JP2008217081A - Image reader - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image reader for facilitating individual authentication and sufficiently securing security. <P>SOLUTION: When image is read, comparison individual authentication data corresponding to a user ID received from an external terminal device individual authentication part 240 as rerecognition processing are read from a nonvolatile memory 233, compared with individual authentication data acquired from an individual authentication sensor 235, and the image reading operation is started when coincide. Biological data or the like are used as the individual authentication data. Reconfirmation processing is not performed until fist prescribed time elapses after individual authentication processing. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an image reading apparatus equipped with a personal authentication system for authenticating a user.

  2. Description of the Related Art In recent years, terminal devices such as image reading devices equipped with network connection means called network scanners and information processing devices such as personal computers are connected to a network and apply a plurality of protocols to other terminal devices. Various data communications are performed. Since such a terminal device is connected to a network, from the viewpoint of security such as prevention of unauthorized access by a third party, the users who can use the terminal device are limited, and the functions that each user can use are limited. Or user authentication is required. Therefore, for example, a personal authentication system using a personal authentication tool such as inputting a user ID and password from the operation screen is mounted on the terminal device as described above.

  However, in the above-described conventional personal authentication system, it is difficult to prevent unauthorized access because the operating state continues even when the user leaves the terminal device after login or the terminal device starts operating after authentication. There is a problem.

In order to solve this problem, there has been proposed a personal authentication system that includes an acquisition unit that acquires personal authentication data for authenticating a user and authenticates the user at a predetermined interval using the personal authentication data. According to this, even when the user is away from the terminal device, unauthorized access by a third party can be prevented (see, for example, Patent Documents 1 and 2).
JP 2002-024183 A JP-A-10-154131

  However, in the above-described conventional personal authentication system, re-authentication is required when the user leaves the terminal device even a little after login. For this reason, when the personal authentication system as described above is installed in an image reading apparatus provided with a network connection means that transmits data to the outside only at the time of image reading, it is sufficient to prevent unauthorized access only at the time of image reading. Therefore, if the user leaves the image reading apparatus even a little, re-authentication is necessary, and there is a problem that the re-authentication operation is troublesome. In addition, when operating an image reading device installed at a location away from the terminal device, unauthorized access by a third party before the user reaches the installation position of the image reading device after logging in to the terminal device. Data transmission to the outside may be performed, and sufficient security cannot be ensured.

  An object of the present invention is to provide an image reading apparatus capable of easily performing personal authentication and sufficiently ensuring security.

  To achieve the above object, the present invention provides acquisition means for acquiring first personal information for authenticating a user, and storage means for storing comparison personal information to be compared with the first personal information. A personal authentication unit that authenticates a user based on a comparison result between the first personal information and the comparison personal information, and an external terminal device that includes another personal authentication unit that authenticates the user, and is communicably connected. Authentication information receiving means for receiving authentication information relating to a user authenticated by the other personal authentication means, wherein the personal authentication means receives the authentication received from the other personal authentication means when an image reading operation is executed. A user re-authentication process is performed based on the information.

  Further, the personal authentication means does not execute the re-authentication process when it is within a predetermined time after the authentication process of the other personal authentication means.

  Further, the personal authentication means is a personal authentication means of a different type from the other personal authentication means.

  The first personal information may be personal information of a different type from the second personal information used for authentication processing of the other personal authentication means.

  Further, the personal authentication means does not execute the re-authentication process when it is within a predetermined time after the image reading operation is executed.

  According to the present invention, the authentication information received from the other personal authentication means when the authentication information relating to the user authenticated by the other personal authentication means provided in the external terminal device is received and the image reading operation is executed. Since the user re-authentication process is performed based on the above, personal authentication can be easily performed and sufficient security can be ensured. Further, since the re-authentication process is not executed unless a predetermined time has elapsed after the execution of the authentication process or the image reading process performed by the external terminal device, the usability of the image reading apparatus can be improved.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram schematically showing a configuration of an image reading processing system including an image reading apparatus according to a first embodiment of the present invention.

  In FIG. 1, the image reading processing system 1 includes an image reading device 10 and an external terminal device 20 such as a personal computer connected to the image reading device 10 via a communication cable 30.

