Document input and output device having security protection function and document input and output method of the device

[0001] 1. Field of the Invention

[0002] The present invention relates to document input and output devices having security protection functions and document input and output methods of the devices, and more particularly, a document input and output device having a security protection function, the document input and output device being connected to a network and using plural communication protocols, the document input and output device communicating documents in various data forms to and from plural information devices, and a document input and output method of the device.

[0003] 2. Description of the Related Art

[0004] Recently and continuingly, a network communication system having a document input and output device for identifying external devices, the document input and output device being connected to a network and using plural communication protocols, the document input and output device communicating documents in various data forms to and from plural information devices, has been developed.

[0005] In such a network communication system, various application services wherein a document input and output device is used as a core are provided. For example, a document image read out or data made by an information device is sent to a designated address by e-mail, sent by a facsimile, or file-transferred to another information device. Information written in a received e-mail or an image in a file attached to the e-mail is recorded and output, sent to a designated facsimile, or file-transferred to the information device. Storing management of the data sent to the device is performed. See Japanese Laid-Open Patent Application Publication No. 2004-356822, for example.

[0006] While the document input and output device connected to such a network processes a large number of documents, a process for security protection such as setting a limit of a function (opening function, printing function, editing function) for handling the document is set for every user. In addition, in a case where the document is sent by facsimile or the like, confirmation of an address is performed by only a user. Because of this, since sending is started after a number of the address is input and then a start key is pressed, an error in sending may occur.

[0007] Accordingly, embodiments of the present invention may provide a novel and useful document input and output device having a security protection function and document input and output method of the device.

[0008] More specifically, the embodiments of the present invention may provide a document input and output device having security protection functions and a document input and output method of the device, whereby the document is converted to a document where a limitation to a function for handling the document is set, confirmation of the address is encouraged when the document is sent by facsimile or the like, and an address of the document that is input or output via the device is limited, so that the document can be managed and protected.

[0009] One aspect of the present invention may be to provide a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, including: a protection part configured to provide security protection for the document that is input; a confirmation part configured to encourage reconfirmation of information that is input by a user; and a restriction part configured to limit use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0010] It may be also the aspect of the present invention to provide a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, including protection means configured to provide security protection for the document that is input; confirmation means configured to encourage reconfirmation of information that is input by a user; and restriction means configured to limit use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0011] It may be also the aspect of the present invention to provide a document input and output method of a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, the method including: a protection step of providing security protection for the document that is input; a confirmation step for encouraging reconfirmation of information that is input by a user; and a restriction step for limiting use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0012] According to the above-mentioned invention, it is possible to provide a document input and output device having security protection functions and a document input and output method of the device, whereby the document that is input is converted to a document where a limitation to a function for handling the document is set by a protection part, an operational error when the document is sent by facsimile or the like is prevented by a confirmation part, and an address of the document that is input or output via the device is limited by a control part, so that the document can be managed and protected.

[0013] Other objects, features, and advantages of the present invention will become more apparent from the following detailed description when read in conjunction with the accompanying drawings.

[0035] A description of the present invention is now given, with reference to FIG. 1 through FIG. 11, including embodiments of the present invention.

[0036] The following embodiment of the present invention is an example where the present invention is applied to so-called digital color multifunction processing machine where a copying function, facsimile function, printing function, scanner function, function for providing an input image (a document image read out by the scanner function or an image input by the printing function or the facsimile function), and others, are combined.

[0037] FIG. 1 is a system structural view including a digital color multifunction processing machine of an embodiment of the present invention.

[0038] As shown in FIG. 1, in the embodiment of the present invention, a system having the following structure is assumed. A server computer 3 and plural client computers 4 are connected to a digital color multifunction processing machine 1 that is an information processing system via a LAN (Local Area Network) 2 that is a communication network.

[0039] The server computer 3 implements various kinds of information processes. For example, the server computer 3 supports FTP or HTTP protocol or realizes a function of a Web server or DNS server (Domain Name Server).

[0040] In other words, in this system, an environment where an image processing function of the digital color multifunction processing machine 1 such as an image input function (scanner function), image output function (printing function), image storing function, and others, can be jointly shared on the LAN 2.

[0041] Such a system is connected to the Internet 6 via a communication control unit 5 so that data communication between this system and an external environment can be performed via the Internet 6. In addition a digital color multifunction processing machine 100 is provided on the Internet 6. The digital color multifunction processing machine 100 has the same function as the digital color multifunction processing machine 1.

[0042] While a router, exchange, modem, DSL modem, or the like is normal as the communication control unit 5, it should be capable of TCP/IP communications as a minimum. In addition, the LAN 2 is not limited to wire communications but may use wireless communication (infrared, electromagnetic wave, or the like). An optical fiber may be used for the LAN 2.

[0043] Next, details of the digital color multifunction processing machine 1 are discussed. The explanation of the digital color multifunction processing machine 1 is, of course, applied to the digital color multifunction processing machine 100.

[0044] Here, FIG. 2 is a schematic perspective view of the digital color multifunction processing machine 1. FIG. 3 is a block diagram showing electric connections of parts of the digital color multifunction processing machine 1.

[0045] As shown in FIG. 2, in the digital color multifunction processing machine 1, an image reading device 8 is provided at an upper part of a printing device 7. The printing device 7 forms an image on a medium such as a transferring paper. The image reading device 8 reads out the image from a manuscript. An operations panel P is provided at an outside surface of the image reading device 8. The operations panel P displays for an operator and accepts various inputs such as function setting by the operator.

