Image forming apparatus

Abstract

The present invention provides an image forming apparatus that can prevent the contents of a document from being revealed to other users, even when scanned data is transmitted to other users' information processing devices. [Solution] When the password to be used in the pull scan is determined via the user IF16, the MFP10 encrypts the scanned and generated image data based on the determined password, sends the encrypted image data to the PC40, which is the source of the pull scan instruction, and the password must be used to decrypt the encrypted image data.

Description

Technical Field

[0001] The present application relates to an image forming apparatus that executes a pull scan based on a pull scan instruction.

Background Art

[0002] Patent Document 1 describes an image forming apparatus capable of executing a pull scan that causes a scanner to read an original document in response to a pull scan instruction from an information processing apparatus.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problem to be Solved by the Invention

[0004] However, in the image forming apparatus described in Patent Document 1, if a pull scan instruction is issued from another user's information processing apparatus after a user places an original document on the scanner and before the user issues a pull scan instruction on their information processing apparatus, the scan data will be transmitted to the other user's information processing apparatus, and the content of the original document will be known to the other user.

[0005] An object of the present application is to provide an image forming apparatus that can prevent the content of an original document from being known to other users even when scan data is transmitted to another user's information processing apparatus.

Means for Solving the Problem

[0006] To achieve the above objective, the image forming apparatus described in the embodiment is an image forming apparatus comprising a user interface, a scanner, a communication interface, a mounting unit, and a controller, wherein it is capable of communicating with an information processing device equipped with a user interface via the communication interface, the mounting unit is capable of mounting a sheet to be image formed, the controller is capable of performing a pull scan in response to a pull scan instruction received from the information processing device based on an operation to the user interface provided by the information processing device, scanning the sheet mounted on the mounting unit with the scanner to generate image data, and transmitting the image data to the information processing device, wherein when an encryption password to be used in the pull scan is determined via the user interface provided by the image forming apparatus, the scanned and generated image data is encrypted based on the determined encryption password, the encrypted image data is transmitted to the information processing device that is the source of the pull scan instruction, and the encryption password must be used to decrypt the encrypted image data.

[0007] Furthermore, in order to achieve the above objective, the image forming apparatus described in the embodiment is an image forming apparatus comprising a user interface, a scanner, a communication interface, a mounting unit, and a controller, wherein it is capable of communicating with an information processing device equipped with a user interface via the communication interface, the mounting unit is capable of mounting a sheet to be image formed, and the controller is capable of performing a pull scan in response to a pull scan instruction received from the information processing device based on an operation to the user interface provided by the information processing device, scanning the sheet mounted on the mounting unit with the scanner to generate image data, and transmitting the image data to the information processing device, wherein if an encryptable image format is specified in the pull scan instruction received from the information processing device, the scanner scans the sheet mounted on the mounting unit to generate image data, encrypts the image data in the image format specified by the pull scan instruction, and transmits the encrypted image data to the information processing device, and if an encryptable image format is not specified in the pull scan instruction received from the information processing device, it does not generate image data based on the sheet mounted on the mounting unit. [Effects of the Invention]

[0008] According to the image forming apparatus described in the embodiment, even if scanned data is transmitted to another user's information processing device, it is possible to prevent the contents of the original document from being known to that other user. [Brief explanation of the drawing]

[0009] [Figure 1] This is a diagram of the MFP configuration. [Figure 2] This is a sequence diagram for performing a pull scan. [Figure 3] This is a sequence diagram for performing a pull scan via a memory scan instruction. [Figure 4] This is a flowchart showing the scanning process. [Figure 5] This is a flowchart showing the procedure for determining whether scanning is possible or not. [Figure 6] This is a flowchart showing the procedure for the memory scan process. [Figure 7] This is a flowchart showing the procedure for scheduling a scan. [Figure 8] This flowchart shows the transfer process procedures according to the type of memory scan. [Modes for carrying out the invention]

[0010] The embodiments of this application will be described in detail below with reference to the drawings.

[0011] As shown in Figure 1, the MFP (Multi Function Peripheral) 10 includes a controller 11, memory 12, printer 13, FAXIF 14, scanner 15, user IF 16, USBIF 17, and communication IF 18. These components are connected to each other via bus 1 so that they can communicate with one another. The MFP 10 is an example of an image forming apparatus.

