JP2011158807A - Image forming apparatus, and image forming system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming apparatus and image forming system appropriately securing the confidentiality of a confidential document by suppressing unauthorized printing processing of the confidential document. <P>SOLUTION: The image forming apparatus includes a document ID-receiving section 14, a user ID-receiving section 15, an image reading section 200 for reading image data showing the image of a document, an image forming section 40 for forming the image data of the document on recording paper, and a control section 10 for prohibiting the forming of the image data of the document by the image forming section 40 when the document ID-receiving section 14 receives the document ID of the document in order to read the image data of the document with the image reading section 200. When the user ID-receiving section 15 receives the user ID corresponding to the document ID after the forming of the image data of the document is prohibited, the control section 10 determines whether to cancel the prohibition of the forming of the image data of the document. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an image forming apparatus and an image forming system.

  Various techniques have been developed to prevent unauthorized copying of confidential documents by unauthorized persons.

  For example, when the image forming apparatus described in Patent Document 1 receives an instruction of a print job for image data related to a confidential document, a password that matches a password set in advance for the confidential document prints image data related to the confidential document. Whether the password is the same as that entered by the user immediately before accepting the job instruction is verified.

  If the password that matches the password set in advance for the confidential document is the same as the password input by the user immediately before receiving the print job instruction for the image data related to the confidential document, the image forming apparatus Then, a print job of image data related to the confidential document is performed.

JP 2009-160846 A

  Since the image forming apparatus described in Patent Document 1 performs the above-described processing, it improves the utilization efficiency of the hardware resources of the image forming apparatus while ensuring the security of the confidential document, and the productivity of the user's image forming work. It is described that can be improved.

  However, this type of image forming apparatus performs a print job of image data related to a confidential document when a password input by the user matches a password set in advance for the confidential document. Anyone who knows the password can print a print job of image data related to the confidential document.

  For this reason, if a password set in advance for a confidential document is leaked to a person who is not authorized to print the confidential document, the confidential document is illegally printed. Lost.

  Furthermore, if a password preset for the confidential document is leaked to a person who is not authorized to print the confidential document, the password may leak in a chain. Then, the confidentiality of the confidential document is further lost.

  The present invention is proposed in order to solve the above-described problem, and image formation capable of appropriately ensuring the confidentiality of the confidential document by suppressing unauthorized printing of the confidential document. An object is to provide an apparatus and an image forming system.

  An image forming apparatus according to an aspect of the present invention includes a document ID receiving unit that receives a document ID that is ID information of a document and a user that receives a user ID that is ID information of the user from an RF tag provided on the document. An ID receiving unit, an image reading unit that reads image data representing an image of the document, an image forming unit that forms the image data of the document on a recording paper, and reading the image data of the document by the image reading unit; A control unit that prohibits the image forming unit from forming image data of the document when the document ID receiving unit receives the document ID of the document. The control unit includes image data of the document. When the user ID corresponding to the document ID is received by the user ID receiving unit after the formation of the document is prohibited, the image data of the document is formed. And determining whether or not to cancel the stop (claim 1).

  According to this configuration, when reading the image data of the document, if the document ID is received from the RF tag provided on the document, the formation of the image data of the document on the recording paper is prohibited. Then, when the user ID corresponding to the document ID of the document is received in a state where the image data of the document is prohibited from being formed on the recording paper, the prohibition of the formation of the image data of the document on the recording paper is canceled. Decide whether or not to do.

  Thus, when the image data of the document provided with the RF tag is read and formed on the recording paper, the image data is formed on the recording paper until the user ID corresponding to the document ID of the document is received. Will remain banned.

  Therefore, even if a third party who does not know the user ID corresponding to the original to be copied tries to copy the original with the RF tag, the execution of the copy is prohibited, so the RF tag is provided. It is possible to appropriately prevent a person without a legitimate authority to print a document from improperly printing the document.

  Thereby, since illegal printing of a confidential document can be appropriately ensured, security regarding the confidential document can be appropriately ensured.

  In the above configuration, the control unit prohibits the formation of the image data of the document, and then permits the user ID of the user who is permitted to form the image data of the document with the document ID by the user ID receiving unit. It is preferable that the prohibition of the formation of the image data of the original is canceled when the document is received.

  According to this configuration, when the formation of the image data of the document is prohibited and the permitted user ID that is the user ID permitted to form the image data of the document is received, the formation of the image data of the document is prohibited. Is released.

  As a result, a person who has a legitimate authority to form image data of a document can perform printing processing of the document simply by using the user ID of that person without knowing the password.

  Therefore, it is highly convenient for a person having a legitimate authority to form image data of a confidential document because the confidential document can be easily printed.

  The above configuration further includes a password receiving unit that receives an input of the user's own password, and the control unit responds to the document ID by the user ID receiving unit after prohibiting formation of image data of the document. When the user ID is accepted, the password accepting unit accepts an input of the password, and when the password corresponding to the user ID accepted by the user ID accepting unit is accepted by the password accepting unit, It is preferable to cancel the prohibition of formation (claim 3).

  According to this configuration, after prohibiting the formation of the document image data, when the user ID corresponding to the document ID of the document is received and the password corresponding to the user ID is received, the image data of the document is received. The prohibition of formation is lifted.

  Thereby, since the person who can form the image data of the document on the recording paper can be limited to those who know the valid user ID and password, the confidentiality of the confidential document can be ensured appropriately. .

  The above configuration further includes a first storage unit that stores that an invalid password has been input, and the control unit receives a password corresponding to the user ID received by the user ID reception unit by the password reception unit. The determination process for determining whether or not it has been received is performed a predetermined number of times, and in each determination process, it is determined that the password corresponding to the user ID received by the user ID reception unit is not received by the password reception unit. In some cases, it is preferable that an illegal password input is stored in the first storage unit in association with the user ID.

  According to this configuration, when an incorrect password is input a predetermined number of times, the fact that the incorrect password has been input is stored in correspondence with the user ID.

  This makes it easy to determine which user ID has been used to attempt unauthorized printing, so it is easy to determine which user ID has been leaked to a person who does not have printing authority.

  In the above configuration, the control unit determines the number of recording sheets on which the image data of the document can be formed after canceling the prohibition of the formation of the image data of the document, based on the document ID of the document and the user ID. It is preferable to limit the number of recording sheets corresponding to both.

  According to this configuration, the number of recording sheets on which document image data can be formed is limited to the number set for both the document ID and user ID of the document.

  As a result, the user cannot form the image data of the original on the number of recording sheets exceeding the number corresponding to the user, and appropriately prevent the user from printing the confidential document more than necessary. Can do.

  In the above configuration, the image forming apparatus further includes a second storage unit that stores the number of recording sheets on which the image data of the document is formed, and the control unit cancels the prohibition of the formation of the image data of the document and After the image data is formed, the number of recording sheets on which the image data of the original is formed is set as the number of recording sheets formed by the user with the user ID as the number of recording sheets formed by the user with the user ID. It is preferable to store the information in a section (claim 6).

  According to this configuration, after a user with a certain user ID forms image data of a document with a certain document ID, the number of recording sheets on which the image data of the document is formed is equal to the document ID. The image data of the document is stored as the number of recording sheets formed by the user with the user ID.

  This makes it easy to determine how many recording sheets are printed by which user for a certain manuscript, so that it is possible to easily manage the print history of confidential documents.

  In the above configuration, the apparatus further includes a third storage unit that stores the number of recording sheets on which image data of the document can be formed, corresponding to both the document ID of the document and the user ID. The number of recording sheets on which the image data of the original can be formed after the prohibition of the formation of the image data of the original is canceled in the third storage unit in both the original ID of the original and the user ID. It is preferable to limit the number of recording sheets stored corresponding to the above (claim 7).

  According to this configuration, the number of recording sheets on which document image data can be formed is limited to the number set for both the document ID and user ID of the document.

  As a result, the user cannot form the image data of the original on the number of recording sheets exceeding the number corresponding to the user, and appropriately prevent the user from printing the confidential document more than necessary. Can do.

  In the above configuration, the control unit cancels the prohibition of the formation of the image data of the document and forms the image data of the document, and then the document ID of the document and the user are stored in the third storage unit. Preferably, the number of recording sheets stored corresponding to both IDs is changed to a number reduced by the number of recording sheets on which the image data of the document is formed.

  According to this configuration, when the user forms the image data of the document, the number of recording sheets set in the third storage unit and capable of forming the image data of the document by the user is equal to the image of the document. It is changed to the number reduced by the number of recording sheets on which data is formed.

  Thus, the remaining number of recording sheets on which the user can print confidential documents can be managed appropriately.

  The above configuration further includes a fourth storage unit that stores that unauthorized printing has been attempted, and the user ID receiving unit is provided when an IC card in which the user ID is recorded in advance is presented. The control unit is configured to receive the user ID from the IC card, and after the control unit prohibits the formation of the image data of the document, the user ID receiving unit receives a user ID that does not correspond to the document ID of the document. When accepted, it is preferable to store in the fourth storage unit that an illegal IC card has been presented in association with the document ID of the document.

