Image processing apparatus and image processing method

Abstract

The present invention provides an image processing device, etc., that effectively prevents access to dangerous network resources. [Solution] The method extracts identification information corresponding to network resources from the input document data, determines whether access to the network resources is appropriate based on the identification information, and based on the result of the determination, either restricts the output of the document data or modifies at least a part of the identification information before outputting the document data.

Description

Technical Field

[0001] The present disclosure relates to an image processing apparatus and the like.

Background Art

[0002] There has conventionally been a technique for facilitating access to network resources by machine-reading a two-dimensional code indicating the URL (Uniform Resource Locator) of the network resources with a camera of a mobile terminal such as a smartphone.

[0003] As a related technique, Patent Document 1 describes an information processing apparatus that determines the risk of an access destination indicated by link information based on blacklist or virus definition data when the input image data includes the link information. When this information processing apparatus determines that the access destination is dangerous, it notifies the user to that effect. Further, Patent Document 1 discloses an information processing apparatus that deletes link information indicating an access destination determined to be dangerous from the input image data.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] According to the former information processing apparatus described in Patent Document 1, when it is determined that the access destination indicated by the link information is dangerous, while notifying the user to that effect, the original image data is output. This image ​​​​​​​​​The data contains dangerous link information. Therefore, viewing the output images or printed materials may be dangerous. If a person accesses a dangerous website based on the link information due to carelessness or error, There is a risk that this may happen.

[0006] Furthermore, according to the latter information processing device described in Patent Document 1, the access destination indicated by the link information If it determines that the link information is dangerous, it will remove that link information from the original image data and output the result. In this case, the output image or printed material does not contain link information, so the person who sees the output will know There is no risk of accessing dangerous destinations. However, link information will be excluded from the output. Therefore, those who view the output will not know that the original image data contained link information.

[0007] The purpose of this disclosure is to provide image processing that effectively suppresses access to dangerous network resources. The objective is to provide devices, etc. [Means for solving the problem]

[0008] The image processing device disclosed herein processes input document data and corresponds to network resources. An extraction unit extracts identification information, and based on the identification information, it outputs to the network resource. A determination unit that determines whether access is appropriate, and based on the result of the determination, the output of the original data. Limit the force, or modify at least a portion of the identification information to output the original data. It is characterized by comprising an output section.

[0009] The image processing method disclosed herein processes input document data and corresponds to network resources. Steps to extract identification information and, based on the identification information, the network resources A step of determining the propriety of access thereto, and based on the result of the determination, restricting the output of the manuscript data or changing at least a part of the identification information to output the manuscript data characterized by including a step of doing so.

[0010] The program of the present disclosure extracts identification information corresponding to network resources from the input manuscript data, determines the propriety of access to the network resources based on the identification information, and based on the result of the determination, restricts the output of the manuscript data or changes at least a part of the identification information to output the manuscript data characterized by operating a computer as an output unit for doing so.

Effect of the Invention

[0011] According to the present disclosure, an image processing device or the like that suitably suppresses access to dangerous network resources is provided.

Brief Description of the Drawings

[0012] [Figure 1] It is a diagram for explaining the entire system in the first embodiment. [Figure 2] It is a diagram for explaining the functional configuration of the multifunction device in the first embodiment. [Figure 3] It is a diagram for explaining the operation of the multifunction device in the first embodiment. [Figure 4] It is a diagram for explaining an example of manuscript data in the first embodiment. [Figure 5] It is a diagram for explaining the entire system in the second embodiment. [Figure 6] It is a diagram for explaining the operation of the multifunction device in the second embodiment. [Figure 7] It is a diagram for explaining an example of the output image in the second embodiment.​​​ [Figure 8] This is a diagram illustrating the overall system in the third embodiment. [Figure 9] This is a diagram illustrating the functional configuration of the multifunction printer in the third embodiment. [Figure 10] This is a diagram illustrating the functional configuration of a mobile terminal in the third embodiment. [Figure 11] This is a diagram illustrating the operation of the multifunction printer in the third embodiment. [Figure 12] This is a diagram illustrating the output change process of the multifunction printer in the third embodiment. [Figure 13] This figure illustrates an example of a table stored by a multifunction printer in the third embodiment. [Figure 14] This is a diagram illustrating an example of a web page published by a multifunction printer in the third embodiment. [Figure 15] This is a diagram illustrating the operation of the multifunction printer and mobile terminal in the third embodiment. [Figure 16] This figure illustrates an example of a webpage published by a multifunction printer in a variation of the third embodiment. [Figure 17] This diagram illustrates the operation of a multifunction printer and a mobile terminal in a variation of the third embodiment. [Modes for carrying out the invention]

[0013] The following describes embodiments for implementing this disclosure with reference to the drawings. The embodiments and variations described herein are examples for illustrating the present disclosure and are not part of the claims. The technical scope of the invention is not limited to the following description.

[0014] [1. First Embodiment] [1.1 Overall Structure] Figure 1 is a diagram illustrating a first embodiment of the present disclosure. System 70 It has an input terminal 1 and a multifunction device 7. The input terminal 1 inputs the document data 3 to the multifunction device 7. It is a terminal device. Input terminal 1 is, for example, a personal computer, a workstation It is an information processing device such as a tablet or smartphone. Input terminal 1 is a portable information terminal such as a tablet or smartphone. The end is also fine.

[0015] Input terminal 1 and multifunction printer 7 provide the original document data 3 from input terminal 1 to multifunction printer 7 in some way. It is configured to be usable. For example, input terminal 1 and multifunction printer 7 are on the same LAN (Local Area Network). If connected to a network, data communication will be performed via LAN, allowing input terminal 1 to be used. You may send the document data 3 from the input terminal 1 to the multifunction printer 7. Also, connect the input terminal 1 and the multifunction printer 7 via USB (U Connect using a Universal Serial Bus cable and directly transfer the document data 3 from input terminal 1 to the multifunction printer 7. You may send it. Also, on input terminal 1, removable external storage devices such as USB memory After storing the original data 3 in the external storage device and disconnecting it from the input terminal 1, connect it to the multifunction printer 7. Subsequently, the multifunction device 7 may read the document data 3 from its external storage device.

[0016] Original data 3 is the data output to the display screen or the printer's print medium. Data 3 includes identification information 5. Identification information 5 is information that specifies a network resource. Yes, there are. Examples of identification information include URL (Uniform Resource Locator) and IP (Internet Protocol). ocol) address, issued by a Certificate Authority (CA) that issues digital certificates to prove its legitimacy. The root certificate, and the mobile device, via the mobile data communication network, There are configuration profiles that specify the access point and other settings used when connecting to the internet. Note that the original data 3 and identification information 5 in the figure are shown as they appear on the display device or in the printed medium. This diagram schematically shows what it looks like when printed on the body.

[0017] Identification information 5 may be text, images, barcodes, 2D codes, or a combination thereof. It is included in manuscript data 3 as a reference. The characters are included in manuscript data 3 as character codes. It may be included in manuscript data 3 as an image representing the shape of the characters. Two-dimensional code The format can be stack-based, such as PDF (Portable Data File) 417 or CODE419. Alternatively, a matrix format such as a QR code (registered trademark) or a data matrix is ​​also acceptable.