[0012] Printer 13 prints images onto recording media such as sheets or discs. The sheets are, for example, paper or OHP sheets. Printer 13 can employ inkjet or electrophotographic printing methods. Scanner 15 is, for example, a so-called flatbed scanner, and includes a platen glass on which the document is placed, a top plate covering the top of the platen glass on which the document is placed, and a reading sensor such as a CCD or CIS, which generates image data corresponding to the reading of the document. When the document is placed on the platen glass and the top plate is lowered, the document placed on the platen glass is not visible from outside the MFP 10. The platen glass is an example of a document placement area. Note that scanner 15 is not limited to a structure where the document is completely invisible when the top plate is lowered; it may also have a structure where part of the document sandwiched between the platen glass and the top plate is visible, making the document difficult to see. Furthermore, scanner 15 may be configured to include an ADF (Automatic Document Feeder) for transporting documents.

[0013] The User IF16 is an interface that can accept various operations on the MFP10. The User IF16 is an example of a user interface provided by an image forming apparatus. The User IF16 includes a touch panel including a liquid crystal display and various switches. The USB IF17 allows for the detachable connection of storage media compliant with the USB standard, and enables data reading and writing via communication compliant with the USB standard. Storage media compliant with the USB standard include, for example, USB memory. The MFP10 is connected to a network via the Communication IF18 and communicates with the PC40 and cloud server 50 via the network according to a predetermined protocol (such as TCP / IP). The Communication IF18 can be a wired LAN interface, a wireless LAN interface, etc. The Communication IF18 is an example of a communication interface. In this embodiment, the PC40 includes at least PC40A to 40C owned by users A to C, respectively (see Figures 2 and 3 described later).

[0014] The controller 11 is a processing unit that includes, for example, a CPU. The memory 12 is composed of a combination of volatile memory such as RAM, non-volatile memory such as NVRAM, and ROM. SSDs, HDDs, etc., may be used as non-volatile memory. Buffers provided by the controller 11, used when various programs are executed, may also be considered part of the memory 12. The memory 12 may also be a storage medium that the controller 11 can read. A storage medium that the controller 11 can read is a non-transitory medium. In addition to the examples above, non-transitory media also include recording media such as CD-ROMs and DVD-ROMs. Non-transitory media are also tangible media. On the other hand, electrical signals that carry programs downloaded from servers on the internet are a type of computer-readable signal medium, but they are not included in non-transitory computer-readable storage media.

[0015] Memory 12 stores a control program 2 as an executable program for the controller 11. The control program 2 is, for example, firmware that comprehensively controls each part of the MFP 10. The controller 11 controls each device connected to the bus 1 by executing the control program 2. In this embodiment, the processing of the controller 11 according to the instructions written in the program is mainly shown. That is, the processes such as "judgment," "identification," "acquisition," "reception," and "control" in the following description represent the processing of the controller 11. Note that "acquisition" is used as a concept that does not necessarily require a request. That is, the process of the controller 11 receiving data without a request is also included in the concept of "the controller 11 acquiring data." Also, "data" in this specification is represented by a bit sequence that can be read by the controller 11. Data that has the same substantial meaning but a different format is treated as the same data. The same applies to "information" in this specification.

[0016] Next, the configuration of PC40 will be described. PC40 is an example of an information processing device. Note that the information processing device is not limited to PC40; other devices capable of sending pull scan execution instructions to MFP10, such as mobile terminals like smartphones and tablets, may also be used. In addition to the user IF42, PC40 is equipped with a communication IF (not shown), memory, controller, and display. The user IF42 is, for example, a keyboard or mouse. The user IF42 is an example of a user interface. Note that the user IF42 may be other types of user interfaces such as a touch panel. The memory of PC40 stores the OS and the scan application 44. The scan application 44 is an application that controls the scanner 15 of MFP10. In this embodiment, the scan application 44 sends a scan instruction to the scanner 15 of MFP10 and performs a pull scan. The scan application 44 may be abbreviated as scan app 44 from now on.

[0017] The cloud server 50 is a cloud server serving as a storage destination when causing the scanner 15 of the MFP 10 to execute a pull scan to store generated image data in the cloud. Like the PC 40, the cloud server 50 includes a user IF, a communication IF, a memory, a controller, and a display (none of which are illustrated).

