that the transfer is restricted (determines Yes in S12008) and proceeds to S12009.

[0095] In S12009, the forwarding control unit 410 determines whether to forward to a destination type that is restricted as a forwarding destination. Specifically, the forwarding control unit 410 determines whether the destination type, such as 11004 in Figure 11A, which is the forwarding destination of the forwarding condition matched in S12005, is a destination type that is permitted or prohibited by the forwarding restriction 11103. For example, if the destination type of the forwarding condition is "Email", it checks whether email is permitted or prohibited by the forwarding restriction 11103 in Figure 11A.

[0096] If the destination type is permitted by the forwarding restrictions, the forwarding control unit 410 determines that it is not a forwarding to a restricted destination type (determining "No" in S12009), and since forwarding is possible, it proceeds to S12014. On the other hand, if the destination type of the forwarding destination is prohibited by the forwarding restrictions, the forwarding control unit 410 determines that it is a forwarding to a restricted destination type (determining Yes in S12009) and proceeds to S12010.

[0097] In S12010, the transfer control unit 410 performs data saving as an error handling process because the transfer is restricted. Specifically, the transfer control unit 410 determines whether the save destination is a system box or a fax box based on the transfer restriction operation setting as shown in 11104 of Figure 11B, and instructs the data storage unit 402 to save the received data. In this embodiment, the save destination is a system box or a fax box, but it may be any other save destination such as an external file server, or it may be printed or sent to the administrator by email.

[0098] Next, in S12011, the transfer control unit 410 determines whether to send an email when a transfer restriction is in effect. Specifically, the transfer control unit 410 determines whether an email address is set in the transfer restriction operation setting as shown in 11104 in Figure 11B. If no email address is set, the forwarding control unit 410 decides not to send an email when forwarding is restricted (determines Yes in S12011) and proceeds to S12013. If an email address is set, the transfer control unit 410 determines that it will send an email when a transfer restriction is imposed (determines Yes in S12011) and proceeds to S12012.

[0099] In S12012, the transfer control unit 410 sends an email containing content that could not be transferred due to a transfer restriction to a designated notification recipient. Specifically, the transfer control unit 410 sends an email with content similar to that exemplified in Figure 9 to the email address specified in the transfer restriction operation setting, such as 11104 in Figure 11B, to the notification recipient for the transfer completion notification set in 7006 in Figure 7A. Since sending emails is a well-known technique and not essential to the present invention, a detailed explanation is omitted. After sending the email, the transfer control unit 410 proceeds to S12013.

[0100] In S12013, the transfer control unit 410 performs transfer error processing other than that described in S12010 and S12012. After performing the transfer error processing, the transfer control unit 410 proceeds to S12015.

[0101] In S12014, the transfer control unit 410 performs the transfer processing of the data received in S12002. Specifically, the transfer control unit 410 converts the data processed in S12002 into a file format as shown in 11005 of Figure 11A and sends it to a transfer destination as shown in 11004 of the transfer condition settings in Figure 11A. After sending the data, the transfer control unit 410 proceeds to processing in S12015.

[0102] In S12015, the transfer control unit 410 determines whether to execute the transfer process in this embodiment. Specifically, the transfer control unit 410 checks whether a transfer setting is registered in the transfer setting data as shown in Figure 11A and whether there is a valid one in 11009. If a transfer setting is registered in the transfer setting data in Figure 11A and there is a valid one in 11009 (if Yes in S12015), the transfer control unit 410 returns processing to S12001 and waits for the next data to be received.

[0103] On the other hand, if no transfer settings are registered in the transfer settings data as shown in Figure 11A, or if there are no valid settings in 11009, the transfer control unit 410 terminates the processing of this flowchart because there are no settings to transfer. Furthermore, if 11009 in Figure 11A is enabled in the transfer settings, the processing of this flowchart will resume. Furthermore, while this example shows limitations imposed by the forwarding restriction conditions set in the forwarding settings, you may also choose to follow the restrictions shown in Figure 5(b).