  According to this configuration, after the image forming apparatus prohibits the formation of the image data of the document, when the user ID receiving unit receives a user ID that does not correspond to the document ID of the document, an unauthorized IC card has been presented. Is stored in correspondence with the document ID.

  As a result, it can be easily understood which confidential document an unauthorized person tried to print illegally.

  The above configuration further includes a fourth storage unit that stores that unauthorized printing has been attempted, and the user ID receiving unit is provided when an IC card in which the user ID is recorded in advance is presented. The control unit is configured to receive the user ID from the IC card, and the control unit receives the user ID from the IC card until a preset time elapses after prohibiting the formation of the image data of the document. When the user ID is not accepted, it is preferable that the fact that the IC card has not been presented is stored in the fourth storage unit in association with the document ID of the document.

  According to this configuration, when the user ID is not accepted for a predetermined time after the image forming apparatus prohibits the formation of the image data of the document, it is stored corresponding to the document ID that no IC card is presented.

  As a result, it can be easily understood which confidential document an unauthorized person tried to print illegally.

  An image forming system according to another aspect of the present invention is an image forming apparatus that reads image data representing an image of a document and forms the read image data on a recording paper. When the document ID, which is the ID information of the document, is received from the RF tag provided on the document, the image data of the document is prohibited from being formed, and waiting for the input of the user ID, which is the user ID information. An image forming apparatus, and a management server in which the document ID is set in advance and the user ID is set in advance corresponding to the document ID. Determining whether a user ID received after prohibiting data formation is set in the management server in correspondence with the document ID of the document; More, and determines whether or not to cancel the prohibition of the formation of the image data of the document (Claim 11).

  According to this configuration, when reading the image data of the document, if the document ID is received from the RF tag provided on the document, the formation of the image data of the document on the recording paper is prohibited. Then, when the user ID corresponding to the document ID of the document is received in a state where the image data of the document is prohibited from being formed on the recording paper, the prohibition of the formation of the image data of the document on the recording paper is canceled. Decide whether or not to do.

  Thus, when the image data of the document provided with the RF tag is read and formed on the recording paper, the image data is formed on the recording paper until the user ID corresponding to the document ID of the document is received. Will remain banned.

  Therefore, even if a third party who does not know the user ID corresponding to the original to be copied tries to copy the original with the RF tag, the execution of the copy is prohibited, so the RF tag is provided. It is possible to appropriately prevent a person without a legitimate authority to print a document from improperly printing the document.

  Thereby, since illegal printing of a confidential document can be appropriately ensured, security regarding the confidential document can be appropriately ensured.

  In the above configuration, in the management server, a user ID corresponding to the document ID is set as a permitted user ID that is ID information of a user permitted to form image data of a document with the document ID. When the user ID received after prohibiting the formation of the image data of the document is set as the permitted user ID corresponding to the document ID of the document in the management server, the image forming apparatus It is preferable to cancel the prohibition of the formation of (Claim 12).

  According to this configuration, when the user ID received after prohibiting the formation of the image data of the document is set as the permitted user ID corresponding to the document ID of the document in the management server, the image forming apparatus The prohibition of image data formation is canceled.

  As a result, even if a person who has a legitimate authority to form image data of a document does not know the password, the document can be printed only by using the user ID of the person.

  Therefore, it is convenient for a person who has a legitimate authority to form document image data because the document can be easily printed.

  In the above-described configuration, the management server further sets a user's own password corresponding to the user ID, and the image forming apparatus accepts a user ID received after prohibiting formation of image data of the document. When the management server is set in correspondence with the document ID of the document, the input of the user's own password is accepted, and whether or not the accepted password is set in correspondence with the user ID in the management server. It is preferable that the prohibition of the formation of the image data of the original is canceled when the password determined and received is set in the management server in correspondence with the user ID.

  According to this configuration, the user ID received after prohibiting the formation of the document image data is set in correspondence with the document ID of the document in the management server, and the password input by the user is managed. When the server is set in the management server in correspondence with the user ID of the user, the prohibition on the formation of image data of the document is lifted.

  Thereby, since the person who can form the image data of the document on the recording paper can be limited to those who know the valid user ID and password, the confidentiality of the confidential document can be ensured appropriately. .

  In the above-described configuration, the image forming apparatus is configured to perform a predetermined number of times to determine whether or not the accepted password is set in correspondence with the user ID in the management server. In each determination process, when it is determined that the accepted password is not set in correspondence with the user ID in the management server, an unauthorized password notification signal for notifying that an unauthorized password has been input. Is output to the management server together with the user ID. When the management server receives the unauthorized password notification signal together with the user ID from the image forming apparatus, it corresponds to the user ID that an unauthorized password has been input. It is preferable to memorize it (claim 14).

  According to this configuration, when an incorrect password is input a predetermined number of times in the image forming apparatus, the input of the incorrect password is stored in correspondence with the user ID in the management server.

  This makes it easy to determine which user ID has been used to attempt unauthorized printing, so it is easy to determine which user ID has been leaked to a person who does not have printing authority.

  In the above configuration, the management server is set with the number of recording sheets capable of forming image data of the document corresponding to both the document ID of the document and the user ID, and the image forming apparatus The number of recording sheets on which the image data of the original can be formed after accepting the user ID and canceling the prohibition of the formation of the image data of the original is determined in the management server by the document ID of the original and the user ID. It is preferable to limit the number to the number set corresponding to both of the above (claim 15).

  According to this configuration, the number of recording sheets on which the image data of the document can be formed after accepting a valid user ID and canceling the prohibition of the formation of the image data of the document is determined by the management server. The number is limited to the number set corresponding to both the ID and the user ID.

  Accordingly, since the user can perform the confidential document printing process for the number of recording sheets corresponding to the user, it is possible to prevent the user from printing the confidential document more than necessary.

  In the above configuration, the image forming apparatus represents the number of recording sheets on which the image data of the original is formed after the prohibition of the formation of the image data of the original is performed and the image data of the original is formed. The sheet number data is output to the management server together with the document ID and the user ID of the document. When the management server receives the sheet number data together with the document ID and the user ID from the image forming apparatus, the received sheet number data Is preferably recorded as the number of recording sheets formed by the user with the user ID as the image data of the document with the document ID (claim 16).

  According to this configuration, after a user with a certain user ID forms image data of a document with a certain document ID, the number of recording sheets on which the image data of the document is formed is equal to the document ID. The image data of the document is stored as the number of recording sheets formed by the user with the user ID.

  As a result, the management server can easily determine how many sheets of recording paper have been printed by a user for a certain manuscript, so that the print history of confidential documents can be easily managed.

  In the above configuration, the image forming apparatus represents the number of recording sheets on which the image data of the original is formed after the prohibition of the formation of the image data of the original is performed and the image data of the original is formed. The number data is output to the management server together with the document ID of the document and the user ID. When the management server receives the number of sheets data together with the document ID and the user ID from the image forming apparatus, Subtract the number of recording sheets set in the management server as the number of recording sheets that can be formed by the user with the user ID from the original image data, and subtract the number of recording sheets represented by the number of sheets from the set number of sheets. It is preferable to change the number of sheets obtained in this way (claim 17).

  According to this configuration, when the user forms the image data of the document, the number of recording sheets set by the management server on which the user can form the image data of the document corresponds to the image data of the document. The number is reduced to the number of recording sheets formed.

  As a result, the management server can appropriately manage the remaining number of recording sheets on which the user can print confidential documents.

  In the above-described configuration, the image forming apparatus is configured to receive the user ID from the presented IC card when an IC card in which the user ID is recorded in advance is presented. When the user ID received after prohibiting formation is not set in correspondence with the document ID of the document in the management server, an unauthorized card presentation notification signal for notifying that an unauthorized IC card has been presented is sent to the document. The ID is output to the management server together with the ID, and when the management server receives the illegal card presentation notification signal together with the document ID, the management server may store that the illegal IC card is presented in association with the document ID. Preferred (claim 18).

  According to this configuration, when the user ID received after the image forming apparatus prohibits the formation of the document image data is not set in the management server in correspondence with the document ID of the document, the management server The fact that the IC card is presented is stored in correspondence with the document ID.

  As a result, it can be easily understood which confidential document an unauthorized person tried to print illegally.

  In the above-described configuration, the image forming apparatus is configured to receive the user ID from the presented IC card when an IC card in which the user ID is recorded in advance is presented. When the user ID is not accepted from the IC card between the time when the formation is prohibited and the preset time has elapsed, an IC card non-presentation signal for notifying that the IC card has not been presented within the time When the IC card unpresented signal is received together with the document ID, the management server stores the fact that the IC card has not been presented in association with the document ID. (Claim 19).

  According to this configuration, when the image forming apparatus does not accept the user ID for a certain period of time after prohibiting the formation of the document image data, the management server stores that the IC card is not presented corresponding to the document ID. Is done.

  As a result, it can be easily understood which confidential document an unauthorized person tried to print illegally.

