Image processing system and program

Abstract

To improve the user's convenience of communication via a virtual private line as compared to a case in which the connection timing of the virtual private line is not controlled according to a function used by a user.SOLUTION: An image processing system includes an image processing device 110 that performs image processing, and a control device 210 that controls execution of image processing in the image processing device 110 from outside a co-working LAN system 100. When a user logs in and selects a scan function, the image processing device 110 establishes a VPN connection with the control device 210, transmits scan data to the control device 210 via a VPN, and then disconnects the VPN. The image processing device 110 establishes the VPN connection in response to a print instruction from the user, acquires a print job generated by the control device 210 via the VPN, and then disconnects the VPN. When the user logs in and selects a security print function, the image processing device 110 displays a list of acquired print jobs, and causes the user to select a job.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an image processing system and a program. [Background technology]

[0002] Patent Document 1 proposes a technology that separates an image processing device in a local network from a control device outside the local network, and executes image processing performed by the image processing device on the control device side according to the hardware specifications of the image processing device and the contracted service. By using this technology, if a control device of an organization controls multiple image processing devices to execute the same image processing, users belonging to the organization can use each image processing device with the same ease of use, regardless of which local network the image processing device is installed in.

[0003] In this case, from the viewpoint of security, it is preferable to establish a virtual dedicated line, a so-called VPN (Virtual Private Network), between the image processing device and the control device, and to transmit and receive information between the image processing device and the control device via the VPN.

[0004] In order to facilitate VPN connection, Patent Document 2 discloses a method in which a device that stores VPN connection information required for connecting to a VPN is connected to a PC, and the PC uses the VPN connection information to establish a VPN connection, and when the device is disconnected from the PC, the VPN is automatically disconnected.

[0005] In addition, in Patent Document 3, a terminal sends identification information to a setting information distribution server, and the setting information distribution server returns to the terminal the connection destination information required to connect to the VPN corresponding to the identification information, which is then used by the PC to connect to the VPN.

[0006] Thus, conventionally, techniques have been proposed for automatically connecting to a VPN without requiring a user to input information required for connecting to the VPN each time. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2020-048092 A [Patent Document 2] JP 2013-196530 A [Patent Document 3] JP 2011-053985 A [Patent Document 4] JP 2009-064144 A Summary of the Invention [Problem to be solved by the invention]

[0008] Incidentally, the timing of communication via a virtual private line varies depending on the functions that a user uses.

[0009] However, in the past, the timing of connecting a virtual private line was not controlled by the function used by the user. In other words, even when it was not the time to use the virtual private line, the virtual private line was automatically connected in response to obtaining information necessary for connecting to the virtual private line. In this way, keeping the virtual private line connected for a long time when it was not needed is not desirable from a security standpoint. On the other hand, it is troublesome for the user to operate the virtual private line to connect when needed.

[0010] An object of the present invention is to improve the convenience for users of communications via a virtual private line, as compared with a case in which the timing of connection of the virtual private line is not controlled according to the functions used by the user. [Means for solving the problem]

[0011] The image processing system of the present invention comprises a first processor mounted on an image processing device having at least one of an image forming unit that performs a process of forming an image on a medium and an image reading unit that performs a process of reading an image on the medium, and a second processor mounted on a control device that is connected to the image processing device via a virtual private line and controls a part of at least one of the processes of forming an image on a medium and reading an image on the medium performed by the image processing device, and is characterized in that the first processor controls the timing of connection using the virtual private line with the control device depending on which functions of the image processing device are used by a user.

[0012] Furthermore, when the function selected by the user includes a process of transmitting data from the image processing device to the control device, the first processor connects the control device to the virtual dedicated line between the time the function is selected and the time before the data is transmitted, and executes the selected function to transmit the data to the control device via the connected virtual dedicated line.

[0013] In addition, the first processor receives a data reception completion notification from the control device. After coming The virtual private line between the control device and the control apparatus is disconnected.

[0014] The first processor also When the reception completion notification is received, a message is displayed indicating that the function selected by the user has been normally completed, and the user visually confirms the message. When the user logs out from the image processing apparatus, the virtual private line between the image processing apparatus and the control device is disconnected.

[0015] 3. The image processing system according to claim 2, wherein the function selected by the user is a scan function, and the first processor transmits data generated by the scan to the control device.

[0016] The first processor is also characterized in that it accepts information regarding a connection using the virtual dedicated line through a user operation, and even if it accepts information regarding a connection using the virtual dedicated line, it does not establish a connection using the virtual dedicated line before a function is selected by the user.