[0104] Through the above process, in an MFP connected to multiple lines, it becomes possible to prohibit the transfer of received data based on the receiving line and the destination. As a result, it is possible to prevent situations where data is sent to lines that are prohibited from transmitting via the gateway. In other words, it is possible to suppress unintended data transfer between multiple lines.

[0105] In the above embodiment, the forwarding restriction settings (7301, 7302, 7303, 7304 in Figure 7D, and 11103 in Figure 11B) were configured to allow or prohibit forwarding for each destination type. However, it is also possible to configure the system to only set the destination types for which forwarding is permitted, and to assume that destination types for which forwarding is not permitted are prohibited. Alternatively, it is also possible to configure the system to only set the destination types for which forwarding is prohibited, and to assume that destination types for which forwarding is not prohibited are permitted. For example, it is also possible to configure the system to set at least one of the destination types for which forwarding is permitted and the destination types for which forwarding is prohibited. In other words, any configuration that allows the identification of destination types for which forwarding is permitted and destination types for which forwarding is prohibited is acceptable.

[0106] [Second Embodiment] In the first embodiment, the forwarding destination was a single destination, but in this embodiment, we will describe an example in which a group destination, which is a collection of multiple destinations, is set as the forwarding destination. A group destination is a collection of multiple destinations, such as email addresses and file servers. When you send an email to a group destination, it will be sent to all recipients included in that group.

[0107] Figures 13A to 13C illustrate the address book screen in the second embodiment, and are screens corresponding to group destinations in the address book.

[0108] Figure 13A shows an example of an address book screen. Note that in Figure 13A, elements identical to those in Figure 8 are given the same numbering and their explanations are omitted. Button 13001 is the group destination registration button. When you select multiple destinations from the address book in the address book display area 8000 and press button 13001, the group destination name setting screen shown in Figure 13B will be displayed.

[0109] Figure 13B is an example of the group destination name setting screen. Enter the group recipient name in field 13101. Field 13102 is the registration button, where you confirm the group recipient name. Figure 13C shows an example of an address book screen with group destinations registered. 13201 is the registered group recipient. In the case of a group recipient, the number of recipients registered in that group is displayed in recipient 8003. In the case of the accounting group exemplified in Figure 13C, 3 recipients are displayed.

[0110] Figure 14 illustrates a screen for configuring the operation when a group destination is set as the forwarding destination and there are forwarding restrictions, according to the second embodiment. A group destination can have multiple types of destinations registered; for example, email and fax can be registered as a single group. In this case, if the forwarding restriction settings shown in Figure 7D are configured, email will be prohibited (7301) and fax will be permitted (7304). Thus, when a group destination has a mix of destinations that are permitted and those that are prohibited from forwarding, the group forwarding restriction settings shown in Figure 14 determine how forwarding for the group destination is handled.

[0111] In Figure 14, 14001 and 14002 are radio buttons for selecting the group's transfer restriction operation, and only one of them can be selected. Button 14001 is selected when you want to forward only to recipients who are permitted to forward emails from the recipients registered in the group destinations. If button 14001 is selected, in the example settings shown in Figure 7D, only faxes will be forwarded from the group where email and fax are registered.

[0112] Button 14002 is selected when you want to prevent forwarding to any recipients registered in a group destination if even one recipient in the group destination is set to be prohibited from forwarding. If button 14002 is selected, in the example settings shown in Figure 7D, since email forwarding is prohibited in the group where email and fax are registered, faxes registered in the same group destination will also not be forwarded.

[0113] Button 14010 is a settings button that confirms the transfer restriction operation settings for the group entered in Figure 14. Although not shown in the illustration, the screen in Figure 14 is accessed by the MFP100 administrator from the screen used to configure the MFP100's system environment.