  FIG. 2 is a block diagram schematically showing the configuration of the image reading processing system 1 of FIG.

  In FIG. 2, the image reading apparatus 10 includes an image reading sensor light source 208, an image reading sensor 209, an A / D converter 210, an SDRAM 211, a ROM 207, a feed motor 213, a carry motor 214, a document position detection sensor 215, and an operation switch 239. The main control unit 206 and the personal authentication unit 205 are provided.

  The image reading sensor light source 208 irradiates the original with light and causes reflected light to enter the image reading sensor 209. The image reading sensor 209 converts the formed reflected light into an analog image signal. The A / D converter 210 converts the analog image signal sent from the image reading sensor 209 into digital image data, and transmits the converted image data to an image control unit 216 described later. The ROM 207 stores a program executed by the main control unit 206. The SDRAM 211 temporarily stores image data acquired by an image control unit 216 described later and a part of a program executed by the main control unit 206.

  The feed motor 213 separates and feeds the document to a transport path (not shown) provided in the image reading apparatus 10, and the transport motor 214 transports the document in the transport path. The document position detection sensor 215 detects a document moving in the conveyance path 108 and transmits a signal serving as a reference for image reading timing to the main control unit 206.

  The operation switch 239 transmits a control signal for controlling various operations of the image reading apparatus 10, such as an image reading operation start / stop signal for reading an image of a document, to the main control unit 206 by a user operation.

  The main control unit 206 performs image data transmission / reception and command communication with the external terminal device 20 and command communication with an image control unit 216 that transfers image data stored in the SDRAM 211 to an external IF control unit 217 described later, and a personal authentication unit. 205 and an external IF control unit 217 that communicates commands and the like. The main control unit 206 controls the image reading sensor light source 208, the image reading sensor 209, and the A / D converter 210, acquires image data from the A / D converter 210, and temporarily stores the image data in the SDRAM 211. Store. The main control unit 206 controls the image control unit 216, the external I / F control unit 217, the feed motor 213, the carry motor 214, and the document position detection sensor 215 based on a program stored in the ROM 207.

  The personal authentication unit 205 includes a personal authentication sensor 235, a personal authentication sensor control unit 232, a personal authentication control unit 231, a nonvolatile memory 233, and a RAM 234.

  The personal authentication sensor 235 acquires information (first personal information) indicating the physical characteristics of the user using reflected light or capacitance, and sends the information to the personal authentication sensor control unit 232 as an analog signal for personal authentication. Output. Specifically, the personal authentication sensor 235 reads biometric data such as fingerprints and veins. Thereby, compared with a password which is a general method of personal authentication, the user is not bothered to input and does not need to remember the password. Also. Since a third party does not steal user's input work and use it illegally, security can be further secured. Therefore, by using biometric data for authentication processing, security can be improved and authentication processing can be easily performed.

  The personal authentication sensor control unit 232 controls the personal authentication sensor 235, digitally converts the personal authentication analog signal output from the personal authentication sensor 235, creates personal authentication data, and controls the personal authentication data. To the unit 231.

  When executing the personal authentication process, the personal authentication control unit 231 compares the personal authentication data transmitted from the personal authentication sensor control unit 232 with the comparison personal authentication data (comparison personal information) stored in the nonvolatile memory 233. Then, the comparison result is transmitted to the main control unit 206. Further, when executing the new user registration process, the personal authentication control unit 231 stores the personal authentication data transmitted from the personal authentication sensor control unit 232 in the nonvolatile memory 233 as comparison personal authentication data. This new user registration process is executed when the administrator operates the operation switch 239.

  The non-volatile memory 233 stores the personal authentication control unit 231 program and registered personal authentication data for registered users.

  The RAM 234 temporarily stores the personal authentication data transmitted from the personal authentication sensor control unit 232 to the personal authentication control unit 231 and a part of the program of the personal authentication control unit 231.

  The external terminal device 20 is an information processing device such as a personal computer that receives image data from the image reading device 10 and transmits control commands and the like to the image reading device 10. The external terminal device 20 includes an external terminal device personal authentication unit 240 that authenticates the user based on a user ID and password (second personal information) registered in advance. Therefore, the types of the user ID and password used for the authentication process of the external terminal device personal authentication unit 240 and the information indicating the physical characteristics of the user acquired by the personal authentication sensor 235 are different. As a result, even when one of the external terminal device 20 and the image reading device 10 is illegally used, unauthorized use in the other device can be prevented, so that security can be further ensured.