[0017] The first processor is further characterized in that, when a user uses a function that requires data to be sent from the control device to the image processing device before the function is executed, the first processor connects the control device to the virtual dedicated line in response to instructions from the user before the function is executed, receives the data from the control device via the connected virtual dedicated line, and executes the function using the data received by the image processing device in response to the user logging in to the image processing device and selecting the function.

[0018] The first processor is also characterized in that it disconnects the virtual private line between the first processor and the control device after successfully receiving data from the control device.

[0019] In addition, the function selected by the user is a security print function, and the data is a print job to be executed by the image processing device.

[0020] The program of the present invention has at least one of an image forming unit that performs a process of forming an image on a medium and an image reading unit that performs a process of reading an image on a medium, and causes a control device to control part of at least one of the processes of forming an image on a medium and reading an image on a medium via a virtual dedicated line, and realizes a function of controlling the timing of connection using the virtual dedicated line between the computer and the control device depending on the functions of the computer that a user uses. Effect of the Invention

[0021] According to the invention described in claim 1, the convenience of users in communicating via a virtual private line can be improved compared to a case in which the timing of connecting a virtual private line is not controlled according to the functions used by the user.

[0022] According to the invention as recited in claim 2, it is possible to prevent the virtual private line from being connected even before the function to be used is selected.

[0023] According to the invention as recited in claim 3, the virtual dedicated line to the control device can be automatically disconnected after it is confirmed that the control device has received data normally.

[0024] According to the invention as recited in claim 4, while the user is logged in, the user can communicate with the control device without reconnecting the virtual private line.

[0025] According to the invention as recited in claim 5, the control device can be made to manage data scanned in the image processing device.

[0026] According to the invention recited in claim 6, even if information regarding a connection using a virtual private line is received, it is possible to prevent the virtual private line from being connected before a function to be used is selected.

[0027] According to the invention as set forth in claim 7, even if the user does not log in, the virtual private line can be connected before the execution of the function as necessary.

[0028] According to the eighth aspect of the present invention, the virtual dedicated line between the image processing device and the control device can be disconnected after it is confirmed that the image processing device has received data normally.

[0029] According to the ninth aspect of the present invention, the control device can be caused to generate a print job to be processed by the image processing device.

[0030] According to the invention described in claim 10, the convenience for users of communications via a virtual private line can be improved compared to a case in which the timing of connecting a virtual private line is not controlled according to the functions used by the user. [Brief description of the drawings]

[0031] [Figure 1] 1 is a block diagram showing an image processing system according to an embodiment of the present invention; [Diagram 2] 4 is a diagram showing an example of a data configuration of user management information stored in a user management information storage unit in the present embodiment. FIG. [Diagram 3] FIG. 2 is a sequence diagram showing the processing performed when a VPN is connected in the present embodiment. [Figure 4A] 11 is a sequence diagram showing image processing performed when a scan function is executed in the present embodiment. FIG. [Figure 4B] FIG. 4B is a sequence diagram continuing from FIG. 4A. [Figure 5A] 11 is a sequence diagram showing image processing performed when a security print function is executed in the present embodiment. FIG. [Figure 5B] FIG. 5B is a sequence diagram continuing from FIG. 5A. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0032] Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

[0033] Fig. 1 is a block diagram showing an embodiment of an image processing system according to the present invention. Fig. 1 shows a configuration in which a coworking LAN (Local Area Network) system 100 and a corporate LAN system 200 are connected by a network 1 formed of the Internet or the like. The image processing system in this embodiment can be realized as hardware by combining existing computers and the like, and as will be described later, the characteristic image processing control in this embodiment is realized by software running on each computer.

[0034] The coworking LAN system 100 is a LAN system installed in a coworking space. In this embodiment, a coworking space is used as an example of a shared space where multiple users who do not belong to the same organization coexist. Other examples of shared spaces include shared offices. An "organization" refers to a group formed to achieve a specific purpose. In this embodiment, a company is used as an example of an organization. Therefore, in the following description, "organization" and "company" are used synonymously.

[0035] The corporate LAN system 200 is a LAN system installed in a company. As described above, a "company" is an example of an organization to which a user who uses a coworking space belongs.

[0036] The coworking LAN system 100 can be used by users belonging to different companies, so a corporate LAN system 200 is constructed for each company to which each user belongs. Meanwhile, a user belonging to an organization may use multiple coworking spaces, so multiple coworking LAN systems 100 may exist. However, since the corporate LAN system 200 of each company has the configuration shown in FIG. 1, and the coworking LAN system 100 installed in the coworking space has the configuration shown in FIG. 1, only one system of each is illustrated. The coworking LAN system 100 and the corporate LAN system 200 are each connected to a network 1 such as the Internet.

