Recording device, its control method, and program

Abstract

To improve the security of recorded data. [Solution] A recording device having a means for ejecting a recorded sheet on which recording data is recorded, and a control means for controlling the ejection of the recorded sheet, wherein the control means determines that the recording data contains confidential information, and controls the ejection means to eject the recorded sheet in a way that conceals the information recorded on it.

Description

Technical Field

[0005] , ,

[0006] , ,

[0001] The present invention relates to a recording apparatus, a control method thereof, and a program.

Background Art

[0002] A recording apparatus such as an image forming apparatus can convey a sheet supplied from a supply roller by a conveyance roller and record an image on the conveyed sheet. However, there may be cases where information on images or characters recorded on the sheet is not desired to be easily recognized by a third party. For example, Patent Document 1 describes a recording apparatus that sandwiches the top and bottom of a highly confidential document with another sheet to make it invisible from the outside.

Prior Art Documents

Patent Documents

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the recording apparatus described in Patent Document 1, regardless of the content of the data, a process is performed to conceal the information of the recorded image from the eyes of others. The present disclosure aims to improve the security of recording data.

Means for Solving the Problems

[0005] The present disclosure is a recording apparatus having a discharging unit for a recorded sheet on which recording data is recorded and a control unit for controlling the discharging of the recorded sheet, wherein when the control unit determines that the recording data includes concealment information, the discharging unit is controlled to perform discharging that can conceal the information recorded on the recorded sheet.

Effects of the Invention

[0007] [Figure 1] A perspective view showing the external appearance of the recording device. [Figure 2] Block diagram of the recording device configuration. [Figure 3A] Cross-sectional view of the supply section and recording section of the recording device. [Figure 3B] Cross-sectional view of the supply section and recording section of the recording device. [Figure 4] A flowchart for the initial setup of the ejection operation for records containing confidential information. [Figure 5] A diagram illustrating the priority discharge mode setting screen and the state of the discharged sheets. [Figure 6A] A diagram showing the settings screen for determining whether information is confidential. [Figure 6B] A diagram showing the settings screen for determining whether information is confidential. [Figure 7] A diagram illustrating examples of determination based on keywords and names. [Figure 8] A flowchart for determining the discharge mode. [Modes for carrying out the invention]

[0008] Embodiments of the present invention will be described below with reference to the drawings. However, the dimensions, materials, shapes, and relative arrangements of the components described in the embodiments may be appropriately changed depending on the configuration of the device to which the invention is applied and various conditions, and this is not intended to limit the scope of the invention to the following embodiments.

[0009] [Embodiment 1] • Appearance of the recording device Figure 1 is a perspective view showing the external appearance of the recording device 100. In this embodiment, the recording device 100 is an inkjet printer, and the sheet is exemplified as paper. The recording device 100 is a device that supplies a sheet with a supply roller, transports the supplied sheet with a transport roller, and records on the transported sheet. It also has a mechanism to switch whether the recording surface of the sheet is ejected vertically upward or vertically downward. The recording device 100 may be a full-color printer or a monochrome printer. Furthermore, it may be a multifunction device equipped with a document reader. The front of the recording device 100 is an operation panel 101 equipped with a user interface such as buttons and a touch panel. Below the operation panel 101 is an output tray 103 that can be pulled out to the front to place recorded sheets on. The rear of the recording device 100 is an ASF (Auto Sheet Feeder) 102, which is a sheet supply port. Sheets 200 are set in the ASF.

