JP5416457B2 - Image forming apparatus - Google Patents

Description

  The present invention relates to an image forming apparatus that forms an image based on print information received from a host apparatus.

  Among image forming apparatuses, there is an apparatus that uses information stored in an information storage medium (see, for example, Patent Document 1). This image forming apparatus has a configuration in which an information reading device for reading information from an information storage medium is connected or built in. The information storage medium is normally configured as an IC card, and the information reading device is configured as an IC card reader for reading information from the IC card.

  For example, when printing an image based on print information received from a higher-level device, the image forming apparatus acquires authentication information from an information storage medium possessed by the user via the information reading device. Note that “authentication information” means information used to authenticate access to various types of information (here, print information).

  The image forming apparatus temporarily stores the received print information in a storage unit (for example, a RAM or an HDD), and acquires it from an information storage medium in one or more print information stored in the storage unit. When there is print information associated with authentication information corresponding to the authentication information, the print information is regarded as information whose access is authenticated, and an image is formed based on the image information included in the print information. And print the image. Hereinafter, a method for performing printing after authentication of print information is referred to as “authentication printing”.

JP 2005-335282 A

However, it is assumed that a third party illegally obtains the information storage medium for some reason. If a third party obtains an information storage medium, the third party can arbitrarily print even print information to be authenticated.
For this reason, the conventional image forming apparatus has a problem that print information to be authenticated and printed may leak when a third party illegally obtains an information storage medium.

  SUMMARY An advantage of some aspects of the invention is that it provides an image forming apparatus that prevents leakage of print information to be authenticated and printed.

In order to achieve the above object, the present invention is an image forming apparatus, wherein image information, first authentication information for authenticating printing of the image information, and printing permission start time of the image information are received from a host device. An input unit for inputting print information of an authentication print job including printable time information indicating a printable time from the printing end time to the print permission end time, an acquisition unit for acquiring second authentication information from the outside, and input by the input unit A storage unit that stores the print information of the one or more authenticated print jobs, and the first authentication information that matches the second authentication information when the acquisition unit acquires the second authentication information. A search unit that searches for the print information that is included, and an authentication print job whose current time has passed a print permission end time specified by the printable time information as an expired job, and the storage A first determination unit that determines whether there is print information of an expired job among the one or more print information stored in the storage unit, and the one or more authentication print jobs stored in the storage unit. Among the print information, the deletion unit that deletes the print information determined as the expired job by the first determination unit, and the second authentication information acquired by the acquisition unit are represented by the printable time information. A second determination unit that determines whether or not the second authentication information has been acquired within the printable time, and a second determination unit that determines whether or not the second authentication information has been acquired within the printable time. The second authentication information is acquired outside the printable time by the printing unit that prints the image represented by the image information included in the print information searched by the second determination unit. If it is determined, the deletion confirmation unit that confirms to the upper apparatus whether or not the print information including the first authentication information that matches the second authentication information may be deleted, and the print by the deletion confirmation unit. When it is confirmed that the information cannot be deleted, the printable time information of the print information stored in the storage unit is used by using the update time information input from the host device . By updating to a new printable time different from the printable time, the re-registration unit that re-registers the print information, and the second determination unit acquires the second authentication information outside the printable time. When it is determined, the information processing apparatus includes a notification unit that notifies the host device that there has been an unauthorized access.

In this image forming apparatus, the deletion unit deletes the print information determined as an expired job by the first determination unit. As a result, the image forming apparatus prevents the print information determined as an expired job from leaking to a third party.
Further, in the image forming apparatus, when the second determination unit determines that the second authentication information is acquired within the printable time, the image included in the print information searched by the search unit is included in the print unit. Print the image represented by the information. Accordingly, the image forming apparatus can print only the print information for which the second authentication information has been acquired within the printable time.
In the image forming apparatus, when the second determination unit determines that the second authentication information is acquired outside the printable time, the deletion confirmation unit displays the first authentication information that matches the second authentication information. It confirms with the higher-level device whether or not the included print information can be deleted. In this image forming apparatus, when it is confirmed that the print information cannot be deleted, the re-registration unit is stored in the storage unit using the update time information input from the host device. The print information is re-registered by updating the printable time information of the print information.
In the image forming apparatus, when it is determined that the second authentication information is acquired outside the printable time, the notification unit transmits a notification mail indicating that the print information is illegally accessed to the host apparatus.

  When the print information is determined to be an expired job by the first determination unit, the image forming apparatus changes the printable time information of the print information and re-registers the print information within a predetermined time. Thus, the frequency of re-acquisition of print information from the host device may be reduced.

  According to the present invention, it is possible to provide an image forming apparatus that prevents leakage of print information to be authenticated and printed.

1 is a block diagram illustrating a configuration of an image forming apparatus according to a first embodiment. It is a figure (1) which shows an example of a format of print information. FIG. 6 is a diagram (2) illustrating an example of a format of print information. 3 is a flowchart (1) illustrating an operation of the image forming apparatus according to the first embodiment. 6 is a flowchart (2) illustrating the operation of the image forming apparatus according to the first embodiment. 5 is a flowchart (3) illustrating an operation of the image forming apparatus according to the first embodiment. It is a figure which shows an example of the format of authentication printing storage information. It is a figure which shows an example of the format of a monitoring table. FIG. 4 is a block diagram illustrating a configuration of an image forming apparatus according to a second embodiment. 6 is a flowchart (1) illustrating an operation of the image forming apparatus according to the second embodiment. 6 is a flowchart (2) illustrating an operation of the image forming apparatus according to the second embodiment.

  Hereinafter, an embodiment of the present invention (hereinafter referred to as “the present embodiment”) will be described in detail with reference to the drawings. In addition, each figure is only shown schematically to such an extent that the present invention can be understood. Therefore, the present invention is not limited to the illustrated example. Moreover, in each figure, the same code | symbol is attached | subjected about the common component and the same component, and those overlapping description is abbreviate | omitted.

[Embodiment 1]
<Configuration of image forming apparatus>
Hereinafter, the configuration of the image forming apparatus according to the first embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating the configuration of the image forming apparatus according to the first embodiment. Here, first, the relationship between the image forming apparatus 101 according to the first exemplary embodiment and an apparatus connected to the image forming apparatus 101 will be described, and then the internal configuration of the image forming apparatus 101 will be described.

(Relationship between image forming apparatus 101 and connection apparatus)
Hereinafter, the relationship between the image forming apparatus 101 according to the first exemplary embodiment and an apparatus connected to the image forming apparatus 101 will be described.
As illustrated in FIG. 1, the image forming apparatus 101 according to the first exemplary embodiment is connected to the information processing apparatus 1000 via the communication line 1001 and is connected to the information reading apparatus 1002 via the communication line 1003. ing. Note that the information reading apparatus 1002 may be built in the image forming apparatus 101.

  Here, it is assumed that the image forming apparatus 101 is configured by a printer, the information processing apparatus 1000 is configured by a personal computer, and the information reading apparatus 1002 is configured by a non-contact type IC card reader. In the following description, it is assumed that the communication line 1001 is constituted by a network and the communication line 1003 is constituted by a USB. Note that the communication line 1001 and the communication line 1003 can be appropriately selected from a network, USB, IEEE1284, serial interface, and other connection means.

  The information processing apparatus 1000 is a host device of the image forming apparatus 101. The information processing apparatus 1000 transmits various types of information (for example, print information 200 and a state confirmation instruction for causing the image forming apparatus 101 to confirm the state of the apparatus) to the image forming apparatus 101 via the communication line 1001. . The image forming apparatus 101 prints an image based on the print information 200 or transmits apparatus status information to the information processing apparatus 1000 in response to a status confirmation instruction. Details of the print information 200 will be described later with reference to FIGS.

  The information processing apparatus 1000 is communicably connected to an information storage medium 1004 possessed by a user. Here, the information storage medium 1004 is described as being configured by a non-contact type IC card.