[0018] Figure 2 is a sequence diagram when executing a pull scan using (the scanner 15 of) the MFP 10. The characters appearing in the sequence diagram of Figure 2 are three users, User A to User C. User A is the owner of the document that is the target of the pull scan. User B and User C are persons who instruct the pull scan and are not the owner of the document. Unlike User B, User C is a person to whom User A wishes to provide the image data generated by the pull scan. Users A to C respectively own PCs 40A to 40C. Hereinafter, in the description of each process, a step is denoted by "S".

[0019] In FIG. 2, first, user A places a document on the platen glass of the scanner 15 (S1). Then, user A sets a password to be used during scanning via an operation through the user IF 16, and instructs a scan reservation (S2). As will be described later in the explanation of the sequence chart of FIG. 3, user A may be allowed to select an action at the time of scanning via an operation through the user IF 16. As the action at the time of scanning, either performing scanning in response to a scan instruction from an external device or performing memory scanning can be selected. The scan reservation instruction may be an instruction to select performing scanning in response to a scan instruction from an external device as the action at the time of scanning. In the present embodiment, scanning refers to pull scanning. The password is a password for encryption, that is, an encryption password. Further, the password setting may be performed by inputting a password determined by the user of the MFP 10 including user A via the user IF 16. Alternatively, in response to the user instructing to set a password via the user IF 16, the controller 11 may calculate, for example, a random password, and set that password in response to receiving an operation for approving the setting of that password via the user IF 16.

[0020] After instructing to reserve a scan, User A moves to the location of their PC40A and instructs PC40A to send a scan command to MFP10 via the user IF42 of PC40A (S21). In Figure 2, User A's instruction to send a scan command to MFP10 is simply referred to as "scan command". Similarly, when Users B and C instruct PC40B and PC40C, respectively, to send scan commands to MFP10, it is also simply referred to as "scan command". The same applies to Figure 3, which will be described later. Between the time User A places the document on scanner 15 and instructs to send the scan command, User B instructs their PC40B to send a scan command to MFP10 (S11). Upon receiving a scan command from User B, the MFP10 scans the document placed on the scanner 15 by User A, and in S2, sends encrypted PDF data generated based on the password set by User A to User B (S12). PDF stands for Portable Document Format. In this way, User B obtains encrypted PDF data 100B based on User A's document. However, since User B does not know the password to decrypt the encrypted PDF data 100B, User B cannot decrypt the encrypted PDF data. In this way, even if the scanned data is sent to User B's PC40B, it is possible to prevent User B from knowing the contents of the document.

[0021] When User A instructs MFP10 to send a scan command in S21, User A can obtain encrypted PDF data 100A from MFP10 in the same way as User B (S22). User A can decrypt the encrypted PDF data 100A based on the password they set and obtain scan data 100.

[0022] Similarly to User A, User C instructs MFP10 to send a scan command (S31), and can obtain encrypted PDF data 100C from MFP10 (S32). Then, User C receives the password set by User A from User A, and based on this password, can decrypt the encrypted PDF data 100C and obtain scan data 100.

[0023] Subsequently, if it is no longer necessary to scan the document placed on the scanner 15 in S1, User A returns to the MFP 10 and retrieves the document (S41). At this time, User A disables the password set in S2 by, for example, giving instructions via User IF 16 (S42). The method of disabling the password is not limited to User A disabling it manually; a validity period (for example, 10 minutes after setting the password) may be set for the password, and the controller 11 may disable the password when the validity period expires. Also, if the password is stored in memory 12 in S2, disabling the password may be done by deleting the password from memory 12. In this case, the state in which the password is valid is the state in which the password is stored in memory 12. Not limited to this, when the password is stored in memory 12, for example, a flag may be associated with the password, and when the flag is "1", the password is valid, and when the flag is "0", the password is invalid.

[0024] In S42, when the password is invalidated, the controller 11 returns the display screen of the user IF16 to its normal display (S43). In other words, from the time a scan reservation is made in S2 until the password is invalidated in S42, the display screen of the user IF16 is not in its normal display state. During this time, even if a scan command is made through its user IF16, the MFP 10 will not accept that scan command. Therefore, during this time, the user IF16 displays a message indicating that it will not accept scan commands.

[0025] Figure 4 shows the scan process performed by the controller 11 of the MFP10. Here, only the processes related to the sequence diagram in Figure 2 during the scan process in Figure 4 will be explained. Figure 4 also includes the memory scan process shown in the sequence diagram in Figure 3, but the explanation of the memory scan process will be given later.