[0037] The coworking LAN system 100 in this embodiment is configured by connecting an image processing device 110 and a user management server 120 via a LAN 130 .

[0038] The image processing device 110 is installed in the coworking space and is used only by users of the coworking space. More specifically, the image processing device 110 is available to users who belong to an organization that has a contract with the administrator of the coworking space.

[0039] The image processing device 110 in this embodiment is realized by an image forming device such as a multifunction device equipped with various functions involving image processing such as a print function, a copy function, and a scan function, and is a device with a built-in computer. The image processing device 110 includes a CPU as a first processor, a ROM, a RAM, a HDD, a scanner as an image reading device that reads an image on a medium such as paper, a print engine as an image forming device that forms an image on the medium, an operation panel that accepts instructions from a user and displays information, and a network interface that connects communication lines such as the network 1 and the LAN 130. Furthermore, the image processing device 110 may include an external media interface that connects an external memory device such as a USB memory or a flash memory, and a wireless communication means for performing short-distance wireless communication with a mobile terminal.

[0040] In this embodiment, "image processing" does not only refer to processes such as formation and reading that are performed directly on images, but is defined in a broader sense as a series of processes including pre-processing (e.g., logging in, connecting to a VPN, acquiring an image, etc.) and post-processing (e.g., saving an image, disconnecting from a VPN, logging out, etc.) for performing image processing such as forming and reading an image.

[0041] The image processing device 110 has an image forming unit that performs processing to form an image on a medium and an image reading unit that performs processing to read an image on the medium. However, it may be configured to have at least one of the image forming unit or the image reading unit. The image processing device 110 has an image processing unit 111, a VPN connection unit 112, an information acquisition unit 113, and a storage unit 114. Note that components that are not used in the description of this embodiment are omitted from the figure.

[0042] The image processing unit 111 executes image processing according to the control of the control device 210 based on device information and contract information in response to a request from a user. The image processing unit 111 in this embodiment corresponds to the image forming unit and image reading unit described above, and provides various image processing functions according to the hardware and software included in the image processing device 110. However, each user who is permitted to use the coworking space is not necessarily able to use all the functions provided by the image processing device 110, but can use the functions within the scope specified in the contract information regarding the use of the coworking space.

[0043] In response to a request from a user, the VPN connection unit 112 acquires address information (e.g., IP address) of the control device 210 installed in the corporate LAN system 200 of the company to which the user belongs, and connects a VPN, which is a virtual private line, to the corporate LAN system 200 to which the user belongs. Specifically, the VPN is established in cooperation with the VPN connection unit 211. In this embodiment, a connection between two parties, that is, in this embodiment, the coworking LAN system 100 and the corporate LAN system 200 to be able to communicate with each other via VPN, is referred to as a "VPN connection." In addition, the VPN connection unit 112 disconnects the connected VPN in response to a release request. The information acquisition unit 113 acquires information necessary for controlling the VPN connection and image processing, as will be described in detail later.

[0044] Various information is stored in the storage unit 114, and specific information will be explained together with the explanation of the operation.

[0045] Each of the components 111 to 113 in the image processing device 110 is realized by the cooperative operation of a computer mounted on the image processing device 110 and a program running on a CPU mounted on the computer. The storage unit 114 is realized by a HDD mounted on the image processing device 110. Alternatively, a RAM or a storage means in the coworking LAN system 100 may be used via the LAN 130.

[0046] The user management server 120 is a server used to manage users who are permitted to use the coworking space by contract. The user management server 120 has a user management information storage unit 121. The user management information storage unit 121 may be realized by a HDD mounted on the image processing device 110.

[0047] FIG. 2 is a diagram showing an example of the data configuration of the user management information stored in the user management information storage unit 121 in the present embodiment. The user management information in the present embodiment includes an organization ID, authentication information, connection information, a control device address, and contract information. The organization ID is identification information of an organization that has a contract with the administrator of the coworking space. The authentication information is information required when using the image processing device 110 in the organization, that is, information required when logging in to the image processing device 110, and is set for each individual who uses the image processing device 110. As the authentication information, a pair of a user ID and a password, which are information for identifying a user, is set. The user management server 120 in the present embodiment has a function as an authentication server by storing and managing the authentication information. The connection information includes information required for connecting to the corporate LAN system 200. The VPN router address included in the connection information is set as the address information with the IP address of a VPN router installed in the corporate LAN system 200 of the organization. In the present embodiment, since the control device 210 has a function as a VPN router, the IP address of the control device 210 is set. As the authentication data, authentication data required for establishing a connection with the VPN router is set. The authentication data is determined by the policy of the VPN router, such as a user certificate and a passcode. The connection information may include at least the address information of the VPN router. The control device address is set to the IP address of the control device 210. The contract information is information about the contract made between the administrator of the coworking space and the company. The contract information includes service information indicating the contents of services available to users of the organization. For example, even if the image processing device 110 has color printing and black and white printing functions as color modes, only black and white printing is permitted for use by a user belonging to a company that is contractually permitted to use only black and white printing.