The information processing apparatus 1000 generates print information 200 when the image forming apparatus 101 prints image information 255 (see FIGS. 2 and 3).
At this time, if the image information 255 is information to be authenticated and printed, the information processing apparatus 1000 generates unique authentication information 210 (see FIG. 2) for each image information 255. At this time, the information processing apparatus 1000 determines a start time and an end time of the time when printing of the image information 255 is permitted (hereinafter referred to as “print permission start time” and “print permission end time”, respectively). Then, the time from the print permission start time to the print permission end time is set as the printable time, and information indicating the printable time (hereinafter referred to as “printable time information 235 (see FIG. 2)”) is generated.

  Thereafter, the information processing apparatus 1000 generates the print information 200 (see FIG. 2) so as to include the authentication information 210, the printable time information 235, and the image information 255, and the authentication information 210c having the same contents as the authentication information 210. (See FIG. 1). The information processing apparatus 1000 transmits the print information 200 to the image forming apparatus 101 and transmits the second authentication information 210c to the information storage medium 1004. Accordingly, the print information 200 including the authentication information 210, the printable time information 235, and the image information 255 is stored in the image forming apparatus 101, and the second authentication information 210c is stored in the information storage medium 1004.

  The authentication information 210c is used as information for searching the print information 200. Here, it is assumed that the authentication information 210c is information having the same content as the authentication information 210. However, the authentication information 210c may be information different from the authentication information 210 as long as the print information 200 can be searched. Hereinafter, when distinguishing between the authentication information 210 and the authentication information 210c, the authentication information 210 is referred to as “first authentication information”, and the authentication information 210c is referred to as “second authentication information”.

  The information reading device 1002 is a device that reads the second authentication information 210c from the information storage medium 1004. When the information reading apparatus 1002 detects the information storage medium 1004 within a communicable range, the information reading apparatus 1002 reads the second authentication information 210c from the information storage medium 1004, and reads the read second authentication information 210c via the communication line 1003. The image is transmitted to the image forming apparatus 101. As a result, the image forming apparatus 101 acquires the second authentication information 210c.

(Internal configuration of image forming apparatus 101)
Hereinafter, the internal configuration of the image forming apparatus 101 will be described.
The image forming apparatus 101 includes a main processing unit 102, a printing unit 106, and a nonvolatile memory 116. Among these components, the main processing unit 102 has the characteristic configuration of the first embodiment, and therefore, the main processing unit 102 will be described here mainly. The printing unit 106 obtains dot pattern information (raster data) of the image information 255 from the main processing unit 102 (specifically, an image generation unit 105 described later), and is an image drawn by raster data. Is a mechanism for printing on the paper. Since the printing unit 106 is a known mechanism, detailed description thereof is omitted here. The nonvolatile memory 116 is a large-capacity storage unit that stores various types of information. Here, the non-volatile memory 116 will be described as being configured by an HDD.

The main processing unit 102 is a functional unit that performs print processing for an authenticated print job (that is, a print job that requires authentication) and print processing for an unauthenticated print job (that is, a print job that does not require authentication). The main processing unit 102 includes an interface unit 103, an analysis unit 104, an image generation unit 105, an authentication print management unit 107, a storage control unit 108, an unauthorized print detection unit 109, a nonvolatile memory control unit 110, a data deletion unit 111, and a time management. Unit 112, information reading unit 113, notification unit 114, and monitoring unit 115. Among these functional units, an analysis unit 104, an image generation unit 105, an authentication print management unit 107, a storage control unit 108, an unauthorized print detection unit 109, a nonvolatile memory control unit 110, a data deletion unit 111, a notification unit 114, And each function means of the monitoring part 115 is comprised by CPU and the program, or CPU, RAM, and the program. The time management unit 112 includes a timer, a CPU, and a program (not shown).
Among the functional units, the interface unit 103, the authentication print management unit 107, the unauthorized print detection unit 109, the data deletion unit 111, the information reading unit 113, and the monitoring unit 115 are respectively “to solve the problem. Functions as an input unit, a search unit, a second determination unit, a deletion unit, an acquisition unit, and a first determination unit.

  The interface unit 103 is a functional unit that transmits and receives various types of information from the outside. The interface unit 103 is connected to the communication line 1001 and receives, for example, print information 200 and an instruction state confirmation instruction from the information processing apparatus 1000. The interface unit 103 is connected to the analysis unit 104, the image generation unit 105, and the nonvolatile memory control unit 110, and outputs, for example, print information 200 received from the information processing apparatus 1000 to each functional unit.

  The analysis unit 104 determines whether the print information 200 is print information of an authenticated print job (that is, print information to be authenticated) or non-authenticated print job (that is, normal print information that is not authenticated). Is a functional means for analyzing. The analysis unit 104 is connected to the interface unit 103, the image generation unit 105, and the storage control unit 108, analyzes the print information 200 input from the interface unit 103, and outputs the analysis result to each functional unit. .

  The image generation unit 105 is a functional unit that edits and expands image information 255 (see FIGS. 2 and 3) to generate dot-patterned information (raster data). Note that “editing” means a process of converting drawing contents into an intermediate language. “Development” means a process of converting the drawing content converted into the intermediate language into a dot pattern. The image generation unit 105 is connected to the interface unit 103, the authentication print management unit 107, the nonvolatile memory control unit 110, and the printing unit 106.

  When the print information 200 is print information of an authentication print job (that is, print information to be authenticated), the image generation unit 105 performs authentication to cause the printing unit 106 to print the image information 255 of the print information 200. According to the print instruction input from the print management unit 107, the nonvolatile memory 116 is accessed via the nonvolatile memory control unit 110, the image information 255 specified by the print instruction is read from the nonvolatile memory 116, and the read image information 255 is edited (that is, the drawing content is converted into an intermediate language), expanded (that is, the drawing content converted into the intermediate language is converted into a dot pattern), raster data is generated, and the generated raster data is printed. To the unit 106.

  On the other hand, the image generation unit 105 causes the printing unit 106 to print the image information 255 of the printing information 200 when the printing information 200 is printing information of an unauthenticated print job (that is, normal printing information that is not authenticated printing). Therefore, the image information 255 included in the print information 200 input from the interface unit 103 is edited and expanded to generate raster data, and the generated raster data is output to the printing unit 106.

The authentication print management unit 107 is a functional unit that manages various types of information and performs approval for authentication printing. The authentication print management unit 107 includes an interface unit 103, an image generation unit 105, a storage control unit 108, a data deletion unit 111, an unauthorized print detection unit 109, a time management unit 112, an information reading unit 113, a notification unit 114, and a monitoring unit. 115.
The authentication print management unit 107 performs various processes as described below.

  For example, the authentication print management unit 107 receives information for storing management of the print information 200 (hereinafter referred to as “authentication print storage information 260 (see FIG. 7)”), information specifying an authentication method, and the like from the storage control unit 108. When input, the information is registered (stored) in a storage unit (specifically, a RAM (not shown) constituting the authentication print management unit 107) and managed.

  Also, for example, when the second authentication information 210c is input from the information reading unit 113, the authentication print management unit 107 matches the second authentication information 210c from the print information 200 of the unprocessed authentication print job. The print information 200 associated with the first authentication information 210 to be searched is searched. The “print information 200 of the unprocessed authenticated print job” is registered in the storage unit (not shown RAM) of the authenticated print management unit 107, and is not deleted and remains registered. This means print information 200 corresponding to “authentication print storage information 260 (see FIG. 7)”.

  The authentication print management unit 107 selects print information 200 corresponding to the corresponding print information 200 (that is, the first authentication information 210 matching the second authentication information 210c) from the print information 200 of the unprocessed authentication print job. 200), information indicating the current time (hereinafter referred to as “current time information”) is acquired from the time management unit 112, and the corresponding print information 200 is referred to with reference to the corresponding print information 200. Printable time information 235 (see FIG. 2). Note that the current time information acquired at this time represents the acquisition time at which the second authentication information 210c was acquired. Thereafter, the authentication print management unit 107 causes the unauthorized print detection unit 109 to detect the presence or absence of unauthorized access to the print information 200 of the authenticated print job by a third party, and the acquired current time information and printable time information. 235 is output to the unauthorized printing detection unit 109.