[0018] A multifunction device (7) is a type of image processing device that includes copying, facsimile, and printing functions. It is a multi-functional all-in-one device equipped with a scanner function. All-in-one device 7 is equipped with other functions as well. This is preferable, for example, a web server function that publishes web pages on a network, It is preferable to have an internet fax function that allows information to be exchanged via email. It's nice.

[0019] The multifunction printer 7 may or may not print output 9 based on the original data 3. Output 9 is the original data 3 printed on a printing medium or displayed on a display device. Yes. Output 9 includes a disabled image 11. Disabled image 11 specifies a network resource. This is information with identification information 5, which is used as information, invalidated.

[0020] Network resources are connected to the network and available via the network. It is a resource. Resources can be either hardware or software. Hardware includes, for example... For example, server equipment, shared storage, network printers, network scanners, etc. Server devices include, for example, file servers, web servers, and database servers. It is a device that operates various types of servers. The software includes, for example, file servers, etc. There are various server programs such as web servers and database servers. The CREOS can be accessed from mobile devices. As mentioned above, network resources This is specified by identification information 5. For example, if a network resource is a specific webpage In this case, the identifying information is either a URL or an IP address.

[0021] [1.2 Configuration of Multifunction Printer 7] The multifunction printer 7 receives character information in the document data 3 that indicates a predetermined type of identification information. It determines whether or not it is present. If it is included, the multifunction printer 7 further determines the corresponding identification information. The system determines whether it is appropriate to access network resources. Based on the determination result, the multifunction device 7 This restricts the output of document data 3. Here, the multifunction printer 7 includes a URL as identification information. The appropriateness of access will be determined based on the circumstances.

[0022] Figure 2 shows an example of the functional configuration of the multifunction device 7. The multifunction device 7 includes a storage unit 21 and a judgment unit. Data 25, display unit 27, operation unit 29, image input unit 31, image forming unit 33, communication unit 35, connection It comprises a continuation unit 37 and a control unit 41. The control unit 41 includes an extraction unit 43, a determination unit 45, and a user inquiry unit. It comprises a section 47 and an output section 49.

[0023] The memory unit 21 stores various programs and data necessary for the operation of the multifunction device 7. This is a functional unit. The memory unit 21 is a temporary memory such as DRAM (Dynamic Random Access Memory). Recording devices capable of storing large amounts of data, such as SSDs (Solid State Drives) composed of semiconductor memory. Non-temporary recording devices such as ives and HDDs (Hard Disk Drives) composed of magnetic disks. This includes... Also, although the memory unit 21 is shown as a single configuration for the sake of explanation, the program... The area used for executing RAM (main memory) and the area where programs and data are stored (supplementary memory) The auxiliary memory area, the area used for the cache, etc., are configured as separate devices for each purpose. That's good too.

[0024] Furthermore, the memory unit 21 stores the determination data 25. The determination data 25 corresponds to the identification information. When the determination unit 45 determines whether the network resource is suitable for access, This is the data. Judgment data 25 consists of blacklisted URLs of known dangerous sites. A strike is also acceptable. Additionally, judgment data 25 is the URL of a site that has been pre-confirmed to be safe. A whitelist consisting of L is also acceptable. Furthermore, the judgment data 25 contains the virus. A virus pattern file containing specific strings or characteristic behavioral patterns would also suffice. .

[0025] The display unit 27 is a functional unit for displaying images and text. In particular, the multifunction printer 7 is a document data When outputting 3 as an image, the display unit 27 displays output 9. The display unit 27, for example, For example, liquid crystal displays (LCDs) and organic ELs (Electro-Luminescent displays) It is composed of a panel, etc. The display unit 27 may be a standalone display device, It may also include an externally connected display device.

[0026] The control unit 29 receives operation input from the user. For example, the control unit 29 receives hardware It consists of face keys and software keys. The operation unit 29 can also be used for things like sending faxes and drawing. This includes task keys for executing tasks such as image loading, and cancel keys for stopping operations. Furthermore, the control unit 29 has physical keys such as a task key, a cancel key, a power key, and a power saving key. It may include operation keys.

[0027] The image input unit 31 reads the image (document) and outputs it as image data. 31 consists of a general scanner (image input device). Also, the image input unit 3 For example, image data may be input from an external storage medium such as a USB memory stick, or via a network. Images may be received via twerk.

[0028] The image forming unit 33 is equipped with a printing mechanism such as an inkjet printer or a laser printer. Using a printing mechanism, a print image based on the input data is printed onto a printing medium such as paper. Forms. In particular, when the multifunction printer 7 prints out the original data 3, the image forming unit 33 outputs Print the number 9 onto a printing medium.

[0029] The communication unit 35 is a functional unit for connecting to a network and performing data communication. 35, for example, has an interface that can connect to wired LAN, wireless LAN, and LTE networks. It is configured such that the communication unit 35 is connected to the network, and the multifunction printer 7 is connected to the network. It will be connected to the device and the external network.

[0030] The connection section 37 connects the multifunction printer 7 to enable data communication between it and other devices. The connection section 37 is a USB interface, to which a USB memory stick or similar device is connected. The connection part 37 can also be used for other purposes, such as NFC (Near Field Communication) and Blue It may be equipped with short-range wireless technology such as tooth(registered trademark). Communication unit 35 and connection unit 37 These may be configured as a single unit. For example, the communication unit 35 and the connection unit 37 may be wireless LAN or B It may be provided as an integrated wireless communication interface that enables the use of Bluetooth.

[0031] The control unit 41 is a functional unit for controlling the entire multifunction printer 7. The control unit 41 is also It consists of multiple control devices and control circuits, for example, a CPU (Central Processing Unit) It is composed of, for example, an SoC (System on a Chip). Furthermore, the control unit 41 is composed of the memory unit 21 The extraction unit 43 reads the program stored in and executes the processing, and the determination unit It functions as a unit 45, a user inquiry unit 47, and an output unit 49.

[0032] The extraction unit 43 performs the process of extracting character information from the original data 3. The character information is originally The character codes included in manuscript data 3 are also acceptable. Furthermore, the character information is included in manuscript data 3. Images representing the shape of characters are also acceptable. Additionally, the text information should be presented as a barcode or 2D code in the original document. This may be included in Data 3. Furthermore, the textual information may be a combination of these.

[0033] The determination unit 45 determines, based on the determination data 25, that the network resource indicated by the identification information 5 is The process is executed to determine whether it is safe or not. For example, if the judgment data 25 is a blacklist. The determination unit 45 determines whether the network resource indicated by the identification information 5 is included in the blacklist. The determination unit 45 determines whether or not it is included in the blacklist. The network is judged as dangerous. If it is not included in the blacklist, the determination unit 45 determines that the network - Determine the resource to be safe. Also, for example, if the judgment data 25 is a whitelist. The determination unit 45 determines whether the network resource indicated by the identification information 5 is included in the whitelist. The determination unit 45 determines whether or not it is included in the whitelist. The system is determined to be safe. If it is not included in the whitelist, the determination unit 45 determines that the system is safe. The network resource is identified as dangerous. Also, for example, if the judgment data 25 is a virus pattern In the case of a file, the determination unit 45 accesses its network resource via the communication unit 35. The system receives data. The determination unit 45 determines the received data based on the virus pattern file. The system determines whether or not the data contains a virus. If a virus is present, the determination unit 45 determines that the network resource is dangerous. If it does not contain a virus, The determination unit 45 determines that the network resource is safe.