[0048] The corporate LAN system 200 is configured by connecting a control device 210 and a PC 220 via a LAN 230 .

[0049] The control device 210 controls a part of the process of forming an image on a medium and a process of reading an image on a medium, which are executed by the image processing device 110. However, the control device 210 may be configured to control a part of at least one of the processes of forming an image and reading an image according to the image processing function of the image processing device 110. The control device 210 can be realized by a general-purpose hardware configuration that has existed for a long time, such as a personal computer (PC). That is, the image processing device 110 includes a CPU as a second processor, a ROM, a RAM, a HDD, a user interface such as an operation panel that accepts instructions from a user and displays information, and a network interface that connects communication lines such as the network 1 and the LAN 230.

[0050] The control device 210 includes a VPN connection unit 211, an information acquisition unit 212, and an image processing control unit 213. Note that components that are not used in the description of this embodiment are omitted from the drawing.

[0051] The VPN connection unit 211 has a function as a VPN router, and connects an external network system, in this embodiment, the coworking LAN system 100, via VPN. The VPN connection unit 211 in this embodiment relays data exchanged between the image processing device 110 and the control device 210 included in the VPN-connected coworking LAN system 100. The VPN connection unit 211 disconnects the VPN at a predetermined timing.

[0052] The information acquisition unit 212 acquires information necessary for controlling the execution of image processing in the image processing device 110. Specifically, device information indicating the device configuration of the image processing device 110 and contract information of the organization (in this embodiment, "company") regarding the use of the image processing device 110 are acquired from the image processing device 110 via the VPN connection unit 211. The device information may include, for example, specification information indicating the hardware configuration and software configuration of the image processing device 110, or capability information indicating capabilities of functions and services realized by the hardware configuration and software configuration of the image processing device 110. The image processing control unit 213 controls the execution of image processing in the image processing device 110 according to the device information and the contract information.

[0053] Each of the components 211 to 213 in the control device 210 is realized by the cooperative operation of a computer forming the control device 210 and a program that runs on a CPU mounted on the computer.

[0054] The PC 220 is one form of information processing device used by a user belonging to the company. In this embodiment, the user who uses the PC 220 is also a user who uses the image processing device 110 in the coworking space.

[0055] Furthermore, the programs used in the present embodiment can be provided not only by communication means, but also by being stored in a computer-readable recording medium such as a CD-ROM or a USB memory. The programs provided from the communication means or recording medium are installed in a computer, and various processes are realized by the computer's CPU sequentially executing the programs.

[0056] Next, the operation of this embodiment will be described. First, the details of the process performed at the time of VPN connection in this embodiment will be described with reference to the sequence diagram shown in FIG.

[0057] When a user in the coworking space wants to start using the image processing device 110, the user inputs a user ID and password as authentication information from a predetermined screen displayed by operating the operation panel of the image processing device 110. The image processing device 110 performs user authentication by checking the input user ID and password pair against authentication information registered in user management information (step 111). The user authentication performed here is positioned as authentication for identifying the control device 210 to which the VPN connection is to be made, rather than as user authentication for use of the image processing device 110. However, in this embodiment, these authentications are not separated. In other words, the user attempts to log in by inputting authentication information. Here, the explanation will be continued assuming that authentication has been successful, that is, login to the image processing device 110 has been successful.

[0058] In the present embodiment, the user is made to operate the operation panel of the image processing device 110 to log in, but this is not necessarily the only method. For example, if the user brings a mobile terminal storing authentication information and connection information into the coworking space, the mobile terminal may be wirelessly connected to the image processing device 110 by Bluetooth (registered trademark) or Wi-Fi (registered trademark), and the authentication information and connection information may be acquired by the image processing device 110. Alternatively, if an IC card reader is connected to the image processing device 110 and the user carries an IC card on which authentication information and connection information are recorded, the user may hold the IC card over the IC card reader to cause the image processing device 110 to acquire the authentication information and connection information. If the system is configured in this way, it is not necessary to set authentication information and connection information in the user management information held by the user management server 120.