[0026] In Figure 4, the controller 11 waits until a scan command is sent from an external device, including the PC 40 (S100: NO). When a scan command is sent (S100: YES), it determines whether a password has been set (S101). If, in this determination, the password has not been set (S101: NO), the controller 11 sends the image data generated by scanning the document, i.e., the scan data, to the external device that sent the scan command (S108), and then terminates the scanning process. On the other hand, if, in the determination in S101, the password has been set (S101: YES), the controller 11 executes a scan feasibility determination process (S102).

[0027] Figure 5 shows the detailed procedure for the scan feasibility determination process. The scan feasibility determination process determines whether the scan instruction transmission detected in S100 is an instruction that can encrypt the scan data generated by that instruction. In Figure 5, the controller 11 determines whether the file setting is PDF or not (S110). The file setting is the setting for when the scan data is converted into a file. In addition to PDF, other file types that can be set in the file setting include, for example, bitmap, JPEG (abbreviation for Joint Photographic Experts Group), TIFF (abbreviation for Tagged Image File Format), etc.

[0028] In the judgment of S110, if the file setting is PDF (S110: YES), the controller 11 determines whether the memory scan setting is fixed or not (S111). The sequence diagram in Figure 2 does not show memory scanning. Therefore, here we will proceed with the explanation assuming that the memory scan setting is not fixed (S111: NO). Accordingly, the controller 11 proceeds from S111 to S114, determines that scanning is possible, and then terminates the scan feasibility determination process. On the other hand, in the judgment of S110, if the file setting is not PDF (S110: NO), the controller 11 determines that scanning is not possible (S115), and then terminates the scan feasibility determination process.

[0029] The reason why files with non-PDF settings were uniformly deemed unscannable is that password-based encryption is not possible with non-PDF file settings. Therefore, if there are existing non-PDF file settings that allow password-based encryption, it is not necessary to uniformly unscan files with non-PDF settings.

[0030] Returning to Figure 4, the controller 11 determines whether scanning is possible based on the scan feasibility determination process (S103). If scanning is possible (S103: YES), the controller 11 determines whether a memory scan has been instructed (S104). In the sequence diagram of Figure 2, a memory scan has not been instructed (S104: NO), meaning that the scan is performed by receiving a scan instruction from an external device, including the PC 40. After scanning, the image data, i.e., the scan data, is encrypted into PDF data based on the password and sent to the external device that issued the scan instruction (S106), and then the scan process ends.

[0031] On the other hand, if the determination in S103 indicates that scanning is not possible (S103: NO), the controller 11 transmits a scan failure to the external device that issued the scan command (S107), and then terminates the scan process.

[0032] Figure 3 is a sequence diagram for performing a pull scan via a memory scan instruction. In the sequence diagram of Figure 3, processes similar to those in the sequence diagram of Figure 2 are given the same step numbers, and their explanations are omitted as appropriate.

[0033] In Figure 3, User A places the document on the platen glass of the scanner 15, sets a password for scanning via User IF 16 (S1), and then selects Memory Scan as the scan action (S5). Here, Memory Scan is a function of the MFP 10 that saves the scanned data to memory. In this embodiment, specific examples of memory include the memory 12 inside the MFP 10, the memory of the cloud server 50, and a USB memory that can be connected to USBIF 17. The settings that can be selected in the Memory Scan setting are Fixed and Flexible. Fixed means that the MFP 10 reads the document and generates scanned data at a resolution (e.g., Resolution A: 800 x 600 dpi) and size (e.g., Size A: A4) that the user has set in advance. Flexible means that the document is read at the maximum resolution and maximum size and scanned data is generated, and then the scanned data is regenerated later in response to a scan request from the PC 40. When the processes of S1 and S5 are completed, the controller 11 executes the scan reservation process.

[0034] Figure 7 shows the detailed procedure for the scan reservation process. In Figure 7, the controller 11 waits until a scan reservation instruction is received (S140: NO). When a scan reservation instruction is received (S140: YES), the controller 11 saves the set password, timeout period, and scan action to memory 12 (S141). The timeout period may be specified by the user, or it may be determined automatically by the controller 11. For example, the timeout period may be 10 minutes, but it may be shorter or longer. The scan reservation instruction is made via the user IF 16. S6 in Figure 3 indicates that user A has made a scan reservation instruction.