[0034] The user inquiry unit 47 determines that the network resource indicated by the identification information 5 is dangerous, and the determination unit 45 determines that it is dangerous. If a determination is made, a message is displayed via the display unit 27 asking the user whether output is necessary. Furthermore, the user inquiry unit 47 receives input regarding the necessity of output via the operation unit 29. .

[0035] The output unit 49 receives input from the operation unit 29 indicating that the user inquiry unit 47 will not output any output. If this occurs, the output of the original data 3 will be stopped. Also, the output unit 49 will use network resources A message indicating that the output has been stopped due to danger is displayed on the display unit 27.

[0036] [1.3 Operation] Figure 3 is a flowchart illustrating the operation of the system 70 in the first embodiment. Here, the multifunction printer 7 extracts the URL from the document data 3 as identification information. Let's assume that.

[0037] Input terminal 1 inputs document data 3 to multifunction printer 7 (step S1). Document data 3 is , including identification information 5 corresponding to the network resource. Figure 4 shows an example of manuscript data 3. The original data 61, 63, and 65 are shown. In the figure, the original data 61, 63, and 65 are, The printed image is shown as it would appear if printed as is. Original data 61, 63 and Both of these include a URL for a network resource (www.example.com). .

[0038] The original data 61 contains only characters as identification information 5. In this case, the characters are character codes. It may be included as a column, or as an image representing the shape of the string. Data 63 contains only a two-dimensional code as identification information 5. Original data 65 contains identification information 5 It includes both text and a two-dimensional code. Examples of two-dimensional codes are shown in manuscript data 63 and 65. QR codes are used for this purpose.

[0039] When the communication unit 35 receives the original data 3, the extraction unit 43 extracts character information from the original data 3. Attempting extraction (Step S3). Here, character information refers to information represented by a sequence of character codes. The extraction unit 43 generates a virtual print image from the original data 3, and the print image For the page, perform character recognition processing similar to OCR (Optical Character Recognition) processing. Then extract the character information. If the original data 3 contains character codes, the extraction unit 43 will extract the original The character code may be extracted from the draft data 3. Also, the extraction unit 43 is a virtual mark The process involves detecting a 2D code from the printed image and then decoding the detected 2D code. By doing so, character information is extracted from the original data 3 as a decoding result. Original data If no text information is extracted from step 3 (if "No" is selected in step S3), proceed to the next step as described below. Proceed to S15.

[0040] If character information is extracted from the original data 3 (if "Yes" is selected in step S3), the extraction unit 43 This extracts identifying information from the text information (step S5). Generally, URLs are skim From the name of the host, hostname, or filename or directory name within the host's file system. It is written according to the format. The extraction unit 43 selects from the extracted character information U The string written according to the RL format is extracted as identification information. Note that Figure 4 shows As shown in the illustrated manuscript data 61, 63, and 65, the scheme name ("http: / / " or "https: Strings with " / / ") omitted may also be extracted as identification information. The extracted character information is used for identification. If no information is provided (answer "No" in step S5), proceed to step S15, which will be described later.

[0041] If the extraction unit 43 extracts identification information (yes in step S5), the determination unit 45 determines Based on the determination data 25 stored in the memory unit 21, the network corresponding to the identification information The CREOS determines whether or not it is suitable for access (whether or not the access destination is dangerous). Step S7). The determination unit 45 determined that it was suitable for access (the access destination was not dangerous). If the answer is "No" in step S7, proceed to step S15, which will be described later.

[0042] Methods for determining whether access is appropriate include, for example, the URL of a known dangerous site. The storage unit 21 has pre-stored a blacklist consisting of L as judgment data 25. Section 45 compares the extracted URLs with each URL in the blacklist. Matching URLs If L is present, the determination unit 45 determines that access to the extracted URL is not suitable. If no matching URL exists, the determination unit 45 will access the extracted URL. It is determined to be suitable.

[0043] Other methods for determining whether access is appropriate include, for example, the following: The determination unit 45 is the communication unit Using 35, access the network resource indicated by the extracted URL via the network. Access and receive data from that network resource. The determination unit 45 determines the data Based on the virus pattern data stored as 25, the received data contains viruses It determines whether or not it contains a virus. If it contains a virus, the determination unit 45 determines whether It is determined that access to network resources is unsuitable. It does not contain viruses. If not, the determination unit 45 determines that access to the network resource is appropriate. If it is determined that it is suitable for Access (no in step S7), then step S1 will be described below. Proceed to step 5.

[0044] If it is determined that the access destination is unsuitable (the destination is dangerous) (Step S7) If the answer is "Yes", the user inquiry unit 47 will tell the operator operating the multifunction printer 7 the display unit Display the query message via 27 (step S9). The query message is: For the author, identification information of network resources unsuitable for access is stored in the original data. A message will appear informing you that it is included in item 3, and whether you want to cancel the output of manuscript data 3. This includes a message asking the operator whether or not to proceed.

[0045] In response to the display of this inquiry message, the operation unit 29 stops outputting the document data 3. If an input indicating "no" is received (in step S11, "No"), the following will be described later. Proceed to step S15.

[0046] Conversely, in response to the display of this inquiry message, the operation unit 29 outputs the document data 3. If an input indicating cancellation is received ("Yes" in step S11), the output unit 49 will: The output of manuscript data 3 will be stopped. Also, the output unit 49 will operate the operation to stop output on the display unit 27. A message is displayed to notify the rator (step S13).

[0047] If the answer in steps S3, S5, S7, and S11 is "No", the output unit 49 outputs the original data. 3 is output as is from the display unit 27 or the image forming unit 33 (step S15).

[0048] [1.4 Effects] According to this embodiment, the original document data entered into the multifunction printer is not suitable for access. If it includes identification information corresponding to the network resource, a message will be sent to notify you of this. The system displays a message asking the operator whether or not to cancel the output of the original data, and By stopping the output of the original document data, the operator is informed that the original document data is suitable for access. It can also indicate that it contains identification information corresponding to a network resource that is not currently registered. In addition, by displaying a message indicating that printing has been canceled, the operator is notified of the situation. It can be made to happen.

[0049] At the same time, according to this embodiment, the multifunction device outputs the original data to the display unit, and / Alternatively, printing to the print medium will be canceled. Therefore, the displayed / printed document data will be canceled. To prevent someone who has visually inspected the network from accessing network resources that are not suitable for access. This can be prevented. Also, the displayed / printed document data can be scanned using a smartphone or other device. It will no longer be possible to machine read the data using a mobile device equipped with a camera. Therefore, the mobile device will The displayed / printed original data may be inaccessible to network resources that are not suitable for access. This can prevent access to the site from happening in the first place.

[0050] [2. Second Embodiment] [2.1 Overall Structure] Figure 5 is a diagram illustrating a second embodiment of the present disclosure, system 80. Yes. System 80 has an input terminal 1 and a multifunction device 7. System 80's input terminal 1, multifunction device 7 The details of the combined machine 7 are the same as those of system 70. In the second embodiment, the combined machine 7 outputs output 81 based on the original data 3. Output 81 is from the original data 3 Then, change at least a portion of the image corresponding to identification information 5 to an invalid image and print it on a print medium. It is something that has been done, or something that has been displayed on the screen of a display device.

[0051] [2.2 Operation] Figure 6 is a flowchart illustrating the operation of the multifunction device 7 in system 80. The operation of the multifunction device 7 in system 80 is as described above for steps S1 to S7. It is similar to the Tem 70.