[0046] In addition, an external media input and output device 9 is provided at a lower part of the operations panel P so that an inserting opening for receiving a storage medium M (See FIG. 3) is exposed to the outside. The storage medium M is, for example, an optical disk or flexible disk. The external media input and output device 9 reads out program code, image data, or the like stored in the storage medium M and writes the program code, the image data, or the like to the storage medium M.

[0047] As shown in FIG. 3, the digital color multifunction processing machine 1 includes an image processing unit part A and an information processing unit part B. A printing device 7 and an image reading device 8 belong to the image processing unit part A. The operations panel P and the external media input and output device 9 belong to the information processing unit part B for performing various information processes.

[0048] First, the image processing unit part A is discussed. As shown in FIG. 3, the image processing unit part A having the printing device 7 and the image reading device 8 includes the image processing control unit 10. The image processing control unit 10 implements control of the entire imaging process at the image processing unit part A. A printing control unit 11 and an image reading control unit 12 are connected to the image processing control unit 10. The printing control unit 11 controls the printing device 7. The image reading control unit 12 controls the image reading device 8.

[0049] The printing control unit 11 outputs a printing order including the image data to the printing device 7 following the control of the image processing control unit 10. The printing control unit 11 makes the printing device 7 form the image on the transferring paper and output it. Full color printing can be performed by the printing device 7. As a printing method, not only an electrophotographic method but also various types of methods such as an inkjet type, a sublimation thermal transferring type, a silver photographing type, a direct thermal recoding type, or a melting thermal transferring type, can be used.

[0050] An image reading control unit 12 drives the image reading device 8 under the control of the image processing control unit 10. The image reading control unit 12 condenses a reflection light of lamp irradiation against the surface of a manuscript onto a light receiving element (for example, CCD (Charge Coupled Device)) by a mirror or lens so as to read it, and makes A/D conversion so as to generate digital image data of RGB 8 bits.

[0051] The image processing control unit 10 has a microcomputer structure where a CPU (Central Processing Unit) 13 being a main processor, an SDRAM (Synchronous Dynamic Random Access Memory) 14, a ROM (Read Only Memory) 15, and an NVRAM (Non Volatile RAM) 16 are connected by a bus. The image data read by the image reading device 8 is stored in the SDRAM 14 for a while for image forming by the printing device 7. A control program or the like is stored in the ROM 15. The NVRAM 16 can store the data even at the time of electric power loss when a system log, system setting or log information is recorded.

[0052] In addition, an HDD (magnetic disk device) 17, a LAN control part 18 and a FAX control unit 20 are connected to the image processing control unit 10. The HDD 17 is a storing device for storing a large amount of image data or job history. The LAN control part 18 connected the image processing unit part A to the LAN 2 via a HUB 19 that is a line concentrator of an internal LAN provided inside of the device. The FAX control unit 20 implements facsimile control. The FAX control unit 20 is connected to a PBX (Private Branch exchange) 22 connected to a public switched telephone network 21, so that the digital color multifunction processing machine 1 can make contact with a remote facsimile via the public switched telephone network 21.

[0053] In addition, a display control unit 23 and an operations input control unit 24 are connected to the image processing control unit 10.

[0054] The display part 23 outputs an image display control signal to the information processing unit part B via a communication cable connected to a control panel I/F (interface) 25 by control of the image processing control unit 10. The display part 23 implements control of the image display of the operations panel P of the information processing unit part B.

[0055] The operations input control unit 24 inputs an input control signal via the communication cable 26 connected to the control panel I/F 25 by the control of the image processing control unit 10. The input control signal corresponds to functional settings or input operations by the operator from the operations panel P of the information processing unit part B. In other words, the image processing unit part A directly monitors the operations panel P of the information processing unit part B via the communication cable 26.

[0056] Therefore, the image processing unit part A connects the communication cable 26 to an image processing unit which a conventional image processing device has so as to use the operations panel P of the information processing unit B. In other words, the operations input control unit 24 and the display control unit 23 of the image processing unit part A operate being connected to the operations panel P.

[0057] Under this structure, the image processing unit part A analyzes a printing order command and printing data that are image information from the outside such as the server computer 3, the client computer 4, the facsimile, or the like, so as to convert the printing data into bit-map data to be printed as the output image data. The image processing unit part A analyzes the printing data from the command and determines the operation. The image processing unit part A receives the printing data and the command from the LAN control part 18 or the FAX control unit 20 and operates on them.

[0058] In addition, the image processing unit part A can transfer the printing data, manuscript reading data, output image data made by processing these data for output, and compressed data made by compressing these data to the outside such as the server computer 3, the client computer 4, the facsimile, or the like.

[0059] Furthermore, the image processing unit part A transfers the reading data of the image reading device 8 to the image processing control unit 10, corrects signal degradation due to quantization of an optical system or a digital signal, and writes the image data in the SDRAM 14. Thus, the image data stored in the SDRAM 14 are converted to the output image data by the printing control unit 11 so as to be output to the printing device 7.

