JP5080205B2 - Image processing device - Google Patents

Description

  The present invention relates to an image processing apparatus that regulates output of image data having a specific image.

  Various information such as personal information is recorded on documents such as manuscripts and certificates. In order to protect this information, the image processing apparatus is provided with an output restriction function for prohibiting output of image data having a specific image, for example.

  This output restriction function is realized by mounting a dedicated output restriction circuit on the apparatus main body. Therefore, when the output restriction circuit is removed, the output restriction function is invalidated, and there is a problem that the output of image data having a specific image cannot be prohibited.

In Patent Document 1, when a software board is mounted on the apparatus main body and the function of the software board mounted on the apparatus main body is executed even once, eigenvalues such as the serial number and ID of the software board are stored in the apparatus main body. For this reason, a security function is disclosed that does not execute the function of another software board when another software board having a different eigenvalue is attached.
JP 63-165935 A

Patent Document 1 is a security function for preventing a function of a software board from being executed when another software board having a different eigenvalue is attached to the apparatus main body. Therefore, when the output regulation circuit is removed and the output regulation function is intentionally disabled by the user, preventing the output of the image data having the specific image can be handled by the security function of Patent Document 1. Can not.

  In view of the above, an object of the present invention is to provide an image processing apparatus that regulates output of image data including a specific image even when the output regulation function is intentionally disabled.

  In order to achieve the above object, according to the present invention, there is provided an image processing apparatus having an output restriction function for restricting output of the image data when a specific image is detected from input image data, wherein the output restriction is performed. A monitoring unit that monitors whether or not the function is executable and a control unit that restricts input of image data when an abnormality of the output restriction function is detected.

  Here, the abnormality means a state in which the output regulation function is intentionally disabled by the user's intention. That is, the user has invalidated the output restriction function for an illegal purpose in order to illegally output the image data having the specific image.

  For example, an output restriction circuit for storing a program for executing the output restriction function is provided, and the monitoring unit detects whether the output restriction circuit is removed from the image processing apparatus main body. When removed, the power regulation function becomes infeasible. At this time, the control unit determines that execution is not possible due to an abnormality. When the output restriction circuit is not removed from the apparatus main body, the monitoring unit detects that the output restriction function does not operate. Although the output restriction function is not executable, the control unit determines that it is not abnormal and cannot be executed due to an error.

  When the control unit determines that execution is impossible due to an abnormality, the control unit restricts input of image data. That is, the control unit prohibits input of image data itself.

  The image processing apparatus includes a detection unit that detects whether or not the output restriction function has been executed in the past, and a storage unit that stores an execution history of the output restriction function. The control unit permits input of image data when the output restriction function is not executed, and restricts input of image data when the output restriction function is executed based on the stored execution history. .

  The output restriction circuit has a unique value for identification. The control unit stores the eigenvalue of the output restriction circuit as an execution history.

  When the output restriction function is executed, the control unit compares the read unique value of the output restriction circuit with the unique value stored in advance, and permits the input of image data when the two unique values match. When the two eigenvalues are different, input of image data is restricted.

  In addition, the control unit prohibits the change of the stored eigenvalue of the output restriction circuit, and restricts the input image data from being illegally output even when the output value is replaced with another output restriction circuit. That is, once the eigenvalue of the output restriction circuit is stored, even if another output restriction circuit having a different eigenvalue is attached, it is prohibited to overwrite the stored eigenvalue or to newly store it. To do.

  When the output restriction function is disabled, the control unit notifies that the output restriction function is disabled. For example, a communication unit that can communicate with an external device is provided. The control unit communicates with the external device set in advance that the output restriction function has become unexecutable via the communication unit.

  According to the present invention, an image processing apparatus that has executed the output restriction function even once restricts the input of image data when recognizing that the output restriction function is abnormal, specifically, that it is intentionally impossible to execute. As a result, a user who intends to use illegally cannot use the image processing apparatus, and can provide an image processing measure with high security.