[0010] • Hardware configuration of the recording device Figure 2 is a block diagram showing the hardware configuration of the recording device 100. The CPU (Central Processing Unit) 111 is the control unit of the system and controls the entire recording device 100. The ROM (Read Only Memory) 112 stores control programs and embedded operating system (OS) programs executed by the CPU 111. The control programs stored in the ROM 112 perform software control such as scheduling and task switching under the management of the embedded OS also stored in the ROM 112. The RAM (Random Access Memory) 113 is a memory composed of SRAM (static RAM) or the like. The RAM 113 stores management data for the recording device 100, such as program control variables and user-registered settings, and is provided with various work buffer areas. Note that this data may be stored in other storage areas such as ROM 112 or non-volatile memory 114 instead of RAM 113. The non-volatile memory 114 is composed of flash memory or the like, and can retain data even when the power is turned off. Therefore, the non-volatile memory 114 stores user data such as network information, a list of external devices 126 that have been connected in the past, menu items such as recording modes, and setting information for the recording device 100 such as recording head correction information. In addition, the tables used in this embodiment and the information for determining whether or not backup is necessary are stored in the non-volatile memory 114. Note that this setting information data and the information for each table may be stored in other storage areas such as ROM 112 or RAM 113 instead of the non-volatile memory 114.

[0011] The image memory 115 is a memory composed of DRAM (dynamic RAM) or the like. The image memory 115 can store image data received via the network connection unit 125, image data obtained by scanning, and image data processed by the image processing unit 116, which will be described later. The memory configuration of the recording device 100 is not limited to this form, and its number, characteristics, storage capacity, etc., can be appropriately changed depending on the application and purpose. For example, the image memory 115 and RAM 113 may be shared. Also, although the image memory 115 is composed of DRAM, etc., it is not limited to this and may be composed of a hard disk (hereinafter referred to as "HDD") or non-volatile memory 114, etc. The image processing unit 116 performs various processes, such as code decoding and scaling, on image data received via the network connection unit 125 and image data obtained through scanning. The data conversion unit 117 performs analysis of page description languages and conversion from image data to recording data. Specifically, various image processing operations such as smoothing, correction of recording density, and color correction are performed on the image data received via the network connection unit 125 or the image data obtained through scanning. The recording data obtained by executing these processes is output to the recording unit 310, and recording based on the recording data is performed.

[0012] The operation unit 118 receives user operations by button operations or panel operations. The display unit 119 is a display that presents information to the user. The operation unit 118 and the display unit 119 are included in the operation panel 101. Note that by configuring the operation unit 118 and the display unit 119 with a touch panel or the like, the operation unit 118 and the display unit 119 may have the same configuration. The recording control unit 120 controls the supply unit 300 and the recording unit 310. Also, the recording control unit 120 updates information such as the remaining amount of the ink tank and the state of the print head. The recording unit 310 executes an image forming process for forming an image on a sheet with a recording material such as ink based on the recording data output from the data conversion unit 117 and the recording setting information included in the recording job received from the external device 126. The recording unit 310 includes a carriage 312 driven by a carriage motor 311, a recording nozzle 313, and a platen that supports the sheet facing the recording nozzle 313. An ink tank is attached to the carriage 312. Also, ink is ejected from the recording nozzle 313 by controlling a heater. Note that the configuration may be such that ink is supplied to the recording nozzle 313 of the carriage 312 by a tube.

[0013] The supply unit 300 holds sheets (paper, film, disk media, etc.) for recording. Also, the supply unit 300 supplies the sheet to the recording unit 310 under the control from the recording control unit 120. That is, the supply unit 300 includes a supply mechanism for supplying the sheet and a transport mechanism for transporting the sheet. The reading control unit 121 controls the reading unit 122 to cause the reading unit 122 to acquire image data of the document. The reading control unit 121 can also output the image data acquired by the reading unit 122 to the image processing unit 116 and the data conversion unit 117. The image data acquired by the reading unit 122 is then subjected to code decryption processing and various image processing by the image processing unit 116 and the data conversion unit 117 before being stored in the image memory 115 or an external storage device.

[0014] The reading unit 122 acquires information about characters and images on a document as image data (RGB data) using an optical sensor, in response to jobs (scan jobs, copy jobs) received from an external device 126 or instructions from the user via the operation unit 118. Specifically, the reading unit 122 consists of a glass table for fixing the document to be read, a light source for illuminating the document, and a CCD (Charge Coupled Device) or CIS (Contact Image Sensor) for scanning the reflected light. The reading unit 122 may also include an ADF (Auto Document Feeder) that automatically transports multiple documents to be read and performs the reading process. The power control unit 123 controls the connection to the commercial power supply unit 124, which is the source of commercial power, and supplies the power necessary to drive the recording device 100.