  According to the present invention, it is possible to appropriately prevent an unauthorized person who prints an original document provided with an RF tag from improperly printing the original document. Thereby, since illegal printing of a confidential document can be appropriately ensured, security regarding the confidential document can be appropriately ensured.

1 is a diagram schematically showing an example of an image forming system of the present invention. 1 is a schematic cross-sectional view of an image forming apparatus according to an embodiment of the present invention. 1 is an external view schematically illustrating an example of a scanner unit of an image forming apparatus. FIG. 2 is a block diagram illustrating an example of a functional module of the image forming apparatus according to an embodiment of the present invention. It is the block diagram which showed an example of the functional module of the management server. It is the figure which showed an example of the detailed structure of the database of a management server. It is the figure which showed an example of the detailed structure of the database of a management server. 3 is a flowchart illustrating an example of a basic operation of the image forming apparatus. 3 is a flowchart illustrating an example of a basic operation of the image forming apparatus. 10 is a flowchart illustrating an example of an outline of image formation prohibition release processing shown in step S9 of FIG. 9. 10 is a flowchart illustrating an example of an outline of image formation prohibition release processing shown in step S9 of FIG. 9. It is the flowchart which showed an example of the basic operation | movement of the management server. It is the flowchart which showed an example of the basic operation | movement of the management server.

  Hereinafter, an image forming apparatus and an image forming system according to an embodiment of the present invention will be described. FIG. 1 is a diagram schematically showing an example of an image forming system of the present invention.

  As shown in FIG. 1, on a communication network (for example, LAN) N, image forming apparatuses 1A to 1C according to an embodiment of the present invention are provided. On the communication network N, a shredder 4 having a communication function through the communication network N is provided.

  Furthermore, on the communication network N, a management server 2 that manages the image forming apparatuses 1A to 1C and the shredder 4 is provided. A terminal device (for example, a personal computer) 3 for confirming the management status by the management server 2 is connected to the management server 2 through a signal line L.

  The image forming apparatuses 1A to 1C have a basic function of reading image data representing an image of a document and forming the read image data on a recording sheet. However, the document SH having the RF tag TS is treated as a confidential document, and the document SH In principle, it is prohibited to form image data representing an image on recording paper.

  When the image forming apparatuses 1 </ b> A to 1 </ b> C read the document SH having the RF tag TS, the image forming apparatuses 1 </ b> A to 1 </ b> C perform non-contact communication with the RF tag TC provided in the IC card CA. The user ID that is information is read.

  As described later, the image forming apparatuses 1A to 1C determine whether or not to cancel the prohibition of the formation of the image data representing the image of the document SH having the RF tag TS on the recording sheet when the user ID is read. decide.

  The image forming apparatuses 1 </ b> A to 1 </ b> C first form image data of the document SH having the RF tag TS on the recording paper when the prohibition is canceled. As a result, the recording paper P on which the image data of the document SH is formed is output from the image forming apparatuses 1A to 1C.

  As shown in FIG. 1, an RF tag TP on which a recording sheet ID that is ID information of the recording sheet P is recorded is provided on the recording sheet P in advance. The RF tag TP on which the recording paper ID is recorded in this way is used for managing the disposal status of the recording paper P, as will be described later.

  The shredder 4 is provided for discarding the recording paper P. The shredder 4 performs non-contact communication between the controller 400 that comprehensively controls the entire shredder 4 and the RF tag TP provided on the recording paper P, thereby receiving the recording paper ID from the RF tag TP. An ID reception unit 401 and a communication unit 402 for performing communication through the communication network N are provided.

  For example, the recording paper ID receiving unit 401 is provided at a position where it can perform non-contact communication with the RF tag TP provided on the recording paper P in the middle of the disposal path of the recording paper P in the shredder 4.

  When the recording sheet ID is read from the RF tag TP provided on the recording sheet P by the recording sheet ID receiving unit 401, the controller 400 outputs the recording sheet ID to the management server 2. In order to enable output of such a recording paper ID to the management server 2, the shredder 4 is provided with a communication unit 402 that communicates with the management server 2 according to a protocol according to the communication network N. ing.

  FIG. 2 is a schematic cross-sectional view of an image forming apparatus according to an embodiment of the present invention. FIG. 3 is an external view schematically showing an example of the scanner unit of the image forming apparatus.

  FIG. 2 shows the configuration of the image forming apparatus 1A. Since the configuration of the image forming apparatuses 1B and 1C is the same as that of the image forming apparatus 1A, the description thereof is omitted.

  As shown in FIG. 2, the image forming apparatus 1 </ b> A includes an image reading unit 200 and an apparatus main body 3. The image reading unit 200 includes a document feeding unit 210, a scanner unit 220, a CIS 231, a user interface unit I, and a reversing mechanism described later.

  The document feeder 210 includes an ADF (Automatic Document Feeder), and includes a document tray 211, a pickup roller 212, a platen 213, a paper discharge roller 214, and a paper discharge tray 215. A document to be read is placed on the document tray 211. Documents placed on the document tray 211 are picked up one by one by the pickup roller 212 and sequentially conveyed to the platen 213 through the gap. Documents that have passed through the platen 213 are sequentially discharged to the discharge tray 215 by the discharge rollers 214.

  Of the positions facing the peripheral surface of the platen 213, a timing sensor (not shown) for detecting paper is installed at a predetermined position before the reading position P in the document transport direction. The document transport timing to the reading position P is achieved based on the output signal. The timing sensor is configured by, for example, a photo interrupter.

  The scanner unit 220 optically reads an image of a document and generates image data. The scanner unit 220 includes a glass 221, a light source 222, a first mirror 223, a second mirror 224, a third mirror 225, a first carriage 226, a second carriage 227, an imaging lens 228, and a CCD (Charged Coupled Device) 229. .

  In the scanner unit 220, a white fluorescent lamp such as a cold cathode fluorescent tube is used as the light source 222, and the first mirror 223, the second mirror 224, the third mirror 225, the first carriage 226, the second carriage 227, and the imaging. A lens 228 guides light from the document to the CCD 229. Since the scanner unit 220 is configured using a white fluorescent lamp such as a cold cathode fluorescent tube as the light source 222, the scanner unit 220 is superior in color reproducibility to a CIS 231 described later in which a three-color LED or the like is used as the light source.

  On the glass 221, a document is manually placed by the user when reading the document without using the document feeder 210. The light source 222 and the first mirror 223 are supported by the first carriage 226, and the second mirror 224 and the third mirror 225 are supported by the second carriage 227.

  As a document reading method of the image reading unit 200, the scanner unit 220 reads a document placed on the glass 221 and the document is read by the document feeding unit 210 (ADF). There is an ADF reading mode for reading.

  In the flatbed reading mode, the light source 222 irradiates a document placed on the glass 221, and reflected light for one line in the main scanning direction is reflected in the order of the first mirror 223, the second mirror 224, and the third mirror 225. Then, the light enters the imaging lens 228. The light incident on the imaging lens 228 is imaged on the light receiving surface of the CCD 229.

  The CCD 229 is a one-dimensional image sensor and simultaneously processes image data of a document for one line. The first carriage 226 and the second carriage 227 are configured to be movable in a direction orthogonal to the main scanning direction (sub-scanning direction, arrow Y direction). When reading for one line is completed, the first carriage 226 and the second carriage 227 are moved in the sub-scanning direction. The first carriage 226 and the second carriage 227 move, and the next line is read.

  In the ADF reading mode, the document feeder 210 takes in the documents placed on the document tray 211 one by one by the pickup roller 212. At this time, the first carriage 226 and the second carriage 227 are disposed at a predetermined reading position P located below the reading window 230.

  When the document is transported by the document feeder 210, when the document passes over the reading window 230 provided in the transport path from the platen 213 to the paper discharge tray 215, the light source 222 irradiates the document, and the main scanning one line. The reflected light is reflected in the order of the first mirror 223, the second mirror 224, and the third mirror 225 and enters the imaging lens 228. The light incident on the imaging lens 228 is imaged on the light receiving surface of the CCD 229. Subsequently, the document is conveyed by the document feeder 210 and the next line is read.

  Further, the document feeder 210 has a document reversing mechanism including a switching guide 216, a reversing roller 217, and a reversing conveyance path 218. This document reversing mechanism reverses the front and back of the original whose surface has been read by the first ADF reading and transports it again to the reading window 230, whereby the CCD 229 reads the back side again.

  This document reversing mechanism operates only when reading both sides, and does not operate when reading one side. After reading the back side during single-sided reading and double-sided reading, the switching guide 216 is switched to the upper side, and the document that has passed through the platen 213 is discharged to the discharge tray 215 by the discharge roller 214.

  After the front side reading at the time of double-sided reading, the switching guide 216 is switched to the lower side, and the document that has passed through the platen 213 is transported to the reverse transport path 218 by the reverse roller 217. Thereafter, the switching guide 216 is switched upward, and the reverse roller 217 rotates in the reverse direction to re-feed the document to the platen 213. Hereinafter, a mode in which both sides of a document are read using the document reversing mechanism is referred to as a double-sided reversal reading mode.