  If the unauthorized print detection unit 109 does not detect unauthorized access to the print information 200 of the authenticated print job, the authenticated print management unit 107 causes the image generation unit 105 to store the image information 255 included in the print information 200. In order to generate raster data, a print instruction for the print information 200 is output to the image generation unit 105.

  On the other hand, when the unauthorized print detection unit 109 detects unauthorized access to the print information 200 of the authenticated print job, the authenticated print management unit 107 indicates to the notification unit 114 that “unauthorized access has been detected”. An instruction for transmitting the notification mail to the host information processing apparatus 1000 (hereinafter referred to as “illegal notification instruction”) is generated, and the generated unauthorized notification instruction is output to the notification unit 114.

  Further, for example, when the print data 200 of the expired job is detected by the monitoring unit 115, the authentication print management unit 107 stores the image of the print information 200 of the expired job stored in the nonvolatile memory 116 in the data deletion unit 111. In order to delete the information 255, a deletion request for the expired job print information 200 is generated, and the generated deletion request is output to the data deletion unit 111. The “expired job” means an authenticated print job whose current time has passed the print permission end time specified by the printable time information 235 (see FIG. 2).

  The storage control unit 108 is a functional unit that controls storage of various types of information in the nonvolatile memory 116. The storage control unit 108 is connected to the analysis unit 104, the authentication print management unit 107, the nonvolatile memory control unit 110, and the information reading unit 113. When the analysis unit 104 analyzes that the print information 200 is print information of an authenticated print job (that is, print information that requires authentication), the storage control unit 108 stores an image of the print information 200 in the nonvolatile memory 116. In order to store the information 255, the authentication print storage information 260 (see FIG. 7) of the print information 200 is generated, and the generated authentication print storage information 260 of the print information 200 is output to the nonvolatile memory control unit 110. Further, in this case, the storage control unit 108 outputs the authentication print storage information 260, information for specifying the authentication method, and the like to the authentication print management unit 107.

The unauthorized print detection unit 109 is a functional unit that detects the presence or absence of unauthorized access to the print information 200 of an authenticated print job by a third party. The unauthorized print detection unit 109 is connected to the authentication print management unit 107. The unauthorized print detection unit 109 receives the current time information indicating the acquisition time of the second authentication information 210c and the printable time information 235 indicating the printable time of the image information 255 from the authentication print management unit 107. The current time is specified based on the current time information, and the printable time (that is, the time from the print permission start time to the print permission end time of the image information 255) is specified based on the printable time information 235. Then, the unauthorized printing detection unit 109 compares the current time with the print permission start time, compares the current time with the print permission end time, and determines the current time (that is, the acquisition time of the second authentication information 210c). It is determined whether it is within the printable time of the image information 255. Accordingly, the unauthorized print detection unit 109 determines whether the second authentication information 210c of the information storage medium 1004 is information acquired (read) within the printable time of the image information 255.
In this determination, if the current time is outside the printable time of the image information 255, the unauthorized print detection unit 109 determines that the second authentication information 210c is information acquired outside the printable time. As a result, the unauthorized print detection unit 109 determines that a third party has made unauthorized access to the print information 200 of the authenticated print job, and detects unauthorized access to the print information 200 of the authenticated print job. .

The nonvolatile memory control unit 110 is a functional unit that controls storage and reading of information with respect to the nonvolatile memory 116. The non-volatile memory control unit 110 is connected to the interface unit 103, the storage control unit 108, the non-volatile memory 116, the image generation unit 105, and the data deletion unit 111.
The non-volatile memory control unit 110 sends an information initialization instruction, a read instruction, a write instruction, and the like to cause the non-volatile memory 116 to perform initialization, reading, or writing of information. Output to. For example, when the authentication print storage information 260 (see FIG. 7) is input from the storage control unit 108, the nonvolatile memory control unit 110 stores the image information 255 designated by the authentication print storage information 260 in a predetermined file. In order to do this, the authentication print storage information 260 is referred to, the corresponding print information 200 is acquired from the interface unit 103, and the image information 255 of the print information 200 is output to the nonvolatile memory 116.
Note that the non-volatile memory 116 includes image information 255 of the print information 200a and information that can specify the image information 255 (for example, the file name of the image information 255 in the non-volatile memory 116) as information corresponding to the print information 200a. Alternatively, the first authentication information 210 (see FIG. 2)) is stored.

  The data deletion unit 111 is a functional unit that deletes the image information 255 stored in the nonvolatile memory 116. The data deletion unit 111 is connected to the authentication print management unit 107 and the nonvolatile memory control unit 110. For example, when a request to delete print information 200 for an expired job is input from the authentication print management unit 107, the data deletion unit 111 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110, and the nonvolatile memory The image information 255 of the print information 200 specified by the deletion request is deleted from the image information 255 of the one or more print information 200 stored in 116.

  The time management unit 112 is a functional unit that manages time. The time management unit 112 measures the current time. The time management unit 112 is connected to the authentication print management unit 107 and the monitoring unit 115, and outputs the measured current time to the authentication print management unit 107 and the monitoring unit 115.

  The information reading unit 113 is a functional unit that reads (acquires) information from the information reading apparatus 1002. For example, the information reading unit 113 reads the second authentication information 210c read by the information reading device 1002 (that is, the authentication information of the information storage medium 1004) from the information reading device 1002.

  The notification unit 114 is a functional unit that notifies various information to the outside. The notification unit 114 is connected to the authentication print management unit 107 and the interface unit 103. For example, when the unauthorized print detection unit 109 detects unauthorized access to the print information 200 of the authenticated print job, the notification unit 114 follows the unauthorized notification instruction output from the authenticated print management unit 107 to display “Unauthorized access A notification mail indicating “detected” is generated, and the generated notification mail is designated via the interface unit 103 by the host specified by the unauthorized notification instruction (that is, the host information 225 of the print information 200 (see FIGS. 2 and 3). ) To the host specified by).

  The monitoring unit 115 is a functional unit that determines whether the print information 200 for an expired job is included in the print information 200 for an unprocessed authenticated print job. The monitoring unit 115 is connected to the time management unit 112 and the authentication print management unit 107. The monitoring unit 115 periodically obtains the current time from the time management unit 112 at predetermined intervals, and determines whether or not the print information 200 for an expired job is included in the print information 200 for an unprocessed authenticated print job. Determine. When there is print information 200 for an expired job, the monitoring unit 115 outputs authentication information 210 of the print information 200 to the authentication print management unit 107.

<Details of printing information>
Hereinafter, the details of the print information 200 will be described with reference to FIGS. 2 and 3. 2 and 3 are diagrams each illustrating an example of a format of print information. FIG. 2 shows a format of print information 200 (hereinafter referred to as “print information 200a”) of an authenticated print job, and FIG. 3 shows print information 200 (hereinafter referred to as “print information 200b”) of an unauthenticated print job. Format).

  As shown in FIG. 2, the print information 200a (that is, the print information 200 of the authentication print job) includes authentication print determination information 205, authentication print information 250, and image information 255 representing an image to be printed. It has become.

  The “authenticated print determination information 205” means information for identifying whether the print information 200 is print information of an authenticated print job or non-authenticated print job. The authentication print determination information 205 uses a flag representing an authenticated print job when the print information 200 is print information of an authenticated print job (that is, print information 200a), while the print information 200 is an unauthenticated print job. In the case of print information (that is, print information 200b), a flag representing an unauthenticated print job is used.

  “Authentication print information 250” means information that is referred to when the print information 200a is subjected to authentication printing. The authentication print information 250 includes authentication information 210, print permission start time information 215, print permission end time information 220, host information 225, and job information (job name) 230.