[0052] In this embodiment, the network resource corresponding to the identification information is not suitable for access. In addition, the user inquiry unit 47 displays the inquiry message using the display unit 27 (step S 21) The inquiry message informs the operator that the network is not suitable for access. This includes a notification that the identification information of the CREASE is included in the original data 3. The matching message asks the operator whether or not to change the identification information of original data 3 to an invalid image. This includes asking about it.

[0053] In response to the display of this inquiry message, the operation unit 29 removes the identification information of the original data 3. If an input operation is received indicating that the image should not be changed to an effective image (step S23 is "OK"), "Okay," then proceed to step S15.

[0054] On the other hand, in response to the display of this inquiry message, the operation unit 29 displays the identification information of the original data 3. Assume that an input operation has been received instructing that the notification be changed to an invalid image (in step S23) "Yes." In this case, the output unit 49 outputs the image corresponding to the identification information from the original data 3. At least a portion of the image is changed to a disabled image. The output unit 49 also displays the disabled image on the display unit. Output from 27 or image forming unit 33 (step S25).

[0055] When outputting from the display unit 27, the output unit 49 outputs the image of the original data 3, including the invalid image. The image is displayed on the screen of the display unit 27. When outputting from the image forming unit 33, the output unit 49 The image forming unit 33 is instructed to form an image of the original data 3, including the invalidated image, on the printing medium. Output it as a printed document.

[0056] [2.3 Disabled Image] Figure 7 shows the original data after at least a portion of the image corresponding to the identification information has been replaced with an invalidated image. This is an example of an output image produced by outputting data. The original data is shown in Figure 4. The manuscript data 63 will be used.

[0057] Output images 91, 93, and 95 are images in which part of the 2D code has been replaced with an invalidated image. The output image 91 is created by covering the entire two-dimensional code of the original data 63 with diagonal lines. This is designed to be undecodeable as a dimensional code. The color used for the diagonal lines can be black, but other colors are also available. The color can also be this color. Furthermore, the number of colors used for the diagonal lines is not limited to one color; multiple colors may be used. Alternatively, instead of diagonal lines, the area may be covered with a fill pattern such as shading or dots. Output Image 93 shows an "X" drawn over the same QR code. Image 95 shows a white band with the word "Danger" written on it, superimposed on the same 2D code. This is a depiction of...

[0058] When changing part of a QR code to an invalid image, the error correction function for QR codes will not correct errors. It is preferable that this is done in a way that makes correction impossible. For example, a typical QR code In this case, the error correction capability is approximately 30 percent. Therefore, output images 91, 93, and 95 If the two-dimensional code is a QR code, the invalidation images for output images 91, 93, and 95 are respectively Therefore, it is preferable that it exceeds 30 percent of the total 2D codes.

[0059] Output images 97, 101, and 103 are images where the entire 2D code has been replaced with a disabled image. Yes. Output image 97 is created by filling the entire two-dimensional code of the original data 63 with black. This prevents it from being decoded as a two-dimensional code. The fill color is Other colors are also acceptable. Furthermore, the color used for filling can be a single color or multiple colors. Output image 101 is the result of replacing the entire 2D code with another image that was prepared in advance as an invalidation image. Therefore, the output image 101 shows a star, a circle, and a triangle, but the content of what is drawn is left to the discretion of the user. This is the intention. Output image 103 shows the entire two-dimensional code, indicating that dangerous identification information has been disabled. This image area has been replaced with an image containing a text message to be conveyed to the reader. Output image 97 In versions 101 and 103, the entire 2D code is replaced with an invalid image, so the error correction function... It is not possible to correct the invalidated image and restore the QR code.

[0060] When printing original data in which the 2D code has been changed to an invalid image, the output unit 49 prints the printing medium By printing on top of a QR code already printed on the body, an invalid image can be created on the print medium. It is also acceptable to do so. Furthermore, when printing the original document data in which the QR code has been changed to an image that disables it, The power unit 49 synthesizes the original data in which the two-dimensional code has been changed to an invalid image, and the synthesized original The manuscript data may be printed onto a print medium.

[0061] [2.4 Effects] According to System 80, the document data entered into the multifunction printer is not suitable for access. If the document data contains identification information corresponding to network resources, the identification information of the original data will be disabled. By displaying a message that includes asking the operator whether or not to make the change, The input file data is compatible with network resources that are not suitable for access. It is possible to inform that it contains identifying information.

[0062] Furthermore, according to System 80, the document data entered into the multifunction printer is suitable for access. If it includes identification information corresponding to a network resource that does not exist, less of the identification information will be printed. Some of the images will be changed to invalid images. This will allow the multifunction printer operator and the printed materials to visually inspect them. If a person accesses network resources that are not suitable for access via printed materials... This can prevent that from happening in the first place.

[0063] According to System 80, the entire identification information is transformed into an invalid image to the extent that it cannot be machine-readable. This will be updated. As a result, mobile devices equipped with cameras, such as smartphones, will be able to display printed materials and screens. The above identification information will no longer be machine-readable. Therefore, according to system 80 Mobile devices may not be suitable for accessing the displayed / printed document data. This can prevent unauthorized access to network resources.

[0064] [3. Third Embodiment] [3.1 Overall Structure] Figure 8 is a diagram illustrating a third embodiment of the present disclosure. System 20 0 represents input terminal 1, multifunction printer 205, mobile terminal 211, base station 213, mobile data communication network Network 215, Internet 217, LAN 219, Network Resources 221 It holds.

[0065] Input terminal 1 is the same as system 70 described above. Input terminal 1 and multifunction printer 205 are The system is configured to allow the input terminal 1 to provide the document data 3 to the multifunction printer 205 in this manner. For example, if input terminal 1 and multifunction printer 205 are connected to the same LAN, via LAN By performing data communication, the original document data 3 is sent from input terminal 1 to multifunction printer 205. Good. Also, connect input terminal 1 and multifunction printer 205 with a USB cable, and input terminal 1 to multifunction printer 205. Alternatively, the original data 3 may be sent directly to the copier 205. Alternatively, a USB memory stick can be used with the input terminal 1. The original data 3 is stored in a removable external storage device such as a RI, and the external storage device is connected to the input terminal. After disconnecting from terminal 1, connect it to the multifunction printer 205, and the multifunction printer 205 will then retrieve the document from its external storage device. You may read data 3.

[0066] Document data 201 is data that is output to the screen of a display device or to the print medium of a printer. In the figure, the original data 201 is shown as it appears when printed on a print medium. The manuscript data 201 includes a first two-dimensional code 203 as identification information. Code 203 encodes information specifying network resource 221 into a two-dimensional code. It is what it is. The types of 2D codes are PDF (Portable Data File) 417 and COD A stacked format like E419 is also acceptable, or a QR code (registered trademark) or data matrix. A matrix format like the one shown is also acceptable. Note that the original data 201 and the first two-dimensional code are shown in the figure. 203 schematically represents the state as it is displayed on a display device or printed on a printing medium. That is what happened.

[0067] The 205 multifunction device is a type of image processing device that includes copying, facsimile, and printing functions. It is a multi-functional all-in-one device equipped with a scanner function. Furthermore, the 205 all-in-one device has other functions It is preferable to further include, for example, an internet network that exchanges information via email. It is preferable to have a fax function.