  Furthermore, in the ADF reading mode, the image reading unit 200 according to the present embodiment causes the CCD 229 (scanner unit 220) to read the surface of the document while the document is being transported, as described above. ), The back side of the document can be read by the CIS 231. In this case, the surface of the document conveyed from the document tray 211 by the document feeder 210 is read by the CCD 229 when passing through the reading window 230, and the back surface is read when passing through the location where the CIS 231 is arranged. In CIS231, RGB three-color LEDs or the like are used as light sources.

  By using the CCD 229 and the CIS 231 in this way, it is possible to read both the front and back sides of a document by a single document transport operation (one pass) from the document tray 211 to the discharge tray 215 by the document feeding unit 210. Hereinafter, a mode in which both sides of a document are read using the CCD 229 and the CIS 231 in this way is referred to as a double-sided simultaneous reading mode.

  The double-sided reverse reading mode and the double-sided simultaneous reading mode are provided as reading modes when performing double-sided reading of a document using the ADF reading mode. The double-sided reverse reading mode is used when you want to match the image quality of both-side printed images, while the double-sided simultaneous reading mode gives priority to shortening the reading time even if there is a difference in the image quality of both-side printed images Used in cases. Note that the image forming apparatus 1A in the present embodiment is initially set to the double-sided simultaneous reading mode, and when an image forming instruction is input without performing any mode setting operation in the reading mode, the double-sided simultaneous reading mode is set. A document image reading operation is performed in the reading mode.

  The image processing apparatus 1 </ b> A includes an apparatus main body 3 and a stack tray 6 disposed on the left side of the apparatus main body 3. The apparatus main body 3 includes a plurality of paper feed cassettes 461, a paper feed roller 462 that feeds recording paper from the paper feed cassette 461 one by one and transports it to the image forming unit 40, and a recording paper transported from the paper feed cassette 461. And an image forming unit 40 for forming an image. The apparatus body 3 also includes a paper feed tray 471 and a feed roller 472 that feeds the originals placed on the paper feed tray 471 one by one toward the image forming unit 40.

  The image forming unit 40 includes a charge removing device 421 that removes residual charges from the surface of the photosensitive drum 43, a charging device 422 that charges the surface of the photosensitive drum 43 after charge removal, and image data acquired by the scanner unit 220. Based on the electrostatic latent image, an exposure device 423 that outputs a laser beam to expose the surface of the photosensitive drum 43 to form an electrostatic latent image on the surface of the photosensitive drum 43. Above, developing devices 44K, 44Y, 44M, and 44C that form toner images of cyan (C), magenta (M), yellow (Y), and black (K), and various colors formed on the photosensitive drum 43. A transfer drum 49 on which the toner image is transferred and superimposed, a transfer device 41 for transferring the toner image on the transfer drum 49 to the paper, and the paper on which the toner image is transferred to the toner by heating The and a fixing device 45 for fixing on the paper.

  Note that toner is supplied to cyan, magenta, yellow, and black colors from a toner cartridge (not shown). Further, conveyance rollers 463 and 464 that convey the recording paper that has passed through the image forming unit 40 to the stack tray 6 or the discharge tray 48 are provided.

  When forming images on both sides of the recording paper, the image forming unit 40 forms an image on one side of the recording paper, and then the recording paper is nipped by the conveyance roller 463 on the discharge tray 48 side. In this state, the conveyance roller 463 is reversed to switch back the recording paper, and the recording paper is sent to the paper conveyance path L and conveyed again to the upstream area of the image forming unit 40, and an image is formed on the other surface by the image forming unit 40. After the formation, the recording paper is discharged to the stack tray 6 or the discharge tray 48.

  Further, in front of the apparatus main body 3, a display unit 5 configured with a touch panel and a user interface unit I in which an operation unit 16 having various operation buttons is incorporated are exposed in front of the apparatus main body 3. Is provided.

  In the image forming apparatus 1 </ b> A having such a configuration, the document ID receiving unit 14 that reads the document ID recorded on the RF tag TS by performing non-contact communication with the RF tag TS of the document SH from the document tray 211. It is provided in the conveyance path that reaches the platen 213.

  The document ID receiving unit 14 is provided below the glass 221 in the scanner unit 220, as shown in FIG. The document ID receiving unit 14 is provided at a position facing the RF tag TS when the document SH is placed on the glass 221. The scanner unit 220 includes document stoppers 231 and 232 so that the document SH placed on the glass 221 does not protrude from the glass 221.

  In the image forming apparatus 1A, a user ID receiving unit that reads a user ID recorded on the RF tag TC by performing non-contact communication with the RF tag TC of the IC card CA in front of the apparatus body 3. 15 is provided so as to be exposed in front of the apparatus body 3.

  Further, in the image forming apparatus 1A, as shown in FIG. 2, in order to manage the discard status by the shredder 4, the recording sheet ID for reading the recording sheet ID of the recording sheet P on which the image data of the document SH is formed by non-contact communication. A reception unit 17 is provided. For example, the recording sheet ID receiving unit 17 is provided on a conveyance path from the nip portion between the transfer device 41 and the transfer drum 49 to the fixing device 45, and the recording sheet conveyed on the conveyance path. The recording sheet ID recorded on the P RF tag TP is read.

  FIG. 4 is a block diagram showing an example of a functional module of the image forming apparatus according to an embodiment of the present invention. FIG. 4 shows the configuration of the image forming apparatus 1A. Since the configuration of the image forming apparatuses 1B and 1C is the same as that of the image forming apparatus 1A, the description thereof is omitted.

  As shown in FIG. 4, the image forming apparatus 1A includes a user interface unit I, a controller (control unit) 10 that comprehensively controls the image forming apparatus 1A, an image processing unit 11 that processes image data, and a ROM (Read Only Memory). ) 12, RAM (Random Access Memory) 13, document ID receiving unit 14, user ID receiving unit 15, external interface 18 for connecting image forming apparatus 1A to communication network N, and image forming unit 40.

  In the image forming apparatus 1A having such a configuration, the ROM 12 and the RAM 13 store various data for operating the image forming apparatus 1A.

  As described above, the document ID receiving unit 14 reads the document ID recorded on the RF tag TS by performing non-contact communication with the RF tag TS provided on the document SH. For example, the document ID receiving unit 14 outputs the document ID to the RF tag TS and receives the output document ID by magnetic coupling with the RF tag TS in a state of being close to the RF tag TS.

  As described above, the user ID reception unit 15 reads the user ID recorded on the RF tag TC by performing non-contact communication with the RF tag TC provided in the IC card CA. For example, the user ID receiving unit 15 outputs the user ID to the RF tag TC and receives the output user ID by magnetic coupling with the RF tag TC in a state of being close to the RF tag TC.

  The controller 10 includes a timer 100 and a counter 101. The timer 100 measures a preset time after prohibiting the formation of image data of the document SH in a user ID input standby process described later. The counter 101 counts the number of times that password authentication has failed in password authentication processing described later.

  FIG. 5 is a block diagram illustrating an example of a functional module of the management server. 6 and 7 are diagrams illustrating an example of a detailed configuration of the database of the management server.

  As shown in FIG. 5, the management server 2 includes a controller 20 that controls the management server 2 in an integrated manner, and an external interface for connecting the management server 2 to the communication network N and connecting the terminal device 3 to the management server 2. 21, a ROM 22, a RAM 23, and a database 24 including a hard disk.

  In the management server 2 having such a configuration, the ROM 22 and the RAM 23 store various data for operating the management server 2.

  The database 24 roughly includes a user management table 240, a user-specific print management table 241, an unauthorized print request management table 242, and a recording paper discarding management table 243.

  The user management table 240 is preset with user attribute information, and includes a first user management table 240A and a second user management table 240B, as shown in FIG.

  In the first user management table 240A, a combination of the document ID of the document SH, the user ID, the user's own password, and the number of printable sheets (the number of recording sheets on which image data of the document SH can be formed) is set in advance. Yes.

  The second user management table 240B includes a document ID of the document SH, a permitted user ID that is a user ID of a user who is permitted to print the document SH (formation of image data of the document SH on the recording paper), and the number of printable sheets. A combination of (the number of recording sheets on which image data of the document SH can be formed) is set in advance.

  Here, in the first user management table 240A, each of the document ID, user ID, password, and printable number of the document SH is appropriately changed by the control of the controller 20. Further, in the second user management table 240B, each of the document ID of the document SH, the permitted user ID, and the number of printable sheets is appropriately changed under the control of the controller 20.

  The user-specific print management table 241 is provided for managing the printing status of the original SH by the user (the status of forming the original SH on the recording paper by the user). The user-specific print management table 241 includes a first user-specific print management table 241A and a second user-specific print management table 241B.

  The first user-specific print management table 241A forms the document ID of the document, the user ID, the number of printed sheets (the number of recording sheets on which the image data of the document SH is actually formed), and the requested number (image data of the document SH). The number of recording sheets requested to be set) is set in advance.

  The second user-specific print management table 241B forms the document ID of the document, the permitted user ID, the number of printed sheets (the number of recording sheets on which the image data of the document SH is actually formed), and the requested number (image data of the document SH is formed). The combination of the number of recording sheets requested to do) is set in advance.