  “Authentication information 210” means information for authenticating the print information 200a. Here, the authentication information 210 will be described assuming that an ID number generated for each image information 255 by the information processing apparatus 1000 is used.

  The “print permission start time information 215” means information indicating the start time of the time when printing of the image information 255 is permitted. The “printing permission end time information 220” means information indicating the end time of the time when the printing of the image information 255 is permitted. The print permission start time information 215 and the print permission end time information 220 are respectively generated for each image information 255 by the information processing apparatus 1000. The print permission start time information 215 and the print permission end time information 220 constitute printable time information 235.

  “Host information 225” means information related to the host. As the host information 225, for example, information associating a host name and a host address is used.

  “Job information 230” means information used for printing a job, such as the number of copies and a user name.

  On the other hand, the print information 200b (that is, the print information 200 of the non-authenticated print job) includes, for example, authenticated print determination information 205, host information 225, job information (job name) 230, and image information as shown in FIG. 255 is included.

<Operation of Image Forming Apparatus>
The operation of the image forming apparatus 101 according to the first embodiment will be described below with reference to FIGS. 4 to 6 are flowcharts illustrating the operation of the image forming apparatus according to the first embodiment. 4 shows the main operation of the image forming apparatus 101, FIG. 5 shows the operation of the image forming apparatus 101 when waiting for a print instruction, and FIG. 6 shows the image forming apparatus 101 when monitoring an expired job. Shows the operation.

(Main operations of the image forming apparatus 101)
First, the main operation of the image forming apparatus 101 will be described with reference to FIG. Note that the image forming apparatus 101 according to the first exemplary embodiment operates based on a time measured by a timer (not shown). A series of operations of the image forming apparatus 101 according to the first embodiment is defined by a program stored in advance in a readable manner in the nonvolatile memory 116 (or a storage unit (not shown)). Further, each information is temporarily stored in the storage means so as to be readable, and then output to a required component for performing the subsequent processing. Hereinafter, since these points are conventional means in information processing, detailed description thereof will be omitted.

  As shown in FIG. 4, in the image forming apparatus 101, first, the interface unit 103 receives print information 200 from a higher-level apparatus (in this case, the information processing apparatus 1000) via the communication line 1001 (S 101). Upon receiving the print information 200, the interface unit 103 outputs the received print information 200 to the analysis unit 104 in response thereto.

  When the print information 200 is input from the interface unit 103, the analysis unit 104 analyzes the format of the print information 200 in response to the input (S102), and the print information 200 is the print information 200a of the authenticated print job (FIG. 2). It is determined whether or not (S103). The determination in S103 is, for example, whether the authentication print determination information 205 (see FIGS. 2 and 3) included in the print information 200 is a flag representing an authenticated print job or a flag representing an unauthenticated print job. This is done by detecting

  If it is determined in S103 that the print information 200 is the print information 200a of the authenticated print job (in the case of “Yes”), the analysis unit 104 generates and generates a registration instruction for the print information 200a. A registration instruction is output to the storage control unit 108.

  When the registration instruction is input from the analysis unit 104, the storage control unit 108 generates a file for storing the image information 255 in response to the registration instruction, and at the same time, authenticates the print information 200a specified by the registration instruction. Storage information 260 (that is, information for storage management of the print information 200a (see FIG. 7)) is generated. FIG. 7 is a diagram illustrating an example of the format of the authentication print storage information. In the example shown in FIG. 7, the authentication print storage information 260 is information (hereinafter referred to as the authentication print information 250 and the storage file name (or storage location) of the image information 255 (see FIG. 2) in the nonvolatile memory 116). And “image information storage file information 265”).

When the storage control unit 108 generates a file for storing the image information 255, in response to this, the storage control unit 108 outputs the generated file to the nonvolatile memory control unit 110 and causes the file to be registered in the nonvolatile memory 116.
In addition, when the storage control unit 108 generates the authentication print storage information 260 of the print information 200a specified by the registration instruction, in response to this, the authentication print storage information 260 of the generated print information 200a is generated. The authentication print storage information 260 of the print information 200a is registered in the storage means (RAM not shown) of the authentication print management unit 107 (S104).

  When the authentication print management unit 107 registers the authentication print storage information 260 of the print information 200a in the storage unit, the authentication print management unit 107 outputs the authentication print storage information 260 of the registered print information 200a to the monitoring unit 115 in response thereto. At this time, the authentication print management unit 107 outputs only the authentication information 210 and the printable time information 235 included in the authentication print storage information 260 to the monitoring unit 115 instead of the authentication print storage information 260. May be.

  When the authentication print storage information 260 of the print information 200a is input from the authentication print management unit 107, the monitoring unit 115 responds to the authentication information 210 and the printable time from the input authentication print storage information 260. Information 235 is extracted. Then, the monitoring unit 115 uses the extracted authentication information 210 and printable time information 235 as “monitoring information 270 (see FIG. 8)” to monitor a table (hereinafter referred to as “monitoring table 275 ( (Refer to FIG. 8) ”) (S105), and monitoring for the presence of an expired job is started. FIG. 8 is a diagram illustrating an example of the format of the monitoring table. In the example illustrated in FIG. 8, the monitoring table 275 is configured to register monitoring information 270 including authentication information 210 and printable time information 235.

  In S105, when the authentication information 210 and the printable time information 235 of the print information 200a are registered in the monitoring table 275 as the monitoring information 270, the storage control unit 108 responds to the registration of the image information 255 of the printing information 200a. A storage instruction is generated, and the generated storage instruction and the image information storage file information 265 (that is, information indicating the storage file name of the image information 255 in the nonvolatile memory 116 (see FIG. 7)) are stored in the nonvolatile memory. Output to the control unit 110.

When the storage instruction and the image information storage file information 265 are input from the storage control unit 108, the nonvolatile memory control unit 110 responds to the image of the print information 200a designated by the storage instruction from the interface unit 103. The information 255 is acquired, the acquired image information 255 is output to the nonvolatile memory 116, and the image information 255 is stored in the nonvolatile memory 116 in the file specified by the image information storage file information 265 (S106).
Thereafter, the processing shifts to “waiting for print instruction (S107)” (see FIG. 5). Then, the image forming apparatus 101 performs the series of processes shown in FIG.

  On the other hand, if it is determined in S103 that the print information 200 is not the print information 200a for the authenticated print job ("No"), that is, the print information 200 is the print information 200b for the non-authenticated print job. When the determination is made, the analysis unit 104 generates a print instruction for the print information 200 b and outputs the generated print instruction to the image generation unit 105.

  In response to the print instruction input from the analysis unit 104, the image generation unit 105 acquires the print information 200b specified by the print instruction from the interface unit 103, and is included in the acquired print information 200b. The image information 255 being edited is edited (S108), expanded to generate raster data, and the generated raster data is output to the printing unit 106.

  When the raster data is input from the image generation unit 105, the printing unit 106 prints an image drawn by the raster data in response to the input (S109). Then, the image forming apparatus 101 ends the process.

(Operation of the image forming apparatus 101 when waiting for a print instruction)
Next, the operation of the image forming apparatus 101 when waiting for a print instruction (during the processing of S107 shown in FIG. 4) will be described with reference to FIG.

  The user sets the information storage medium 1004 in the information reading apparatus 1002 during the process of S107 shown in FIG. Here, the information storage medium 1004 is described as a non-contact type IC card, and the information reading device 1002 is described as a non-contact type IC card reader.

  In the image forming apparatus 101, first, the information reading unit 113 periodically communicates with the information reading apparatus 1002 to determine whether the information reading apparatus 1002 has the information storage medium 1004 as shown in FIG. (S110). That is, the information reading unit 113 causes the information reading device 1002 to periodically monitor whether or not the information storage medium 1004 is set in the information reading device 1002 by the user.