[0035] Next, the controller 11 determines whether the scan action is a memory scan (S142). If the scan action is not a memory scan (S142: NO), the controller 11 terminates the scan reservation process. On the other hand, if the scan action is a memory scan (S142: YES), the controller determines whether the memory scan setting is fixed (S143). As mentioned above, the memory scan setting can be either fixed or flexible. This selection can be made at any point before the scan reservation process starts, or during the scan reservation process. However, it is assumed that the memory scan setting has been made before the process proceeds to S143. Furthermore, a fixed memory scan setting means that the settings for image resolution, image size, etc., of the image data to be stored in the encrypted PDF data are determined at the time of the scan reservation. A flexible memory scan setting means that the settings for image resolution, image size, etc., of the image data to be stored in the encrypted PDF data are not determined at the time of the scan reservation. When selecting "Fixed" as the memory scan setting, the system can also accept user input via IF16 to select settings such as image resolution and image size. Based on these inputs, the system can then determine the settings for image resolution, image size, and other parameters of the image data to be stored within the encrypted PDF data.

[0036] In the determination in S143, if the memory scan setting is flexible (S143: NO), the controller 11 performs a scan at the highest resolution and maximum size, saves the image data generated by the scan, i.e., the scan data, to temporary memory without encryption (S144), and then proceeds to S146. On the other hand, in the determination in S143, if the memory scan setting is fixed (S143: YES), the controller 11 performs a scan at the resolution (resolution A) and size (size A) selected when the memory scan setting is fixed, saves the image data generated by the scan, i.e., the scan data, as encrypted PDF data to temporary memory (S145), and then proceeds to S146. The temporary memory is, for example, the volatile memory of memory 12.

[0037] In S146, the controller 11 executes a transfer process according to the memory scan type. Figure 8 shows the detailed procedure for the transfer process according to the memory scan type. In this embodiment, there are three types of memory scans: internal memory, cloud, and USB memory. The internal memory is the memory 12 of the MFP 10. The cloud is the cloud server 50. The USB memory is a USB memory that can be connected to the USBIF 17. The selection of the memory scan type may be performed at some point before the scan reservation process starts, or it may be performed during the scan reservation process. However, it is assumed that the memory scan type setting has been performed before the process proceeds to S146.

[0038] In Figure 8, if the memory scan type is internal memory (S150: YES), the controller 11 transfers the image data in temporary memory to internal memory 12 (S151). If the memory scan type is cloud (S152: YES), the controller 11 transfers the image data in temporary memory to the cloud server 50 (S153). Furthermore, if the memory scan type is USB memory (S154: YES), the controller 11 transfers the image data in temporary memory to the USB memory (S155). Note that the image data in temporary memory includes both encrypted image data (encrypted PDF data) and unencrypted image data. In other words, if the process proceeds from S144 to S146, the image data in temporary memory is unencrypted. Conversely, if the process proceeds from S145 to S146, the image data in temporary memory is encrypted.

[0039] Returning to Figure 3, once the scan reservation process is executed, the scan data is temporarily stored in the MFP10's internal memory 12, USB memory, or cloud server 50. Therefore, user A can retrieve the document before sending the scan command (S41). From this point onward, the document is no longer placed on the scanner 15, so there is no longer any risk of the document being scanned.

[0040] If, between User A placing the document on scanner 15 and instructing the MFP to send a scan command, User B instructs the MFP 10 to send a scan command from its PC 40B (S11), the controller 11 executes the scan process shown in Figure 4.

[0041] As mentioned above, the scan process in Figure 4 includes the processes related to the sequence diagram in Figure 2 and the processes related to the sequence diagram in Figure 3. Here, only the processes related to the sequence diagram in Figure 3 will be explained. In Figure 4, the controller 11 waits until a scan command is sent from an external device, including the PC 40 (S100: NO), and when a scan command is sent (S100: YES), it determines whether a password has been set or not (S101). If a password has been set (S101: YES), the controller 11 executes the scan feasibility determination process in Figure 5 (S102).