  FIG. 3 is a flowchart showing personal authentication processing executed by the main control unit 206 in FIG.

  In FIG. 3, when power is supplied to the image reading apparatus 10 by a user operation, a personal authentication program is activated based on the activation program stored in the ROM 207 (step S201). The main control unit 206 receives the ID of the user authenticated by the external terminal device personal authentication unit 240 and the time when the external terminal device personal authentication unit 240 performed the personal authentication process from the external terminal device 20 and stores it in the SDRAM 211 ( Step S202). At this time, the user ID is further transmitted to the personal authentication control unit 231.

  Next, the main control unit 206 starts an image reading operation that is a command or an electrical signal generated when the user operates the operation input unit in the external terminal device 20 or the operation switch 239 of the image reading device 10. It is determined whether or not an instruction has been received (step S203). If an instruction to start an image reading operation is received, the process proceeds to step S204. In other words, after receiving the user ID and the time when the personal authentication processing is performed from the external terminal device 20, the main control unit 206 is in a standby state until receiving an image reading operation start command, and executes the image reading operation. do not do.

  After that, when receiving the image reading operation start command, the main control unit 206 determines whether or not a first predetermined time has elapsed since the time when the external terminal device personal authentication unit 240 performed the personal authentication processing (step). S204). If the first predetermined time has not elapsed after the personal authentication process, the image reading operation is started without performing the re-authentication process (step S210).

  If the first predetermined time has elapsed after the personal authentication processing by the external terminal device personal authentication unit 240 (YES in step S204), the main control unit 206 determines that the reception time of the start command for the image reading operation is the previous image. It is determined whether or not a second predetermined time has elapsed since the end of the reading operation (step S205). If the second predetermined time has not elapsed since the end of the previous image reading operation, the image reading operation is started (step S210).

  If the second predetermined time has elapsed since the end of the previous image reading operation (YES in step S205), the personal authentication unit 205 waits for a third predetermined time during this time. It is determined whether or not has notified that personal authentication data has been acquired (step S206). Note that the personal authentication control unit 231 may determine whether or not a predetermined time has elapsed in step S206.

  If the personal authentication unit 205 has not notified that the personal authentication data has been acquired within the third predetermined time (NO in step S206), the main control unit 206 notifies the external terminal device 20 of an error (step S207). ). When the main control unit 206 notifies the external terminal device 20 of an error, the external terminal device 20 displays an error message indicating that personal authentication data has not been acquired on a display unit (not shown) in the external terminal device 20. To do. After that, the main control unit 206 waits again until a new image reading operation start command is received from the external terminal device 20 or the like (step S203).

  When the personal authentication unit 205 notifies that the personal authentication data has been acquired within the third predetermined time (YES in step S206), the main control unit 206 receives the authentication result from the personal authentication control unit 231. (Step S208). At this time, the personal authentication control unit 231 authenticates the personal authentication data acquired by the personal authentication sensor 235 and transmits the authentication result to the main control unit 206. Specifically, the personal authentication control unit 231 compares the personal authentication data acquired by the personal authentication sensor 235 with the comparison personal authentication data stored in the nonvolatile memory 233 and indicates “match” or “mismatch”. The comparison result (authentication information) is transmitted to the main control unit 206. The authentication operation of the personal authentication control unit 231 is performed based on the user ID received by the main operation unit 206 in step S202.

  Next, the authentication result transmitted from the personal authentication control unit 231 matches the personal authentication data acquired by the personal authentication sensor 235 with the comparison personal authentication data stored in the nonvolatile memory 233 corresponding to the user ID. It is discriminated whether or not it is to be performed (re-authentication process) (step S209). When the authentication result is received and the content indicates inconsistency, the main control unit 206 notifies the external terminal device 20 of an error (step S207) and returns to step S203. When the authentication result is received and the content indicates that they match, the image reading operation is started (step S210).