When the information storage medium 1004 is set by the user, the information reading apparatus 1002 determines that the information storage medium 1004 is present in S110 in response to this. In this case, the information reading apparatus 1002 reads the second authentication information 210 c from the information storage medium 1004 and transmits the read second authentication information 210 c to the image forming apparatus 101 via the communication line 1003. Thereby, the information reading unit 113 of the image forming apparatus 101 acquires the second authentication information 210c of the information storage medium 1004 from the information reading apparatus 1002 (S111).
When the information reading unit 113 acquires the second authentication information 210c of the information storage medium 1004 from the information reading device 1002, in response to this, the information reading unit 113 outputs the acquired second authentication information 210c to the authentication print management unit 107.

  When the second authentication information 210c is input from the information reading unit 113, the authentication print management unit 107 responds to the one or more registered in the storage unit (RAM not shown) in S104 shown in FIG. The print information 200a associated with the first authentication information 210 matching the second authentication information 210c is searched from the authentication print storage information 260 (see FIG. 7) of the print information 200a of the print information 200a, and the corresponding authentication print job is detected. It is determined whether or not there is print information 200a (S112).

  If it is determined in S112 that there is no print information 200a of the corresponding authentication print job (in the case of “No”), the image forming apparatus 101 ends the process as it is.

  On the other hand, if it is determined in step S112 that the print information 200a of the corresponding authentication print job is present (“Yes”), the authentication print management unit 107 acquires the current time information from the time management unit 112. (S113) Further, the printable time information 235 is extracted (obtained) from the authentication print storage information 260 (see FIG. 7) of the print information 200a of the corresponding authentication print job (S114), and the current time acquired in S113. The information and the printable time information 235 acquired in S114 are output to the unauthorized print detection unit 109.

  When the current time information and the printable time information 235 are input from the authentication print management unit 107, the unauthorized print detection unit 109 compares the current time information with the printable time information 235 in response to this, It is determined whether or not the current time is within the printable time (S115), and the determination result is output to the authentication print management unit 107.

If it is determined in S115 that the current time is within the printable time (in the case of “Yes”), the authentication print management unit 107 print information 200a registered in the storage unit in S104 shown in FIG. The authentication print storage information 260 (see FIG. 7) is output to the image generation unit 105.
When the authentication print storage information 260 is input from the authentication print management unit 107, the image generation unit 105 accesses the non-volatile memory 116 via the non-volatile memory control unit 110 in response to this, and the non-volatile memory 116. The image information 255 designated by the authentication print storage information 260 is read (obtained) from (S116).

When the image generation unit 105 reads the image information 255 from the nonvolatile memory 116, in response to this, the image generation unit 105 generates a notification that the reading of the image information 255 has been completed (hereinafter referred to as a “reading completion notification”). Then, the generated read completion notification is output to the authentication print management unit 107.
In response to the read completion notification from the image generation unit 105, the authentication print management unit 107 generates a deletion request for the print information 200a of the corresponding authentication print job in response to this, and deletes the generated deletion request as data deletion. Output to the unit 111.

  When the deletion request is input from the authentication print management unit 107, the data deletion unit 111 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110 in response to the deletion request, and is stored in the nonvolatile memory 116. The image information 255 of the print information 200a specified by the deletion request is deleted from the image information 255 of the one or more print information 200a. At this time, the authentication print management unit 107 sets the print information 200a designated by the deletion request from the authentication print storage information 260 of the one or more print information 200a registered in the storage unit in S104 shown in FIG. The authentication print storage information 260 is deleted. As a result, the print information 200a of the corresponding authenticated print job is deleted (S117).

After S117, the image generation unit 105 edits and expands the image information 255 acquired in S116 (S118), generates raster data, and outputs the generated raster data to the printing unit 106.
When the raster data is input from the image generation unit 105, the printing unit 106 prints an image drawn by the raster data in response to the input (S119). Then, the image forming apparatus 101 ends the process.

On the other hand, if it is determined in S115 that the current time is not within the printable time (in the case of “No”), the authentication print management unit 107 displays an unauthorized notification instruction (that is, “unauthorized access to host” An instruction for causing the notification unit 114 to transmit a notification mail indicating “detected” is generated, and the generated unauthorized notification instruction is output to the notification unit 114.
Upon receiving an unauthorized notification instruction from the authentication print management unit 107, the notification unit 114 generates a notification mail indicating that “unauthorized access has been detected” in response to this, and via the interface unit 103. The generated notification mail is transmitted to the host designated by the fraud notification instruction (S120).

  After S120, the authentication print management unit 107 determines whether or not the print information 200a of the authentication print job exists in the nonvolatile memory 116 (that is, whether or not it remains) (S121).

  If it is determined in step S121 that the print information 200a for the authenticated print job is present (“Yes”), the authenticated print management unit 107 generates a request for deleting the print information 200a for the corresponding authenticated print job. The generated deletion request is output to the data deletion unit 111.

  When the deletion request is input from the authentication print management unit 107, the data deletion unit 111 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110 in response to the deletion request, and is stored in the nonvolatile memory 116. The image information 255 of the print information 200a specified by the deletion request is deleted from the image information 255 of the one or more print information 200a. At this time, the authentication print management unit 107 sets the print information 200a designated by the deletion request from the authentication print storage information 260 of the one or more print information 200a registered in the storage unit in S104 shown in FIG. The authentication print storage information 260 is deleted. As a result, the print information 200a of the corresponding authenticated print job is deleted (S122). Then, the image forming apparatus 101 ends the process.

  On the other hand, if it is determined in S121 that there is no print information 200a for the authenticated print job (in the case of “No”), the image forming apparatus 101 ends the process as it is.

(Operation of the image forming apparatus 101 when monitoring an expired job)
Next, the operation of the image forming apparatus 101 when monitoring an expired job will be described with reference to FIG. FIG. 6 shows the operation of the image forming apparatus 101 when a timer interruption occurs while the processing is repeated in the processing of S110 shown in FIG. 5 (determination processing of “card present?”).

  The image forming apparatus 101 periodically issues a timer interrupt at a predetermined interval (for example, every one minute) when the processing is repeated in the processing of S110 shown in FIG. 5 (determination processing of “card present?”). Do. In this case, the image forming apparatus 101 performs the process shown in FIG.

  That is, in the image forming apparatus 101, as shown in FIG. 6, whether or not the authentication print management unit 107 has a timer interrupt in parallel with the processing of S110 (determination of “card present?”) Shown in FIG. Is periodically determined (S123). Then, when a timer interrupt occurs, the authentication print management unit 107 determines that there is a timer interrupt in response to this, and generates a notification that there is a timer interrupt (hereinafter referred to as “interrupt notification”). The generated interrupt notification is output to the monitoring unit 115.

  When the interrupt notification is input from the authentication print management unit 107, the monitoring unit 115 acquires the current time information from the time management unit 112 in response to the interrupt notification, and receives the current time information and the monitoring table 275 of the monitoring unit 115 in S105. The printable time information 235 of the authenticated print job registered in (see FIG. 8) is compared, and the print information 200a of the authenticated print job registered in the monitoring table 275 includes the expired job (that is, the current time). It is determined whether or not there is print information 200a of an authentication print job whose print permission end time has passed (S124).

If it is determined in S124 that there is print information 200a for the expired job (in the case of “Yes”), the monitoring unit 115 uses the authentication information 210 (see FIG. 8) of the print information 200a as the authentication print management unit. It outputs to 107.
When the expired job authentication information 210 is input from the monitoring unit 115, the authenticated print management unit 107 generates a request for deleting the print information 200a of the corresponding expired job in response to the received expired job authentication information 210, and stores the generated delete request as data. The data is output to the deletion unit 111.

  When the deletion request is input from the authentication print management unit 107, the data deletion unit 111 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110 in response to the deletion request, and is stored in the nonvolatile memory 116. The image information 255 of the print information 200a specified by the deletion request is deleted from the image information 255 of the one or more print information 200a. At this time, the authentication print management unit 107 sets the print information 200a designated by the deletion request from the authentication print storage information 260 of the one or more print information 200a registered in the storage unit in S104 shown in FIG. The authentication print storage information 260 is deleted. Thereby, the print information 200a of the corresponding authenticated print job is deleted (S125).