[0114] Figures 15A and 15B show examples of emails sent when forwarding to a group recipient is restricted. Figure 15A is an example of an email when button 14001 in Figure 14 is selected, and only recipients who are permitted to forward emails to the group are forwarded. Note that the same numbers are used in the same locations as in Figure 9. In message 15001, the name of the group recipient (Accounting Group) and the recipient to whom forwarding is restricted (sales@abc.co.jp) are output as forwarding destinations. Entry 15002 will describe the reason why the message could not be forwarded to the group destination.

[0115] Figure 15B is an example of an email where 14002 in Figure 14 is selected, and if the group recipients include recipients who are prohibited from forwarding, forwarding to all recipients is not performed. Note that the same numbers are assigned to the same locations as in Figure 9. In message 15101, the name of the group destination (Accounting Group) is output as the forwarding destination. Item 15102 will describe the reason why the message could not be forwarded to the group destination.

[0116] Figures 16A and 16B are flowcharts illustrating an example of the processing that occurs when the MFP100 of the second embodiment receives data from another device and performs a transfer function. The processing shown in this flowchart is achieved when the CPU201 of the MFP100 in Figure 12 reads a program stored in the Flash ROM211 into the DRAM202 and executes it. When the MFP100 starts up, the processing in this flowchart begins. In Figure 16, the same steps as in Figure 12 are assigned the same step numbers and their explanations are omitted.

[0117] In the second embodiment, if the transfer control unit 410 determines in S12002 that the transfer of the data received is restricted to the line from which it was received (if the answer is Yes in S12008), the process proceeds to S16001.

[0118] In S16001, the transfer control unit 410 determines whether a group destination is set as the destination for the transfer. Specifically, the transfer control unit 410 checks whether the destination 11004 in Figure 11A, which is the destination for the transfer conditions matched in S12005, is a group destination. If it is determined that the destination is not a group destination (the answer is No in S16001), the transfer control unit 410 proceeds to S12009.

[0119] On the other hand, if it is determined to be a group destination (Yes in S16001), the transfer control unit 410 proceeds to S16003 because it needs to verify each individual destination registered in the group destination.

[0120] In S16003, the transfer control unit 410 determines whether forwarding to all destinations within the group destination is prohibited. Specifically, the transfer control unit 410 checks the group's forwarding restriction operation settings in Figure 14 to make this determination.

[0121] If 14001 in Figure 14 is selected, forwarding will only be performed to destinations for which forwarding is permitted. Therefore, the forwarding control unit 410 determines that forwarding to all destinations within the group destinations is not prohibited (determining "No" in S16003) and proceeds to S16004. On the other hand, if 14002 in Figure 14 is selected, then if forwarding is prohibited for even one destination within the group destination, forwarding to all destinations registered in the group destination is prohibited. Therefore, the forwarding control unit 410 determines that forwarding to all destinations within the group destination is prohibited (determining Yes in S16003) and proceeds to S16009.

[0122] In S16004, the transfer control unit 410 selects one unprocessed destination from the group destinations. Specifically, the transfer control unit 410 selects an unprocessed destination from among the destinations registered as group destinations, as shown in Figure 11A, for destination 11004. Next, in S16005, the transfer control unit 410 determines whether the destination type selected in S16003 is a destination type that should be restricted as a transfer destination. Specifically, the transfer control unit 410 determines whether the destination type selected in S16003 is prohibited from being transferred by 11103 in Figure 11B, which is set as a transfer restriction. If forwarding is prohibited at this point (if Yes in S16005), the forwarding control unit 410 proceeds to S16007 to check for other destinations registered in the group destinations.

[0123] On the other hand, if forwarding is not prohibited (the answer is No in S16005), the forwarding control unit 410 proceeds to S16006 in order to forward the data to the destination selected in S16004. In S16006, the transfer control unit 410 performs a transfer to the destination selected in S16004. This is equivalent to the process in S12014. Once the transfer process in S16004 is complete, the transfer control unit 410 proceeds to S16007 to check for other destinations registered in the group destinations.