[0059] Next, the information acquisition unit 113 transmits an address acquisition request including the successfully authenticated user ID to the user management server 120 (step 112). In response to the transmitted address acquisition request, the user management server 120 reads out connection information corresponding to the user ID included in the address acquisition request from the user management information and returns the connection information (step 113).

[0060] When the information acquisition unit 113 acquires the connection information in the above manner, the VPN connection unit 112 transmits a VPN connection request, including the authentication data contained in the connection information, to the control device 210 identified by the IP address included in the acquired connection information (step 114).

[0061] When the VPN connection unit 211 in the control device 210 receives the authentication data from the image processing device 110, the VPN connection unit 211 performs authentication for VPN connection based on the authentication data (step 115). If the authentication is successful, the VPN connection unit 211 replies to that effect. As a result, a VPN connection is established between the image processing device 110 and the VPN connection unit 211 (step 116).

[0062] When the VPN is connected as described above, the image processing device 110 performs image processing under the control of the control device 210. Here, a typical image processing performed under the execution control of the control device 210 will be described.

[0063] Although not shown in Fig. 1, a program management server is provided on the cloud. The program management server manages a plurality of image processing programs. Each image processing program is associated with identification information (e.g., a user ID) of a user who can use the program.

[0064] When the program management server acquires the authentication information from the image processing device 110, it returns to the image processing device 110 an access path (for example, a URL, an IP address, or a port number) to the image processing program corresponding to the user ID included in the authentication information.

[0065] The authentication information used here is authentication information for logging in and using the image processing device 110. The authentication information used in step 111 described above is authentication information used to select the correct VPN connection destination. In this embodiment, for convenience, the authentication information managed by the user management server 120 is used in common, but it is not necessarily necessary to use the same authentication information for the VPN connection and for logging in to the image processing device 110.

[0066] The image processing device 110 uses the user ID and the access path acquired from the program management server to transmit a connection request to the image processing program to the control device 210. For example, HTTPS (Hypertext Transfer Protocol Secure) may be used for the connection request from the image processing device 110 to the control device 210.

[0067] When the control device 210 receives a connection request to the image processing program from the image processing device 110, it performs user authentication, and if the authentication is successful, the control device 210 returns information indicating successful connection to the image processing device 110 as a response to the connection request. More specifically, when the access key obtained from the program management server using the obtained access path as a reservation for use matches the access key included in the connection request received from the image processing device 110, the control device 210 returns information indicating successful connection to the image processing device 110.

[0068] When the information indicating the successful connection is returned, the image processing device 110 transmits device information stored therein, which indicates the device configuration of the image processing device 110, to the control device 210 which executes the image processing program.

[0069] The image processing control unit 213 in the control device 210 controls the execution of image processing in the image processing device 110 by controlling devices such as a print engine and a scanner equipped in the image processing device 110 in accordance with the image processing program managed by the program management server as described above.

[0070] That is, the image processing control unit 213 in the control device 210 executes the connected image processing program to determine functions, services, etc. to be provided to the image processing device 110 based on the device information and contract information, and provides image data of a user interface image according to the functions and services to be provided to the image processing device 110. Furthermore, the image processing control unit 213 restricts the operation of the image processing device 110 according to the functions and services to be provided.

[0071] The information acquisition unit 212 may acquire the contract information before the image processing control unit 213 controls the image processing. For example, the image processing device 110 may acquire the contract information together with a connection request at the time of VPN connection, and transmit the contract information together with authentication data when requesting the VPN connection (step 114).

[0072] For example, if by referring to the device information it is found that the image processing device 110 has both black and white printing and color printing functions, the image processing control unit 213 controls the execution of black and white printing or color printing in response to user operations by providing the image processing device 110 with a user interface image including a black and white printing operation button and a color printing operation button.

[0073] Also, for example, even if the image processing device 110 has both black and white printing functions and color printing functions, if it is found by referring to the contract information that the user has contracted only for the black and white printing service and not for the color printing service, a user interface image that enables the black and white printing operation button and disables the color printing operation button may be provided to the image processing device 110, thereby restricting (prohibiting) the execution of color printing. In order to disable the color printing operation button, for example, a method may be used in which the operation button is not displayed or the display color is lightened to indicate that it is not selectable.

[0074] When the user interface image is provided, the image processing unit 111 in the image processing device 110 displays the user interface image on a display device such as a touch panel. Then, for example, a process is executed in response to an operation from a user obtained via the user interface image.