  Hereinafter, the image processing apparatus of the present invention will be described in detail. The image processing apparatus is a digital multi-function peripheral having a copy mode, a printer mode, a scanner mode, and a facsimile mode.

  As shown in FIG. 1, the image processing apparatus includes an image reading unit 1 that reads a document and inputs image data, an operation unit 2 that receives user input, and an image forming unit that prints input image data. 3, a hard disk device 4 that stores image data, a communication unit 5 that performs data communication with an external device, a FAX modem 7 that communicates with a facsimile device 6, and control information and setting information of the entire device are stored. And a device control unit 9 that is a control unit that controls the entire apparatus.

  The image reading unit 1 functions as an image input unit that inputs an image, and includes an image sensor such as a CCD 10 and a document detection sensor 11 that detects a document set on a document table or an automatic document feeder (ADF). Image data of an image read by the CCD 10 is output to the image forming unit 3.

  The operation unit 2 includes an input unit 12 including various input keys and a display unit 13 such as a liquid crystal display. The input unit 12 is used to operate the entire apparatus and input various settings, and the display unit 13 displays the input contents and the operation status of the entire apparatus.

  The image forming unit 3 includes a local memory 20 that stores input image data, a printing unit 21 that includes a laser scanning unit, a paper feeding unit 22 that includes a manual feed tray and a cassette tray, and a paper discharge unit that includes a paper discharge tray. A paper portion 23.

  As the local memory 20, a readable / writable semiconductor memory such as an SDRAM or a flash memory is used. The local memory 20 is divided into an area for storing input image data and an area for storing image data for output. Instead of dividing and using one local memory 20, two local memories 20 may be used for input and output, respectively.

  The input image data is stored in the local memory 20. The local memory 20 stores image data by overwriting old image data with new image data. The image data is subjected to image processing such as compression, expansion, and processing by the image processing unit 24 and is stored in the local memory 20. The image processed image data is output to the printing unit 21, the hard disk device 4, or the device control unit 9. The printing unit 21 prints an image on a recording sheet supplied from the paper feeding unit 22 based on the image data stored in the local memory 20.

  As described above, printing and outputting an image is one of the processes of the input image, and thus the image forming unit 3 functions as an image processing unit together with the image processing unit 24.

  The communication unit 5 is connected to a router, a switching hub, and the like via a LAN cable, and is connected to a network formed by the information processing apparatus 30 such as a personal computer or a server. The network is connected to the Internet via a communication line such as a telephone line network or an optical fiber.

  The communication unit 5 transmits / receives data to / from the information processing apparatus 30 in the network, and transmits / receives data and electronic mail to / from the external information processing apparatus 30 and the facsimile apparatus 31 via the Internet. The FAX modem 7 is connected to the telephone line network via a telephone line, and performs facsimile communication with the external facsimile apparatus 6. Thus, since image data is input through the communication unit 5 and the FAX modem 7, these also function as image input means. Further, since transmitting image data to the outside is one of the processes of the input image, the communication unit 5 and the FAX modem 7 function as image processing means.

  When there is an input from the operation unit 2 or a data input from an external device, the device control unit 9 controls each unit based on information stored in the management unit 8 and processes the input image data. That is, any one of a copy mode, a printer mode, a scanner mode, and a facsimile mode is executed on the input image data, and the input image data is output in a desired form.

  The hard disk device 4 is storage means for temporarily storing image data. When the image data is stored in the hard disk device 4 by the encryption / decryption unit 25, the image data is encrypted. When image data is read from the hard disk device 4, the image data is decoded.

  The hard disk device 4 stores management information related to data processing as data other than image data. The management information includes filing management information, transmission destination management information, and history management information. The filing management information is a list of files in which input image data is stored. The transmission destination management information is a list of transmission destinations in facsimile communication. The history management information is a list of executed processing contents.

  The hard disk device 4 includes an erasing unit 32 that erases image data. The image data to be erased is data stored in the processing work area. The device control unit 9 controls the operation of the erasing unit 32 after processing and outputting the image data. The erasure unit 32 overwrites random data or meaningless data, or erases the data itself so that the stored image data cannot be read and the original image cannot be reproduced. Disable it.

