JP2017084052A - Image processing apparatus and program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image processing apparatus which facilitates adding an application which uses an image log, and prevents reduction in security due to adding the application which uses the image log, and a program for the image processing apparatus.SOLUTION: An MFP(Multifunction Peripheral) includes: a scanner, a printer, and a facsimile communication unit; a resident image log application for acquiring an image log of an image processed by the scanner, the printer, and the facsimile communication unit; and a platform which runs an application including the resident image log application. The platform allows the application to use an image log service, on the basis of image-log approved application information (S81-S82), and provides the image log service using the resident image log application, to the application.SELECTED DRAWING: Figure 18

Description

  The present invention relates to an image processing apparatus and an image processing apparatus program for acquiring an image log as a log of an image processed by an image processing unit.

  Conventionally, an image processing apparatus that acquires an image log is known (see, for example, Patent Document 1).

JP 2007-160675 A

  However, the conventional image processing apparatus has a problem that an application using an image log cannot be added.

  Here, the image log includes the image itself processed by the image processing unit. For this reason, if the function of the image log is abused, information such as personal information of a job executor and important information on business can be easily leaked. Therefore, when an application using an image log is added to the image processing apparatus, it is necessary to suppress a decrease in security in the image processing apparatus.

  Therefore, the present invention provides an image processing apparatus and a program for an image processing apparatus that facilitate the addition of an application that uses an image log and can suppress a decrease in security due to the addition of an application that uses an image log. With the goal.

  An image processing apparatus of the present invention includes an image processing unit that processes an image, an image log application for obtaining an image log as a log of an image processed by the image processing unit, and an application including the image log application. A platform for operating the service, and the platform provides a service by the image log application to the application, and the platform allows the application to use the service based on information on approval of the use of the service for the application. It is characterized by permission.

  With this configuration, the image processing apparatus according to the present invention provides a service using an image log application to an application, so that an application using an image log can be easily added. In addition, since the image processing apparatus of the present invention restricts the use of the service by the image log application for each application, it is possible to suppress a decrease in security due to the addition of an application that uses the image log.

  In the image processing apparatus of the present invention, the platform may permit the setting value change of the service via the application based on the information.

  With this configuration, the image processing apparatus according to the present invention restricts the change of the service setting value by the image log application via the application, so that it is possible to suppress a decrease in security due to the addition of the application using the image log. it can.

  In the image processing apparatus of the present invention, the information may be set by installing the application.

  With this configuration, the image processing apparatus according to the present invention automatically sets service approval information for an application by installing the application, so that it is possible to suppress a decrease in security due to the addition of an application using an image log. it can.

  An image processing apparatus program according to the present invention is an image log application for acquiring an image log as a log of an image processed by the image processing unit, and an image processing apparatus including an image processing unit for processing an image; and Functioning as a platform for operating an application including the image log application, the platform providing a service provided by the image log application to the application, and the platform based on information on approval of use of the service for the application. The use of the service by the application is permitted.

  With this configuration, the image processing apparatus that executes the program for the image processing apparatus of the present invention provides a service using an image log application to the application, so that an application using an image log can be easily added. In addition, the image processing apparatus that executes the program for the image processing apparatus according to the present invention restricts the use of the service by the image log application for each application, and therefore suppresses the decrease in security due to the addition of the application using the image log. Can do.

  The image processing apparatus and the program for the image processing apparatus according to the present invention can facilitate the addition of an application that uses an image log, and can suppress a decrease in security due to the addition of an application that uses an image log.