[0060] Next, the information processing unit part B having the operations panel P is discussed. As shown in FIG. 3, the information processing unit part B has a microcomputer structure where the information processing unit part B is controlled by a generic OS (Operating System) used for an information processing device generally called a personal computer. The information processing unit part B includes a CPU 31 as a main processor. A memory unit 32 and a storing device control unit 35 are connected by a bus to the CPU 31. The memory unit 32 includes a RAM that is a work area of the CPU 31 and a ROM that is exclusively a reading memory where a starting program is stored. The storing device control unit 35 controls input and output of the data to and from the storing device 34 such as an HDD storing a program or the OS.

[0061] A LAN control part 33 is connected to the CPU 31. The LAN control part 33 is a communication interface for connecting the information processing unit part B to the LAN 2 via the HUB 19. An IP address that is a network address allocated to the LAN control part 33 is different from the IP address allocated to the LAN control part 18 of the image processing unit part A. In other words, two IP addresses are allocated to the digital color multifunction processing machine 1 of the embodiment of the present invention. The image processing unit part A and the information processing unit part B are respectively connected to the LAN 2. Data conversion between the image processing unit part A and the information processing unit part B can be performed.

[0062] Since the digital color multifunction processing machine 1 is connected to the LAN 12 via the HUB 19, only a single IP address is seemingly allocated. Therefore, it is possible to easily handle connections without damaging a fine appearance.

[0063] In addition, a display control unit 36 and an operations input control unit 37 for controlling the operations panel P are connected to the CPU 31. FIG. 4 is a plan view showing a structure of the operations panel P. As shown in FIG. 4, the operations panel P includes a display device 40 and an operations input device 41. The display device 40 is, for example, LCD (Liquid Crystal Display). The operations input device 41 includes a touch panel 41a and a key board 41b. The touch panel 41a is an ultrasonic elastic wave type panel stacked on a surface of the display device 40. The key board 41b has plural keys.

[0064] A start key, ten-key, reading condition setting key, clear key, and others are provided on the key board 41b. The start key is used for starting a process such as an image reading process. The ten key is used for input a numerical value. The reading condition setting key is used for setting the address to which the read image data are sent. In other words, the display control unit 36 outputs the image display control signal to the display device 40 via the control panel I/F 38 so as to make the display device 40 display a designated item corresponding to the image display control signal. On the other hand, the operations input control unit 37 receives an input control signal via the control panel I/F 38. This input control signal corresponds to functional settings or input operations by the operator in the operations input device 41.

[0065] In addition, a control panel communication unit 39 is connected to the CPU 31. The control panel communication unit 39 is connected to the control panel I/F 25 of the image processing unit part A via the communication cable 26.

[0066] The control panel communication unit 39 receives the image display control signal output from the image processing unit part A. The control panel communication unit 39 also transfers the input control signal corresponding to the functional setting or input operations from the operations panel P by the operator, to the image processing unit part A.

[0067] As discussed below, the image display control signal from the image processing unit part A received by the control panel communication unit 39 is processed for data conversion for the display device 40 of the operations panel P and then output to the display control unit 36.

[0068] In addition, the input control signal corresponding to the functional settings or input operations from the operations panel P by the operator is converted to a format corresponding to a specification of the image processing unit part A and then input to the control panel communication unit 39.

[0069] As discussed above, the OS or program implemented by the CPU 31 is stored in the storing device 34. This means that the storing device 34 functions as a storage medium storing the program.

[0070] In the digital color multifunction processing machine 1, if the user turns on the electric power, the CPU 31 activates a starting program in the memory unit 32 so that the OS is read from the storage device 34 and written by the RAM in the memory unit 32 so that this OS is activated. Such an OS activates a program corresponding to the operation of the user and reads and stores the information. For example, Windows (Registered Trademark) and others are each known as such an OS. An operating program used for the OS is called an application program. The same type of OS used for the information processing device such as the server computer 3 or the client computer 4, namely a generic OS such as Windows (Registered Trademark) is used as the OS of the information processing unit part B.

[0071] As discussed above, the external media input and output device 9 is provided in the digital color multifunction processing machine 1. The external media input and output device 9 is a device for reading the program code or the image data stored in a storage medium M or for storing the program code or the image data in the storage medium M, such as a flexible disk drive device, an optical disk drive device, an MO drive device, or a media drive device. The storing medium M is a medium where various program code sets (control programs) such as various application programs, the device driver, or the OS is stored. The storing medium M is, for example, a flexible disk, a hard disk, an optical disk (CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-R, DVD+R, DVD-RW, DVD+RW, and others), or a semiconductor medium (SD memory card (registered trademark), Compact Flash (registered trademark), Memory Stick (registered trademark), Smart Media (registered trademark), or the like). Such an external media input and output device 9 is controlled by an input and output device control unit 42 that is connected by bus to the CPU 31.

[0072] Accordingly, the application program stored in the storage device M may be installed in the storage device 34. Because of this, the storage medium M can be the storage medium storing the application program. In addition, the application program may be taken in from the outside via, for example, the Internet or LAN 2 so as to be installed in the storage device 34.

[0073] Various interfaces 43 such as USB, IEEE 1394, and SCSI are connected to the input and output device control unit 42. Hence, via the various interfaces 43, various devices such as a digital camera can be connected to the input and output device control unit 42.