  Note that the erasing unit 32 may also invalidate the image data by erasing the old image data by overwriting or erasing the image data in the local memory 20. The management information stored in the hard disk device 4 is not erased unless there is a command from the device control unit 9.

  Next, the operation when each mode is executed will be described. First, in the copy mode, image data of a document read by the image reading unit 1 is output as a copy from the image forming unit 3. Specifically, the image of the original set at the reading position is read by the CCD 10. The image data output from the CCD 10 is subjected to image processing on the local memory 20 by the image processing unit 24 and completed as an output image. Once transferred from the local memory 20 to the hard disk device 4, it is stored. When there are a plurality of documents, the reading and storing operations are repeated.

  Thereafter, based on the processing contents instructed from the operation unit 2, the image data stored in the hard disk device 4 is sequentially read out at an appropriate timing and sent to the local memory 20. The image data is transferred from the local memory 20 to the printing unit 21 in accordance with the writing timing to the printing unit 21, and the image is printed on the sheet material supplied from the paper feeding unit 22. 23 is discharged.

  Similarly, when printing a plurality of read image data, the image data is stored in the hard disk device 4 in units of pages as an output image, and sent from the hard disk device 4 to the local memory 20 in accordance with the output mode. The image data in the local memory 20 is repeated for the number of output sheets, and transferred to the printing unit 21 in accordance with the writing timing to the printing unit 21.

  In the printer mode, the image data output from the information processing apparatus 30 is output from the image forming unit 3. That is, the image data from the information processing apparatus 30 is received by the communication unit 5. The device control unit 9 sends the input image data to the local memory 20, develops it as image data to be output for each page, and temporarily stores it in the hard disk device 4. Then, the image data is sent from the hard disk device 4 to the local memory 20 and transferred to the printing unit 21 in the same manner as in the copy mode, and the image is printed on the sheet material.

  In the scanner mode, the image data of the document read by the image reading unit 1 is communicated to an arbitrary information processing apparatus 30 through a network. That is, the image data output from the CCD 10 is processed on the local memory 20 to be completed as an output image, and is temporarily stored in the hard disk device 4. Then, when transmitting, the image data is sent from the hard disk device 4 to the local memory 20, and the device control unit 9 establishes communication with the transmission destination in the network designated via the operation unit 2, and the communication unit 5. To send the image data to the desired destination. Further, the image data is transmitted to the external information processing apparatus 30 and the facsimile apparatus 31 from the network via the network by the communication unit 5. Further, the device control unit 9 transmits image data from the FAX modem 7 to the facsimile apparatus 6 through a telephone line by the same operation in the facsimile mode.

  When the processing of the image input from the image input means is completed as described above, the erasing unit 32 erases the image data stored in the hard disk device 4.

  The image processing apparatus includes an output restriction function that determines the presence or absence of a specific image included in input image data and prohibits output of the image data when it is determined that there is a specific image. Specifically, as shown in FIG. 2, an output restriction circuit 50 that stores a program for executing an output restriction function is mounted on the image processing apparatus. The output regulation circuit 50 is provided as an IC chip so as to be detachable from the image processing apparatus.

  The output restriction circuit 50 includes an image determination unit 40 that determines whether a specific image is included in the input image data, and a processing restriction unit 41 that determines a processing operation for the input image data according to the determination result. have.

  The specific image is an image representing check information such as copy prohibition and output prohibition. For example, the image is a combination of characters such as “copy prohibited” and “confidential” and a predetermined pattern. Or the image of only a character and the image of only a predetermined pattern may be sufficient. Image data for such a specific image is input in advance and stored in the hard disk device 4 or a nonvolatile memory.

  The image determination unit 40 compares the input image data with the image data of the specific image. When image data corresponding to the specific image is detected in the input image data, it is determined that the specific image is included. When it cannot be detected, it is determined that the specific image is not included. The image determination unit 40 outputs the determination result to the processing restriction unit 41.