1 is a block diagram of an image processing system according to an embodiment of the present invention. FIG. 2 is a block diagram of the MFP shown in FIG. 1. It is a figure which shows an example of the destination information shown in FIG. It is a figure which shows an example of the initial value of the information for image log production | generation shown in FIG. It is a figure which shows an example of the initial value of the information for image log transmission shown in FIG. FIG. 3 is a diagram showing an example of application information approved for image log use shown in FIG. 2. It is a figure which shows an example of the function implement | achieved by the control part shown in FIG. It is a figure which shows an example of the function implement | achieved by the computer shown in FIG. It is a block diagram of the receive server shown in FIG. It is a figure which shows an example of the information for image log production | generation shown in FIG. It is a figure which shows an example of the information for image log transmission shown in FIG. 3 is a flowchart of the operation of the MFP shown in FIG. 2 when an application is installed. 3 is a flowchart of the operation of the MFP shown in FIG. 2 when an image log generation setting value, image log generation information, and image log transmission information are set through an application. FIG. 2 is a block diagram showing a processing flow of the image processing system shown in FIG. 1 when an MFP processes an image in response to an instruction via an operation unit of the MFP. FIG. 2 is a block diagram showing a processing flow of the image processing system shown in FIG. 1 when an MFP processes an image in response to an instruction from a computer. The processing flow of the image processing system shown in FIG. 1 in the case where the MFP processes an image in accordance with an instruction via the operation unit of the MFP after the computer transmits print data to the spool server in accordance with an instruction from the computer. FIG. FIG. 2 is a block diagram showing a flow of processing of the image processing system shown in FIG. 1 when a dedicated printer machine processes an image in response to an instruction from a computer. 3 is a flowchart of the operation of the MFP shown in FIG. 2 when an image log service is used.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  First, the configuration of the image processing system according to the present embodiment will be described.

  FIG. 1 is a block diagram of an image processing system 10 according to the present embodiment.

  As shown in FIG. 1, an image processing system 10 includes an MFP (Multifunction Peripheral) 20 as an image processing apparatus that processes an image, and an IC card reader 31 that is connected to the MFP 20 and reads information from an IC (Integrated Circuit) card. A printer dedicated machine 32 that performs printing as image processing, a computer 33 such as a PC (Personal Computer) that instructs the MFP 20 and the printer dedicated machine 32 to perform image processing, a smartphone, and the users of the MFP 20 and the computer 33 An authentication / authorization server 34 as a computer that executes authentication and authorization of the printer, and a spooler as a computer that spools print data output by the computer 33 A receive server 40 as a computer that receives from the MFP 20 and the computer 33 a bar 35, an image log indicating the history of the image processed in the image processing job, and a job log indicating the history of the image processing job; A search server 51 as a computer that searches for a specific keyword included in the image log and job log, a storage server 52 as a computer that stores the image log and job log or NAS (Network Attached Storage), and a security violation is discovered. And a computer 53 such as a PC or a smartphone that is notified from the search server 51 of the fact.

  The image log is, for example, a PDF (Portable Document Format) file.

  The job log includes identification information of the user who executed the job. The job log is, for example, an XML (Extensible Markup Language) file.

  The MFP 20 can communicate with the computer 33, the authentication / authorization server 34, the spool server 35, and the receive server 40 via a network. The computer 33 can communicate with the MFP 20, the authentication / authorization server 34, the spool server 35, and the receive server 40 via a network. The search server 51 can communicate with the receive server 40, the storage server 52, and the computer 53 via a network. The network described above may be any network such as a LAN (Local Area Network) or the Internet.

  FIG. 2 is a block diagram of the MFP 20.

  As illustrated in FIG. 2, the MFP 20 includes an operation unit 21 that is an input device such as buttons for inputting various operations, and a display unit 22 that is a display device such as an LCD (Liquid Crystal Display) that displays various information. A scanner 23 that is a reading device that reads image data from a document, a printer 24 that is a printing device that performs printing on a recording medium such as paper, an external facsimile apparatus (not shown), and a communication line such as a public telephone line A fax communication unit 25 that performs fax communication via a network, a communication unit 26 that communicates with an external device via a network, a semiconductor memory that stores various data, and an HDD (Hard Disk). Storage unit 2 which is a storage device such as Drive) When, and a control unit 28 which controls the entire MFP 20.