  Here, in the first user-specific print management table 241A, the document ID, user ID, number of printed sheets, and requested number of sheets of the document SH are appropriately changed by the control of the controller 20. In the second user-specific print management table 241B, each of the document ID of the document SH, the permitted user ID, the number of printed sheets, and the requested number of sheets is appropriately changed under the control of the controller 20.

  The unauthorized printing request management table 242 shown in FIG. 7 is provided for managing printing requests for unauthorized documents SH by persons who are not authorized to print the document SH. The unauthorized printing request management table 242 includes an unauthorized IC card presentation management table 242A, an IC card non-presentation management table 242B, and an unauthorized password input management table 242C.

  The unauthorized IC card presentation management table 242A stores information indicating that an unauthorized IC card has been presented in response to the document ID of the document SH when a print request for the document SH of the document ID is made. In the unauthorized IC card presentation management table 242A, for example, “1” indicates that an unauthorized IC card has been presented.

  The IC card non-presentation management table 242B stores that the IC card has not been presented within a predetermined time when a print request for the document SH of the document ID is made in response to the document ID of the document SH. In the IC card non-presentation management table 242A, for example, “1” indicates that an IC card has not been presented within a predetermined time.

  The unauthorized password input management table 242C stores that an unauthorized password has been input in correspondence with the user ID. In the unauthorized password input management table 242C, for example, “1” indicates that an unauthorized password has been input.

  Here, the contents stored in the unauthorized IC card presentation management table 242A, the IC card non-presented management table 242B, and the unauthorized password input management table 242C are appropriately changed by the control of the controller 20.

  The recording paper discarding management table 243 shown in FIG. 7 is provided for managing whether or not the recording paper P on which the document SH is printed has been appropriately discarded by the shredder 4. In the recording paper discarding management table 243, the recording paper ID of the recording paper on which the image data of the original SH with the original ID is formed is recorded as the printed recording paper ID corresponding to the original ID of the original SH.

  Here, the recording sheet ID of the recording sheet on which the image data of the document SH is formed is read by the recording sheet ID receiving unit 17 (see FIG. 2) in the image forming apparatus 1A and output to the controller 10. is there. The controller 10 receives the recording paper ID output from the recording paper ID reception unit 17 and writes it in the recording paper disposal management table 243 in the management server 2.

  Further, the recording sheet ID of the recording sheet P discarded by the shredder 4 is recorded as the discarded recording sheet ID in the recording sheet disposal management table 243 shown in FIG. Here, the contents of the recording paper discarding management table 243 are changed as appropriate under the control of the controller 20.

  The management server 2 receives the request from the terminal device 3 and outputs the contents of each table shown above to the terminal device 3. Alternatively, the management server 2 receives a request from the terminal device 3, extracts a part of the contents of each table as appropriate, and outputs it to the terminal device 3. Thereby, in the terminal device 3, the management status in the management server 2 is known.

  Hereinafter, the basic operation of the image forming system will be described with reference to FIGS. 8 and 9 are flowcharts showing an example of the basic operation of the image forming apparatus.

  In the image forming apparatuses 1A to 1C, the controller 10 reads the image data of the document SH in the scanner unit 220 when the document SH is set on the glass 221 and a start key (not shown) is operated (YES in steps S1 and S2). (Step S3). The controller 10 temporarily stores the read image data of the document SH in a memory (for example, the RAM 13).

  Next, the controller 10 determines whether or not the document ID receiving unit 14 has received the document ID of the document SH (step S4). When the controller 10 determines that the document ID of the document SH is not received (NO in step S4), the controller 10 performs a normal image forming process (step S5).

  Here, the normal image forming process is a process for forming the image data of the document SH temporarily stored in the memory on the recording paper.

  On the other hand, when the controller 10 determines that the document ID of the document SH is received (YES in step S4), the controller 10 prohibits the image data of the document SH from being formed on the recording paper (step S5). The user is prompted to present the IC card CA by displaying a predetermined message (step S6).

  When the IC card CA is presented by the user and the user ID recorded on the RF tag TC of the IC card CA is received (YES in step S7), the controller 10 performs the process in step S8.

  On the other hand, when the user ID is not accepted between the time when the formation of the image data is prohibited in step S5 and the predetermined time T has elapsed (NO in step S7 and YES in step S11), the controller 10 displays that the IC card CA is not presented on the display unit 5 (step S12), and outputs an IC card non-presentation signal to the management server 2 together with the document ID received in step S4 (step S13).

  Here, the time T is measured by the timer 100. In step S8, the controller 10 determines whether or not the user ID received in step S7 is registered in the management server 2 (step S8).

  Here, the controller 10 can implement the processing in step S8 by performing the following processing.

  For example, the controller 10 receives the data representing the contents of the user management table 240 from the management server 2 by outputting a signal requesting the management server 2 to output the contents of the user management table 240. Then, the controller 10 determines whether or not the user ID received in step S7 is included in the contents of the user management table 240.

  Alternatively, the controller 10 outputs an inquiry signal to the management server 2 to cause the management server to determine whether or not the user ID accepted in step S7 is included in the user management table 240.

  And the controller 10 knows whether the user ID received by step S7 is included in the user management table 240 by receiving the signal which notifies the determination result from the management server 2. FIG.

  When the controller 10 determines in step S8 above that the received user ID is registered in the management server 2 (YES in step S8), the controller 10 performs an image formation prohibition release process (step S9) described later.

  On the other hand, when the controller 10 determines that the received user ID is not registered in the management server 2 (NO in step S8), the controller 10 outputs an unauthorized card presentation notification signal to the management server 2 together with the document ID received in step S4. (Step S10).

  Here, the processes of steps S8, S10, and S13 are processes that involve outputting information to the management server 2 or receiving information from the management server 2. However, it may be a process that does not involve outputting information to the management server 2 or receiving information from the management server 2.

  For example, if the database 24 is provided in the RAM 13 of the image forming apparatuses 1A to 1C, the image forming apparatuses 1A to 1C can perform the following processing.

  That is, in step S8, in the image forming apparatuses 1A to 1C, the controller 10 refers to the user management table 240 so that the user ID received in step S7 is the user ID corresponding to the document ID received in step S4. It can be determined whether or not.

  In step S10, the controller 10 may record “1” indicating that an unauthorized IC card is presented in the unauthorized IC card presentation management table 242A in association with the document ID received in step S4. it can.

  Further, in step S13, the controller 10 can record “1” indicating that no IC card is presented in association with the document ID received in step S4 in the IC card non-presentation management table 242B. .

  10 and 11 are flowcharts showing an example of the outline of the image formation prohibition release process shown in step S9 of FIG.

  In the image forming apparatuses 1A to 1C, the controller 10 determines whether or not the user ID received in step S7 of FIG. 8 is a user ID set as a permitted user ID in the management server 2 (step S20). .

  Here, the controller 10 can implement the processing in step S20 by performing the following processing.

  For example, the controller 10 receives the data representing the contents of the user management table 240 from the management server 2 by outputting a signal requesting the management server 2 to output the contents of the user management table 240. Then, the controller 10 determines whether or not the received user ID is included as a permitted user ID in the contents of the user management table 240.

  Alternatively, the controller 10 outputs an inquiry signal to the management server 2 to determine whether or not the user ID received in step S7 in FIG. 8 is included in the user management table 240 as the permitted user ID. Let it be judged.

  Then, the controller 10 receives a signal informing the determination result from the management server 2 to know whether or not the user ID is included in the user management table 240 as the permitted user ID.

  When the controller 10 determines that the received user ID is not registered as the permitted user ID in the management server 2 in the process of step S20 above (NO in step S20), the controller 10 performs the process of step S21.

  On the other hand, when the controller 10 determines that the received user ID is registered in the management server 2 as a permitted user ID (YES in step S20), the controller 10 receives a setting for the number of print requests (step S28). Here, the print request number refers to the number of recording sheets requested to form image data of the document SH as described above.

  Next, when the controller 10 accepts the setting of the requested number of prints, the data representing the set requested number of prints together with the document ID accepted in step S4 in FIG. 8 and the user ID accepted in step S7 in FIG. It outputs to the management server 2 (step S29).

  Next, the controller 10 determines whether or not it is possible to print the image data of the original document SH for the set print request number (step S30). Here, the controller 10 can implement the processing in step S30 by performing the following processing.

  For example, the controller 10 receives the data representing the contents of the second user management table 240B from the management server 2 by outputting a signal requesting the management server 2 to output the contents of the second user management table 240B. .

  Then, the controller 10 receives the print request received in step S28, in the second user management table 240B, the printable number set in correspondence with the user ID (= permitted user ID) received in step S7 in FIG. It is determined whether the number of sheets has been exceeded.

  Only when the controller 10 determines that the printable number of sheets set corresponding to the user ID does not exceed the print request number received in step S28, the controller 10 sets the image data of the document SH as the set print request. It is determined that the number of sheets can be printed.