  When the process restriction unit 41 determines that the specific image is included, the process restriction unit 41 regulates the process for the input image data. Depending on the instructed mode, copying is prohibited, image data transmission is prohibited, or facsimile transmission is prohibited. When it is determined that the specific image is not included, the processing restriction unit 41 executes the instructed mode. When the process is restricted as described above, the display unit 13 displays the restriction and notifies the user.

  The output restriction circuit 50 includes an operation confirmation unit 42 that confirms whether the image determination unit 40 is operating normally, and an operation determination unit 43 that determines whether to allow or restrict image processing according to the confirmation result. doing. This operation check is performed when the input image is not processed.

  An image signal generation unit 44 that generates a specific image at the time of confirming the operation is provided in the image reading unit 1. The image signal generation unit 44 stores image data of a specific image in a nonvolatile memory, and generates the specific image by outputting the image data according to an instruction from the device control unit 9.

  The operation confirmation unit 42 confirms whether the image determination unit 40 can detect the specific image generated by the image signal generation unit 44.

  The operation determination unit 43 allows the processing operation when the image determination unit 40 confirms that the specific image has been detected. When it is confirmed that it cannot be detected, the processing operation is limited, and the outside is notified through the display unit 13 and the communication unit 5 that there is an abnormality. Therefore, the image signal generation unit 44 and the operation confirmation unit 42 also form part of the output restriction circuit 50.

  By the way, there is a possibility that the output restriction circuit 50 is intentionally removed from the image processing apparatus main body by a third party and illegally disables the output restriction function. Therefore, the image processing apparatus includes a monitoring unit 51 that confirms whether the output restriction circuit 50 has been intentionally removed from the apparatus main body, and a detection unit 52 that detects whether the output restriction function has been executed in the past. Is provided.

  The monitoring unit 51 monitors whether or not the output restriction function is normally executed when the power of the apparatus main body is turned on. Specifically, the monitoring unit 51 detects the presence / absence of the output restriction circuit 50.

  For example, the monitoring unit 51 detects whether or not the output restriction circuit 50 is mounted on the image processing apparatus main body using a mechanical or electrical switch. When detecting that the device is attached, the monitoring unit 51 notifies the device control unit 9 that the output restriction function can be executed. When detecting that it is not attached, the monitoring unit 51 determines that the output restriction circuit 50 has been removed, and notifies the device control unit 9 that the output restriction function cannot be executed. The device control unit 9 determines that the output restriction function is intentionally disabled.

  As another monitoring method, the monitoring unit 51 uses the image signal generation unit 44 to check whether it actually operates.

  When the output restriction function operates normally, the monitoring unit 51 determines that the output restriction circuit 50 is attached, and notifies the device control unit 9 that the output restriction function can be executed. When the output regulation function starts to operate but an error occurs in the middle, the monitoring unit 51 notifies the device control unit 9 that the output regulation circuit 50 is mounted but the output regulation function is not executable. . The device control unit 9 unintentionally determines that the output restriction function has become unexecutable. When the operation of the output restriction function cannot be confirmed, the monitoring unit 51 determines that the output restriction circuit 50 is not attached, and notifies the device control unit 9 that the output restriction function cannot be executed. The device control unit 9 determines that the output restriction function is intentionally disabled. One of the two methods described above may be employed, or both may be employed.

  The detection unit 52 confirms the execution history of the output restriction circuit 50. Specifically, once the device control unit 9 executes the output restriction function, it stores the execution record in the hard disk device 4. For example, the device control unit 9 sets ON and OFF of the output restriction function of the output restriction circuit 50 in accordance with the mounting state of the output restriction circuit 50 and stores it. Alternatively, the output restriction circuit 50 has a unique value such as an ID for identifying each circuit or a serial number. When the output restriction function is executed, the device control unit 9 reads the unique value from the output restriction circuit 50 and stores the unique value in the hard disk device 4.