[0074] Next, a specific process implemented by the digital color multifunction processing machine 1 is discussed. In the digital color multifunction processing machine 1, plural devices implementing different processes from each other, namely the image processing unit part A and the information processing unit part B in this example, can independently perform the processes. Therefore, when the image reading process is implemented by the image processing unit part A, the information processing unit part B can receive e-mail, for example. In this example, since the results of the processes do not affect each other, there is no problem in independent operations of the image processing unit part A and the information processing unit part B.

[0075] Furthermore, in the digital color multifunction processing machine 1, each of the functions of the image processing unit part A can be used by the program operated by the information processing unit part B and the result can be a subject of the processing. For example, image data of a document image read by the image reading device 8 of the image processing unit part A is character-recognition processed by a designated application program so that a text document can be obtained.

[0076] However, if the image processing unit part A and the information processing unit part B always perform the processes independently from each other, each of the functions of the image processing unit part A cannot be used by the program operated by the information processing unit part B and the result cannot be the subject of the processing. Because of this, in this example, each of the functions of the image processing unit part A cannot be used by operating the application program based on the combination of process modules.

[0077] In the image processing unit part A, a module of a control system executed by the image processing control unit 10 is formed by an application program for implementing original functions of a multifunction processing machine by the digital color multifunction processing machine 1. In the digital color multifunction processing machine 1, an interface of a functional module for a network is provided at the LAN control part 18 to which access from only the information processing unit part B via the HUB 19 (LAN 2) can be made.

[0078] Based on the functional module for the network, a function provided for a normal multifunction processing machine as a standard and implemented by the image processing control unit 10, such as the scanner function or facsimile function, can be used via the LAN 2. The function cannot be used by the image processing unit part A.

[0079] When TCP/IP (Transmission Control Protocol/Internet Protocol) detects a connection requirement for a corresponding port number, a process module of a corresponding function is activated. Here, the TCP/IP always monitors access from the LAN 2.

[0080] For example, when the connection of the port number 1002 is requested, a module of a facsimile receiving function is activated. The activated module operates based on the processing requirement from a side requesting the connection so as to reply with a necessary response.

[0081] Next, a specific feature of an application program of the information processing unit part B is discussed. A key word generation application is discussed as an example.

[0082] The keyword generation application implements the character recognition process for the image data being read so that a keyword is made from the result of the character recognition. In the entirety of the information processing unit part B, each of the application programs is executed under the management of the OS.

[0083] In addition, each of the application programs can use the functions provided by the OS. In other word, while the application program is executing the OS is used as a module of the software so that a necessary process is performed. For example, the TCP/IP control module implements a function provided in the OS as a standard, the function being used for communication with other information devices connected by the TCP/IP.

[0084] Furthermore, an independent application program installed for use by other application programs can be used. For example, an OCR engine implements only a character recognition process from the image data. Since the OCR engine does not operate individually, the OCR engine is used as a part (module) of other application programs.

[0085] Thus, since each of the application programs can be executed under the management of the OS in the entirety of the information processing unit part B, an application program having these functions can be developed.

[0086] However, in the conventional technology, the functions of the image processing unit part A and others cannot be directly used by such means.

[0087] In other words, as discussed above, in the digital color multifunction processing machine 1, the image processing unit part A for implementing the original function of the multifunction processing machine and the information processing unit part B for implementing the application programs are provided. The image processing unit part A and the information processing unit part B are connected to each other via the LAN 2 by the network protocol (TCP/IP in this example) in the digital color multifunction processing machine 1.

[0088] Since the image processing unit part A and the information processing unit part B are physically connected, it is possible to mutually communicate data between the image processing unit part A and the information processing unit part B. However, in the conventional technology, the function of the image processing unit part A cannot be used from inside of the application program executing in the information processing unit part B.

[0089] Here, means for using the function of the image processing unit part A from inside of the application program executing in the information processing unit part B are discussed.

[0090] For example, in the keyword generation application, the image data are read from the image reading device 8 managed by the image processing unit part A.

[0091] In order to instruct the image reading device 8 to perform image reading operations, it is necessary to designate the port number 1001 and request a TCP/IP connection to the image processing unit part A. At this time, data indicating the contents of the process are simultaneously sent as a data stream.

[0092] In the function designated by the port number 1001, the image reading device 8 reads the image. An optional file name is added to the image data and the image data are transferred to the information processing unit part B. The contents of such a process are determined in advance. The port number is allocated so that these functions are individually used.

[0093] Thus, the functions of the image processing unit part A can be used from the keyword generation application. The communication protocol is not limited to TCP/IP but may be other types of protocols.

[0094] The digital color multifunction processing machine 1 of the embodiment of the present invention basically has a scanner function, an image processing function, a media browser function, a document browser function, a page browser function, a form synthesizing function, a sending/storing function, a printing function, an OCR function, a searching function, a facsimile function, a mail server function, a Web server function, a periodic implementation function, a system monitoring function, a security function, a hysteresis/status display function, an individual setting function, a manager setting function, and others. Each of the functions is briefly discussed below.

[0095] In the scanner function, the paper document is read out in an image file form so as to be sent or be stored inside as an e-mail, facsimile, or a file (Windows (registered trademark) common folder, FTP folder, Web folder, outside server, or the like).

[0096] In the media browser function, files stored in respective media of a recording medium M can be read. The Windows (registered trademark) common folder on the network, FTP, Web folder, or the like is set as a common medium by individual setting so that it can be read by the same operation as that of the recording medium M.