[0015] The network connection unit 125 is a unit that communicates with an external network via wireless LAN and wired LAN, and is connected to the system bus 127. The communication method used by the network connection unit 125 is Wi-Fi (registered trademark), etc. The recording device 100 can communicate with the external device 126 via the network connection unit 125. This allows the recording device 100 to receive jobs from the external device 126, for example. In this embodiment, jobs include, for example, recording jobs that instruct the recording device 100 to perform recording, scan jobs that instruct the recording device 100 to perform scanning, and copy jobs that instruct the recording device 100 to perform copying. Recording jobs include image data to be recorded and recording setting information. The image data included in the recording job is converted into recording data by the data conversion unit 117 and output to the recording unit 310. Recording data generated by image processing on the external device 126 may also be included in the recording job. In this embodiment, the external device 126 can be a mobile terminal, personal computer, smartphone, tablet terminal, digital camera, etc. The above components are interconnected via a system bus 127 managed by the CPU 111.

[0016] • Structure of the recording device Figure 3(a) (hereinafter, "Figure 3A" and "Figure 3B" are collectively referred to as "Figure 3") is a cross-sectional view of the supply unit 300 and the recording unit 310 of the recording device 100 in Figure 1, viewed from arrow 104a in cross-section 104. The recording device 100 is equipped with an ASF102 on the rear side as a supply port for supplying sheets. Sheets 200a can be supplied from ASF102. The drive motor 301 is the power source for the supply mechanism that supplies sheets and the conveying mechanism that transports sheets. The drive motor 301 is connected to the conveying roller 305, discharge roller 306, and intermediate roller 308, shown by the solid lines in the figure, via a drive transmission mechanism including gears and a belt. When the drive motor 301 rotates forward, the conveying roller 305 and discharge roller 306 rotate forward 305a and 306a, respectively, transporting the sheets toward the discharge tray 103 in the transport direction. On the other hand, when the drive motor 301 rotates backward, the conveying roller 305 and discharge roller 306 rotate backward 305b and 306b, respectively. The intermediate roller 308 receives power from the drive motor 301 via a one-way clutch. Whether the drive motor 301 rotates forward or backward, the intermediate roller 308 rotates forward 308a to transport the sheets in the transport direction.

[0017] The switching mechanism 302 includes multiple gears and movable parts, and switches between transmitting power from the drive motor 301 to the sheet supply mechanism ASF102 and ASF roller 303, and not transmitting power. The discharge roller 306 discharges the sheet under the drive of the drive motor 301. The discharge roller 306 comes into contact with the sheet immediately after it has been recorded. Therefore, in order to prevent ink transfer, the roller that comes into contact with the recording surface has a very thin gear shape, and by making point contact, the contact area with the sheet is reduced. The carriage motor 311 drives the carriage 312 in the width direction of the sheet, which is perpendicular to the sheet transport direction. The carriage 312 is equipped with a recording nozzle 313 that ejects ink. The recording nozzle 313 has multiple nozzles in the transport direction and the width direction of the sheet. The CPU 111 controls the movement of the transport rollers 305 and carriage 312, and ejects ink from the recording nozzles 313 at the appropriate timing to form an image on the sheet.

[0018] (single-sided printing) Here, we will explain the movement of each element when recording on one side of the sheet 200a supplied by the ASF102. The CPU111 rotates the drive motor 301 in the forward direction with the switching mechanism 302 connected to the ASF102 and the ASF roller 303. This causes the ASF102 to press the sheet 200a against the ASF roller 303. The ASF roller 303 rotates forward 303a, and the sheet 200a is supplied into the recording device 100. During this process, the sheet detection sensor 304 in the transport path detects the leading edge position of the sheet. This makes it possible to control where on the sheet recording is performed. The double-sided flapper 307 is biased vertically upward by a spring. The double-sided flapper 307 is pushed down when a sheet is about to pass from the sheet detection sensor 304 towards the conveyor roller 305, allowing the sheet to pass through.