[0042] In Figure 5, assuming the file setting is PDF (S110:YES), the controller 11 determines whether the memory scan setting is fixed or not (S111). In this determination, if the memory scan setting is fixed (S111:YES), the controller 11 determines that scanning is possible if the requested size of PC40 is size A (S112:YES) and the requested resolution of PC40 is resolution A (S113:YES) (S114). On the other hand, in the determination in S111, if the memory scan setting is not fixed (S111:NO), that is, if the memory scan setting is flexible, the controller 11 determines that scanning is possible (S114). After that, the controller 11 terminates the scan feasibility determination process.

[0043] Furthermore, even if the memory scan setting is fixed (S111), if the requested size of PC40 is not size A (S112: NO), or if the requested resolution of PC40 is not resolution A (S113: NO), the controller 11 determines that scanning is not possible (S114). Thus, if the memory scan setting is fixed, but the size and resolution set by that fixed setting differ from the requested size and resolution of PC40, the scanner 15 cannot generate scan data that satisfies the PC40's request, and therefore scanning is not possible. After that, the controller 11 terminates the scan feasibility determination process.

[0044] Returning to Figure 4, the controller 11 determines whether scanning is possible based on the scan feasibility determination process (S103). If scanning is possible (S103: YES), the controller 11 determines whether a memory scan has been instructed (S104). In the sequence diagram of Figure 3, a memory scan has been instructed (S104: YES), so the controller 11 executes the memory scan process (S105) and then terminates the scan process.

[0045] Figure 6 shows the detailed procedure for the memory scan process. In Figure 6, the controller 11 executes processes S131 to S136 if the memory scan setting is fixed (S120: YES), and executes processes S121 to S126 if the memory scan setting is flexible (S120: NO).

[0046] In the processes S121 to S126, the controller 11 performs the following control processing: If the memory scan type is internal memory (S121: YES), the controller 11 encrypts the image data in the internal memory 12 into PDF data and sends it to the PC 40 (S122). If the memory scan type is cloud (S123: YES), the controller 11 transfers the image data from the cloud server 50 to the MFP 10, then encrypts it into PDF data and sends it to the PC 40 (S124). Furthermore, if the memory scan type is USB memory (S125: YES), the controller 11 encrypts the image data in the USB memory into PDF data and sends it to the PC 40 (S126).

[0047] On the other hand, in the processing of S131 to S136, the controller 11 performs the following control processing: If the memory scan type is internal memory (S131: YES), the controller 11 sends the encrypted PDF data in the internal memory 12 to the PC 40 (S132). If the memory scan type is cloud (S133: YES), the controller 11 transfers the encrypted PDF data from the cloud server 50 to the MFP 10 and then sends it to the PC 40 (S134). Furthermore, if the memory scan type is USB memory (S135: YES), the controller 11 sends the encrypted PDF data in the USB memory to the PC 40 (S136).

[0048] Thus, once the memory scan process is executed, even if unencrypted scan data is stored in the MFP10's internal memory 12, the cloud server 50, and the USB memory connected to the USBIF17, encrypted scan data, i.e., encrypted PDF data, will be sent to the PC40 user. Therefore, user B, who does not know the password, cannot decrypt the encrypted PDF data. As mentioned above, when the memory scan setting is flexible (S143:NO), the stored image data is the image data with the highest image resolution and maximum image size. When the controller 11 converts the image data into encrypted PDF data, it may also convert the image data with the highest image resolution and maximum image size into encrypted PDF data. The controller 11 may also accept information specifying the image resolution and image size along with a scan instruction from an external device. In this case, the controller 11 may convert the image data with the highest image resolution and maximum image size into image data with the image resolution and image size specified by the external device, and then convert the converted image data into encrypted PDF data.

[0049] In S11 of Figure 3, similar to S11 in Figure 2, User B instructs MFP10 to send a scan command. Not only User B, but also Users A and C instruct MFP10 to send a scan command to obtain encrypted PDF data. In contrast, in S15 of Figure 3, MFP10 does not actually scan the document, but sends encrypted PDF data that was saved when the scan reservation was accepted (S2), or encrypted PDF data generated by encrypting the scan data saved when the scan reservation was accepted (S2), to PC40B. In other words, the memory scan process shown in the sequence diagram of Figure 3 is realized by using the PC40's scan application 44 without modification.