[0124] In S16007, the transfer control unit 410 determines whether the group destination for transfer includes any unprocessed destinations. Specifically, the transfer control unit 410 checks whether there are any destinations registered in the group destination for transfer that were not selected in S16004.

[0125] If there are still unselected destinations (unprocessed destinations) at this point (if the answer is Yes in S16007), the transfer control unit 410 needs to check whether transfer is permitted for the type of unprocessed destination, and therefore returns to S16004. On the other hand, if there are no unselected destinations (unprocessed destinations) (the answer is No in S16007), the transfer control unit 410 proceeds to S16008 because it has checked for transfer restrictions for all destinations registered in the group destinations.

[0126] In S16008, the forwarding control unit 410 checks whether the destinations registered in the group destinations include any destinations that are prohibited from forwarding. Specifically, the forwarding control unit 410 checks whether there were any cases where the answer was "Yes" in S16005 above. If the destinations registered in the group destinations include destinations that are prohibited from forwarding (if the answer is Yes in S16008), the forwarding control unit 410 proceeds to S12011. On the other hand, if the destinations registered in the group destinations do not include any destinations that are prohibited from forwarding (the answer is No in S16008), the forwarding control unit 410 proceeds to S12015.

[0127] Furthermore, in S16009, the transfer control unit 410 selects one unprocessed destination from the group destinations. Specifically, the transfer control unit 410 selects an unprocessed destination from among the destinations registered as group destinations for destination 11004.

[0128] Next, in S16010, the transfer control unit 410 determines whether the destination type selected in S16009 is a destination type that should be restricted as a transfer destination. Specifically, the transfer control unit 410 determines whether the destination type selected in S16009 is prohibited from being transferred by 11103 in Figure 11B, which is set as a transfer restriction.

[0129] If transfer is prohibited at this point (if Yes in S16010), the transfer control unit 410 proceeds to S12011. On the other hand, if forwarding is not prohibited (the answer is No in S16010), the forwarding control unit 410 proceeds to S16011 in order to forward the data to the destination selected in S16004.

[0130] In S16011, the transfer control unit 410 determines whether the group destination for transfer includes any unprocessed destinations. Specifically, the transfer control unit 410 checks whether there are any destinations registered in the group destination for transfer that were not selected in S16009.

[0131] If there are still unselected destinations (unprocessed destinations) at this point (if the answer is Yes in S16011), the transfer control unit 410 needs to check if transfers are possible for the unprocessed destinations, and therefore returns to S16009. On the other hand, if there are no unselected destinations (unprocessed destinations) (the answer is No in S16011), the transfer control unit 410 confirms that transfers are not prohibited for all destinations registered in the group destinations, and proceeds to S16012.

[0132] In S16012, the transfer control unit 410 transfers the data received and processed in S12002 to all destinations registered in the group destination. Specifically, the transfer control unit 410 sends the data, which has been converted to the file format specified in 11005, to each of the destinations registered in the group destination set as the transfer destination in 11004 of the transfer condition setting in Figure 11A. After sending the data, the transfer control unit 410 proceeds to processing in S12015.

[0133] In the second embodiment, if the transfer control unit 410 determines in S12011 to send an email when a transfer restriction is in place (if the answer is Yes in S12011), the process proceeds to S160002.

[0134] In S16002, the forwarding control unit 410 sends an email containing content that could not be forwarded due to forwarding restrictions, similar to S12012 in Figure 12. If the forwarding restricted address is a single address, the procedure is the same as in S12012. However, if the forwarding restricted address is a group destination, the email is sent using either the text in Figure 15A or Figure 15B, depending on whether the group destination forwarding restriction operation setting in Figure 14 is selected as 14001 or 14002. Specifically, the forwarding control unit 410 checks in S16001 whether the forwarding destination was a group destination. If it is not a group destination, it creates an email with the text shown in Figure 9. If the forwarding destination is a group destination, the forwarding control unit 410 further checks whether the group destination forwarding restriction operation setting in Figure 14 is set to 14001. If it is set to 14001, it creates an email with the text shown in Figure 15A. On the other hand, if the setting for the group destination forwarding restriction operation in Figure 14 is set to 14002, the forwarding control unit 410 creates an email with the text shown in Figure 15B. After sending the email, the forwarding control unit 410 proceeds to S12013.