[0019] Furthermore, the CPU 111 rotates the ASF roller 303 and the transport roller 305 in the forward direction, transporting the sheet 200b under the recording nozzle 313. The recording nozzle 313 ejects ink onto the transported sheet to perform recording. During the recording operation, a transport operation, in which the sheet is transported intermittently in unit transport amounts, and an ejection operation, in which ink is ejected onto the sheet, are performed alternately. Once the entire sheet has been recorded, the CPU 111 rotates the transport roller 305 in the forward direction 305a and the discharge roller 306 in the forward direction 306a. The sheet on which the image has been recorded is discharged onto the discharge tray 103. Sheet 200c is the recorded sheet that has been discharged onto the discharge tray 103.

[0020] (Double-sided printing) Next, we will explain the movement of each element when recording on both sides of sheet 200a supplied by ASF102. The operation from supplying sheet 200a from ASF102 to the recording nozzle 313 ejecting ink onto the surface of sheet 200b and performing the recording is the same as in the case of recording on one side described above, so we will omit the explanation. Figures 3(b) and 3(c) illustrate the process of flipping the sheet over to record on the back side after recording on the front side. In Figure 3(b), after recording the surface, the CPU 111 reverses the rotation of the drive motor 301, causing the transport roller 305 to reverse rotation 305b. The double-sided flapper 307 is designed not to open when the sheet is about to pass from the transport roller 305 towards the sheet detection sensor 304. The sheet is guided by the double-sided flapper 307 and pulled in the direction indicated by the sheet 200d. Even when the drive motor 301 is reversed, the intermediate roller 308 is still rotating forward 308a, allowing the sheet 200d to be sent back towards the sheet detection sensor 304. When the rear end of the sheet 200d has passed the transport roller 305, the CPU 111 reverses the rotation of the drive motor 301, causing the transport roller 305 to rotate forward 305a.

[0021] In Figure 3(c), the CPU 111 further rotates the transport roller 305 and the intermediate roller 308 forward 308a to transport the sheet 200d under the recording nozzle 313. The back side, opposite to the front side which was recorded earlier, is transported under the recording nozzle 313. The CPU 111 uses the recording nozzle 313 to record the back side and discharges the sheet into the discharge tray 103. Thus, the recording device 100 has a mechanism that allows it to select whether to discharge the sheet to the discharge tray 103 with the surface facing vertically upward (hereinafter referred to as "face-up discharge") or with the surface facing vertically downward (hereinafter referred to as "face-down discharge"). Even for single-sided recording jobs, by performing double-sided recording operations that omit recording on the back side and discharging face-down, it is possible to reduce the likelihood of confidential information among the recorded information being easily recognized by a third party, thereby improving security (concealing it from the eyes of others). After discharging a recorded sheet, another sheet (hereinafter referred to as "cover sheet") can be supplied from the ASF 102, and by discharging a sheet without any recordings, the previously recorded sheet is covered, and the recorded information can be concealed from the eyes of others.

[0022] • A process to initialize the operation for ejecting records containing confidential information. Figure 4 is a flowchart of the process for initializing the output operation of records containing information that should be kept confidential or protected (confidential information, protected information) as specified by the user. The process in the flowchart of Figure 4 is executed during the initial setup process, such as setting the language and date / time displayed on the display unit 119 when the user installs the recording device. It is also executed at any time after the initial setup when it is detected that the user has selected this setting function from the recording device's setting menu. The process shown in the flowchart of Figure 4 is realized by the CPU 111 reading a program stored in memory such as ROM 112 into RAM 113 and executing it. Alternatively, the processing may be performed by a program running on an external device 126, the information sent to the recording device 100, saved as setting information in non-volatile memory 114, and then referenced when a job is executed. In S401, the CPU 111 accepts the setting of the ejection mode to be preferentially selected when recording data containing confidential information. Specifically, the screen shown in Figure 5(a) is presented to the user, and the user is allowed to make the setting.