  After S125, the monitoring unit 115 deletes the monitoring information 270 of the expired job from the monitoring table 275 (see FIG. 8) (S126). If the expired job monitoring information 270 is deleted in S126, the processing of the image forming apparatus 101 is determined as “No (the current time is not within the printable time)” in the determination in S115 illustrated in FIG. Proceeding to S120, it is determined as “No (there is no print information 200a for the authentication print job)” in the determination of S121. Then, the image forming apparatus 101 ends the process.

  On the other hand, when it is determined in S124 that there is no expired job (in the case of “No”), the image forming apparatus 101 ends the process. In this case, the image forming apparatus 101 restarts a predetermined process (for example, a process after a predetermined time has passed (process after S110), or a notification mail host indicating that “timeout has occurred”). Etc.) may be performed.

  In such an image forming apparatus 101, for example, the information storage medium 1004 in which the authentication information 210 is stored is within the information reading apparatus 1002 within the printable time (that is, the time from the print permission start time to the print permission end time). Is detected, the authentication printing is performed according to the processing of S115 to S119 shown in FIG.

  However, in the image forming apparatus 101, for example, the information storage medium 1004 in which the authentication information 210 is stored is other than the printable time (that is, the time before the print permission start time or the time after the print permission end time). When detected by the information reading apparatus 1002, the host notifies the host that “unauthorized access has been detected” and deletes the print information 200a in accordance with the processing of S120 to S122 shown in FIG.

  Note that the printable time may be set by the user when the information processing apparatus 1000 is initially set or when the image information 255 is printed. Accordingly, since the authorized user can grasp the printable time, the information storage medium 1004 can be set in the information reading device 1002 and the image forming apparatus 101 can perform authentication printing within the printable time. However, since a third party who is not an authorized user does not know the printable time, the information storage medium 1004 is obtained within the printable time, and the image forming apparatus 101 is authenticated using the information storage medium 1004. It is difficult to print. Therefore, the image forming apparatus 101 can prevent leakage of the print information 200a of the authentication print job.

  As described above, according to the image forming apparatus 101 according to the first embodiment, an unprocessed authenticated print job is accessed before the print permission start time, or the print information 200a is an expired job. If the print information 200a is deleted, the print information 200a is deleted. Thereby, leakage of the print information 200a of the authenticated print job can be prevented.

  Further, according to the image forming apparatus 101, when an unprocessed authenticated print job is accessed before the print permission start time or after the print permission end time, the “unauthorized access” A notification mail indicating that “is detected” is sent to the host. This can warn the user of unauthorized access.

  Therefore, according to the image forming apparatus 101, it is possible to prevent the leakage of the print information 200a of the authentication print job and to warn the user of unauthorized access. Can be improved.

[Embodiment 2]
<Outline of Image Forming Apparatus According to Second Embodiment>
The image forming apparatus 101 according to the first exemplary embodiment immediately deletes the print information 200a when the deletion condition is met. Therefore, in order to print the print information 200a, the image forming apparatus 101 according to the first embodiment re-acquires the print information 200a from the host apparatus (in this case, the information processing apparatus 1000), and authenticates the print information 200a. It is necessary to re-register the print storage information 260 (see FIG. 7) in the storage unit of the authentication print management unit 107 and the monitoring information 270 (see FIG. 8) in the monitoring table 275. Therefore, the image forming apparatus 101 according to the first exemplary embodiment needs to cause the user to operate the host device and transmit the print information 200a again from the host device. However, the image forming apparatus 101 according to the first exemplary embodiment may impose a burden on the user. The “deletion condition” means a case where the print information 200a is accessed before the print permission start time or a case where the print information 200a is an expired job.

  In contrast, the image forming apparatus 201 according to the second embodiment stores the print information 200a in the nonvolatile memory 116 that is a large-capacity storage unit when the print information 200a is received from the host apparatus. The image forming apparatus 201 according to the second embodiment leaves the print information 200a without being deleted from the nonvolatile memory 116 within a predetermined time even when the deletion condition is met, and the nonvolatile memory Based on the print information 200a remaining in 116, the authentication print storage information 260 (see FIG. 7) and the monitoring information 270 (see FIG. 8) of the print information 200a are changed so that they can be re-registered. As a result, the image forming apparatus 201 according to the second embodiment can reduce the frequency with which the process of re-acquiring the print information 200a from the higher-level apparatus occurs, as compared with the image forming apparatus 101 according to the first embodiment. Therefore, unlike the image forming apparatus 101 of the first embodiment, the image forming apparatus 201 according to the second embodiment needs to allow the user to operate the host device within a predetermined time even when the deletion conditions are met. There is no. Therefore, the image forming apparatus 201 according to the second embodiment can reduce the burden on the user compared to the image forming apparatus 101 according to the first embodiment.

<Configuration of Image Forming Apparatus According to Second Embodiment>
Hereinafter, the configuration of the image forming apparatus according to the second embodiment will be described with reference to FIG. FIG. 9 is a block diagram illustrating a configuration of the image forming apparatus according to the second embodiment. In FIG. 9, the same components as those in the first embodiment (see FIG. 1) are denoted by the same reference numerals, and description thereof is omitted.

  As illustrated in FIG. 9, the image forming apparatus 201 according to the second exemplary embodiment includes a deletion confirmation unit 204 and a re-registration unit in the main processing unit 202 as compared with the image forming apparatus 101 (see FIG. 1) according to the first exemplary embodiment. 206 is added in that it is added.

  The deletion confirmation unit 204 is a functional unit that confirms (inquires) whether or not to delete the print information 200a of the expired job from the host. The deletion confirmation unit 204 is connected to the authentication print management unit 107 and the notification unit 114.

  The re-registration unit 206 is a functional unit that changes the printable time information 235 of the print information 200a and re-registers the print information 200a. The re-registration unit 206 is connected to the authentication print management unit 107, the nonvolatile memory control unit 110, and the monitoring unit 115.

<Operation of Image Forming Apparatus According to Second Embodiment>
The operation of the image forming apparatus according to the second embodiment will be described below with reference to FIGS. 10 and 11 are flowcharts illustrating the operation of the image forming apparatus according to the second embodiment. FIG. 10 shows the operation of the image forming apparatus 201 when waiting for a print instruction, and FIG. 11 shows the operation of the image forming apparatus 201 when monitoring an expired job. In FIG. 10 and FIG. 11, the same operations as those in the first embodiment (see FIGS. 4 to 6) are denoted by the same reference numerals, and the operations of the image forming apparatus 101 in the first embodiment are referred to as the second embodiment. The operation will be described as the operation of the image forming apparatus 201.

(Main operations of the image forming apparatus 101)
First, with reference to FIG. 4, the main operation of the image forming apparatus 201 according to the second embodiment will be described while referring to differences from the operation of the image forming apparatus 201 of the first embodiment.

  The image forming apparatus 201 determines that the print information 200 is the print information 200a of the authenticated print job by the analysis unit 104 in the determination process of S103 (determination process of “authentication print?”) Illustrated in FIG. In the case of “Yes”, the print information 200a is stored in the nonvolatile memory 116 in any of the steps S104 to S106 shown in FIG.

  The printing information 200a is stored in the nonvolatile memory 116, for example, as follows. First, the storage control unit 108 creates a file for storing the print information 200 a and outputs the created file to the nonvolatile memory control unit 110. When this file is input, the non-volatile memory control unit 110 registers the file in the non-volatile memory 116 in response to the input of the file, and further acquires the corresponding print information 200a from the interface unit 103. The printed information 200a is output to the nonvolatile memory 116. As a result, the print information 200 a is stored in the nonvolatile memory 116.

(Operation of the image forming apparatus 201 when waiting for a print instruction)
Next, the operation of the image forming apparatus 201 when waiting for a print instruction (during the processing of S107 shown in FIG. 4) will be described with reference to FIG. Here, an expired job is described as an example of an authenticated print job that matches the deletion condition, but the same applies to an authenticated print job accessed before the print permission start time.