[0075] When a user operation is performed, the image processing unit 111 transmits operation information of the user operation to the control device 210. The operation information includes, for example, touch information indicating the type of operation on the touch panel (for example, a touch operation or a release operation) and coordinate information indicating the position on the touch panel where the operation corresponding to the touch information was performed. The image processing unit 111 transmits the operation information to the control device 210 as, for example, an HTTP request.

[0076] Upon receiving the operation information, the image processing control unit 213 in the control device 210 controls image processing in the image processing device 110 by executing processing according to the operation information. For example, the image processing control unit 213 updates a user interface image as necessary according to the operation information obtained from the image processing device 110, and provides the updated user interface image to the image processing device 110. Note that, for example, when a plurality of pieces of operation information are obtained consecutively, the image processing control unit 213 may omit some of the updates related to the user interface image to reduce the load of the drawing process.

[0077] When the user performs an operation to disconnect the image processing program after completing the desired image processing, the image processing device 110 disconnects the connected image processing program, thereby ending the image processing.

[0078] The above describes typical image processing that is performed by connecting the image processing device 110 and the control device 210 via VPN and under the execution control of the control device 210. Next, specific image processing in this embodiment will be described.

[0079] The image processing performed by the image processing device 110 can be roughly divided into a pattern in which a user logs in to the image processing device 110 and selects an image processing function, thereby performing data communication between the image processing device 110 and the control device 210 via a VPN, and a pattern in which a user logs in to the image processing device 110 and selects an image processing function after performing data communication between the image processing device 110 and the control device 210 via a VPN. In the former case, for example, a user selects a scan function of the image processing device 110, and transmits scan data generated by scanning from the image processing device 110 to the control device 210 via a VPN. In the latter case, for example, a user wants to use a security print function. That is, the image processing device 110 receives a print job on the corporate LAN system 200 side from the control device 210 via a VPN in advance and stores it. After that, the user selects a security print function of the image processing device 110 and causes the image processing device 110 to execute printing. In this way, the security print function corresponds to a function that requires a print job to be transmitted from the control device 210 to the image processing device 110 before execution.

[0080] First, the image processing executed by selecting the scan function will be described with reference to the sequence diagrams shown in Figures 4A and 4B. Note that the same steps as those shown in Figure 3 are assigned the same step numbers.

[0081] First, the user inputs authentication information, i.e., a user ID and a password, from a specific screen. The image processing device 110 performs user authentication by checking the input user ID and password pair against authentication information registered in user management information (step 111). The user authentication performed here is positioned as user authentication for use of the image processing device 110. Here, the explanation will be continued assuming that the authentication is successful and the user is able to log in to the image processing device 110.

[0082] If the login is successful, the image processing device 110 displays a menu screen, more specifically, a main menu screen prepared by the image processing device 110, on the operation panel (step 121).

[0083] Next, the user selects the scan function by, for example, selecting a scan icon from the menu screen, etc. In response to this selection, the image processing device 110 displays a scan screen, i.e., a menu screen for the scan function, on the operation panel (step 122).

[0084] Next, the user sets the destination of the scan data and, if necessary, options for executing a scan from the scan screen. The destination may be manually input by the user in a predetermined input field, or the desired destination may be selected from a destination list if the destination has been registered in advance in the image processing device 110. In this embodiment, an example will be described in which the user specifies the user's personal PC 220 used in the corporate LAN system 200 as the destination.

[0085] Next, the user selects a predetermined execution button. The image processing device 110 executes scanning in response to the instruction to execute scanning selected by the user (step 123). Note that the process up until the scanning is executed may be the same as in the past.

[0086] When scanning of the paper to be transmitted is completed, the VPN connection unit 112 establishes a VPN connection between the image processing device 110 and the control device 210 according to the procedure described with reference to Fig. 3 (step 110). Note that user authentication does not need to be performed since it would be redundant.

[0087] When the VPN is normally connected, the image processing device 110 transmits the data generated by scanning (hereinafter, "scan data") to the control device 210 via the VPN (step 124). At this time, the data is transmitted with a destination specified by the user.

[0088] When the control device 210 receives the scan data, it transfers the scan data to the destination address added to the scan data (step 125).

[0089] When the PC 220 receives the scan data, it returns a reception completion notification to the control device 210. When the control device 210 receives the reception completion notification (step 126), it returns a processing end notification indicating that the PC 220 has received the scan data to the image processing device 110 (step 127).

[0090] When the image processing device 110 recognizes that the scan function executed in response to the user's instruction has also been completed successfully in the corporate LAN system 200, the image processing device 110 displays a message on the operation panel indicating that the scan function has been completed successfully (step 128).