[0097] In the document browser function, a group (document) of files such as stored normal documents (including a document stored for a file), received e-mail (including attached files such as images), a received facsimile, or the like can be operated on and read. In addition, the document browser function includes a document management function so that the name of the document can be changed and the document can be deleted. In the stored document, OCR characters in the image can be searched for by the OCR function discussed below and downloads from the Web can be performed.

[0098] In the page browser function, the stored document or the image read or selected for sending or printing is confirmed, so that the image in the main body can be displayed. A selection function for file sending, storing, printing, reading or editing of various information items of the file can be performed.

[0099] In the image processing function, there is an automatic image processing function whereby an image operation before sending, storing or printing can be performed. It is possible to make image quality corrections, perform rotation, reduce colors, and cut the image to and remove white paper.

[0100] In the form synthesizing function, position information (form) with a background where text or an image is provided is selected so that a new image is synthesized before being sent, stored or printed.

[0101] In the sending/storing function, an image or a file selected by the paper manuscript (scanner), the media browser, or the document browser (page browser) can be sent by mail or facsimile to a designated opponent, or a file sent to common media or outside server. In addition, as discussed above, because of storing, an OCR-processed character line can be searched for or downloading from the Web.

[0102] In the printing function, the image or the file selected by the media browser or the document browser (page browser) can be printed by designating various layouts (forms).

[0103] In the OCR function, text of the image obtained by the scanner function or received facsimile image is extracted by character recognition (OCR). The PDF file (image PDF+OCR) where the text is provided is formed so as to be sent or stored. In the OCR function, there is an all sentences searching function of the stored document, and an OCR address or document name function used for the address or document name from the character line in the file. This OCR address is where an OCR character line of a designated region is consistent with a registered address. The OCR document name is a document name of the OCR character line of the designated region.

[0104] In the searching function, a file is extracted from the images or the file stored or existing on the common media (network) by using the document name, the file name, storing day and time, changing day and time, the OCR text (the character line where the OCR image processed is a subject) as a key word so that a file whose contents are consistent is displayed.

[0105] In the facsimile function, image information received from a facsimile communication port (such as G3-1, G3-2, G4-1 or the like) prepared by the digital color multifunction processing machine 1 is converted to the image file and the image file is divided and forwarded (e-mail forwarded or facsimile forwarded). The received facsimiles are divided based on senders by the initial setting or addresses by the receiving port. In addition, the image file from the paper document, the media document, or the stored document can be transferred by facsimile or the image attached to the received e-mail can be forwarded to another facsimile device.

[0106] In the mail server function, there are a function for sending e-mail, a function for forming and storing e-mail addresses of guests and individuals inside (at the time of SMTP (Simple Mail Transfer Protocol) setting), a function for one-touch operation of automatic printing, facsimile transferring, sending or storing an image attached to the received e-mail, and a function for sending back an operation result e-mail to the sender.

[0107] Here, several operation combinations of the received e-mail addresses are prepared for every guest or individual. The setting and change are implemented in the individual setting. In addition, e-mail addresses (at the time of POP (Post Office Protocol) receiving setting) of a single outside e-mail server are divided by the e-mail address indication name so that the same operation as the operation at the time of SMTP setting can be performed.

[0108] In order to correspond to various e-mail environments, e-mail sending corresponds to the SMTP identification and “POP before SMTP” mode. E-mail receiving corresponds to APOP (Authenticated Post Office Protocol), too.

[0109] In the Web server function, a URL is prepared for the guest and the individual, so that the image or file stored inside can be read, searched, downloaded, uploaded, sent, stored, and printed. In addition, the result of the operation can be referred to and the individual or the manager can be set. Furthermore, this function corresponds to SSL (Secure Socket Layer) sever identification in considering security during the communication.

[0110] In the periodic implementation function, deletion of storing data whose storing time passes, receiving the POP e-mail, the renewal of the LDAP (Lightweight Directory Access Protocol), automatic printing or deletion of hysteresis, and auto restarting can be done.

[0111] In the system monitoring function, disk full, abnormality generated inside of the machine, tray or door open information or paper jamming is detected so that a screen message urging the user including a service call screen is displayed. In addition, it is possible to correspond to an accounting device monitoring or limiting the use of the user.

[0112] In the security function, in order to protect data from illegal operation by an unknown user (guest user) or outside network, security (individual identification function, manager password, or the like) against the user of the operation part and security (e-mail sending identification, APOP, SSL Server identification of Web, access limitation or the like) against the network is provided.

[0113] In the hysteresis/status display function, whether the result of receiving, sending and printing of the e-mail, facsimile, or file is normal, the date and time of implementation or completion, and contents of job cancellation or errors can be confirmed.

[0114] In the individual setting function, it is possible to register the environment settings for every individual while avoiding a situation where a third party sees the user environment (registration of the address of the e-mail, customized operation and screen, received e-mail address, and others) of the individual user.

[0115] In the manager setting function, various setting function against the user, basic operating the functions (network setting, time setting automatic restarting time), and management functions (user management, e-mail environment setting, received facsimile setting) can be implemented.

[0116] FIG. 5 is a block diagram showing a functional structure for controlling identifying action in the embodiment of the present invention. In FIG. 5, arrows connecting blocks represent main flows of signals. This does not limit the function of each of the blocks. In addition, in FIG. 5, a first external device 51 corresponds to the server computer 3 shown in FIG. 1. A second external device 52 corresponds to the image processing unit part A shown in FIG. 3. An individual menu device 53 corresponds to the information processing unit part B shown in FIG. 3.