  The operation of the image forming apparatus 201 according to the second embodiment is compared with the operation of the image forming apparatus 101 according to the first embodiment (see FIG. 5), as shown in FIG. There is a difference in that the processes from S201 to S205 described later are added between the determination process of “Yes?” And the process of S122 (the process of “deleting print information of the authentication print job”).

As shown in FIG. 10, when it is determined in S121 that there is print information 200a for an authenticated print job (here, print information 200a for an expired job) (“Yes”), the authenticated print management unit 107 reads out the expired job print information 200a from the authentication print storage information 260 (see FIG. 7) of the print information 200a registered in the storage means in S104 shown in FIG.
Then, the authentication print management unit 107 refers to the read information 200a of the expired job and generates a deletion confirmation instruction so as to include the authentication information 210 and the host information 225 of the read information 200a of the expired job. The deletion confirmation instruction is output to the deletion confirmation unit 204. The “deletion confirmation instruction” means an instruction for causing the deletion confirmation unit 204 to confirm whether or not the print information 200a can be deleted.

When a deletion confirmation instruction is input from the authentication print management unit 107, the deletion confirmation unit 204 refers to the authentication information 210 and the host information 225 included in the deletion confirmation instruction in response to this, and the authentication information 210 The deletion confirmation request is generated so as to include the request, and the generated deletion confirmation request is transmitted to the host specified by the host information 225 via the notification unit 114 and the interface unit 103. Thereby, the deletion confirmation unit 204 causes the host to confirm whether or not the print information 200a of the expired job may be deleted (S201). The “deletion confirmation request” means a request for causing the host to confirm whether or not the print information 200a can be deleted.
After S201, the deletion confirmation unit 204 waits for an answer and periodically determines whether or not there is an answer (S202).

  Upon receiving the deletion confirmation request from the image forming apparatus 201, the host determines whether or not to delete the print information 200a of the expired job in accordance with a predetermined setting or an instruction from the user, The determination result (that is, an answer indicating whether or not to delete the print information 200a of the expired job) is transmitted to the image forming apparatus 201.

  The image forming apparatus 201 receives an answer from the host via the interface unit 103. In response to the response received from the host, the image forming apparatus 201 receives the response from the interface unit 103 in response to the response, and outputs the acquired response to the deletion confirmation unit 204.

  In response to the input of the answer from the notification unit 114, the deletion confirmation unit 204 determines that there is an answer in S202. In this case, the deletion confirmation unit 204 refers to the input answer and determines whether or not deletion of the print information 200a of the expired job is OK (S203).

  If it is determined that the deletion is OK in the determination in S203 (in the case of “Yes”), the processing proceeds to the processing in S122 (processing of “deletion of print information of the authentication print job”). In this case, the image forming apparatus 201 deletes the print information 200a of the expired job. Then, the image forming apparatus 201 ends the process.

  On the other hand, if it is determined in step S203 that deletion is not possible (in the case of “No”), the image forming apparatus 201 prints out the expired job printing information registered in the nonvolatile memory 116 as described below. The printable time information 235 of 200a is changed to information indicating a new printable time, and is re-registered in the nonvolatile memory 116. Then, the image forming apparatus 201 re-registers the authentication print storage information 260 (see FIG. 7) of the re-registered print information 200a in the storage unit (RAM not shown) of the authentication print management unit 107, and re-registered printing. The monitoring information 270 of the information 200a (that is, the authentication information 210 and the printable time information 235 of the printing information 200a) is re-registered in the monitoring table 275.

  Specifically, when it is determined in S203 that deletion is not possible (in the case of “No”), in the image forming apparatus 201, the deletion confirmation unit 204 includes the authentication information 210 of the print information 200a of the expired job. As described above, a new printable time setting request for the print information 200a of the expired job is generated, and the generated setting request is transmitted to the host via the notification unit 114.

  In response to the setting request from the image forming apparatus 201, the host determines a new printable time in response to the request. Then, the host includes the authentication information 210 included in the setting request and the printable time information 235 of the print information 200a of the expired job so as to include the information indicating the determined new printable time (see FIGS. 2 and 7). ) Is updated (hereinafter referred to as “update time information”), and the generated update time information is transmitted to the image forming apparatus 201. The new printable time is determined according to a predetermined setting or a user instruction.

  The image forming apparatus 201 receives update time information from the host via the interface unit 103. When the update time information is received from the host, the image forming apparatus 201 receives the update time information from the interface unit 103 in response to the update time information and receives the update time information. Is output to the deletion confirmation unit 204.

When the update time information is input from the notification unit 114, the deletion confirmation unit 204 outputs the input update time information to the authentication print management unit 107 in response to the input.
When the time information for update is input from the deletion confirmation unit 204, the authentication print management unit 107 refers to the time information for update in response to the authentication, and the authentication included in the time information for update An instruction (hereinafter referred to as “re-registration instruction”) for re-registering the print information 200a of the expired job is generated so as to include the information 210 and information indicating the new printable time. Then, the authentication print management unit 107 outputs the generated re-registration instruction to the re-registration unit 206.

  When a re-registration instruction is input from the authentication print management unit 107, the re-registration unit 206 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110 in response to this, and is included in the re-registration instruction. The printable time information 235 of the print information 200a specified by the authentication information 210 (hereinafter referred to as “designated print information 200a”) is changed to information indicating the new printable time included in the re-registration instruction. Let That is, the re-registration unit 206 changes the printable time information 235 of the print information 200a of the expired job registered in the nonvolatile memory 116 to information indicating a new printable time, and re-registers it in the nonvolatile memory 116. To do.

Thereafter, the re-registration unit 206 accesses the nonvolatile memory 116 via the nonvolatile memory control unit 110 and reads out the re-registered print information 200a from the nonvolatile memory 116.
Then, the re-registration unit 206 extracts the authentication print storage information 260 (see FIG. 7) from the read print information 200a, and outputs the extracted authentication print storage information 260 to the authentication print management unit 107. As a result, the re-registration unit 206 causes the authentication print management unit 107 to re-register the authentication print storage information 260 of the re-registered print information 200a in the storage unit (not shown) of the authentication print management unit 107 (S204). .

  At this time, the re-registration unit 206 extracts the authentication information 210 and the printable time information 235 changed to information indicating a new printable time from the read print information 200a, and extracts the authentication information 210 and The printable time information 235 changed to the information representing the new printable time is output to the monitoring unit 115. As a result, the re-registration unit 206 re-registers the monitoring information 270 (see FIG. 8) in the monitoring table 115 with the printable time information 235 changed to information indicating the new printable time in the monitoring table 275. (S205). Then, the image forming apparatus 201 ends the process.

(Operation of the image forming apparatus 201 when monitoring an expired job)
Next, the operation of the image forming apparatus 201 when monitoring an expired job will be described with reference to FIG. FIG. 11 shows the operation of the image forming apparatus 201 when a timer interrupt is made in the process of S110 (determination process of “card present?”) Shown in FIG.

  The operation of the image forming apparatus 201 according to the second embodiment is compared with the operation of the image forming apparatus 101 according to the first embodiment (see FIG. 6), as shown in FIG. The difference is that the processing from S206 to S210, which will be described later, is added between the determination processing) and the processing of S125 (processing of “deletion of print information of authenticated print job”).

  As illustrated in FIG. 11, when it is determined in S <b> 124 that there is print information 200 a for an authentication print job (here, print information 200 a for an expired job) (“Yes”), the image forming apparatus 201. Performs the same processing as S201 and S202 (see FIG. 10).

  That is, in this case, first, the authentication print management unit 107 generates a deletion confirmation instruction so as to include the authentication information 210 and the host information 225 of the print information 200a of the expired job, and the deletion confirmation instruction is generated. Output to.