[0023] <Priority Discharge Mode Setting Screen> Figure 5(a) shows the priority ejection mode setting screen 500, illustrating the state where the setting 505 "Eject records containing confidential information with a cover sheet attached" is selected. When the user sets the "Always discharge face up" setting 501, the discharge operation is as shown in Figure 5(b), in which the sheet surface is discharged into the discharge tray 103 with the surface facing vertically upward. When the user sets the "always discharge face down" setting 502, the discharge operation is as shown in Figure 5(c), in which the sheet surface is discharged into the discharge tray 103 with the surface facing vertically downwards.

[0024] This is an ejection operation that prevents recorded data from being seen by others. When the user sets setting 503 to "always eject with cover sheet attached", the ejection operation is as shown in Figure 5(d), where the surface of the sheet is ejected vertically upward into the ejection tray 103, and finally the cover sheet 200e is ejected. The top surface of the recorded sheet is covered with the cover sheet 200e which has no record on it, so it becomes invisible to others. These settings 501 to 503 are for the user to forcibly set the ejection mode. In setting 504, which specifies "eject records containing confidential information face down," and setting 505, which specifies "eject records containing confidential information with a cover sheet attached," the CPU 111 switches the ejection mode when it determines that the recorded data contains confidential information. With setting 504, which specifies "discard records containing confidential information face down," the records are discarded as shown in Figure 5(c), while with setting 505, which specifies "discard records containing confidential information with a cover sheet," the records are discarded as shown in Figure 5(d).

[0025] In S402, the CPU 111 determines whether the priority paper output mode set in S401 is either the "always output face up" setting 501, the "always output face down" setting 502, or the "always output with cover sheet" setting 503. If any of the "always output face up" setting 501, the "always output face down" setting 502, or the "always output with cover sheet" setting 503 is set (if Yes in S402), the CPU 111 terminates this process. If it is determined that the "output face down if the record contains confidential information" setting 504 or the "output with cover sheet if the record contains confidential information" setting 505 is selected (if No in S402), the CPU 111 proceeds to S403. In S403, CPU111 accepts the setting for determining which information should be kept confidential. Specifically, it presents the user with the screen shown in Figure 6(a) (hereinafter, "Figure 6A" and "Figure 6B" are collectively referred to as "Figure 6") and allows the user to make the setting.

[0026] <Screen for determining information that should be kept confidential> Figure 6(a) shows the screen 600 for setting the determination of information to be kept confidential, illustrating the state when the setting 601 "Specify confidential information mark" is selected. Other options that the user can set include the setting 602 "Specify location of confidential information," the setting 603 "When keywords related to personal information are detected," and the setting 604 "When a person's name is detected." When CPU 111 detects that the user has pressed the [OK] button, it proceeds to process S404. In S404, CPU111 determines whether setting 601, "Specify confidential information mark," is set in S403. If it determines that setting 601 is set (Yes in S404), CPU111 proceeds to S405. On the other hand, if it determines that setting 601 is not set (No in S404), CPU111 proceeds to S406.

[0027] In S405, CPU111 accepts the designation of a mark to identify confidential information. <Screen for specifying confidential information marks> Figure 6(b) shows the screen 610 for specifying the confidential information mark. An image 611 for specifying the confidential information mark is displayed. The image 611 for specifying the confidential information mark may be an image read by the reading unit 122, or, if the specification process is performed on the external device 126, an image recorded in the external device 126 may be used. The user specifies which part to mark as confidential information. Figure 6(b) shows an example where the area specified by the dashed line 612 is designated as confidential information. The image processing unit 116 determines whether the image specified here is included in the recorded data. This determination and subsequent operations will be described later using Figure 8. When the CPU 111 detects that the user has pressed the [OK] button, it proceeds to process S406. In S406, CPU 111 determines whether the setting 602, which specifies the location of confidential information, is set. If it determines that the setting 602 is set (Yes in S406), CPU 111 proceeds to S407. If CPU 111 determines that the setting 602 is not set (No in S406), it terminates the process in this flowchart.