  When the image reading operation is started, the main control unit 206, based on the program stored in the ROM 207, the image control unit 216, the external I / F control unit 217, the feeding motor 213, the carry motor 214, and the image reading position detection sensor. Then, the image data of the document is transmitted to the external terminal device 20, and the image reading operation is terminated (step S211). When the image reading operation is finished, the main control unit 206 notifies the external terminal device 20 of the completion of image reading, stores the time when the image reading is finished in the SDRAM 211 (step S212), and ends this processing. When the main control unit 206 notifies the external terminal device 20 of the completion of image reading, the external terminal device 20 stores the image data in the storage unit in the external terminal device 20 and notifies the display unit that the image reading has been completed. .

  According to the present embodiment, the main control unit 206 receives the user ID from the external terminal device personal authentication unit 240 and transmits it to the personal authentication control unit 231 when the image reading operation is executed (step S202). The authentication result transmitted from the personal authentication control unit 231 matches the personal authentication data acquired by the personal authentication sensor 235 with the comparison personal authentication data stored in the nonvolatile memory 233 corresponding to the user ID. (Re-authentication process) (step S209). If the authentication result indicates a match, the image reading operation is started (step S210). This can be easily performed using biometric data, and sufficient security can be ensured. In addition, since the reconfirmation process is not performed within the first predetermined time after the personal authentication process (steps S204 and S210), the usability of the image reading apparatus is improved.

  In the present embodiment, personal authentication is not performed within the first predetermined time after the personal authentication processing by the external terminal device 20 (NO in step S204), and second after the image reading by the image reading device 10 is completed. However, it is possible to omit one or both of the discrimination processes in steps S204 and S205, although the personal authentication process is not performed in the image reading apparatus 10 (NO in step S205). It is also possible to reverse the order of the determination processes in steps S204 and S205, or simultaneously. Further, the predetermined times used in the determination processes in steps S204 and S205 may be substantially equal values or different values. However, the first predetermined time and the second predetermined time are set shorter than the third predetermined time in order to prevent unauthorized use of a user who is not personally authenticated.

  In the present embodiment, the image reading apparatus 201 includes a main control unit 206 and a personal authentication unit 205, and the main control unit 206 has a configuration including a part of the personal authentication unit 205 or a part of the personal authentication unit 205. Also good. In addition, the external terminal device 20 includes the external terminal personal authentication unit 240, but the main control unit 206 may include a part of the blocks of the external terminal personal authentication unit 240 or the external terminal personal authentication unit 240.

  In this embodiment, personal authentication processing is performed using the personal authentication sensor 235 that acquires information indicating the physical characteristics of the user, but personal authentication is performed using an input device such as a switch for inputting a password or password. May be.

  In the present embodiment, the image reading apparatus 10 is connected to the external terminal apparatus 20 via the communication cable 30, but may be connected to the external terminal apparatus 20 via a local network. In this case, the image reading apparatus 10 includes a LAN control unit that communicates with the external terminal device 20 via the local network.

  FIG. 4 is a perspective view showing the configuration of the image reading apparatus according to the second embodiment of the present invention, and FIG. 5 is a block diagram showing the configuration of the image reading apparatus 40 in FIG.

  4 and 5, the image reading apparatus 40 includes an image acquisition unit 402 that acquires an image of a document, and an information processing unit 403 that performs various types of information processing to be described later.

  The image acquisition unit 402 includes an image reading sensor light source 408, an image reading sensor 409, an A / D converter 410, an SDRAM 411, a ROM 407, a feeding motor 413, a conveyance motor 414, a document position detection sensor 415, and an image acquisition main control unit 206. Prepare. The image reading sensor light source 408, the image reading sensor 409, the A / D converter 410, the SDRAM 411, the ROM 407, the feed motor 413, the transport motor 414, and the document position detection sensor 415 are configured as in the first embodiment. The description is omitted because it is basically the same.

  The image acquisition main control unit 406 communicates image data, control commands, and the like between the image control unit 416 that transfers image data stored in the SDRAM 411 to an external IF control unit 417 described later and the information processing unit 403. An external IF control unit 417 is provided.

  The image acquisition main control unit 406 controls the reading sensor light source 408, the image reading sensor 409, and the A / D converter 410, acquires image data from the A / D converter 410, and temporarily stores the image data in the SDRAM 411. To store. The image acquisition main control unit 406 controls the image control unit 416, the external I / F control unit 417, the feed motor 413, the carry motor 414, and the image reading position detection sensor 415 based on the program stored in the ROM 407. To do.