When a deletion confirmation instruction is input from the authentication print management unit 107, the deletion confirmation unit 204 generates a deletion confirmation request so as to include the authentication information 210 in response to this, and passes the notification unit 114 and the interface unit 103. Send the generated delete confirmation request to the host. Thereby, the deletion confirmation unit 204 causes the host to confirm whether or not the print information 200a of the expired job can be deleted (S206).
After S206, the deletion confirmation unit 204 waits for an answer and periodically determines whether there is an answer (S207).

  Upon receiving the deletion confirmation request from the image forming apparatus 201, the host determines whether or not to delete the print information 200a of the expired job in accordance with a predetermined setting or an instruction from the user, The determination result (that is, an answer indicating whether or not to delete the print information 200a of the expired job) is transmitted to the image forming apparatus 201.

At this time, the image forming apparatus 201 performs the same processing as in S203 (see FIG. 10).
That is, the image forming apparatus 201 receives an answer from the host via the interface unit 103. In response to the response received from the host, the image forming apparatus 201 receives the response from the interface unit 103 in response to the response, and outputs the acquired response to the deletion confirmation unit 204.

  In response to the input of the response from the notification unit 114, the deletion confirmation unit 204 determines that there is a response in S207. In this case, the deletion confirmation unit 204 refers to the input answer and determines whether the deletion of the print information 200a of the expired job is OK (S208).

If it is determined that the deletion is OK in the determination in S208 (in the case of “Yes”), the processing proceeds to the processing in S125 (processing of “deletion of print information of the authentication print job”). In this case, the image forming apparatus 201 deletes the print information 200a of the expired job.
Thereafter, the image forming apparatus 201 performs the process of S126 (that is, the “delete from monitoring table” process), and then ends the process.

  On the other hand, if it is determined in S208 that deletion is not possible (in the case of “No”), the image forming apparatus 201 performs the same processing as in S204 and S205 (see FIG. 10).

That is, in this case, the deletion confirmation unit 204, the authentication print management unit 107, and the re-registration unit 206 perform the same processing as in S204. As a result, the re-registration unit 206 causes the authentication print management unit 107 to re-register the authentication print storage information 260 of the re-registered print information 200a in the storage unit (RAM not shown) of the authentication print management unit 107 (S209). .
After S209, the re-registration unit 206 performs the same process as S205. As a result, the re-registration unit 206 re-registers the monitoring information 270 (see FIG. 8) in the monitoring table 115 with the printable time information 235 changed to information indicating the new printable time in the monitoring table 275. (S210). Then, the image forming apparatus 201 ends the process.

  Note that the image forming apparatus 201 may shift the process to the subsequent step when waiting for a response in S202 and S207 and when there is no response within a predetermined time.

  As described above, according to the image forming apparatus 201 of the second exemplary embodiment, similarly to the image forming apparatus 101 of the first exemplary embodiment, it is possible to prevent leakage of the print information 200a of the authentication print job, and there has been unauthorized access. Therefore, the security of the print information 200a of the authenticated print job can be improved.

  Moreover, according to the image forming apparatus 201 of the second embodiment, it is possible to reduce the frequency of occurrence of processing for reacquiring the print information 200a from the host apparatus, as compared with the image forming apparatus 101 of the first embodiment. The burden can be reduced.

The present invention is not limited to the above-described embodiment, and various changes and modifications can be made without departing from the gist of the present invention.
For example, the present invention is not limited to a printer, and can be used in an image forming apparatus such as a copying machine, a FAX, and an MFP. Note that “MFP” is an abbreviation for Multi Function Printer (or Product), and is an apparatus in which a facsimile function, a scanner function, a copy function, and the like are added to a printer.
Further, for example, as with the image forming apparatus 201 of the second embodiment, when the image forming apparatus 101 of the first embodiment receives the print information 200a from the host apparatus, the print information 200a is a non-volatile storage unit that has a large capacity. May be stored in the memory 116.
In the first embodiment and the second embodiment, the authentication information 210 has been described as unique information generated for each image information 255. However, the authentication information 210 may use information preset for each user (for example, an employee code used in a company or a member code used in a membership organization). . Note that when information preset for each user is used as the authentication information 210, the information processing apparatus 1000 generates the authentication information 210c and stores the information, instead of slightly reducing the security of the print information 200 of the authentication print job. The operation of storing in the medium 1004 can be omitted.

101 Image forming apparatus (printer)
102 Main processing unit 103 Interface unit (input unit)
104 Analysis Unit 105 Image Generation Unit 106 Printing Unit 107 Authentication Print Management Unit (Search Unit)
108 Storage Control Unit 109 Unauthorized Print Detection Unit (Second Determination Unit)
110 Nonvolatile memory control unit 111 Data deletion unit (deletion unit)
112 Time management unit 113 Information reading unit (acquisition unit)
114 Notification unit 115 Monitoring unit (first determination unit)
116 Nonvolatile memory (storage unit)
1000 Information processing equipment (personal computer)
1001, 1003 Communication line 1002 Information reader (IC card reader / writer)
1004 Information storage medium (IC card)

Claims (6)

From the host device, includes image information, first authentication information for authenticating printing of the image information, and printable time information indicating the printable time from the print permission start time to the print permission end time of the image information. An input unit for inputting print information of the authenticated print job;
An acquisition unit for acquiring second authentication information from outside;
A storage unit that stores the print information of one or more authentication print jobs input by the input unit;
A search unit that searches for the print information that includes the first authentication information that matches the second authentication information when the second authentication information is acquired by the acquisition unit;
An authenticated print job whose current time has passed the print permission end time specified by the printable time information is regarded as an expired job, and the expired job is included in one or more of the print information stored in the storage unit. A first determination unit for determining whether or not there is;
A deletion unit that deletes the print information determined as the expired job by the first determination unit from the print information of one or more authenticated print jobs stored in the storage unit;
A second determination unit that determines whether or not the second authentication information acquired by the acquisition unit has been acquired within the printable time represented by the printable time information;
An image represented by the image information included in the print information searched by the search unit when the second determination unit determines that the second authentication information is acquired within the printable time A printing section for printing,
If the second determination unit determines that the second authentication information is acquired outside the printable time, can the print information including the first authentication information that matches the second authentication information be deleted? A deletion confirmation unit that confirms to the upper device whether or not,
When it is confirmed by the deletion confirmation unit that the print information cannot be deleted, the update information input from the host device is used to update the print information stored in the storage unit. A re-registration unit that re-registers the print information by updating the printable time information to a new printable time different from the printable time ;
A notification unit configured to notify the higher-level device that there has been an unauthorized access when the second determination unit determines that the second authentication information has been acquired outside the printable time. An image forming apparatus. The image forming apparatus according to claim 1.
The search unit
Each time the print information of the authentication print job is input by the input unit, the authentication print storage information including the first authentication information of the print information and the printable time information as information for storage management of the print information And register the generated authentication print storage information in the storage means,
When the second authentication information is acquired by the acquisition unit, the authentication print storage information registered in the storage unit is referred to and the first authentication information that matches the second authentication information is included. An image forming apparatus that retrieves the print information. The image forming apparatus according to claim 1, wherein:
The first determination unit includes:
A monitoring table is generated as information for monitoring the expired job,
Each time the print information of the authentication print job is input by the input unit, the first authentication information and the printable time information of the print information are registered in the monitoring table,
It is determined whether or not there is an expired job by comparing the current time with the print permission end time specified by the printable time information registered in the monitoring table at a predetermined interval. Image forming apparatus. The image forming apparatus according to any one of claims 1 to 3,
The second determination unit
The second authentication information is printed by comparing the acquisition time of the second authentication information acquired by the acquisition unit with the printable time represented by the printable time information included in the print information. An image forming apparatus that determines whether or not an image has been acquired within a possible time. The image forming apparatus according to any one of claims 1 to 4,
The storage unit
An image forming apparatus that stores the image information and information that can identify the image information as the print information. The image forming apparatus according to any one of claims 1 to 5,
The printing unit
An image forming apparatus for printing an image formed based on the image information corresponding to the print information searched by the search unit in the image information stored in the storage unit.

Images