[0028] In S407, CPU111 accepts the specification of the location where confidential information will be recorded. <Screen for specifying the location where confidential information is recorded> Figure 6(c) shows the screen 620 for specifying the location where confidential information will be recorded. An image 621 for specifying the location where confidential information will be recorded is displayed. The image 621 for specifying the location where confidential information will be recorded may be an image read by the reading unit 122, or, if the specification process is performed on the external device 126, an image recorded in the external device 126 may be used. The user specifies where the confidential information will be recorded. Figure 6(c) illustrates a state where the area specified by the dashed-dot hatching 622 is designated as the location where confidential information will be recorded. The image processing unit 116 compares the recorded data with the image 621 for specifying the location where confidential information will be recorded. If it is determined that the recorded data is identical to the image 621 for specifying the location where confidential information will be recorded, the CPU 111 further determines in the image processing unit 116 whether the recorded data exists at the location specified in this step. This determination and subsequent operations will be described later using Figure 8. When the CPU 111 detects that the user has pressed the [OK] button, it terminates the processing of this flowchart.

[0029] Figure 7(a) shows an example where, in Figure 6(a), the setting 603 "When a keyword related to personal information is detected" is set, and it is determined that the recorded data contains information that should be kept confidential. Figure 7(a) is an example where the recorded data 700 contains keyword 701, which is a string related to personal information such as name, address, age, and gender. Figure 7(b) shows an example where, in Figure 6(a), the setting 604 "When a person's name is detected" is set, and it is determined that the recorded data contains information that should be kept confidential. Figure 7(b) is an example where the recorded data 710 contains a person's name 711. Keywords 701 and names 711, which are strings related to personal information, are pre-stored in non-volatile memory 114, and the image processing unit 116 determines whether the corresponding information is included in the recorded data. This information is expected to increase or decrease over time. Therefore, the network connection unit 125 can be used to access the database server and update the information stored in the non-volatile memory 114. Furthermore, the processes related to Figure 4 may also be executed by a program run on the external device 126.

[0030] • Determination process for discharge mode Figure 8 is a flowchart showing the process from when the CPU 111 receives a recording job until it determines the paper output mode. The process in this flowchart starts based on the recording device receiving a job. This process is achieved by the CPU 111 loading a program stored in ROM 112 or the like into RAM 113 and executing it. In S801, the CPU 111 accepts jobs. Specifically, the CPU 111 accepts predetermined user operations on the operation unit 118 (such as pressing the copy button or the record button) and generates jobs. Alternatively, it receives jobs generated by external devices 126 via the communication unit of the network connection unit 125. In S802, the CPU 111 determines whether the received job is a job operated on the main unit of the recording device 100. Jobs operated on the main unit include copying and printing in a fixed format. For these jobs operated on the main unit, the user who performed the operation is waiting in front of the recording device 100, so priority is given to the paper output speed and face-up ejection is performed. Therefore, if the received job is a job operated on the main unit of the recording device 100 (Yes in S802), the CPU 111 proceeds to S803. Even if the recorded data contains confidential information, the user who performed the operation on the main unit of the recording device 100 is present, so they can take precautions to prevent others from seeing it. If the received job is not a job operated on the main unit of the recording device 100 (No in S802), the CPU 111 proceeds to S804.

[0031] In S804, CPU111 determines which priority discharge mode is set on the priority discharge mode setting screen 500 in Figure 5(a) of S401 mentioned above. If setting 501, "Always eject face up," is enabled, CPU 111 proceeds to process S803. If setting 502, which is "always perform face-down ejection," is enabled, CPU 111 proceeds to process S805, which performs face-down ejection. If setting 503, "Always attach cover sheet before ejection," is enabled, CPU 111 proceeds to process S806, which will attach the cover sheet and eject the data after printing the recorded data. If either setting 504, "Eject records containing confidential information face down," or setting 505, "Eject records containing confidential information with a cover sheet," is set, CPU 111 proceeds to S807. In S807, the CPU 111 uses the image processing unit 116 to determine whether the recorded data of the received job contains confidential information. Specifically, the CPU 111 uses the image processing unit 116 to determine whether the recorded data of the received job contains any information that matches the conditions set in the confidential information determination setting screen 600 in Figure 6(a) of S403 mentioned above. If the CPU 111 determines that there is no confidential information (No in S807), it proceeds to S803; if it determines that there is confidential information (Yes in S802), it proceeds to S808.