  Alternatively, the controller 10 outputs an inquiry signal to the management server 2 so that the management server 2 corresponds to the user ID (= permitted user ID) received in step S7 of FIG. 8 in the second user management table 240B. It is determined whether or not the set number of printable sheets exceeds the print request number received in step S28.

  Then, the controller 10 receives a signal informing the determination result from the management server 2 to know whether or not printing for the requested number of prints accepted in step S28 is possible.

  When the controller 10 determines in the process of step S30 above that it is possible to print the requested number of prints accepted in step S28 (YES in step S30), it performs the process of step S26 described later, but in step S28. When it is determined that it is not possible to print the requested number of print requests (NO in step S30), predetermined error processing is performed.

  Here, for example, the controller 10 displays an error message on the display unit 5 as the predetermined error processing. In response to this, the user contacts a person who has access authority to the management server 2 such as the administrator of the image forming system and the creator of the document SH. The person who receives the notification operates the terminal device 2 to access the management server 2 to rewrite the printable number in the user management table 240.

  In step S21, the controller 10 prompts the user to input a password by displaying a predetermined message on the display unit 5 or the like. Next, the controller 10 determines whether or not the input password is a valid password (step S22). Here, the controller 10 can implement the processing in step S22 by performing the following processing.

  For example, the controller 10 receives the data representing the contents of the first user management table 240A from the management server 2 by outputting a signal requesting the management server 2 to output the contents of the first user management table 240A. .

  Then, the controller 10 determines whether or not the password set in correspondence with the user ID received in step S7 of FIG. 8 in the first user management table 240A matches the input password. If the two passwords match, the controller 10 determines that the input password is valid. If the two passwords do not match, the controller 10 determines that the input password is not valid.

  Alternatively, the controller 10 outputs an inquiry signal to the management server 2 so that the password set in the management server 2 in correspondence with the user ID received in step S7 of FIG. 8 in the first user management table 240A. Then, it is determined whether or not the input password matches.

  Then, the controller 10 receives a signal informing the determination result from the management server 2 and inputs the password set corresponding to the user ID received in step S7 of FIG. 8 in the first user management table 240A. Know if the password matches. If the two passwords match, the controller 10 determines that the input password is valid. If the two passwords do not match, the controller 10 determines that the input password is not valid.

  As described above, the controller 10 performs the password verification process for determining whether or not the input password is valid, for a preset number of times (for example, three times). When the controller 10 receives a valid password while performing the password verification processing a preset number of times, the controller 10 can form the image data of the document on the recording paper. On the other hand, the controller 10 makes it impossible to form the image data of the document on the recording paper when the password is not accepted even after the password verification process is performed a preset number of times.

  For example, when the controller 10 determines in step S22 that the input password is valid (YES in step S22), the controller 10 performs the process in step S23.

  On the other hand, when the controller 10 determines that the input password is not valid (NO in step S22), the controller 10 increments the count value of the counter 101 by 1 until the count value of the counter 101 reaches 3 ( In step S31), the input of the password is received again, and it is determined whether or not the input password is valid (step S22).

  When the controller 10 determines that the password input when the count value of the counter 101 reaches 3 is not valid (NO in step S22, YES in step S32), the controller 10 sends an illegal password notification signal to the step in FIG. It outputs to the management server 2 with the user ID received by S7 (step S33).

  Next, when the controller 10 accepts the setting of the requested number of prints, the data representing the set requested number of prints together with the document ID accepted in step S4 in FIG. 8 and the user ID accepted in step S7 in FIG. It outputs to the management server 2 (step S24).

  Next, the controller 10 determines whether or not the image data of the document SH can be printed for the set number of print requests (step S25). Here, the controller 10 can implement the processing in step S25 by performing the following processing.

  For example, the controller 10 receives the data representing the contents of the first user management table 240A from the management server 2 by outputting a signal requesting the management server 2 to output the contents of the first user management table 240A. .

  Then, the controller 10 determines whether or not the print request number received in step S23 exceeds the printable number set in correspondence with the user ID accepted in step S7 of FIG. 8 in the first user management table 240A. Determine whether.

  Only when the controller 10 determines that the printable number of sheets set corresponding to the user ID does not exceed the print request number received in step S23, the controller 10 sets the image data of the document SH as the set print request. It is determined that the number of sheets can be printed.

  Alternatively, the controller 10 outputs an inquiry signal to the management server 2 to enable printing to the management server 2 corresponding to the user ID received in step S7 of FIG. 8 in the first user management table 240A. It is determined whether or not the number of prints exceeds the number of print requests accepted in step S23.

  Then, the controller 10 receives a signal informing the determination result from the management server 2 to know whether it is possible to print the requested number of prints received in step S23.

  When the controller 10 determines in the process of step S25 above that it is possible to print the requested number of prints accepted in step S23 (YES in step S25), it performs the process of step S26, but accepted in step S23. When it is determined that the requested number of prints cannot be printed (NO in step S25), predetermined error processing is performed.

  In the processing in step S26, the controller 10 forms the image data of the document SH stored in the memory on the set number of recording sheets. Next, the controller 10 outputs data representing the number of recording sheets on which the image data of the document SH is formed, together with the user ID, to the management server 2 (step S27).

  Here, the processes in steps S20, S22, S24, S25, S27, S29, S30, and S33 are processes that involve outputting information to the management server 2 or receiving information from the management server 2. However, it may be a process that does not involve outputting information to the management server 2 or receiving information from the management server 2.

  For example, if the database 24 is provided in the RAM 13 of the image forming apparatuses 1A to 1C, the image forming apparatuses 1A to 1C can perform the following processing.

  That is, in step S20, in the image forming apparatuses 1A to 1C, the controller 10 refers to the user management table 240, and the user ID received in step S7 is the first user management table 240A and the second user management table 240B. By determining which is set, it is possible to determine whether or not the user ID is a permitted user ID.

  In step S22, the controller 10 determines whether or not the password is valid by determining whether or not a user ID that matches the user ID received in step S7 in FIG. 8 is registered in the first user management table 240A. It can be determined whether or not.

  In step S24, the controller 10 prints the number of print requests set by the user together with the document ID received in step S4 in FIG. 8 and the user ID received in step S7 in FIG. Record in the management table 241A.

  Further, in step S25, the controller 10 refers to the first user management table 240A and corresponds to both the document ID received in step S4 in FIG. 8 and the user ID received in step S7 in FIG. By determining whether or not the set number of printable sheets exceeds the requested print number received in step S23, it is possible to determine whether or not the requested number of sheets can be printed.

  In this case, the first user management table 240A functions as a third storage unit that stores the number of recording sheets on which image data of the document can be formed, corresponding to both the document ID and the user ID of the document.

  Further, in step S27, the controller 10 displays the number of recording sheets on which the image data of the document SH is formed, together with the document ID received in step S4 in FIG. 8 and the user ID received in step S7 in FIG. It can be recorded in the separate print management table 241.

  In this case, the user-specific print management table 241 functions as a second storage unit that stores the number of recording sheets on which image data of the document SH is formed.

  In step S29, the controller 10 prints the number of print requests set by the user together with the document ID received in step S4 in FIG. 8 and the user ID received in step S7 in FIG. Record in the management table 241B.

  Further, in step S30, the controller 10 refers to the second user management table 240B and corresponds to both the document ID received in step S4 in FIG. 8 and the user ID received in step S7 in FIG. By determining whether or not the set number of printable sheets exceeds the print request number received in step S28, it is possible to determine whether or not the requested number of sheets can be printed.

  In this case, the first user management table 240A functions as a third storage unit that stores the number of recording sheets on which image data of the document can be formed, corresponding to both the document ID and the user ID of the document.

  Further, in step S33, the controller 10 stores the received user ID in the unauthorized password input management table 242C, and stores “1” indicating that an unauthorized password has been input in association with the user ID. Can be made.

  In this case, the unauthorized password input management table 242C functions as a first storage unit.

  Further, when the database 24 is provided in the RAM 13 of the image forming apparatuses 1A to 1C, the following processing is also possible.

  That is, the controller 10 of each of the image forming apparatuses 1 </ b> A to 1 </ b> C in the user management table 201 sets the printable number corresponding to both the received document ID and user ID to the number obtained by subtracting the printed number from the printable number. It becomes possible to change.

  Thus, in each of the image forming apparatuses 1A to 1C, after the user forms image data of a certain document on the recording paper, the number of recording sheets on which the user can form the image data of the document is set. The number of sheets is updated to the number reduced by the number of recording sheets on which the image data of the original document is actually formed.

  12 and 13 are flowcharts showing an example of the basic operation of the management server. In the management server 2, when the controller 20 receives an IC card unpresentation signal together with the document ID from the image forming apparatuses 1 </ b> A to 1 </ b> C (YES in step S <b> 40), the controller 20 performs the process of step S <b> 41 while Is not received together with the document ID (NO in step S40), the process of step S42 is performed.