[0068] Furthermore, the multifunction printer 205 can access web pages on the internet 217 via LAN 219. It has a web server function that publishes the second two-dimensional code 209 when the multifunction printer 205 publishes it. Encode a second identifying piece of information that indicates the web page to be opened (for example, the URL of the web page). It is what it is.

[0069] Furthermore, the multifunction printer 205 outputs output 207 based on the document data 201. Output 2 07 is the first two-dimensional code 203 of the manuscript data 201 to the second two-dimensional code 209. The replaced content is printed on a print medium or displayed on the screen of a display device. ru.

[0070] The mobile terminal 211 is a mobile information terminal having a camera and data communication functions, for example, Smartphones, mobile phones, tablets, PDAs (Personal Digital Assistants) (This is Personal Data Assistant).

[0071] Base station 213 is a mobile data communication network that accommodates mobile terminal 211 as a mobile communication terminal. This is a base station for Network 215.

[0072] The mobile data communication network 215 accommodates the mobile terminal 211 as a mobile communication terminal. It is a mobile communication network. The communication standard of the mobile data communication network 215 is No specific questions are asked. The mobile data communication network 215 is, for example, LTE (Long Term Evolution). (Lution), 4G, or 5G are also acceptable.

[0073] Internet 217 is a multifunction printer 205, mobile data communication network 215, net Connect network resource 219 to enable data communication.

[0074] LAN219 is a local area network that accommodates the multifunction printer 205. Unit 219 is equipped with a gateway for connecting to the internet 217.

[0075] Network resource 221 is a server on the Internet 217, or a server These are various types of data to be made public. Network resource 221 is base station 213, mobile data From the mobile terminal 211 via the data communication network 215 and the internet 217, Accessible. As mentioned above, network resource 221 is the first two-dimensional code This is indicated by the first identification information obtained by decoding 203.

[0076] [3.2 Configuration of the 205 Multifunction Printer] Figure 9 shows an example of the functional configuration of the multifunction printer 205. The multifunction printer 205 has a storage unit 23 1. Display unit 235, operation unit 237, image input unit 239, image forming unit 241, communication unit 243 It includes a connection section 245, a control section 247, and a server section 300.

[0077] The memory unit 231 stores various programs and data necessary for the operation of the multifunction printer 205. This is a functional unit. The memory unit 231 is a recording device capable of temporary storage such as DRAM. For example, non-semiconductor memory such as SSDs and hard disks such as HDDs. It includes a temporary recording device. Also, for the sake of explanation, the memory unit 231 is shown as a single configuration. However, there is a distinction between the area used for program execution (main memory area) and the area used for programs and data. Areas for saving data (auxiliary storage area), areas used for caching, etc., are separated according to their purpose. It may be configured as a device. Furthermore, the storage unit 231 stores judgment data 233A, job log 2 Remember 33B.

[0078] Judgment data 233A indicates that the network resource corresponding to the identification information is suitable for access. This is the data used by the determination unit 45 to determine whether or not it is true. Job log 233B is The job log generation unit 269 generates data based on the results of the operation of the multifunction device 205. The server unit 300 generates and publishes the website based on the job log 233B.

[0079] The display unit 235, the operation unit 237, the image input unit 239, and the image forming unit 241 are, respectively, The multifunction printer 7 of one embodiment consists of a display unit 27, an operation unit 29, an image input unit 31, and an image forming unit. Since it has the same configuration as section 33, the explanation will be omitted.

[0080] The communications unit 243 is equipped with a network card and is connected to LAN 219 for data communication. The communication unit 243 communicates data with the server unit 300 via LAN 219, and Send blog post 233B to server unit 300.

[0081] The connection unit 245 connects the multifunction printer 205 to enable data communication with other devices. For example, the connector 245 is a USB interface, to which a USB memory stick or the like is connected. Furthermore, the connection unit 245 also supports other technologies such as NFC and Bluetooth. It may also be equipped with short-range wireless functionality. The communication unit 243 and the connection unit 245 are configured as a single unit. This is also good. For example, the communication unit 243 and the connection unit 245 can use wireless LAN or Bluetooth. It may be provided as an available, integrated wireless communication interface.

[0082] The control unit 247 is a functional unit for controlling the entire multifunction printer 205. It consists of one or more control devices and control circuits, for example, a CPU or SoC. The control unit 247 reads the program stored in the memory unit 231. By executing the process, the extraction unit 249, determination unit 257, user inquiry unit 259, output It functions as a power unit 261 and a job log generation unit 269.

[0083] Server unit 300 is a server device that provides web server functionality. 300 has a communication unit 301, a storage unit 303, and a control unit 307. In this embodiment, The B unit 300 is configured as part of the multifunction printer 205, but is independent of the multifunction printer 205. It may also be a device. Also, if it is configured as part of the multifunction device 205, the control unit 247, The memory unit 231 and the communication unit 243 are, respectively, the control unit 300, the memory unit 303 and the communication unit 3 By performing the function of 01, the server unit 300 may be omitted. In this case, the control unit 24 7 further comprises a web server section 309 and an application server section 311. 231 further stores DB305.

[0084] The communication unit 301, like the communication unit 243, is connected to the LAN 219 and performs data communication. This is a functional unit for that purpose. The communication unit 301 communicates data with the communication unit 243 via the LAN 219. This is done, and in particular, the job log 233B is received from the communication unit 243.

[0085] Furthermore, the communication unit 301 communicates via LAN 219 and the Internet 217 to the network It communicates data with the resource 221, and in particular, in response to a request from the mobile terminal 211, Send the data for publishing the blog to the mobile device 211.

[0086] The storage unit 303 stores various programs and data necessary for the operation of the server unit 300. This is a functional unit. The memory unit 303 is a recording device capable of temporary storage such as DRAM. For example, SSDs, which are made of semiconductor memory, and HDDs, which are made of magnetic disks. It includes a non-temporary recording device. Also, for the sake of explanation, the storage unit 303 is a single configuration. However, the area used for program execution (main memory area) and the program and data Areas for saving data (auxiliary storage area), areas used for caching, etc., are separated according to their purpose. It may be configured as a device.

[0087] Furthermore, the storage unit 303 stores the database (DB) 305. The DB 305 is a communication The data based on the job log 233B received by the communication unit 301 from unit 243 is stored.

[0088] The control unit 307 is a functional unit for controlling the server unit 300. Alternatively, it may consist of multiple control devices and control circuits, such as a CPU or SoC. The control unit 307 reads the program stored in the memory unit 303 and processes it. By executing the logic, the web server unit 309 and the application server unit 311 are configured as follows: It functions.

[0089] The web server unit 309 composes a web page in response to a request from a web browser. The application server unit 311 sends the data to the web browser. In response to a request from the web server unit 309, the programming language is executed, and the result of the execution is displayed. Return to web server unit 309.

[0090] [3.3 Configuration of Mobile Terminal 211] Figure 10 shows an example of the functional configuration of the mobile terminal 211. The mobile terminal 211 has memory Unit 351, display unit 353, operation unit 355, camera unit 357, wireless communication unit 359, control unit 3 It is equipped with 63.

[0091] The memory unit 351 stores various programs and data necessary for the operation of the mobile terminal 211. This is a functional unit. The memory unit 351 is a recording device capable of temporary storage such as DRAM. For example, SSDs, which are made of semiconductor memory, and HDDs, which are made of magnetic disks. It includes a non-temporary recording device. Also, for the sake of explanation, the memory unit 351 is a single configuration. However, the area used for program execution (main memory area) and the program and data Areas for saving data (auxiliary storage area), areas used for caching, etc., are separated according to their purpose. It may be configured as a device.