[0050] If the encrypted PDF data is no longer needed, User A can return to the MFP10 and manually delete the image data stored in memory 12, i.e., the encrypted PDF data, via User IF16, for example, by operating the delete button displayed on User IF16 (S45). As mentioned above in S141 (see Figure 7), a timeout period is set, so once the timeout period has elapsed, the controller 11 deletes the encrypted PDF data stored in memory 12. Therefore, manual deletion of encrypted PDF data is used when you want to delete the encrypted PDF data from memory 12 before the timeout period has elapsed.

[0051] As explained above, in the MFP10 of this embodiment, when a password to be used for pull scanning is determined via the user IF16, the scanned and generated image data is encrypted based on the determined password, and the encrypted image data is sent to the PC40, which is the source of the pull scan instruction. Since the password is required to decrypt the encrypted image data, even if the scanned and generated image data is sent to another user B's PC40B, it is possible to prevent the contents of the original document from being known to the other user B.

[0052] Furthermore, the password used for pull scan is determined via the user interface 16 on the MFP10. This means that the password remains within the MFP10 and is not transmitted externally, thus preventing password leakage.

[0053] Furthermore, since it is possible to disable a valid password in memory 12 in response to user instructions entered via user IF16, the password can be disabled according to the user's wishes.

[0054] Furthermore, after a predetermined time has elapsed since the password used in the pull scan was determined via the user interface 16, the valid password in memory 12 is invalidated. This prevents the password from remaining valid in memory 12 for an extended period of time, even if the user forgets to invalidate it.

[0055] Furthermore, after the password used for pull scanning is determined via user IF16, if a pull scan instruction is received within a predetermined time, the document placed on the platen glass is scanned by scanner 15 to generate image data, this image data is encrypted in memory 12 based on the valid password, and the encrypted image data is sent to PC40. In other words, since encrypted image data is sent to PC40 only for pull scan instructions received within a predetermined time, the amount of encrypted image data sent to PC40 can be limited.

[0056] Furthermore, even after the encrypted image data is sent to the PC40, the validity of the password is maintained in memory 12, thus eliminating the need to re-enter the password.

[0057] Furthermore, if the pull scan instruction received from PC40 specifies an encryptable image format, the scanner 15 scans the document placed on the platen glass to generate image data, and this image data is encrypted in memory 12 using the image format specified by the pull scan instruction based on a valid password, and the encrypted image data is sent to PC40. Moreover, if the pull scan instruction received from PC40 does not specify an encryptable image format, no image data is generated based on the document placed on the platen glass. In this way, if an encryptable image format is specified in the pull scan instruction, encrypted image data is sent to PC40, and if an encryptable image format is not specified, encrypted image data is not generated at all, thus preventing the transmission of unencrypted image data to PC40.

[0058] Furthermore, when a password to be used for pull scanning is determined via user IF16, the scanner 15 scans the original document placed on the platen glass to generate image data, encrypts the image data based on the determined password, stores the encrypted image data, and then, upon receiving a pull scan instruction from PC40, transmits the stored encrypted image data to PC40. This reduces the time the original document needs to be placed on the platen glass for pull scanning.

[0059] It should be noted that the present invention is not limited to the embodiments described above, and various modifications are possible without departing from the spirit of the invention.

[0060] In the above embodiment, an MFP10 was described as an example of an image forming apparatus, but the image forming apparatus may be a device capable of performing only the "scanning" function. [Explanation of Symbols]

[0061] 10…MFP, 11…Controller, 12…Memory, 15…Scanner, 16…User Interface, 17…USB Interface, 18…Communication Interface, 40, 40A, 40B, 40C…PC, 42…User Interface, 44…Scanning Application, 50…Cloud Server.

Claims

1. User interface and Scanner and Communication interface, Mounting section and Controller and An image forming apparatus comprising, It is possible to communicate with an information processing device equipped with a user interface via the aforementioned communication interface. The aforementioned mounting section is capable of mounting a sheet to be used for image formation, The aforementioned controller, In response to a pull scan instruction received from the information processing device based on an operation on the user interface provided by the information processing device, it is possible to perform a pull scan by scanning the sheet placed on the aforementioned mounting unit with the scanner to generate image data and transmitting the image data to the information processing device. When the encryption password used in the pull scan is determined via the user interface provided by the image forming apparatus, the scanned and generated image data is encrypted based on the determined encryption password, and the encrypted image data is transmitted to the information processing device that is the source of the pull scan instruction. To decrypt the encrypted image data, the encryption password must be used. An image forming apparatus characterized by the following:

2. The image forming apparatus further includes a memory, The aforementioned controller, With the encryption password used in the pull scan valid in the memory, upon receiving the pull scan instruction from the information processing device, the scanner scans the sheet placed on the aforementioned storage unit to generate image data, the image data is encrypted based on the encryption password valid in the memory, and the encrypted image data is transmitted to the information processing device. The encrypted password used in the pull scan is an encrypted password determined via the user interface provided by the image forming apparatus. The image forming apparatus according to feature 1.