  In the process of step S41, the controller 20 stores the received document ID in the IC card non-presentation table 242B, and stores “1” indicating that no IC card is presented in correspondence with the document ID. Let

  In step S <b> 42, the controller 20 determines whether or not an unauthorized card presentation notification signal is received together with the document ID from the image forming apparatuses 1 </ b> A to 1 </ b> C. As a result, when it is determined that the unauthorized card presentation notification signal is received together with the document ID (YES in step S42), the controller 20 does not receive the unauthorized card presentation notification signal together with the document ID while performing the process of step S43. When it determines (NO of step S42), the controller 20 performs the process of step S44 while performing the process of step S43.

  In the process of step S43, the controller 20 stores the accepted document ID in the unauthorized IC card presentation management table 242A, and “1” indicating that an unauthorized IC card is presented in association with the document ID. Remember. In this case, the unauthorized IC card presentation management table 242A functions as a fourth storage unit that stores that unauthorized printing has been attempted.

  In the process of step S44, the controller 20 determines whether or not an unauthorized password notification signal is received together with the user ID from the image forming apparatuses 1A to 1C. As a result, when it is determined that the unauthorized password notification signal is received together with the user ID (YES in step S44), the controller 20 determines that the unauthorized password notification signal is not received together with the user ID while performing the process of step S45. Sometimes (NO in step S44), the controller 20 performs the process of step S46.

  In the process of step S45, the controller 20 stores the received user ID in the unauthorized password input management table 242C, and stores “1” indicating that an unauthorized password has been input in association with the user ID. Let In this case, the unauthorized password input management table 242C functions as a fourth storage unit that stores that unauthorized printing has been attempted.

  In the process of step S46, the controller 20 determines whether or not data representing a print number request is received from the image forming apparatuses 1A to 1C together with the document ID and the user ID. As a result, when it is determined that the data representing the print number request is received together with the document ID and the user ID (YES in step S46), the controller 20 performs the process of step S47.

  In the process of step S47, the controller 20 records the requested number of prints corresponding to both the received document ID and user ID.

  For example, the controller 20 records the received combination of the document ID, the user ID, and the requested number of prints in the print management table 241 for each user.

  More specifically, when the controller 20 receives the data indicating the requested number of prints together with the document ID and the user ID, the received user ID is stored in either the first user management table 240A or the second user management table 240B. Determine if it is set.

  Next, if the received user ID is set in the first user management table 240A, the controller 20 treats the user ID as a normal user ID, and receives the received document ID, user ID, and requested number of prints. Is recorded in the first user-specific print management table 241A.

  On the other hand, if the received user ID is set in the second user management table 240B, the controller 20 treats the user ID as a permitted user ID and receives the received document ID, user ID, and number of print requests. Are recorded in the second user-specific print management table 241B.

  When the processing in step S47 is completed, the controller 20 determines whether data representing the number of printed sheets has been received from the image forming apparatuses 1A to 1C together with the document ID and the user ID (step S48).

  When it is determined that the data representing the number of printed sheets has been received together with the document ID and the user ID (YES in step S48), the controller 20 records the number of printed sheets corresponding to both the received document ID and user ID. (Step S49).

  For example, the controller 20 records the received combination of the document ID, the user ID, and the number of printed pages in the user-specific print management table 241.

  More specifically, when the controller 20 receives data representing the number of printed sheets together with the document ID and the user ID, the received user ID is stored in either the first user management table 240A or the second user management table 240B. Determine if it is set.

  Next, if the received user ID is set in the first user management table 240A, the controller 20 treats the user ID as a normal user ID, and receives the received document ID, user ID, and number of printed pages. Is recorded in the first user-specific print management table 24A.

  On the other hand, if the received user ID is set in the second user management table 240B, the controller 20 treats the user ID as a permitted user ID and receives the received document ID, user ID, and number of printed sheets. Are recorded in the second user-specific print management table 241B.

  When the process of step S49 is completed, the controller 20 performs the process of step S50. In the process of step S50, the controller 20 changes the printable number corresponding to both the received document ID and user ID to a number obtained by subtracting the printed number from the printable number.

  For example, when the received document ID is “111”, the received user ID is “aaa”, and the received number of printed pages is “1”, the controller 20 reads the document in the first user management table 240A. The number of prints obtained by subtracting the number of printable sheets “10” set corresponding to both the ID “111” and the user ID “aaa” from the number of printable sheets “10” and “1”. Rewrite it to “9”.

  Alternatively, when the received document ID is “111”, the received user ID is “ccc”, and the received number of printed sheets is “2”, the controller 20 stores the document in the second user management table 240B. The number of prints obtained by subtracting the printable sheet number “20” from the printable sheet number “20” and the printable sheet number “2” set in correspondence with both the ID “111” and the user ID “ccc”. Rewrite to “18”.

  Here, in FIGS. 8 to 13, the recording paper discarding management process using the recording paper discarding management table 243 is not shown. This recording paper discarding management process is performed as follows, for example.

  That is, after the image forming apparatuses 1A to 1C form the image data of the document SH on the recording paper, the controller 10 outputs the document ID received by the document ID receiving unit 14 to the management server 2. Further, the controller 10 outputs the recording sheet ID received by the recording sheet ID receiving unit 17 to the management server 2 as the recording sheet ID of the recording sheet on which the image data of the document SH is formed.

  In the management server 2, when the controller 20 receives the document ID and the recording sheet ID from the image forming apparatuses 1A to 1C, the controller 20 records the received document ID in the recording sheet discarding management table 243 and also receives the received recording sheet ID. Is recorded in correspondence with the document ID as a printed recording sheet ID.

  In the management server 2, when receiving the recording sheet ID from the shredder 4, the controller 20 records the received recording sheet ID as the discarded recording sheet ID in the recording sheet disposal management table 243.

  As a result of the above processing, the recording paper discarding management table 243 records the document ID of the document on which the image data is formed and the number of recording sheets on which the image data of the document is formed, as shown in FIG. It becomes the state. Further, as shown in FIG. 7, the recording sheet ID of the recording sheet discarded by the shredder 4 is also recorded in the recording sheet discarding management table 243.

  The controller 20 refers to the document ID, the printed recording sheet ID, and the discarded recording sheet ID recorded in the recording sheet disposal management table 243, thereby discarding the recording sheet on which the image data of the document is recorded. Judging.

  For example, as shown in FIG. 7, the printed recording paper IDs on which the image data for the document ID “111” is formed are “A” and “B”, and the image data for the document ID “222” is formed. Assume that the printed paper IDs that have been printed are “C”, “D”, “E”, “F”, and “G”.

  Further, it is assumed that the discarded recording paper IDs are “A”, “B”, “C”, “D”, and “E”.

  In this case, the controller 20 compares the printed recording paper ID with the discarded recording paper ID, and the recording paper ID recorded as the printed recording paper ID and the discarded recording paper ID, and the printed recording paper. A recording sheet ID that is recorded as an ID but not recorded as a discarded recording sheet ID is determined.

  As a result, “A”, “B”, “C”, “D”, and “E” are obtained as the recording sheet ID recorded as the printed recording sheet ID and the discarded recording sheet ID. On the other hand, “F” and “G” are obtained as recording sheet IDs that are recorded as printed recording sheet IDs but are not recorded as discarded recording sheet IDs.

  Thereby, the controller 20 records the undiscarded recording sheets while the recording sheet IDs of the discarded recording sheets are “A”, “B”, “C”, “D”, and “E”. It can be seen that the paper IDs are “F” and “G”.

  The controller 20 then discards the recording paper (recording paper IDs “A”, “B”, “C”, “D”, and “E”) and the undiscarded recording paper (recording paper). It is determined which original image data is formed on the recording sheets of ID “F” and “G”.

  In the example shown in FIG. 7, printed recording sheet IDs “A” and “B” are recorded corresponding to the document ID “111”, and the printed recording sheet ID ““ is recorded corresponding to the document ID “222”. “C”, “D”, “E”, “F”, and “G” are registered.

  Therefore, the controller 20 uses the recording sheet IDs “A” and “B” for the discarded recording sheets (recording sheets with the recording sheet IDs “A”, “B”, “C”, “D”, and “E”). The image data of the document with the document ID “111” is formed on the recording paper with “”, and the document with the document ID “222” is recorded on the recording paper with the recording paper IDs “C”, “D”, and “E”. It can be seen that image data is formed.

  The controller 20 also knows that the image data of the document with the document ID “222” is formed on the undiscarded recording paper (recording paper with the recording paper IDs “F” and “G”).

  Thereby, the controller 20 knows that all of the recording paper on which the image data of the document with the document ID “111” is formed is discarded. Further, the controller 20 discards the recording sheets with the recording sheet IDs “C”, “D”, and “E” among the recording sheets on which the image data of the document with the document ID “222” is formed. However, it can be seen that the recording sheets with the recording sheet IDs “F” and “G” have not been discarded.

  Further, when the image forming apparatuses 1A to 1C are provided with the database 24, the image forming apparatuses 1A to 1C read all or part of the contents stored in the database 24 and display the read contents on the display unit. 5 is formed on the recording sheet by the image forming unit 40. In this case, the image forming apparatuses 1A to 1C edit the content read from the database 24 as necessary.