[0092] The display unit 353 is a functional unit for displaying images and text. It is composed of liquid crystal displays (LCDs), organic EL panels, etc.

[0093] The control unit 355 is a user interface that receives input from the person operating the mobile terminal 211. It is a device and an input device such as a push button, numeric keypad, or touch panel. Furthermore, the display unit 3 53 and the operating unit 355 may be provided as an integrated touch panel display.

[0094] The camera unit 357 is a CCD (Charge Coupled Device) image sensor, CMOS (Complementary) Cameras equipped with solid-state image sensors such as (mentary metal-oxide semiconductor) image sensors be.

[0095] The wireless communication unit 359 includes a wireless antenna, a wireless transceiver, and a baseband processing unit, The radio signal received by the wire antenna and sent to the radio transceiver is processed by the baseband processing unit. Then, digital processing is performed.

[0096] The control unit 363 is a functional unit for controlling the mobile terminal 211. Alternatively, it may consist of multiple control devices and control circuits, such as a CPU or SoC. The control unit 363 reads the program stored in the memory unit 351 and processes it. By executing the logic, it functions as a decoder unit 365 and a browser unit 367.

[0097] The decoder unit 365 prints or displays the second two-dimensional code 20 as output 207. This is a decoder that decodes 9. The browser unit 367 is the data that makes up the web page. The wireless communication unit 359 receives the signal, and the display unit 353 displays the webpage. ru.

[0098] [3.4 Operation of the 205 Multifunction Printer] Figure 11 is a flowchart illustrating the operation of the multifunction printer 205. Multifunction printer 205 The system inputs the document data 201 sent from input terminal 1 (step S31). Data 201 includes a first two-dimensional code 203 corresponding to network resource 221. This is the case. If you print the original data 201 as is, for example, the original data 63 in Figure 4 Alternatively, 65 will be the print image as is. The first two-dimensional code 203 is network This is the URL of Kurisource221 encoded as a QR code.

[0099] When the communication unit 243 receives the document data 201, the extraction unit 249 then extracts the document data 201. Next, an attempt is made to extract the two-dimensional code (step S33). The extraction unit 249 extracts the original data 201 A virtual print image is generated, and an attempt is made to detect a 2D code from that print image. When a two-dimensional code is detected, the decoder unit 251 decodes the two-dimensional code and converts it into characters. The code is output. The character information consisting of the character codes output by the decoder unit 251 is used as follows: This is called decoded character information. If the two-dimensional code is not extracted from the original data 201... (If you answer "No" in step S33, proceed to step S49, which will be described later.)

[0100] If you extract a 2D code from the original data 201 (select "Yes" in step S33), The output unit 249 extracts the decoded character information as identification information (step S35). The method for extracting information is the same as in step S5 of Figure 3. If it contains identification information, extract it. Unit 249 outputs the identification information as the first identification information. At that time, the extraction unit 249, A specific code for identifying the first identification information from each other, the extracted first identification information The first identification information and the specific code are associated with each other and stored in the job log 233B. (Steps S37, S39). If the decoded character information does not contain identification information (Step If you answer "No" in step S35, proceed to step S49, which will be described later.

[0101] When the extraction unit 249 extracts the first identification information, the determination unit 257 determines the determination data 233A Based on this, is the network resource indicated by the first identification information suitable for access? Determine whether or not (whether the access destination is dangerous or not) (Step S41). Determine whether or not access is appropriate. The method is the same as in step S7 of Figure 3. Suitable for access (access destination) If it is determined that it is not dangerous (no in step S41), then step S will be described below. Proceed to 49.

[0102] If the determination unit 257 determines that the access destination is unsuitable (the access destination is dangerous), If the user selects "Yes" in step S41, the user inquiry unit 259 will contact the operator who will be operating the multifunction printer 205. An inquiry message is displayed to the data via the display unit 235 (step S43). The inquiry message informs the operator that the network resources are not suitable for access. A notification that the document data 201 contains a two-dimensional code with identification information for the character. Includes a message. The inquiry message is also included in the first secondary version of manuscript data 201. The message includes a prompt asking the operator whether or not to invalidate the original code.

[0103] In response to the display of this inquiry message, the operation unit 237 will perform the first of the original data 201 If an input operation is received instructing not to invalidate the 2D code (in step S45) If the answer is "No", proceed to step S49, which will be described later.

[0104] In response to the display of this inquiry message, the operation unit 237 will perform the first of the original data 201 If an input operation is received instructing to invalidate the 2D code (in step S45, " Yes), the output unit 261 executes the output modification process described below (step S47).

[0105] Figure 12 is a flowchart illustrating the output modification process. Association Unit 2 63 is the specific code assigned to the first identification information in step S37, and the server unit 300 is A second set of identification information is generated based on the URL of the website to be published on Internet 217. (Step S61).

[0106] For example, server unit 300 has a URL on the internet 217, www.multifunctionpri The website at nter.com will be published. Also, the manuscript data 201 will include The first two-dimensional code shall include www.hacked-server.com as the first identification information. Furthermore, in step S37, the first identification information is assigned the specific code 0005. Let's assume that this happens. At this time, the association unit 263 uses the website URL and a specific code to... Then, www.multifunctionprinter.com / 0005 is generated as the second identification information.

[0107] The association unit 263 associates the generated second identification information with the corresponding first identification information and specific code. Associate with (step S63). Next, the encoder unit 265 encodes the second identification information into a second two-dimensional code. Generate (step S65). Note that the encoding method when encoding the first two-dimensional code The formula and the encoding method used when encoding the second two-dimensional code may be the same or different. It's fine if you do that. Next, the replacement unit 267 replaces the part of the original data 201 that corresponds to the first two-dimensional code. Then, output data is generated that has been replaced with a second two-dimensional code (step S67).

[0108] Returning to Figure 11, if you answered "No" in any of steps S33, S35, S41, or S45... In this case, the output unit 261 uses the original data 201 as is to produce an image or print image. The result is output from the display unit 235 or the image forming unit 241. On the other hand, steps S33, S3 If the answer to all of steps 5, S41, and S45 is "yes", the output unit 261 is generated in step S67. The output data is output from the display unit 235 or the image forming unit 241 (step S49). ).

[0109] Next, the job log generation unit 269 generates a log of the above-mentioned series of operations, and the job log 23 Stored as 3B (step S51). In particular, the job log generation unit 269 uses a specific code The first identification information and the second identification information are associated with each other and stored in the job log 233B. Figure 13 shows how a specific code, a first identification information, and a second identification information are stored in relation to each other. This is an example of job log 233B. The job log 233B in Figure 13 was sent to the multifunction printer 205. The first identification information that was determined to be dangerous, and the specific code associated with that first identification information. It stores a total of five sets of the first and second identification information.

[0110] Next, the job log generation unit 269 communicates with the server unit 30 via the communication unit 243 and LAN 219. Send the data from job log 233B to 0. Server unit 300 sends the data from communication unit 301. Upon receiving the data, the job log 2 is updated by updating DB305 based on that data. Synchronize the data contents of 33B and DB305 (step S53). Therefore, basically The same information applies to the specific code, the first identification information, and the second identification information in the job log. It is stored in 233B and DB305.