  The information processing unit 403 includes an information processing main control unit 418, a memory module 419, a ROM 420, a storage device control unit 421, a storage device 422, a LAN control unit 423, a power supply SW 426, an operation panel unit 404, and a personal authentication unit 405.

  The information processing main control unit 418 is a microcomputer controlled by a general-purpose OS used in an information processing apparatus generally called a personal computer. The memory module 419 includes DIMMs and SO-DIMMs that serve as work areas for the information processing main control unit 418. The ROM 420 stores a startup program for the information processing main control unit 418. The storage device control unit 421 controls input / output data between the information processing main control unit 418 and the storage device 422. The storage device 422 is an HDD or a large-capacity ROM that records an OS, application programs, a history of verification results of personal authentication, and the like. The LAN control unit 423 enables communication with an external terminal device (not shown) such as a server computer or a client computer via the LAN 436, and the external device and image data, control command, user personal authentication data, and authentication result of personal authentication , Send and receive the history of authentication results of personal authentication. The power supply SW 426 is a switch for starting up the image reading apparatus 40.

  The operation panel unit 404 includes an operation input device 425 such as a touch panel, an operation input control unit 428 that transmits input signal data corresponding to a function setting or input operation by the user in the operation input device 425 to the information processing main control unit 418, A display device 430 such as an LCD, and a display control unit 429 that outputs a drive signal for causing the display device 430 to display an output image based on an image display signal output from the information processing main control unit 418 are provided.

  The personal authentication unit 405 includes a personal authentication sensor 435, a personal authentication sensor control unit 432, a personal authentication control unit 431, a nonvolatile memory 433, and a RAM 434.

  The personal authentication sensor 435 acquires information indicating physical characteristics by reflected light or capacitance, and outputs the information to the personal authentication sensor control unit 232 as an analog signal for personal authentication. Specifically, the personal authentication sensor 235 reads biometric data such as fingerprints and veins.

  The personal authentication sensor control unit 432 controls the personal authentication sensor 435, digitally converts the analog signal for personal authentication output from the personal authentication sensor 435, creates personal authentication data, and controls the personal authentication data. It transmits to the part 431.

  When executing the personal authentication process, the personal authentication control unit 431 compares the personal authentication data transmitted from the personal authentication sensor control unit 432 with the comparison personal authentication data stored in the non-volatile memory 433, and the comparison result is obtained. Transmit to the information processing main control unit 418. In addition, when executing the new user registration process, the personal authentication control unit 431 receives the personal authentication data transmitted from the personal authentication sensor control unit 432 from the external device (not shown) by the LAN 436, the LAN control unit 423, and the information processing main control unit. The user ID transmitted via 418 or the user ID transmitted from the information processing main control unit 418 is stored in the nonvolatile memory 433 as user personal authentication data.

  The non-volatile memory 433 stores the personal authentication control unit 431 program and registered user personal authentication data.

  The RAM 434 temporarily stores the personal authentication data transmitted from the personal authentication sensor control unit 432 to the personal authentication control unit 431 and a part of the program of the personal authentication control unit 431.

  The external medium 437 is a storage medium such as a USB memory or a disk device that stores image data transmitted from the information processing main control unit 418, user personal authentication data, or a history of verification results of personal authentication.

  FIG. 6 is a flowchart showing personal authentication processing executed by the main control unit 406 in FIG. 5, and FIG. 7 is a flowchart showing a continuation of FIG.

  6 and 7, when power is supplied to the image reading device 40 by a user operation, the information processing main control unit 418 activates a personal authentication program based on the activation program stored in the ROM 420, and the OS and the like. Is read from the storage device 422 to the memory module 419, and the OS is operated (step S601). After the OS is started, the information processing main control unit 418 determines whether or not the user has performed an input operation for starting personal authentication using the operation panel unit 404 (step S602), and the input operation for starting personal authentication is performed. In such a case, the information processing main control unit 418 displays the start of personal authentication data acquisition on the operation panel unit 404, and whether the personal authentication unit 405 has acquired personal authentication data from the user within the fourth predetermined time. Is determined (step S603). If the personal authentication unit 405 does not acquire personal authentication data from the user within the fourth predetermined time, the information processing main control unit 418 notifies the operation panel unit 404 of an error (step S604), and the user operates again. The process waits until an input operation for starting personal authentication is performed on the panel unit 404 (step S602).