  Thereby, in each of the image forming apparatuses 1 </ b> A to 1 </ b> C, the printing status of the confidential document by itself can be known.

1A to 1C Image forming apparatus 2 Management server 10 Controller 14 Document ID receiving unit 15 User ID receiving unit 24 Database 40 Image forming unit 200 Image reading unit 240 User management table 240A First user management table 240B Second user management table 241 By user Print management table 241A First user-specific print management table 241B Second user-specific print management table 242 Unauthorized print request management table 242A Unauthorized IC card presentation management table 242B IC card non-presentation management table 242C Unauthorized password input management table TC, TP, TS RF tag SH Document

Claims (19)

A document ID receiving unit that receives a document ID, which is ID information of the document, from an RF tag provided on the document;
A user ID receiving unit that receives a user ID that is ID information of the user,
An image reading unit for reading image data representing an image of the document;
An image forming unit for forming image data of the original on a recording paper;
A controller that prohibits the image forming unit from forming the image data of the document when the document ID is received by the document ID receiving unit when reading the image data of the document by the image reading unit;
With
The controller is
After prohibiting the formation of the document image data, when the user ID receiving unit receives a user ID corresponding to the document ID, it determines whether to cancel the prohibition of the document image data formation. An image forming apparatus. The controller is
After prohibiting the formation of the image data of the document, when the user ID receiving unit receives a permitted user ID that is a user ID of a user permitted to form image data of the document with the document ID, the document The image forming apparatus according to claim 1, wherein the prohibition of image data formation is canceled. It further includes a password acceptance unit that accepts the user's own password,
The controller is
When the user ID corresponding to the document ID is received by the user ID receiving unit after prohibiting the formation of the image data of the document, the password receiving unit receives a password input;
The image formation according to claim 1, wherein when the password corresponding to the user ID received by the user ID reception unit is received by the password reception unit, the prohibition of the formation of the image data of the document is canceled. apparatus. A first storage unit for storing that an unauthorized password has been input;
The controller is
A determination process for determining whether or not a password corresponding to the user ID received by the user ID reception unit has been received by the password reception unit is performed a predetermined number of times;
In each determination process, when it is determined that the password corresponding to the user ID received by the user ID reception unit is not received by the password reception unit, the fact that an invalid password has been input is associated with the user ID. The image forming apparatus according to claim 3, wherein the image forming apparatus is stored in the first storage unit. The controller is
The number of recording sheets on which image data of the original can be formed after the prohibition of the image data formation of the original is canceled to the number of recording sheets corresponding to both the original ID of the original and the user ID. The image forming apparatus according to claim 1, wherein the image forming apparatus is limited. A second storage unit for storing the number of recording sheets on which the image data of the original is formed;
The controller is
After the prohibition of the formation of the image data of the original is canceled and the image data of the original is formed, the number of recording sheets on which the image data of the original is formed, the image data of the original with the original ID is 4. The image forming apparatus according to claim 1, wherein the number of recording sheets formed by a user with a user ID is stored in the second storage unit. 5. A third storage unit for storing the number of recording sheets on which image data of the document can be formed, corresponding to both the document ID of the document and the user ID;
The controller is
The number of recording sheets on which the image data of the original can be formed after the prohibition of the formation of the original image data is canceled in both the original ID and the user ID of the original in the third storage unit. 4. The image forming apparatus according to claim 1, wherein the number of recording sheets stored correspondingly is limited. The controller is
After the prohibition of the formation of the image data of the document is canceled and the image data of the document is formed, the document is stored in the third storage unit corresponding to both the document ID of the document and the user ID. 8. The image forming apparatus according to claim 7, wherein the number of the recording sheets is changed to a number reduced by the number of recording sheets on which the image data of the original is formed. A fourth storage unit for storing that unauthorized printing has been attempted;
The user ID receiving unit is configured to receive the user ID from the presented IC card when an IC card in which the user ID is recorded in advance is presented;
The controller is
After prohibiting the formation of the image data of the original, when the user ID receiving unit receives a user ID that does not correspond to the original ID of the original, it indicates that an illegal IC card has been presented. 4. The image forming apparatus according to claim 1, wherein the image forming apparatus stores the information in the fourth storage unit in association with each other. 5. A fourth storage unit for storing that unauthorized printing has been attempted;
The user ID receiving unit is configured to receive the user ID from the presented IC card when an IC card in which the user ID is recorded in advance is presented;
The controller is
If the user ID is not received from the IC card between the prohibition of the formation of the image data of the document and the elapse of a preset time, it is determined that the IC card has not been presented. 4. The image forming apparatus according to claim 1, wherein the image forming apparatus is stored in the fourth storage unit in association with an ID. 5. An image forming apparatus that reads image data representing an image of a document and forms the read image data on a recording sheet. When reading the image data of the document, the ID information of the document is read from an RF tag provided on the document. An image forming apparatus that prohibits the formation of image data of the original and waits for an input of a user ID that is user ID information;
A management server in which the document ID is set in advance and the user ID is set in advance corresponding to the document ID;
With
The image forming apparatus includes:
By determining whether or not the user ID received after prohibiting the formation of the image data of the document is set in correspondence with the document ID of the document in the management server, the image data of the document is formed. An image forming system for determining whether to cancel the prohibition. In the management server, a user ID corresponding to the document ID is set as a permitted user ID which is ID information of a user who is permitted to form image data of a document with the document ID.
The image forming apparatus includes:
When the user ID received after prohibiting the formation of the image data of the original is set as the permitted user ID corresponding to the original ID of the original in the management server, the prohibition of the formation of the image data of the original is prohibited. The image forming system according to claim 11, wherein the image forming system is canceled. The management server is further set with the user's own password corresponding to the user ID,
The image forming apparatus includes:
When the user ID received after prohibiting the formation of the image data of the document is set corresponding to the document ID of the document in the management server, the input of the user's own password is received, and the received password is It is determined whether or not the management server is set in correspondence with the user ID, and when the accepted password is set in the management server and corresponding to the user ID, the image data of the document is formed. The image forming system according to claim 11, wherein the prohibition is canceled. The image forming apparatus includes:
It is configured to perform a predetermined number of times a determination process for determining whether or not the accepted password is set corresponding to the user ID in the management server,
In each determination process, when it is determined that the accepted password is not set in correspondence with the user ID in the management server, an unauthorized password notification signal for notifying that an unauthorized password has been input. To the management server together with the user ID,
The management server
14. The image formation according to claim 13, wherein when the unauthorized password notification signal is received from the image forming apparatus together with the user ID, the fact that an unauthorized password has been input is stored in association with the user ID. system. In the management server, the number of recording sheets on which image data of the original can be formed is set in correspondence with both the original ID of the original and the user ID.
The image forming apparatus includes:
The number of recording sheets on which the image data of the original can be formed after accepting the user ID and canceling the prohibition of the formation of the image data of the original is determined by both the original ID and the user ID of the original in the management server. 15. The image forming system according to claim 11, wherein the number of images is limited to a number set corresponding to the number of images. The image forming apparatus includes:
After the prohibition of the formation of the image data of the original is canceled and the image data of the original is formed, the number data indicating the number of recording sheets on which the image data of the original is formed is set as the original ID of the original and the original data. Output to the management server together with the user ID,
The management server
When the sheet number data is received from the image forming apparatus together with the document ID and the user ID, the number of sheets represented by the received sheet number data is recorded by the user of the user ID forming the document image data of the document ID. 15. The image forming system according to claim 11, wherein the image forming system records the number of sheets. The image forming apparatus includes:
After the prohibition of the formation of the image data of the original is canceled and the image data of the original is formed, the number data indicating the number of recording sheets on which the image data of the original is formed is set as the original ID of the original and the original data. Output to the management server together with the user ID,
The management server
When the number data is received from the image forming apparatus together with the document ID and the user ID, the image data of the document with the document ID is set in the management server as the number of recording sheets that can be formed by the user with the user ID. 16. The image forming system according to claim 15, wherein the number of sheets is changed to a number obtained by subtracting the number of recording sheets represented by the number data from the set number. The image forming apparatus includes:
When an IC card in which the user ID is recorded in advance is presented, the user ID is received from the presented IC card, and the user ID received after prohibiting the formation of the image data of the document is When the management server is not set to correspond to the document ID of the document, an unauthorized card presentation notification signal for notifying that an unauthorized IC card has been presented is output to the management server together with the document ID.
The management server
18. When the illegal card presentation notification signal is received together with the document ID, the fact that an illegal IC card is presented is stored in association with the document ID. The image forming system according to item. The image forming apparatus includes:
When an IC card in which the user ID is recorded in advance is presented, the user ID is received from the presented IC card, and is set in advance after prohibiting the formation of image data of the document. If the user ID is not received from the IC card before the time elapses, an IC card non-presentation signal notifying that the IC card has not been presented within the time is output to the management server together with the document ID. ,
The management server
18. When the IC card non-presentation signal is received together with the document ID, information indicating that the IC card has not been presented is stored in association with the document ID. The image forming system according to item.

Images