[0091] The user who sees this message instructs the image processing device 110 to log out. The VPN connection unit 112 disconnects the VPN in response to the logout instruction (step 129), and discards the connection information used for the VPN from the image processing device 110 (step 130). This makes it possible to prevent leakage of the connection information that may occur if the information is left in the image processing device 110. Thereafter, the image processing device 110 logs the user out in response to the logout instruction, and displays a message to that effect on the operation panel (step 131).

[0092] In this manner, the image processing device 110 connects to a VPN in response to the user's selection of the scan function, and executes the scan function process.

[0093] The scan function includes a process of transmitting data from the image processing device 110 to the control device 210, and the image processing device 110 may simply connect a VPN to the control device 210 during the period from when the scan function is selected until before the data is transmitted. In this embodiment, the VPN connection (step 110) is performed after the scanning of the paper is completed. That is, the VPN is connected only while data communication, in this case, the scan data and notification, is being exchanged. This can shorten the time during which the VPN is connected. However, the timing of connecting the VPN is not limited to this, and for example, the VPN connection (step 110) may be performed immediately after the user selects the scan function. In this case, if the VPN connection fails, the user does not need to perform processes such as specifying a destination or scanning a paper.

[0094] Also, in step 111, the image processing device 110 may process to obtain connection information when receiving the result of user authentication from the user management information. However, even if the connection information is obtained, the VPN connection is not established before the user selects the scan function, thereby keeping the VPN connected for a short period of time.

[0095] Next, the latter image processing performed by selecting the security print function will be described with reference to the sequence diagrams shown in Figs. 5A and 5B. Note that the same processes as those shown in Figs. 3 and 4 are given the same step numbers. In this embodiment, since the image processing device 110 does not have the functions necessary for generating a print job, it is assumed that the print job is generated by the control device 210. Although not shown in Fig. 1, it is assumed that the data to be printed is stored in a mobile terminal brought into the coworking space by the user. It is also assumed that the mobile terminal and the image processing device 110 are capable of wireless communication by a wireless communication method such as Bluetooth (registered trademark).

[0096] First, the user issues a print instruction to the portable terminal brought into the coworking space. This print instruction is based on the security print function, and the user specifies the data to be printed. In response to the print instruction from the user, the portable terminal specifies authentication information (i.e., user ID and password) and instructs the image processing device 110 to establish a VPN connection (step 141). Here, the authentication information sent by the portable terminal to the image processing device 110 is positioned as authentication for identifying the control device 210 to which the VPN connection is to be made.

[0097] In response to an instruction from the mobile terminal, the image processing device 110 establishes a VPN connection between the image processing device 110 and the control device 210 according to the procedure described with reference to Fig. 3 (step 110). If the VPN is successfully connected, the image processing device 110 sends a connection completion notification to the mobile terminal indicating that the VPN connection has been completed (step 142).

[0098] When the VPN is normally connected, the mobile terminal transmits an image processing device address acquisition request to the image processing device 110 (step 143), and the image processing device 110 responds with the image processing device address in response to the request (step 144). The image processing device address is, for example, an IP address of the image processing device 110 that enables the communication partner to be identified, and is information that allows the control device 210 to specify the destination of a print job, as described below. Note that the image processing device 110 may add the image processing device address to the connection completion notification and transmit it without having the mobile terminal make an address acquisition request.

[0099] Next, the mobile terminal transmits the data to be printed (hereinafter, "print data") and the address of the image processing device to the control device 210 via the VPN established with the control device 210 (step 145). Since the mobile terminal stores the IP address of its own control device 210, it can establish a VPN with the control device 210 and transmit the print data etc. directly to the control device 210. Of course, the data may be transmitted via the VPN connected between the image processing device 110 and the control device 210.

[0100] The control device 210 generates a print job based on the received print data (step 146), and transfers the generated print job as packets to the image processing device 110 via the VPN (step 147).

[0101] When the image processing device 110 receives the print job, it returns a reception completion notification to the control device 210 (step 148). When the control device 210 receives the reception completion notification from the image processing device 110, it returns a transfer completion notification of the print job to the image processing device 110 to the mobile terminal (step 149).

[0102] Once the transfer completion notification is received, no further data communication will be performed via the VPN, so the VPN connection unit 112, in cooperation with the VPN connection unit 211, disconnects the VPN (step 129) and discards the connection information used for the VPN from the image processing device 110 (step 130).

[0103] Thereafter, when the user wishes to print, the user operates the operation panel of the image processing device 110 to display a specific screen, and inputs a user ID and password as authentication information. The image processing device 110 performs user authentication by checking the input user ID and password pair against authentication information registered in user management information (step 111). The user authentication performed here is positioned as user authentication for use of the image processing device 110. Here, the explanation will be continued assuming that the authentication has been successful and that the user has been able to log in to the image processing device 110.