  The output restriction function is executed when a specific image is detected and processing on input image data is restricted according to the detected specific image. That is, when the device control unit 9 determines that copying is prohibited, image data transmission is prohibited, or facsimile transmission is prohibited according to the instructed mode, it is determined that the output restriction function has been executed. .

  The detection unit 52 detects from the hard disk device 4 whether the output restriction function is ON or OFF, or the presence or absence of an eigenvalue. When the execution history of the output restriction circuit 50 is confirmed, the detection unit 52 outputs the detection result to the device control unit 9.

  When the output restriction function is executed even once, even if the output restriction circuit 50 is removed from the image processing apparatus main body, the hard disk device 4 is used to prevent the input image data from being illegally output. The information stored in is not changed. That is, when the ON / OFF state of the output restriction function is stored, the device control unit 9 prohibits the change from ON to OFF. When the unique value of the output restriction circuit 50 is stored, the device control unit 9 prohibits changes such as overwriting and new storage.

  The device control unit 9 notifies the user of this when the output restriction function is disabled. Specifically, the device control unit 9 communicates with the external devices 30 and 31 registered in advance in the hard disk device 4 through the communication unit 5 that the output restriction function has become unexecutable. For example, dial a registered telephone number and play a voice message to the effect that the output restriction function cannot be executed. Alternatively, dial the registered FAX number and send a message indicating that the output restriction function cannot be executed. Alternatively, an e-mail is sent to the registered e-mail address with a statement stating that the output restriction function has been disabled.

  Next, an illegal monitoring operation for the output restriction function will be described with reference to FIGS. For convenience of explanation, a copy mode is set in which a document is read from the image reading unit 1 and the read image data is printed.

  First, at the time of factory shipment or installation, the administrator attaches the output restriction circuit 50 to the image processing apparatus (S301). When the power of the image processing apparatus is turned on (S302), the monitoring unit 51 confirms the mounting state of the output restriction circuit 50 (S303). If it is confirmed that it is attached, a message to that effect is output to the device control unit 9.

  The device control unit 9 switches ON / OFF of the output restriction function of the output restriction circuit 50 according to the mounting state. That is, when it is confirmed that the device control unit 9 is mounted, the device control unit 9 changes the output restriction function from OFF to ON (S304). If it is not confirmed that it is attached, the output regulation function is maintained in the OFF state. After the output restriction function is set to ON, all reading operations of the image processing apparatus are enabled (S305).

  When a document is set by a user and image data is read from the image reading unit 1, an output restriction function is executed.

  Here, when the power of the image processing apparatus is turned off to invalidate the output restriction function, the user removes the output restriction circuit 50 from the apparatus main body (S306), and when the power is turned on again, the monitoring unit 51 The presence or absence of the output restriction circuit 50 is detected. When it is detected that the output restriction circuit 50 is mounted, the device control unit 9 is notified that the output restriction function can be executed. The device control unit 9 enables the reading operation of all the image processing apparatuses.

  When detecting that it is not attached, the monitoring unit 51 determines that the output restriction circuit 50 has been removed, and notifies the device control unit 9 that the output restriction function cannot be executed. When the device control unit 9 receives a detection result indicating that the output restriction function is not executable, it checks whether the output restriction function is ON. When the output restriction function is OFF, the device control unit 9 enables the reading operation of all the image processing apparatuses.

  When the output restriction function is ON, the device control unit 9 determines that the output restriction function is intentionally disabled and prohibits the reading operation of the image processing apparatus (S307). Then, the user is notified that the reading operation of the image processing apparatus is prohibited.

  Next, an operation for preventing unauthorized use using the eigenvalue of the output restriction circuit 50 will be described with reference to FIG.

  When the user turns on the power (S401), the monitoring unit 51 checks whether or not the output restriction circuit 50 is attached (S402). Then, the monitoring unit 51 notifies the device control unit 9 of the detection result.

  When detecting that the output restriction circuit 50 is attached, the detection unit 52 reads the eigenvalue written in the output restriction circuit 50 into the image processing apparatus (S403). Then, the detection unit 52 notifies the device detection unit 9 of the result.