  When the personal authentication unit 405 acquires personal authentication data from the user within the fourth predetermined time (YES in step S603), the information processing main control unit 418 stores the acquired personal authentication data and the nonvolatile memory 433. The comparison result with the personal authentication data for comparison is received from the personal authentication unit 405, it is determined whether or not the comparison result is “match” (step S605), and the comparison result of the received personal authentication data is “mismatch”. ”, An error message indicating that the comparison result is“ mismatch ”is displayed on the operation panel unit 404 and notified to the user (step S606), and the comparison result of the personal authentication is sent to the LAN for managing the authentication result. The data is stored in the control unit 423, an external device (not shown) connected to the LAN 436, the external medium 437, or the storage device 422 (step S607), and the process returns to step S603. .

  When the comparison result of the received personal authentication data is “match” (YES in step S605), the information processing main control unit 418 displays the verification result of the personal authentication as a LAN control unit 423 and a LAN 436 for managing the comparison result. Is stored in an external device (not shown), external media 437, or storage device 422 connected to (step S608), and the personal authentication process is terminated in a state where the image reading device 40 is operable (step S609). Further, the information processing main control unit 418 stores the data of the time when the personal authentication process is performed in the nonvolatile memory 433 (step S610).

  Next, the information processing main control unit 418 shifts to a standby state that occurs due to a standby request for shifting to a standby state that occurs after the time set by the user has elapsed or a user input operation to the operation panel unit 404 or the like. It is determined whether or not a standby request is received (step S611). If a standby request has been received, the information processing main control unit 418 cancels the personally authenticated state permitted to execute the image reading process and prohibits the image reading process by the image reading device 40 (step S612). ), The process returns to step S602.

  If the information processing main control unit 418 has not received the standby request (YES in step S611), the information processing main control unit 418 receives an instruction to start an image reading operation when the user operates the operation input device 425. It is determined whether or not it has been done (step S613). The determination in step S613 is repeated until an image reading operation start command is received. When the image reading operation start command is received, the information processing main control unit 418 starts from the time when the personal authentication unit 405 performs the personal authentication processing. It is determined whether or not a fifth predetermined time has elapsed (step S614). If the fifth predetermined time has not elapsed after the personal authentication process, the image reading operation is started without performing the re-authentication process (step S620).

  If the fifth predetermined time has elapsed after the personal authentication processing by the personal authentication unit 405 (YES in step S614), the information processing main control unit 418 determines that the reception time of the image reading operation start command is the previous image reading. It is determined whether or not a sixth predetermined time has elapsed since the end of the operation (step S615). If the reception time of the start command for the image reading operation has not elapsed for the sixth predetermined time since the end of the previous image reading operation, the image reading operation is started (step S620).

  When the reception time of the start command for the image reading operation has passed the sixth predetermined time since the end of the previous image reading operation (YES in step S615), the information processing main control unit 418 In step S616, it is determined whether the personal authentication control unit 431 has acquired personal authentication data. Note that the determination in step S616 may be performed by the personal authentication control unit 431.

  If the personal authentication control unit 405 has not acquired personal authentication data within the seventh predetermined time (NO in step S616), the information processing main control unit 418 notifies the operation panel unit 404 of an error (step S617). . When the information processing main control unit 418 notifies the operation panel unit 404 of an error, the operation panel unit 404 displays an error indicating that the personal authentication data has not been acquired on the display device 430. Thereafter, the information processing main control unit 418 stands by until a new image reading operation start command is received (step S613).

  If the personal authentication unit 405 has acquired the personal authentication data within the seventh predetermined time (YES in step S616), the information processing main control unit 418 receives the authentication result from the personal authentication control unit 431 (step S616). S618). At this time, the personal authentication control unit 431 authenticates the personal authentication data acquired by the personal authentication sensor 435 based on the user ID, and transmits the authentication result to the information processing main control unit 418. Specifically, the personal authentication control unit 431 compares the personal authentication data acquired by the personal authentication sensor 435 with the personal authentication data for comparison stored in the nonvolatile memory 433 corresponding to the user ID, and “match”. Alternatively, a comparison result (authentication result) indicating “mismatch” is transmitted to the information processing main control unit 418.