[0111] [3.5 Operation of Server Unit 300 and Mobile Terminal 211] Figure 15 is a diagram illustrating the operation of the server unit 300 and the mobile terminal 211. The user of the mobile terminal 211 receives the original data 201 in step S67 of Figure 12. The output generated by replacing the part corresponding to the first two-dimensional code with the second two-dimensional code. Assume there is a printed document with the data printed on it.

[0112] The user uses the camera unit 357 of the mobile terminal 211 to view a second two-dimensional code printed on a printed document. When the code is read by the machine (step S71), the decoder unit 365 reads the second two-dimensional code. The code is decoded to obtain the second identification information (step S73).

[0113] As explained in step S61, the second identification information is obtained in step S37 of Figure 11. The specific code assigned to the identification information in 1, and the server unit 300 that publishes to the Internet 217 It is generated based on the URL of the website. Below, in Figure 13, the specific code www.multifunctionprinter.com / 0005 is calculated as the second identifying information associated with 0005. Let's explain using the example of what happens in that case.

[0114] When the browser unit 367 receives the second identification information from the decoder unit 365, the wireless communication unit Using 359, the base station 213, the mobile data communication network 215, and the internet are used. 217. Configure the web page on the server unit 300 of the multifunction printer 205 via LAN 219. Request the data (step S75). Here, www.multifunctionprinter.com / 000 The webpage specified in 5 is requested.

[0115] When a request is received from the mobile terminal 211, the web server unit 309 will process the application. - Request the server unit 311 to generate the web page indicated by the second identification information (step S 77). Here, the web server section 309 is directed to www.multifunctionprinter.com / 0005 Request the generation of a specified web page.

[0116] When the application server unit 311 receives a request from the web server unit 309, D Refer to B305 to obtain the first identification information corresponding to the second identification information. The communication server unit 311 configures a web page that uses the acquired first identification information as the link destination. It generates an HTML (HyperText Markup Language) document. The generated web page is , to the user of the mobile terminal 211, the first identification information corresponding to the second identification information indicates, Includes a message asking whether access to network resource 221 is necessary.

[0117] The web pages generated by the application server unit 311 correspond to the second identification information. This includes the first identification information. Figure 14 shows the web generated by the application server unit 311. An example page is shown. Web page 401 contains message 401A and link 401B. Message 401A is the link destination (first identification information) requested by the mobile terminal 211. ) is a message warning mobile device 211 that it is dangerous. Link 401B is This is a link to direct viewers to network resource 221. (Web page 401) Therefore, the first identification information itself is displayed as link 401B. Viewers who see page 401 can learn the first identification information (www.hacked-server.com). ru.

[0118] When the web server unit 309 receives an HTML document constituting the web page 401 from the application server unit 311, it transmits page data including the HTML document to the mobile terminal 211. The page data includes, in addition to the HTML document, other data (e.g., image data) constituting the web page. The web server unit 309 uses the communication unit 301 to transmit the page data to the mobile terminal 211 via the LAN 219, the Internet 217, and the mobile data communication network 215.

[0119] When the wireless communication unit 359 receives the page data, the browser unit 367 causes the display unit 353 to display a web page based on the page data (step S79). For example, the browser unit 367 causes the display unit 353 to display a web page such as the web page 401 in FIG. 14.

[0120] The display unit 353 displays the message 401A as part of the web page 401. Thereby, the user of the mobile terminal 211 can receive a warning that the link destination (first identification information) is dangerous.

[0121] Further, the display unit 353 displays the link 401B as part of the web page 401. By displaying the link 401B, the mobile terminal 211 can provide the user with means to access the network resource 221 indicated by the first identification information originally described in the manuscript data 201.

[0122] When the user of the mobile terminal 211 selects the link 401B via the operation unit 355, When this is done, the browser unit 367 uses the wireless communication unit 359 to communicate with the base station 213 and mobile data The network is transmitted via the communication network 215, the internet 217, and LAN 219. Access resource 221 (step S81).

[0123] [3.6 Effects] According to this embodiment, the original data 201 contains the first identification information of the network resource 221. The first two-dimensional code 203 indicates that the network resource 221 is at risk. The multifunction printer 205 modifies the original data 201 and outputs it. In other words, the multifunction printer 205, Output 207 is produced by replacing the first two-dimensional code 203 with the second two-dimensional code 209. The second two-dimensional code 209 is used on the webpage of a website operated by the multifunction printer 205. This corresponds to the second identification information that indicates the page. The mobile terminal 211 receives the second two-dimensional code of output 207. When code 209 is scanned by the machine, the mobile terminal 211 is operated by the multifunction printer 205. The user is redirected to a webpage within the site. Therefore, according to this embodiment, the mobile terminal 21 1. The multifunction printer 205 machine-reads the document data it outputs, and then the dangerous network RIS This prevents direct redirection to the destination.

[0124] Furthermore, according to this embodiment, the mobile terminal 211 acts as a substitute for the network resource 221. This redirects to webpage 401. Webpage 401 is network resource 22 It displays a message warning that 1 is dangerous. Also, webpage 401 is on the internet. A link to work resource 221 is displayed. Therefore, according to this embodiment, the mobile terminal While warning 211 users that network resource 221 is at risk, A means of accessing the network resource 221 can be provided as needed.

[0125] [3.7 Transformation] A variation of the third embodiment will be described. Regarding the hardware configuration, see the above-mentioned C This is the same as the stem 200, the multifunction printer 205, and the mobile terminal 211. In comparison, the operation of the multifunction printer 205 and the mobile terminal 211 differs in this variant. The form is that the multifunction printer 205 displays webpage 403 instead of webpage 401 on the mobile terminal 2 It differs in that it is sent to 11. Web page 403, in particular, does not contain the first identifying information. It differs from a 401 webpage in one respect.

[0126] Figure 16 shows the web page 403 generated by the application server unit 311. Web page 403 has message 403A, buttons 403B and 403C. Sage 401A warns visitors to its webpage that the first identification information is dangerous. This is a warning message.

[0127] Buttons 403B and 403C direct visitors to the webpage to the network resource It is provided to inquire whether access to -221 is necessary. Button 403B is The message "Yes" is displayed, and button 403C displays the message "No". 403B and 403C are directed to the web pages indicated by the third and fourth identification information, respectively. This is the link mentioned earlier.

[0128] The web pages indicated by the third and fourth identification information are managed by the web server unit 309. It is a web page within the site. The third and fourth identification information is preferably the second identification information. It is determined in association with information. For example, when the web page 403 is a web page published at www.multifunctionp rinter.com / 0005, the application server unit 31 1 determines a string obtained by adding " / yes" to the string forming the second identification information, that is, www.multif unctionprinter.com / 0005 / yes as the third identification information. Also, at this time, the application server unit 311 determines a string obtained by adding " / no" to the string forming the second identification information, that is, www.multifunctionprinter.com / 0005 / no as the fourth identification information.

[0129] FIG. 17 is a diagram for explaining the operation of this modification. Steps S71, S73, and S75 are the same as those in the third embodiment. This modification is different from the third embodiment after step S77.

[0130] In step S75, the multifunction machine 205 receives an access request from the mobile terminal 211 to the web page indicated by the second identification information. At this time, in the multifunction machine 205, the communication unit 301 receives the access request from the Internet 217 and passes it to the web server unit 309. The web server unit 309 requests the application server unit 311 to generate the web page indicated by the second identification information.