[0117] FIG. 6 is a flowchart showing an operation of identifying action of an individual menu device of the digital color multifunction processing machine of the embodiment of the present invention.

[0118] Based on the flowchart of FIG. 6, the operation in the embodiment of the present invention is discussed with reference to FIG. 5.

[0119] As an identifying action in the digital color multifunction processing machine 1 shown in FIG. 6, a display input control part 53d of the individual menu device 53 receives identifying information of the user (user name, password, ID card for identifying, and others) from the main picture displayed at the operations panel P (See FIG. 4), for example in step S11. The identifying information of the user is input from the input picture of the identifying information by pushing the individual identifying key.

[0120] The display input control part 53d transfers the input identifying information to a common identification control part 53h. The common identification control part 53h identifies the information following the setting of a manager setting information 53n in step S12. Here, in setting the manager setting information 53n, in a case where the item (1) of a management setting table shown in FIG. 7 is “EXTERNAL DEVICE IDENTIFICATION: YES”, the identification is requested in order based on the setting of the item (2) of the management setting table “PRIORITY IDENTIFICATION SETTING: FIRST=FIRST EXTERNAL DEVICE, SECOND=INDIVIDUAL MENU DEVICE” in step S3.

[0121] One of “FIRST EXTERNAL DEVICE”, “SECOND EXTERNAL DEVICE”, and “INDIVIDUAL MENU DEVICE” is set as a first item of priority identification setting. The device which is priority identification set is indicated at the items (3) “FIRST EXTERNAL DEVICE IDENTIFICATION: YES” or (5) “SECOND EXTERNAL DEVICE IDENTIFICATION: YES”.

[0122] In the case of the item (2) of the management setting table “PRIORITY IDENTIFICATION SETTING: FIRST=FIRST EXTERNAL DEVICE, SECOND=INDIVIDUAL MENU DEVICE”, the common identification control part 53h requests, in step S13, the identification of the first external device from a first external device identification control part 53c by the identification information of the user input in step S11. The first external device identification control part 53c, in step S14, determines the identification with a first external device identification part 51b by an existing protocol. If this identification is not successful (NO in step S14), the identification flow of the user goes back to the beginning. If this identification is successful (YES in step S14), the common identification control part 53h request identification of the individual menu to a individual menu identification part 53j in step S5.

[0123] The individual menu management 53k determines, with reference to the individual setting information 53m, the requested identification in step S16. If the identification is successful (YES in step S16), the individual menu identification part 53j requests the individual menu function implementing part 53i to start the individual menu. If this identification is not successful (NO in step S16), the identification flow of the user goes back to the beginning.

[0124] The individual menu function implementing part 53i obtains the individual setting information 53m via the individual menu management part 53k so as to start the individual menu at the individual setting in step S17. Thus, the identification flow to the individual menu device 53 is implemented as discussed above. At this time, since the identification of the first external device identification part 51b is successful, the function of a first external device function implementing part 51a can be used from the individual menu of the individual menu function implementing part 53i.

[0125] Meanwhile, FIG. 9 is a flowchart showing an operation of additional identifying action of the second external device after the first external device and the individual menu device are identified.

[0126] Referring to FIG. 9, at the same time as starting the individual menu or corresponding to the request for using the function of the second external device, the common identification control part 53h requests the identification of the second external device from the second external device identification control part 53g in step S21 so that the second external device identification control part 53g implements identification with a second external device identification part 52f. At this time, the common identification control part 53h confirms so as to obtain “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting table shown in FIG. 8 in step S22. This “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting table shown in FIG. 8 is the individual setting information 53m of the individual menu identified via the individual menu management part 53k. Here, the existence of registration of the identifying information or whether the information is the input identification information is confirmed.

[0127] In step S22, if the identification information is not registered at “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting table shown in FIG. 8, since the identifying process with the first external device is already completed, the identification information identified by the first external device is used. If the identification information is registered at “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting table shown in FIG. 8, the identification information is obtained and the second external device identification control part 53g implements identification with the second external device identification part 52f in step S23. If this identification is successful (YES in step S23), the individual menu function implementing part 53i can use the function of a second external device function implementing part 52e.

[0128] If this identification is not successful (NO in step S23), the common identification control part 53h displays an input dialog on the display input control part 53d again in step S24. This is displayed on a picture as the function of the second external device function implementing part 52e from the individual menu function implementing part 53i. Implementation of the function of the individual menu function implementing part 53i or the first external device function implementing part 51a is not obstructed.

[0129] If the user inputs correct identification information to the input dialog (display picture in step S13) (YES in step S25) the common identification control part 53h requests the second external device identification control part 53g to implement the identification with the second external device identification part 52f again in step S21. If the input identification information is confirmed in step S22 and determination of the identification based on this identification information is successful (YES in step S23), the common identification control part 53h stores, via the individual menu management part 53k, correct identification information in “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting information 53m shown in FIG. 8 in step S26. This correct identification information is used next time when the second external device identification control part 53g implements the identification with the second external device identification part 52f.