  Next, the authentication result transmitted from the personal authentication control unit 431 indicates that the personal authentication data acquired by the personal authentication sensor 435 matches the personal authentication data for comparison stored in the nonvolatile memory 433. (Reauthentication process) (step S619). If the authentication result indicates a mismatch, the information processing main control unit 418 notifies the operation panel unit 404 of an error (step S617) and returns to step S613. If the authentication result indicates that the personal authentication data matches, the image reading operation is started (step S620).

  When the image reading operation is started, the image acquisition main control unit 406, based on the program stored in the ROM 407, the image control unit 416, the external I / F control unit 417, the feed motor 413, the transport motor 414, and the image reading position. The detection sensor 415 is controlled, the image data of the document is transmitted to the information processing main control unit 418, and the image reading operation is finished (step S621). When the image reading operation ends, the information processing main control unit 418 receives a notification of image reading completion from the image acquisition main control unit 406. When the information processing main control unit 418 receives the image reading completion notification, the image processing main control unit 418 transmits image data to an external device (not shown) via the LAN control unit 423 and the LAN 436 or to an external medium 437 connected to the information processing main control unit 418. Further, the time when the image reading is finished is stored in the recording device 422 (step S622), and this processing is finished.

  According to the present embodiment, the information processing main control unit 418 uses the authentication result transmitted from the personal authentication control unit 431 as the biometric data acquired by the personal authentication sensor 435 when the image reading operation is executed. It is determined whether or not the personal authentication data and the comparison personal authentication data stored in the non-volatile memory 433 match (re-authentication process) (step S619), and the authentication result matches. If it is shown, since the image reading operation is started (step S620), personal authentication can be easily performed and sufficient security can be ensured. In addition, since the re-authentication process is not performed within the fifth predetermined time after the personal authentication process (steps S614 and S620), and the re-authentication process is not performed within the sixth predetermined time after the end of the previous reading. (Steps S615 and S620), the usability of the image reading apparatus is improved. Further, the image reading device 40 includes an information processing main control unit 418 as information processing means and a LAN control unit 423 that enables communication with an external terminal device via a local area network. Therefore, the information processing apparatus installed is not necessary, and the individual authentication can be managed by the image reading apparatus 40 alone, thereby reducing the troublesomeness of the individual authentication.

  In the present embodiment, the personal authentication unit 405 is provided in the information processing unit 403, but may be provided in the image acquisition unit 402.

  In this embodiment, an input operation for starting personal authentication and an input operation for starting an image reading operation are performed from the operation panel unit 404. However, an external device (not shown) is connected via the LAN 436 and the LAN control unit 423. You may go from.

  In each of the above embodiments, the personal authentication is performed again before starting the image reading operation, but it may be performed during the image reading or before the image data transmission after the image reading is completed. Moreover, you may enable it to change a said each predetermined time.

  In addition to realizing the functions of the above-described embodiments by hardware, the object of the present invention is to supply a storage medium storing a software program for realizing part or all of the functions to the image reading apparatus, This can also be achieved by the computer (or CPU, MPU, etc.) of the image reading apparatus reading and executing the program code stored in the storage medium.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the program code and the storage medium storing the program code constitute the present invention.

  Examples of the storage medium for supplying the program code include a floppy (registered trademark) disk, a hard disk, a magneto-optical disk, a CD-ROM, a CD-R, a CD-RW, a DVD-ROM, a DVD-RAM, and a DVD. An optical disc such as RW or DVD + RW, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used. Alternatively, the program code may be downloaded via a network.

  By executing the program code read from the computer, not only the functions of the above-described embodiments are realized, but an OS (operating system) operating on the computer based on the instruction of the program code is actually used. It goes without saying that a case where the functions of the respective embodiments described above are realized by performing part or all of the processing and the processing is included.

  Further, after the program code read from the storage medium is written to a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. A case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing is also included.