3. The aforementioned controller, The image forming apparatus can invalidate the encryption password valid in the memory in response to user instructions input via the user interface provided by the image forming apparatus. The image forming apparatus according to feature 2.

4. The aforementioned controller, After a predetermined time has elapsed since the encryption password used in the pull scan was determined via the user interface provided by the image forming apparatus, the valid encryption password in the memory is invalidated. The image forming apparatus according to feature 2.

5. The aforementioned controller, After the encryption password used in the pull scan is determined via the user interface provided by the image forming apparatus, and in response to receiving the pull scan instruction within a predetermined time, the scanner scans the sheet placed on the aforementioned storage unit to generate image data, the image data is encrypted in the memory based on the valid encryption password, and the encrypted image data is transmitted to the information processing device. The image forming apparatus according to feature 2.

6. The aforementioned controller, Even after transmitting the encrypted image data to the information processing device, the memory maintains the valid state of the valid encryption password. The image forming apparatus according to feature 2.

7. The aforementioned controller, If the pull scan instruction received from the information processing device specifies an encryptable image format, the scanner scans the sheet placed on the aforementioned storage unit to generate image data, the image data is encrypted in the memory using the image format specified by the pull scan instruction based on the valid encryption password, and the encrypted image data is transmitted to the information processing device. The image forming apparatus according to feature 2.

8. The aforementioned controller, If the pull scan instruction received from the information processing device does not specify an encryptable image format, image data based on the sheet placed in the aforementioned storage unit will not be generated. The image forming apparatus according to feature 7.

9. The aforementioned controller, In response to the determination of the encryption password used in the pull scan via the user interface provided by the image forming apparatus, the scanner scans the sheet placed on the aforementioned storage unit to generate image data, the image data is encrypted based on the determined encryption password, and the encrypted image data is stored. After storing the encrypted image data, the system transmits the stored encrypted image data to the information processing device upon receiving the pull scan instruction from the information processing device. The image forming apparatus according to feature 1.

10. The image forming apparatus further includes a memory, The aforementioned controller, The encrypted image data is stored in the memory. After storing the encrypted image data in the memory, upon receiving the pull scan instruction from the information processing device, the encrypted image data stored in the memory is transmitted to the information processing device. The image forming apparatus according to feature 9.

11. The aforementioned controller, The encrypted image data is stored in a portable memory attached to the image forming apparatus. After storing the encrypted image data in the portable memory, upon receiving the pull scan instruction from the information processing device, the encrypted image data stored in the portable memory is transmitted to the information processing device. The image forming apparatus according to feature 9.

12. The aforementioned controller, The encrypted image data is stored on a server connected via the communication interface. After storing the encrypted image data in the server, upon receiving the pull scan instruction from the information processing device, the encrypted image data stored in the server is transmitted to the information processing device. The image forming apparatus according to feature 9.

13. User interface and Scanner and Communication interface, Mounting section and Controller and An image forming apparatus comprising, It is possible to communicate with an information processing device equipped with a user interface via the aforementioned communication interface. The aforementioned mounting section is capable of mounting a sheet to be used for image formation, The aforementioned controller, In response to a pull scan instruction received from the information processing device based on an operation on the user interface provided by the information processing device, it is possible to perform a pull scan by scanning the sheet placed on the aforementioned mounting unit with the scanner to generate image data and transmitting the image data to the information processing device. If the pull scan instruction received from the information processing device specifies an encryptable image format, the scanner scans the sheet placed on the aforementioned mounting unit to generate image data, the image data is encrypted using the image format specified by the pull scan instruction, and the encrypted image data is transmitted to the information processing device. If the pull scan instruction received from the information processing device does not specify an encryptable image format, image data based on the sheet placed in the aforementioned storage unit will not be generated. An image forming apparatus characterized by the following:

Images