[0032] In S808, CPU111 determines whether the "Face-down ejection" setting 504 or the "Ejection with a cover sheet attached" setting 505 is set on the priority ejection mode setting screen 500 in Figure 5(a). If setting 504, which states "Face down output if the record contains confidential information," is enabled, CPU 111 proceeds to S809. If setting 505, which states "Discard records containing confidential information with a cover sheet," is enabled, CPU 111 proceeds to process S806. In S809, CPU111 determines whether the job received by S801 is a job that requires double-sided recording and contains confidential information on the back of the last page. CPU 111 proceeds to S806 if the data is recorded on both sides and the back of the last page contains confidential information (if the answer to S809 is Yes). This is because the top surface of the ejected sheet contains confidential information, and a blank cover sheet is attached to the ejected sheet to conceal the information from others. On the other hand, if the job involves single-sided recording or double-sided recording where the back of the last page does not contain any information that should be kept confidential (indicated as No in S809), CPU 111 proceeds to S805.

[0033] If S802 determines "Yes", S804 determines "Always eject face up", or S807 determines "No", then CPU111 proceeds to S803. (Face-up discharge) In S803, the CPU 111 instructs the system to record data onto the sheet and then immediately eject it to the output tray 103. This performs the operation of recording data onto one side of the sheet 200a supplied by the ASF 102 mentioned above. If S804 determines that face-down ejection is always performed, or if S809 determines "No", CPU111 proceeds to S805. (Face-down discharge) In S805, the CPU 111 records the data onto the sheet and then ejects it to the output tray 103 with the recording surface facing vertically downwards. The CPU 111 records on both sides of the sheet 200a supplied by the ASF 102, even if the data is single-sided. If S804 determines that the cover sheet should always be attached before ejection, if S808 determines that the cover sheet should be attached before ejection, or if S809 determines "Yes", then CPU111 proceeds to S806. (Discharge with a cover sheet attached) In S806, the CPU 111 records data onto a sheet and ejects it. Then, it supplies another sheet from the ASF 102 to cover it and ejects it into the ejection tray 103. If the cover sheet is ejected blank without any data recorded on it, it can be reused as a recording sheet. Alternatively, although the sheet cannot be reused, information about the external device 126, such as the name of the person who sent the data, can be recorded on the cover sheet to make it easier to identify whose recording it is. After processing S803, S805, or S806 is completed, CPU 111 terminates the processing of this flowchart. As described above, according to the present invention, by performing initial settings for information to be kept confidential, it is possible to provide a recording device that can switch the output mode according to the content of the recorded data and keep the information of the recorded image confidential from the eyes of others.

[0034] (Other examples) Furthermore, the functionality of the embodiment can also be realized by supplying a program that implements the functions of the embodiment to a system or device via a network or storage medium, and the computer of that system or device reading and executing the program. The computer has one or more processors or circuits and may include a plurality of separate computers or a network of a plurality of separate processors or circuits in order to read and execute computer executable instructions. The processor or circuit may include a central processing unit (CPU), a microprocessing unit (MPU), a graphics processing unit (GPU), an application-specific integrated circuit (ASIC), or a field-programmable gateway (FPGA). The storage medium may include one or more hard disks (HDs), random access memory (RAM), read-only memory (ROM), or storage devices for a distributed computing system.