1 is a diagram schematically showing a configuration of an image reading processing system including an image reading apparatus according to a first embodiment of the present invention. FIG. 2 is a block diagram schematically showing the configuration of the image reading processing system in FIG. 1. It is a flowchart which shows the personal authentication process performed by the main control part in FIG. It is a perspective view which shows the structure of the image reading apparatus which concerns on the 2nd Embodiment of this invention. FIG. 5 is a block diagram illustrating a configuration of the image reading apparatus in FIG. 4. It is a flowchart which shows the personal authentication process performed by the main control part in FIG. It is a flowchart which shows the continuation of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading processing system 10 Image reading apparatus 20 External terminal device 30 Communication cable 205 Personal authentication part 206 Main control part 233 Non-volatile memory 231 Personal authentication control part 235 Personal authentication sensor 240 External terminal apparatus personal authentication part

Claims (13)

Obtaining means for obtaining first personal information for authenticating the user;
Storage means for storing personal information for comparison to be compared with the first personal information;
Personal authentication means for authenticating a user based on a comparison result between the first personal information and the comparison personal information;
An authentication information receiving means connected to an external terminal device having other personal authentication means for authenticating the user, and receiving authentication information relating to the user authenticated by the other personal authentication means;
The image reading apparatus according to claim 1, wherein when the image reading operation is executed, the personal authentication unit performs a user re-authentication process based on authentication information received from the other personal authentication unit.   The image reading apparatus according to claim 1, wherein the personal authentication unit does not execute the re-authentication process within a predetermined time after the authentication process of the other personal authentication unit.   The image reading apparatus according to claim 1, wherein the personal authentication unit is a different type of personal authentication unit from the other personal authentication unit.   The said 1st personal information is personal information of a different kind from the 2nd personal information used for the authentication process of the said other personal authentication means, The any one of Claim 1 thru | or 3 characterized by the above-mentioned. Image reading apparatus.   5. The image reading according to claim 1, wherein the personal authentication unit does not execute the re-authentication process within a predetermined time after the image reading operation is executed. 6. apparatus.   The first personal information is at least one of user fingerprint data and vein data, and the acquisition unit generates the first personal information by reading at least one of the fingerprint data and the vein data. The image reading apparatus according to claim 1, wherein the image reading apparatus is an image reading apparatus. Reading means for reading an image;
Obtaining means for obtaining first personal information for authenticating the user;
Storage means for storing personal information for comparison to be compared with the first personal information;
Personal authentication means for authenticating a user based on a comparison result between the first personal information and the comparison personal information;
A local network connection means for enabling communication with an external terminal device via a local area network;
Transmission means for transmitting an image read by the reading means to at least one of an external storage device and the external terminal device;
The image reading apparatus according to claim 1, wherein the personal authentication unit performs a user re-authentication process when an image reading operation by the reading unit is executed. Reading means for reading an image;
Obtaining means for obtaining first personal information for authenticating the user;
Storage means for storing personal information for comparison to be compared with the first personal information;
Personal authentication means for authenticating a user based on a comparison result between the first personal information and the comparison personal information;
An authentication information receiving means connected to an external terminal device having other personal authentication means for authenticating the user via a local area network and receiving authentication information about the user authenticated by the other personal authentication means;
A local network connection means for enabling communication with an external terminal device via a local area network;
Transmission means for transmitting an image read by the reading means to at least one of an external terminal device and the external storage device,
The image reading apparatus according to claim 1, wherein the personal authentication unit performs a user re-authentication process based on authentication information received from the other personal authentication unit when the image reading operation by the reading unit is executed.   The image reading apparatus according to claim 8, wherein the personal authentication unit does not execute the re-authentication process within a predetermined time after the authentication process of the other personal authentication unit.   10. The image reading apparatus according to claim 8, wherein the personal authentication means is a different type of personal authentication means from the other personal authentication means.   The first personal information is authentication information of a different type from the second personal information used for authentication processing of the other personal authentication means. The image reading apparatus described.   12. The image reading according to claim 8, wherein the personal authentication unit does not execute the re-authentication process within a predetermined time after the image reading operation is executed. apparatus.   The first personal information is at least one of user fingerprint data and vein data, and the acquisition unit generates the first personal information by reading at least one of the fingerprint data and the vein data. The image reading apparatus according to claim 8, wherein the image reading apparatus is an image reading apparatus.

Images