  The device control unit 9 confirms whether the output restriction circuit 50 is newly installed based on the read eigenvalue or the output restriction circuit 50 used once or more (S404).

  When the output restriction circuit 50 is newly installed, the device control unit 9 displays a message “An output restriction circuit having a new output restriction function is attached” on the operation panel of the apparatus main body. The unique value of the output restriction circuit 50 is stored (S405). Then, the device control unit 9 automatically sets the output restriction function to ON (S406), and enables the reading operation of all the image processing apparatuses (S407).

  If it is not the new output restriction circuit 50, the device control unit 9 checks whether the unique value of the output restriction circuit 50 matches the stored unique value (S408). If the two eigenvalues do not match, the device control unit 9 deliberately determines that the output control function cannot be executed because it is a camouflaged output control circuit 50, and prohibits the reading operation of the image processing apparatus (S409).

  When the two eigenvalues match, the detection unit 52 detects whether or not the output restriction function is ON. When the output restriction function is ON (S410), the device control unit 9 enables the reading operation of all the image processing apparatuses. When the output restriction function is OFF, the device control unit 9 automatically sets the output restriction function to ON (S406), and enables the reading operation of all the image processing apparatuses (S407).

  Next, FIG. 5 shows an operation for notifying the administrator registered in advance that the output restriction circuit 50 has been removed when it is detected that the output restriction circuit 50 once executed is removed from the apparatus main body. Based on For convenience of explanation, the notification to the administrator is notification by mail.

  When the power of the image processing apparatus is turned on (S501), the monitoring unit 51 checks whether or not the output restriction circuit 50 is attached to the image processing apparatus (S502). When the monitoring unit 51 detects that the output restriction circuit 50 is not attached, the monitoring unit 51 notifies the device control unit 9 to that effect. At the same time, the detection unit 52 detects from the hard disk device 4 whether the output restriction function is ON or OFF, or the presence or absence of an eigenvalue, and confirms the execution history of the output restriction circuit 50 (S503).

  If there is no execution history in the past, that is, if the output restriction function has never been executed, the device control unit 9 enables all reading operations of the image processing apparatus (S506). If there is an execution history in the past, the device control unit 9 determines that the output restriction function is intentionally disabled. Therefore, the device control unit 9 transmits a mail addressed to a pre-registered mail address (S504). At that time, the device control unit 9 disables the reading operation of all the image processing apparatuses (S505).

  Next, an operation for prohibiting the change of the stored eigenvalue when the eigenvalue of the output restriction circuit 50 executed once is stored will be described with reference to FIG.

  When the power of the image processing apparatus is turned on (S601), the monitoring unit 51 confirms whether or not the output restriction circuit 50 is attached to the image processing apparatus (S602). Then, the monitoring unit 51 notifies the device control unit 9 of the detection result.

  When it is detected that the output restriction circuit 50 is attached, the detection unit 52 checks whether or not the eigenvalue is stored in the hard disk device 4 (S603). Then, the detection unit 52 notifies the device detection unit 9 of the result.

  When the eigenvalue is stored, the device control unit 9 prohibits recording the eigenvalue of the output restriction circuit 50 in the hard disk device 4. The device control unit 9 compares the eigenvalue of the output restriction circuit 50 with the stored eigenvalue (S605). When the two eigenvalues are the same, the reading operation of the image processing apparatus is enabled (S607). When the eigenvalues are different, the reading operation of the image processing apparatus is prohibited (S606).

  Note that when the output restriction circuit 50 is not attached, there is no eigenvalue of the output restriction circuit 50, so the two eigenvalues are different from each other, and the reading operation of the image processing apparatus is prohibited (S606).

  When the eigenvalue is not stored, the device control unit 9 determines that the new output restriction circuit 50 is attached and stores the eigenvalue of the attached output restriction circuit 50 (S608). Then, the device control unit 9 prohibits recording the unique value of the output restriction circuit 50 in the hard disk device 4. Thereafter, the presence / absence of the output restriction circuit 50 is confirmed again, and the two eigenvalues are compared to enable the reading operation of the image processing apparatus (S607).