[0035] This embodiment includes the following configurations, methods, and programs. (Composition 1) A means for ejecting a recorded sheet on which recorded data has been recorded, Control means for controlling the ejection of the recorded sheet, A recording device having, If the control means determines that the recorded data contains confidential information, it controls the discharge means to discharge the recorded sheet in a way that conceals the information recorded on it. A recording device characterized by the following features. (Configuration 2) If the control means determines that the recorded data contains confidential information, it controls the ejection means to eject the recorded sheet face down. A recording device according to configuration 1, characterized in that it is a recording device. (Composition 3) If the control means determines that the recorded data does not contain confidential information, it controls the ejection means to eject the recorded sheet face up. A recording device according to configuration 1 or 2, characterized by the above. (Composition 4) When the control means determines that a job has been generated due to the operation unit of the recording device being operated by the user, it controls the ejection means to eject the recorded sheet face up. A recording device according to any one of configurations 1 to 3, characterized by the above. (Composition 5) If the control means determines that the recorded data contains confidential information, it controls the ejection means to eject a sheet without any records attached after ejecting the recorded sheet. A recording device according to any one of configurations 1 to 4, characterized by the above. (Composition 6) If the control means determines that the recorded data is double-sided and that confidential information is contained on the back of the last page, it controls the ejection means to eject the recorded sheet and then eject a blank sheet. A recording device according to any one of configurations 1 to 5, characterized by the above. (Composition 7) The control means determines that the recorded data contains confidential information if it contains a mark for a predetermined confidential information. A recording device according to any one of configurations 1 to 6, characterized by the above. (Composition 8) The mark for the confidential information is specified by the user on the display unit of the recording device. The recording device according to feature 7. (Composition 9) The control means determines that confidential information is included in the recorded data if the recorded data and a predetermined image are identical and information exists at a predetermined location in the recorded data. A recording device according to any one of configurations 1 to 8, characterized by the above. (Composition 10) The control means determines that the recorded data contains confidential information if the recorded data contains a string related to personal information. A recording device according to any one of configurations 1 to 9, characterized by the above. (Composition 11) The control means determines that confidential information is contained in the recorded data if a person's name is included in the recorded data. A recording device according to any one of configurations 1 to 10, characterized by the above. (Method 1) A control method for a recording device having control means for controlling the discharge process of a recorded sheet on which recorded data has been recorded, If the control means determines that the recorded data contains confidential information, it controls the discharge process to discharge the recorded sheet in a way that conceals the information recorded on it. A control method for a recording device, characterized by the following: (Program 1) A program to cause a computer to execute the control method for the recording device described in Method 1. [Explanation of symbols]

[0036] 100 Recording device 111 CPU 119 Display section

Claims

1. A means for ejecting a recorded sheet on which recorded data has been recorded, Control means for controlling the ejection of the recorded sheet, A recording device having, If the control means determines that the recorded data contains confidential information, it controls the discharge means to discharge the recorded sheet in a way that conceals the information recorded on it. A recording device characterized by the following features.

2. If the control means determines that the recorded data contains confidential information, it controls the ejection means to eject the recorded sheet face down. The recording device according to feature 1.

3. If the control means determines that the recorded data does not contain confidential information, it controls the ejection means to eject the recorded sheet face up. The recording device according to feature 1.

4. When the control means determines that a job has been generated due to the operation unit of the recording device being operated by the user, it controls the ejection means to eject the recorded sheet face up. The recording device according to feature 1.

5. If the control means determines that the recorded data contains confidential information, it controls the ejection means to eject the recorded sheet and then eject a sheet without any records attached. The recording device according to feature 1.

6. If the control means determines that the recorded data is double-sided and that confidential information is contained on the back of the last page, it controls the ejection means to eject the recorded sheet and then eject a blank sheet. The recording device according to feature 1.

7. The control means determines that the recorded data contains confidential information if it contains a mark for a predetermined confidential information. The recording device according to feature 1.

8. The mark for the confidential information is specified by the user on the display unit of the recording device. The recording device according to feature 7.

9. The control means determines that confidential information is contained in the recorded data if the recorded data and a predetermined image are identical and information exists at a predetermined location in the recorded data. The recording device according to feature 1.

10. The control means determines that the recorded data contains confidential information if the recorded data contains a string related to personal information. The recording device according to feature 1.

11. The control means determines that confidential information is contained in the recorded data if a person's name is included in the recorded data. The recording device according to feature 10.

12. A control method for a recording device having control means for controlling the discharge process of a recorded sheet on which recorded data has been recorded, If the control means determines that the recorded data contains confidential information, it controls the discharge process to discharge the recorded sheet in a way that conceals the information recorded on it. A control method for a recording device, characterized by the following:

13. A program for causing a computer to execute the control method for the recording device described in claim 12.

Images