[0135] Through the above process, even when forwarding received data to a group destination, it becomes possible to prohibit forwarding depending on the destination registered in the group destination. As a result, it is possible to prevent situations where data is sent to lines that are prohibited from transmitting via the gateway. In other words, it is possible to suppress unintended data transfer between multiple lines.

[0136] The MFP may also perform the following actions: When the setting 10001 for whether or not to perform network data isolation in Figure 10 is changed from OFF to ON, the MFP may turn off the registered transfer conditions to prevent transfers from occurring. This is because transfer conditions set when network data isolation is OFF do not have transfer restrictions set, so the transfer conditions are temporarily turned OFF to prevent unintended transfers from occurring. Specifically, the transfer control unit 410 checks whether or not the setting 10001 for whether or not to perform network data isolation has been changed from OFF to ON. When the transfer control unit 410 detects that the setting 10001 has been changed from OFF to ON, it changes the setting 11009 for whether or not to enable the transfer conditions, which is ON in the transfer conditions registered in Figure 11A, to OFF. In addition, you may send a message (e.g., email) to the administrator or other designated recipient to confirm the forwarding settings.

[0137] Furthermore, if the MFP has a transfer time setting 11006 and the network line settings are changed while the received data is waiting for the transfer time set in 11006, the MFP may disable the transfer of the data waiting for that transfer time. Specifically, when the network control unit 407 detects that the settings of network I / F 220 and 221 have changed, it notifies the transfer control unit 410, and if there is data waiting to be transferred until the set transfer time, the transfer control unit 410 disables the transfer of that data. This is because the transfer of data waiting for the transfer time was determined before the network line settings were changed, so disabling the transfer temporarily prevents unintended transfers from occurring. In this case, the transfer of all data waiting for the above transfer time may be temporarily disabled, and then the process shown in Figures 12 and 16 may be performed again on this data to determine whether or not to transfer it again.

[0138] In each of the embodiments described above, the MFP 100 sets transfer restriction conditions (11008 in Figure 11A, restriction line 11102 and transfer restriction 11103 in Figure 11B) for each transfer condition related to the Internet fax function. Data transmitted from an external device is received by the Internet fax function via one of the multiple network I / Fs. Based on network information indicating the network I / F used at the time of reception and destination information according to the transfer condition, it is decided whether or not to transmit the received data (S12004~S12009). For data that is determined to be transmitted, transmission is performed using the destination information via one of the multiple network I / Fs (S12014). For data that is determined not to be transmitted, transmission using the destination information is not performed (S12010~S12013). This makes it possible to appropriately control the execution / prohibition of data transfer when using the data transfer function of data received by the Internet fax function in a data processing device equipped with multiple network interfaces such as an MFP and having an Internet fax function. As a result, it is possible to prevent situations where data is sent to lines that are prohibited from receiving data via the gateway. In other words, it is possible to suppress unintended data transfer between multiple lines for data received using the Internet fax function.

[0139] Furthermore, the present invention is not limited to image forming apparatus such as MFPs (multifunction printers), but can be applied to any data processing apparatus equipped with multiple network interfaces.

[0140] It should be noted that the structure and content of the various data described above are not limited to those mentioned, and it goes without saying that they can be composed of various structures and contents depending on the use and purpose. Although one embodiment has been described above, the present invention can take the form of, for example, a system, apparatus, method, program, or storage medium. Specifically, it may be applied to a system consisting of multiple devices, or to an apparatus consisting of a single device. Furthermore, any configurations combining the above embodiments are also included in the present invention.