  Accordingly, even if the output processing function is intentionally disabled, the image processing apparatus can control the illegal output of the image data, so that the confidentiality of the information can be maintained.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. Although the copy mode has been described in the present embodiment, a filing mode or a FAX mode may be used.

  In this embodiment, ON / OFF of the output restriction function is set according to whether or not the output restriction circuit is attached. However, the administrator may set ON / OFF of the output restriction function by manual setting. . However, when the output restriction circuit is not attached, the output restriction function cannot be changed to ON.

  If the program for executing the output restriction function is altered, the output restriction function is intentionally disabled. Therefore, the program data hash value may be used to detect alteration of the program, and when alteration is detected, it may be determined that the program cannot be executed intentionally. Note that the output restriction function cannot be executed, but if no alteration of the program is detected, it is determined that the output restriction function cannot be executed due to an error.

Schematic configuration showing an image processing apparatus according to the present embodiment Block diagram of image processing device Flow chart showing the operation when the output regulation circuit is removed A flowchart showing an operation that can only be used in an image processing apparatus that stores an eigenvalue of an output restriction circuit Flowchart showing notification operation Flowchart showing stored value change prohibiting operation

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading part 2 Operation part 3 Image formation part 4 Hard disk apparatus 5 Communication part 6 Facsimile apparatus 7 FAX modem 9 Equipment control part 12 Input part 13 Display part 20 Memory 21 Printing part 22 Paper feed part 23 Paper discharge part 24 Image processing part 25 Encryption / Decryption Unit 30 External Terminal 31 Facsimile Device 40 Image Determination Unit 41 Processing Restriction Unit 42 Operation Confirmation Unit 43 Operation Determination Unit 44 Image Signal Generation Unit 50 Output Restriction Circuit 51 Monitoring Unit 52 Detection Unit

Claims (5)

When a specific image is detected from input image data, the image processing apparatus has an output restriction function for restricting the output of the image data, and executes a control unit that controls the output restriction function and an output restriction function An output regulation circuit for storing a program for performing the output regulation, a monitoring unit for monitoring whether or not the output regulation function is executable, and a detection unit for detecting on / off of the output regulation function. On / off, and when the output regulation function is on, the output regulation function is executed,
When the monitoring unit detects that the output regulation circuit has been removed from the apparatus main body or when the program has been tampered with, the control unit determines that the output regulation function is not executable,
The control unit sets the output restriction function to ON when the output restriction circuit is attached, and sets the output restriction function to OFF when the output restriction circuit is not attached, and sets the output restriction function to When set to ON, even if the output regulation circuit is removed from the main body of the device, the change from ON to OFF is prohibited,
When it is determined that the output restriction function is infeasible and when the output restriction function is turned on, the control unit restricts the input of the image data, and the output restriction function is not executable. The image processing apparatus according to claim 1, wherein when the off-state is detected, the control unit permits input of the image data. The output restriction circuit has a unique value for identification, and when the output restriction circuit is attached, the control unit stores the unique value that the output restriction circuit has,
When the output restriction circuit is attached, the control unit compares the eigenvalue of the attached output restriction circuit with the stored eigenvalue, and when the two eigenvalues match, inputs the image data. 2. The image processing apparatus according to claim 1 , wherein the image processing apparatus is permitted and restricts input of image data when two eigenvalues are different. The control unit prohibits the change of the stored eigenvalue of the output restriction circuit, and restricts the input image data from being illegally output even if the output value is replaced with another output restriction circuit. Item 3. The image processing apparatus according to Item 2 . When the output regulating function is infeasible, the control unit, an image processing apparatus according to any one of claims 1 to 3, wherein the notifying that the output regulating function becomes impractical. A communication unit that can communicate with external devices is provided.
The image processing apparatus according to claim 4 , wherein the control unit communicates with the external device set in advance that the output restriction function has become unexecutable via the communication unit.

Images