[0104] If the login is successful, the image processing device 110 displays a main menu screen on the operation panel (step 121).

[0105] Next, the user selects the security print function, for example, by selecting a security print icon from the menu screen. In response to this selection, the image processing device 110 displays on the operation panel a list of print jobs corresponding to the data that the user has instructed to be printed (step 150).

[0106] When the user issues a print instruction by selecting a print job that he or she wishes to execute from the list of print jobs displayed, the image processing unit 111 executes the print job specified in response to the print instruction to generate a printed matter (step 151).

[0107] Thereafter, when the printing execution is completed, the image processing device 110 notifies the user of the completion of printing by, for example, displaying a message to that effect on the operation panel (step 152).

[0108] When the user knows by referring to the display on the operation panel that the execution of the desired print job has been completed, the user issues a logout instruction by operating the operation panel of image processing device 110. In response to the logout instruction, image processing device 110 logs out the user and displays a message to that effect on the operation panel (step 131).

[0109] In this manner, the image processing device 110 executes the security print function process in response to the user's selection of the security print function.

[0110] According to this embodiment, the VPN is connected only when data communication via the VPN is required for the function selected by the user, which is safe from a security standpoint and improves user convenience since the VPN is automatically connected and disconnected.

[0111] In this embodiment, the image processing device 110 is installed in a coworking space, which is a shared space, as an example. However, if the image processing device 110 can be connected via a VPN, the installation location of the image processing device 110 does not need to be limited to a shared space.

[0112] In the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0113] In addition, the operations of the processor in the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate. [Explanation of symbols]

[0114] 1 network, 100 coworking LAN system, 110 image processing device, 111 image processing unit, 112, 211 VPN connection unit, 121 user management information storage unit, 113, 212 information acquisition unit, 114 storage unit, 120 user management server, 121 user management information storage unit, 130, 230 LAN, 200 corporate LAN system, 210 control device, 213 image processing control unit, 220 PC.

Claims

1. a first processor mounted on an image processing device having at least one of an image forming unit that performs processing to form an image on a medium and an image reading unit that performs processing to read the image on the medium; a second processor mounted on a control device connected to the image processing device via a virtual private line and configured to control a part of at least one of a process of forming an image on a medium and a process of reading an image on the medium, which are performed by the image processing device; having An image processing system characterized in that the first processor controls the timing of connection using the virtual dedicated line with the control device depending on the functions of the image processing device that the user uses.

2. The first processor, When a function selected by a user includes a process of transmitting data from the image processing device to the control device, the control device and the virtual dedicated line are connected during a period from when the function is selected until when the data is transmitted; transmitting said data to said control device via said connected virtual private line by executing a selected function; 2. The image processing system according to claim 1.

3. 3. The image processing system according to claim 2, wherein the first processor disconnects the virtual private line between the first processor and the control device after a data reception completion notification is sent from the control device.

4. The first processor, When the reception completion notification is received, a message is displayed indicating that the function selected by the user has been normally completed; 4. The image processing system according to claim 3, wherein the virtual private line between the image processing device and the control device is disconnected when the user who has visually recognized the notice logs out from the image processing device.

5. the function selected by the user is a scan function; The image processing system according to claim 2 , wherein the first processor transmits data generated by scanning to the control device.

6. The first processor, accepting information regarding a connection using the virtual private line through a user operation; even if information regarding a connection using the virtual private line is received, a connection using the virtual private line is not established before a function is selected by a user; 3. The image processing system according to claim 2.

7. The first processor, When a user uses a function that requires data transmission from the control device to the image processing device before the function is executed, the control device and the virtual private line are connected in response to an instruction from the user before the function is executed; receiving the data from the control device via the connected virtual private line; When a user logs in to the image processing device and selects the function, the image processing device executes the function using the data received.

2. The image processing system according to claim 1.

8. 8. The image processing system according to claim 7, wherein the first processor disconnects the virtual dedicated line between the first processor and the control device after the first processor has normally received the data from the control device.

9. The function selected by the user is the security print function, the data is a print job to be executed by an image processing device; 8. The image processing system according to claim 7.

10. a computer having at least one of an image forming unit that performs processing to form an image on a medium and an image reading unit that performs processing to read an image on the medium, the computer causing a control device to control a part of at least one of the processing to form an image on the medium and the processing to read an image on the medium via a virtual private line; A program for realizing a function of controlling the timing of a connection using the virtual private line with the control device in accordance with a function of the computer that is to be used by a user.

Images