[0141] [Other Embodiments] The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions. Furthermore, the present invention may be applied to a system consisting of multiple devices or to a device consisting of a single device. The present invention is not limited to the embodiments described above, and various modifications (including organic combinations of each embodiment) are possible based on the spirit of the invention, and these are not excluded from the scope of the invention. That is, all configurations that combine the above-described embodiments and their modified forms are included in the present invention.

[0142] This embodiment includes the following configurations, methods, and programs. (Composition 1) A data processing device equipped with multiple network interfaces and having Internet fax functionality, A receiving means that receives data transmitted from an external device via one of the multiple network interfaces using the Internet fax function, A determination means that determines whether or not to transmit the data received by the receiving means, based on network information indicating the network interface used by the receiving means when receiving the data, and destination information that conforms to the transfer conditions related to the Internet fax function, The system includes a transmission means that, in accordance with the transfer conditions, performs transmission of data received by the receiving means and determined by the determination means to be transmitted, using the destination information via one of the plurality of network interfaces, A data processing device characterized in that, with respect to data received by the receiving means that the decision means has determined not to transmit, transmission using the destination information is not performed. (Configuration 2) The storage means stores, as restriction information for restricting the transmission of data by the transmitting means, network information indicating the network interface used when the receiving means received data, and information on at least one of the types of destinations to which the transmitting means is permitted to transmit data and the types of destinations to which the transmitting means is not permitted to transmit data. The data processing apparatus according to configuration 1, characterized in that the determination means determines whether or not to perform data transmission using the restriction information stored in the storage means. (Composition 3) The data processing device according to configuration 2, characterized in that it has setting means for setting the aforementioned restriction information. (Composition 4) The data processing device according to configuration 3, wherein the setting means sets the restriction information for each of the transfer conditions. (Composition 5) If the destination information is a group containing multiple destination information, the determination means determines whether or not to perform transmission of the data received by the receiving means using the destination information for each destination information included in the group. With respect to data received by the receiving means that the determination means has determined should be transmitted using at least one of the destination information included in the group, the transmitting means will perform transmission using the destination information that it has determined should be transmitted, and will not perform transmission using destination information that it has determined should not be transmitted. A data processing device according to any one of configurations 1 to 4, characterized in that, with respect to data received by the receiving means, which the determination means has determined will not be transmitted using any of the destination information included in the group, no transmission is performed using any of the destination information included in the group. (Composition 6) If the destination information is a group containing multiple destination information, the determination means determines whether or not to perform transmission of the data received by the receiving means using the destination information for each destination information included in the group. With respect to data received by the receiving means, for which the determination means has determined that transmission should be performed using all destination information included in the group, the transmission means shall perform transmission using each of the destination information included in the group. A data processing device according to any one of configurations 1 to 4, characterized in that, with respect to data received by the receiving means, for which the determination means has determined not to perform transmission using at least one of the destination information included in the group, no transmission is performed using any of the destination information included in the group. (Composition 7) A data processing device according to any one of configurations 1 to 6, characterized in that it has a notification means for notifying a predetermined notification recipient of data that has been received by the receiving means but for which transmission using the destination information was not performed. (Composition 8) A data processing device according to any one of configurations 1 to 7, characterized in that, when the settings of the multiple network interfaces are changed, data that has been determined by the determination means to be transmitted but has not yet been transmitted is not transmitted using the destination information. (Method 1) A control method for a data processing device having multiple network interfaces and internet fax functionality, A receiving step in which data transmitted from an external device is received by the Internet fax function via one of the multiple network interfaces, A decision step, based on network information indicating the network interface used to receive data in the reception step and destination information that conforms to the transfer conditions for the Internet fax function, determines whether or not to transmit the data received in the reception step. A transmission step is performed to transmit, using the destination information, the data received in the receiving step and determined to be transmitted in the determination step, via one of the plurality of network interfaces, in accordance with the transfer conditions. A control method for a data processing device, characterized in that, with respect to data received in the receiving step that has been determined not to be transmitted in the determination step, transmission using the destination information is not performed. (Program 1) A program that causes a computer equipped with a data processing device to execute the control method for the data processing device described in Method 1.