[0130] As a result of this, in a case where “SECOND EXTERNAL DEVICE IDENTIFICATION INFORMATION” of the item (6) of the individual setting table shown in FIG. 8 is not registered, the identification flow fails only the first time. However, in the identification flow after the second time, the stored information can be used. If the first external device is designated as the subject of the priority identification, the identification flow is completed by only the first external device and the individual menu device. The second external device implements the identification when the function of the second external device function implementing part 52e is used in the individual menu. Because of this, if the user registration of the first external device is identical with user registration of the individual menu, the identification flow is successful. The second external device may identify when the function is required.

[0131] By the identification action discussed above, it is possible to use functions of various devices connected to the network and the digital color multifunction processing machine 1.

[0132] In the digital color multifunction processing machine 1 shown in FIG. 3, there are processes for “paper document”, “media document” and “storing document”. As discussed regarding the OCR function, for example, in a case where the document of the user read by the image reading device 8 is sent by the facsimile as the process of the “paper document”, it is possible to implement the OCR process of the recognized image so as to use a character line recognized in the manuscript as an OCR address. In addition, in a case where the document is stored for using it as material, the OCR process is implemented so that a full text search can be applied to this manuscript.

[0133] In the conventional art, in order to provide a password for preventing alternation to a document file as security protection, it is necessary to read the corresponding document file using the computer so as to provide the password. However, in the digital color multifunction processing machine 1 shown in FIG. 3, it is possible to provide the password for the document file with the security function of the protection part so that the security protection can be performed by the one touch function.

[0134] According to this function, based on setting for processing the document file that is set in advance, a process that is set as the security protection can be implemented. For example, the paper document is sent to the image reading device and a key where a one-touch function is set is pressed, so that the paper document is read in a selected resolution and converted to a PDF file. A function whereby printing is not permitted is set in this file and the password is provided for this file so as to be sent.

[0135] In a case of the PDF file, there are a password for opening and an authority password as passwords that are provided for this file. Limitations of functions for handling the document such as open, print or edit of the PDF file where these passwords are provided can be implemented so that the security protection can be provided.

[0136] If the identification by the password for opening that is set for the PDF file is not made, the PDF file cannot be opened and seen. Similarly, if the identification by the authority password is not made, setting of permission or non-permission of printing or editing cannot be changed. Because of this, in a case where printing or editing of the PDF file is not permitted, if the authority password is not known, printing or editing cannot be done.

[0137] In the one touch function, providing the password for the PDF file or not, selection of authority of permitting or not permitting printing or editing, an effective term, an effective URL, and others can be set (See FIG. 10).

[0138] In the one touch function, in a case where the authority password is set and setting input of the password is blank, the password is randomly and automatically generated inside of the device so as to be provided. At this time, if printing and editing are set to be not permitted, the file can be converted to a PDF file where the password is automatically generated so that nobody can print or edit it.

[0139] In addition, in the digital color multifunction processing machine 1 shown in FIG. 3, when the document file that is input such as a paper manuscript, a media document, a storing document, and a received facsimile document, is stored, the OCR process is implemented. At the time of this storing process, the file is converted to a PDF file so that a process for providing the security protection may be implemented.

[0140] Thus, the document file can be converted under conditions that are set in advance; the limitations of functions, such as printing, editing, and handling the document file can be set; and the document file where the password for changing the limitation setting is provided can be output.

[0141] When a document desirable for the user is sent by the facsimile in the digital color multifunction processing machine 1, while the address can be directly input other than selection of the address book registered in advance, the same address as the address directly input by the confirmation part is required to be input twice. By the confirmation based on these two inputs, an input error can be prevented.

[0142] By setting “CONFIRM AT THE TIME OF ADDRESS DIRECT INPUT” in the screen for manager setting shown in FIG. 11, the two inputs are encouraged. In addition, in a case where the address is directly input, by pressing “DIRECT INPUT” in the file address selection screen shown in FIG. 12, a soft keyboard shown in FIG. 13 is displayed so that the address can be input.

[0143] At a “START” key arranged at the operations panel P (see FIG. 4) after the address is input, an LED provided on a key top is turned on as a green color indicating an input capable state. By pressing this, the LED of the “START” key is turned on from green color to red color so that the input cannot be done. After that, the sending confirmation dialog (shown in FIG. 14) is displayed in the displaying device so that the confirmation of the address is encouraged. In this screen, after the address is confirmed, “CONFIRMATION” on the screen is pressed so that the display of the “CONFIRMATION” disappears (See FIG. 15). In addition, green color is turned on at the LED of the “START” key again so that the “START” key can be pressed. By pressing this “START” key, sending is started so that address input is completed. Because of this, it is possible to prevent an operational error when the document is sent by the facsimile so that a precise process can be implemented.

[0144] As examples for limiting a function that the digital color multifunctional device 1 has due to the manager setting function of the control part, there are access limitations of a facsimile sending number, SMTP/POP (e-mail), and HTTP (Web page).

[0145] FIG. 16 is a view of a facsimile sending number limitation screen. The number that is set on this screen is confirmed from an upper part in order that setting of permit/not permit can be made for each number. For example, if a first one is “0: permit”, all of “0” callings are possible. If a first one is “0120: permit” and a second one is “0 not permit”, while “0120” calling is possible, next “0” calling, namely the number starting from “00” or “02” is not permitted. In addition, the same method can be applied to a receiving side.