[0131] Upon receiving the request from the web server unit 309, the application server unit 311 refers to the DB305 to obtain the first identification information corresponding to the second identification information. The application server unit 311 generates an HTML document constituting the web page 403 (step S91) and passes it to the web server unit 309. The web server unit 309 responds to the access request. In response, the communication unit 301 is used to send page data to the mobile terminal 211. The data is a web page containing an HTML document generated by the application server unit 311. This is the data that makes up a 403 error. Page data includes not only the HTML document, but also images, audio, and video. It may also include image data. In the mobile terminal 211, the wireless communication unit 359 transmits page data. The data is received and passed to the browser unit 367. The browser unit 367 uses the display unit 353 to access the web. Display page 403 (step S93).

[0132] The user of the mobile terminal 211 presses button 4 on the control panel 355 to display the message "Yes". When you select 03B, the browser unit 367 uses the wireless communication unit 359 to access The access request is sent to the multifunction printer 205 (step S95). This access request is a third identification Access to the webpage indicated by the information (e.g., www.multifunctionprinter.com / 0005 / yes) I demand S.

[0133] In the multifunction printer 205, when the communication unit 301 receives an access request, the web server unit 309 This refers to DB305 and the first corresponding to the third identification information specified in the access request. The web server unit 309 obtains identification information. The web server unit 309 uses the first identification information obtained to determine the network A redirection to resource 221 is sent to the mobile terminal 211 using the communication unit 301. Send to (step S97).

[0134] In the mobile terminal 211, the wireless communication unit 359 receives the redirect, and the web server unit 3 When passed to 09, the web server unit 309 redirects to network resource 2 Access 21 (step S99).

[0135] According to this modification, since the web page 403 does not contain the first identification information, the mobile terminal 21 For user 1, while concealing the first identification information, the mobile terminal 211 is accessed via the internet as needed. It can be directed to work resource 221.

[0136] [4. Others] The present invention is not limited to the embodiments and variations described above, and various modifications are possible. Yes. That is, incorporating technical means that have been appropriately modified without departing from the spirit of the present invention. Embodiments obtained by combining these embodiments are also included within the technical scope of the present invention.

[0137] Furthermore, although some parts of the above-described embodiments are explained separately for the sake of explanation, Of course, it is permissible to combine and implement them to the extent that it is technically possible. For example, the first practical By combining the implementation form and the second embodiment, the network resource indicated by the identification information is found to be dangerous. If this is determined, the output will be stopped as in the first embodiment, or as in the second embodiment. You could also ask the multifunction printer operator if they want to change the output in that way.

[0138] Furthermore, the programs that operate in each device in the embodiments implement the functions of the embodiments described above. As shown, a program that controls the CPU, etc. (a program that makes a computer function) And the information handled by these devices is temporarily stored in a temporary memory during processing. (For example, it is stored in RAM, and then stored in various ROMs (Read Only Memory) and HDDs, etc.) It is stored in memory and read, modified, and written by the CPU as needed. ru.

[0139] Here, the recording medium for storing the program is a semiconductor medium (for example, ROM or other non-combustible materials). Volatile memory cards, etc.), optical recording media, magneto-optical recording media (e.g., DVD (Digital Ve) rsatile Disc), MO (Magneto Optical Disc), MD (Mini Disc), CD (Compact D (isc), BD (Blu-ray® Disc), etc.), magnetic recording media (e.g., magnetic tape, Any of the following may be used: flexible disk, etc. Also, execute the loaded program. By doing so, not only are the functions of the above-described embodiment realized, but the program's instructions Based on the instructions, together with the operating system or other application programs, etc. In some cases, the functions of the present invention can be realized by processing in the same manner.

[0140] Furthermore, when distributing the software to the market, the program is stored on a portable storage medium for distribution. or transfer to a server computer connected via a network such as the Internet. This can be done. In this case, the storage device of the server computer is also included in the present invention. Of course. [Explanation of Symbols]

[0141] 1 Input terminal 3, 201 Manuscript Data 5. Identification Information 7, 205 multifunction device Output 9, 81, 207 11, 83 Disabled Images 13,211 mobile devices 21, 231, 303, 351 storage section 25 Judgment Data 27, 235, 353 display section 29, 237, 355 Operation section 31, 239 Image input section 33, 241 Image forming unit 35, 243, 307 Communications Department 37, 245, 301 Connection part 41, 247, 307, 361 Control Unit 43, 249 Extraction part 45, 257 Judgment section 47, 259 User Inquiry Department 49, 261 Output section 61, 63, 65 Print images 70, 80, 200 systems Output images 91, 93, 95, 97, 101, 103 203 First 2D code 209 Second 2D code 213 Base Station 215 Mobile data communication network 217 Internet 219 LAN 221 Network Resources 233A Judgment Data 233B Job Log 251, 365 Decoder section 253 Character code extraction unit 255 Character recognition section 263 Association Section 265 Encoder section 267 Replacement part 269 ​​Job Log Generation Unit 300 Server Section 305 Database (DB) 309 Web Server Department 311 Application Server Section 357 Camera Section 359 Wireless Communication Section 367 Browser section 401, 403 web pages 401A, 403A Messages 401B Link 403B, 403C buttons

Claims

1. It comprises a display unit and a control unit, The control unit, From the input manuscript data, extract identification information corresponding to the network resource. Based on the aforementioned identification information, the appropriateness of accessing the network resource is determined. If a first identification information corresponding to a first network resource is extracted as the aforementioned identification information, and it is determined that access to the first network resource is unsuitable, a message is displayed on the display unit asking the user whether or not it is necessary to output the document data containing the first identification information. If an instruction is given not to output the original document data containing the first identification information, a second identification information is generated in association with the first identification information, and the original document data containing the second identification information is output. If an instruction is given to output the original document data containing the first identification information, the original document data containing the first identification information will be output. Image processing device.

2. The image processing apparatus according to claim 1, wherein when the control unit is instructed to output document data including the first identification information, it invalidates the first identification information and outputs document data including the invalidated first identification information.

3. The image processing apparatus according to claim 2, wherein the control unit invalidates the first identification information by superimposing another image on at least a portion of the portion corresponding to the first identification information.

4. The image processing apparatus according to claim 2, wherein the control unit invalidates the first identification information by replacing at least a portion of the portion corresponding to the first identification information with another image.

5. The control unit, The first two-dimensional code contained in the aforementioned manuscript data is decoded to obtain the first identification information. The second identification information is encoded to generate a second two-dimensional code, The image processing apparatus according to claim 1, wherein the first two-dimensional code is replaced with the second two-dimensional code.

6. The image processing apparatus according to claim 1, wherein the control unit exposes a second network resource corresponding to the second identification information on the network.

7. The steps include: extracting first identification information corresponding to a first network resource from the input manuscript data; A step of determining whether access to the first network resource is appropriate based on the first identification information, If it is determined that access to the first network resource is unsuitable, the process includes the step of displaying a message to the user asking whether it is necessary to output the document data containing the first identification information, If an instruction is given not to output the original document data containing the first identification information, the process includes generating a second identification information associated with the first identification information and outputting the original document data containing the second identification information. If an instruction is given to output the original document data including the first identification information, the steps include outputting the original document data including the first identification information and Image processing methods including [specific details omitted].

Images