Claims

1. A data processing device equipped with multiple network interfaces and having Internet fax functionality, A receiving means that receives data transmitted from an external device via one of the multiple network interfaces using the Internet fax function, A determination means that determines whether or not to transmit the data received by the receiving means, based on network information indicating the network interface used by the receiving means when receiving the data, and destination information that conforms to the transfer conditions related to the Internet fax function, The system includes a transmission means that, in accordance with the transfer conditions, performs transmission of data received by the receiving means and determined by the determination means to be transmitted, using the destination information via one of the plurality of network interfaces, A data processing device characterized in that, with respect to data received by the receiving means that the decision means has determined not to transmit, transmission using the destination information is not performed.

2. The storage means stores, as restriction information for restricting the transmission of data by the transmitting means, network information indicating the network interface used when the receiving means received data, and information on at least one of the types of destinations to which the transmitting means is permitted to transmit data and the types of destinations to which the transmitting means is not permitted to transmit data. The data processing apparatus according to claim 1, characterized in that the determination means determines whether or not to perform data transmission using the restriction information stored in the storage means.

3. The data processing device according to claim 2, characterized in that it has setting means for setting the aforementioned restriction information.

4. The data processing device according to claim 3, wherein the setting means sets the restriction information for each of the transfer conditions.

5. If the destination information is a group containing multiple destination information, the determination means determines whether or not to perform transmission of the data received by the receiving means using the destination information for each destination information included in the group. With respect to data received by the receiving means that the determination means has determined should be transmitted using at least one of the destination information included in the group, the transmitting means will perform transmission using the destination information that it has determined should be transmitted, and will not perform transmission using destination information that it has determined should not be transmitted. The data processing apparatus according to any one of claims 1 to 4, characterized in that, with respect to data received by the receiving means, which the determination means has determined will not be transmitted using any of the destination information included in the group, no transmission is performed using any of the destination information included in the group.

6. If the destination information is a group containing multiple destination information, the determination means determines whether or not to perform transmission of the data received by the receiving means using the destination information for each destination information included in the group. With respect to data received by the receiving means, for which the determination means has determined that transmission should be performed using all destination information included in the group, the transmission means shall perform transmission using each of the destination information included in the group. The data processing apparatus according to any one of claims 1 to 4, characterized in that, with respect to data received by the receiving means, for which the determination means has determined not to perform transmission using at least one of the destination information included in the group, no transmission is performed using any of the destination information included in the group.

7. The data processing device according to any one of claims 1 to 4, further comprising a notification means for notifying a predetermined recipient of data that has been received by the receiving means but for which transmission using the destination information was not performed.

8. The data processing device according to any one of claims 1 to 4, characterized in that, when the settings of the multiple network interfaces are changed, data that has been determined by the determination means to be transmitted but has not yet been transmitted is not transmitted using the destination information.

9. A control method for a data processing device having multiple network interfaces and internet fax functionality, A receiving step in which data transmitted from an external device is received by the Internet fax function via one of the multiple network interfaces, A decision step, based on network information indicating the network interface used to receive data in the reception step and destination information that conforms to the transfer conditions for the Internet fax function, determines whether or not to transmit the data received in the reception step. A transmission step is performed to transmit, using the destination information, the data received in the receiving step and determined to be transmitted in the determination step, via one of the plurality of network interfaces, in accordance with the transfer conditions. A control method for a data processing device, characterized in that, with respect to data received in the receiving step that has been determined not to be transmitted in the determination step, transmission using the destination information is not performed.

10. A program for causing a computer in a data processing device to execute the control method for the data processing device described in claim 9.

Images