[0146] Similarly, in a case of e-mail, on the SMTP/POP access limitation screen shown in FIG. 17, it is possible to set an opponent of sending e-mail and set permit/not permit for each of the opponents. As the opponent of sending e-mail, in addition to each e-mail address, the domain name of the e-mail address can be registered so that e-mail that is sent to an address having the same domain name can be limited. In addition, this can be set at a receiving side of e-mail. Furthermore, access to a home page of the domain name set by setting the IP address can be limited at a receiving side as the HTTP access limitation shown in FIG. 18.

[0147] “Yes/No” can be set in a lump (at the same time) for each of these limitations, such as SMTP/POP access limitation and HTTP access limitation. See FIG. 19.

[0148] The SMTP/POP access limitation or HTTP access limitation can be managed in a lump by the manager and further detailed limitations can be set by an individual in a range of limitations set by the manager.

[0149] However, in the above-discussed facsimile sending number limitation, an exceptional setting change can be done by the manager and the individual cannot set. For example, “0” calling is not permitted to all individual but permitted to a specific individual.

[0150] Thus, an opponent of sending or receiving can be limited by the limitation part so that the document that is input or output via the device can be managed and protected.

[0151] FIG. 20 and FIG. 21 show examples of function limitation at the individual menu that is set by the manager. If “DIRECT INPUT OF ADDRESS/RETURN ADDRESS PERMIT/NOT PERMIT” is “PERMIT”, twice input that is discussed above becomes effective. In addition, if “DIRECT INPUT OF ADDRESS/RETURN ADDRESS PERMIT/NOT PERMIT” is “NOT PERMIT”, the address registered by the individual cannot be used and only the address registered as the guest user under the management of the manager can be used. If “INDIVIDUAL SETTING PERMIT/NOT PERMIT” is “NOT PERMIT”, the individual cannot change the setting. If “INDIVIDUAL SETTING PERMIT/NOT PERMIT” is “PERMIT” and “ADDRESS REGISTRATION/CHANGE/DELETION PERMIT/NOT PERMIT” is “NOT PERMIT”, only the address cannot be changed. In addition, setting of “AUTOMATIC DELETION SETTING PERMIT/NOT PERMIT” of the “DOCUMENT STORING” of FIG. 21 is made so that the number of days of an initial value for deleting the stored document is not changed or not deleted. Such a limitation of an individual menu can be set.

[0152] According to the above-mentioned document input and output devices having security protection functions, the document that is input can be converted to a document where a limitation to a function for handling the document is set by a protection part, an operation error when the document is sent by the facsimile or the like can be prevented by a confirmation part, and an address of the document that is input or output via the device can be limited by a control part, so that the document can be managed and protected. The document input and output device is connected to the network, uses the communication protocol, and communicates the documents in various data forms with plural information devices.

[0153] According to the above-discussed embodiment of the present invention, it is possible to provide a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, including: a protection part configured to provide security protection for the document that is input; a confirmation part configured to encourage reconfirmation of information that is input by a user; and a restriction part configured to limit use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0154] The protection part may set a limitation to a function for handling the document as the security protection; and the protection part may provide a password for authenticating permission for a setting change of the limitation to the document. The protection part may provide a password for the document as the security protection, corresponding to input of a specific key that is set, so as to implement a process for converting the document to a document wherein functions are limited. The password provided for the document may be randomly generated corresponding to setting of security. The confirmation part may require re-input after address information that is directly input is input. After a key operation of a last input screen, the confirmation part may display a confirmation screen for encouraging the confirmation and then returns to a screen before the key operation. After the confirmation part displays a confirmation screen for encouraging the confirmation, the confirmation screen may be finished by a key input in a different position. The restriction part may limit a sender of facsimile. The restriction part may limit e-mail and a Web page. The restriction part may limit use of the functions of the document input and output device for every individual.

[0155] It is also possible to provide a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, including protection means configured to provide security protection for the document that is input; confirmation means configured to encourage reconfirmation of information that is input by a user; and restriction means configured to limit use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0156] The protection means may set a limitation to a function for handling the document as the security protection; and the protection means may provide a password for authenticating permission for a setting change of the limitation to the document. The protection means may provide a password for the document as the security protection, corresponding to input of a specific key that is set, so as to implement a process for converting the document to a document wherein functions are limited. The password provided for the document may be randomly generated corresponding to a setting of security. The confirmation means may require re-input after address information that is directly input is input. After a key operation of a last input screen, the confirmation means may display a confirmation screen for encouraging the confirmation and then returns to a screen before the key operation. The restriction means may limit a sender of facsimile. The restriction means may limit e-mail and a Web page. The restriction means may limit use of the functions of the document input and output device for every individual.

[0157] It is also possible to provide a document input and output method of a document input and output device with a security protection function, the document input and output device being connected to a network and using a plurality of communication protocols, the document input and output device communicating documents in various data forms with plural information devices, the method including: a protection step of providing security protection for the document that is input; a confirmation step for encouraging reconfirmation of information that is input by a user; and a restriction step for limiting use of functions of the document input and output device; wherein the document is protected and a document input and output process is performed.

[0158] The present invention is not limited to these embodiments, but variations and modifications may be made without departing from the scope of the present invention.

[0159] This patent application is based on Japanese Priority Patent Application No. 2005-251320 filed on Aug. 31, 2005, the entire contents of which are hereby incorporated by reference.