  The scanner 23 is an image processing unit that executes image processing for generating image data read from a document. The printer 24 is an image processing unit that executes image processing for printing an image on a recording medium. The fax communication unit 25 is an image processing unit that executes image processing for transmitting an image by fax.

  The storage unit 27 stores an image processing apparatus program 27a executed by the MFP 20 and various application programs 27d. The image processing apparatus program 27a and the application program 27d may be installed in the MFP 20 at the manufacturing stage of the MFP 20, or may be additionally installed in the MFP 20 from a storage medium such as an SD card or a USB (Universal Serial Bus) memory. Alternatively, it may be additionally installed in the MFP 20 from the network.

  The image processing apparatus program 27a includes a platform program 27b for realizing a platform and an image log application program 27c for realizing an image log application for acquiring an image log.

  The storage unit 27 stores destination information 27e of the receive server 40 (see FIG. 1).

  FIG. 3 is a diagram illustrating an example of the destination information 27e.

  As shown in FIG. 3, the destination information 27e includes the IP (Internet Protocol) address and port number of the primary receive server 40, and the secondary receive server 40 to be accessed when the primary receive server 40 cannot be accessed. IP address and port number are included. In FIG. 1, only one receive server 40 is illustrated, but in reality, there can be two, the primary receive server 40 and the secondary receive server 40.

  As shown in FIG. 2, the storage unit 27 includes an image log generation information initial value 27f as an initial value of image log generation information for generating an image log, and an image log transmission for transmitting an image log. An image log transmission information initial value 27g as an initial value of the credit information is stored.

  FIG. 4 is a diagram illustrating an example of the image log generation information initial value 27f.

  As shown in FIG. 4, the image log generation information initial value 27f includes, for example, an initial value of a setting value of a guarantee level indicating a level for guaranteeing generation of an image log, and a setting value of a resolution of an image of an image log. It includes an initial value and an initial value of a page range setting value to be included in the image log among images of a plurality of pages in the job.

  As the set value of the guarantee level, for example, “High” that prohibits execution of a job when there is no free space for storing a new image log in a specific storage area, and the free space for storing a new image log are specified. There is “Low” for executing a job by deleting an old image log from a specific storage area and generating a free space for a new image log even if it is not in that storage area. For example, the initial value of the set value of the guarantee level is “High”.

  For example, “72 dpi”, “100 dpi”, “200 dpi”, and “300 dpi” exist as the resolution setting values. For example, the initial value of the resolution setting value is “100 dpi”.

  As the setting value of the page range, for example, “All” indicating that images of all pages in the job are included in the image log, and “Only the first page” indicating that only images of the first page in the job are included in the image log. , “2 pages from the beginning” indicating that only the image for the first two pages in the job are included in the image log, and “3 pages from the beginning” indicating that only the images for the first three pages in the job are included in the image log. ”,“ 4 pages from the beginning ”indicating that only images for the first 4 pages in the job are included in the image log, and“ From the beginning ”indicating that only images for the 5 pages from the beginning in the job are included in the image log. 5 pages ". For example, the initial value of the page range setting value is “All”.

  FIG. 5 is a diagram illustrating an example of the image log transmission information initial value 27g.

  As illustrated in FIG. 5, the image log transmission information initial value 27g includes, for example, an initial value of a setting value of the transmission timing of the image log.

  As the setting value of the transmission timing, for example, “after job completion” indicating that the image log is transmitted every time the job is completed, and “when logging out” indicating that the image log is transmitted when the user logs out. And exist. For example, the initial value of the transmission timing setting value is “after job completion”.

  As illustrated in FIG. 2, the storage unit 27 stores image log use approved application information 27 h indicating an application approved to use the image log.

  FIG. 6 is a diagram illustrating an example of the application information 27h approved for image log use.

  As shown in FIG. 6, the image log use approved application information 27 h includes identification information of an application approved to use the image log.

  2 includes, for example, a CPU (Central Processing Unit), a ROM (Read Only Memory) storing programs and various data, and a RAM (Random Access Memory) used as a work area of the CPU. And. The CPU executes a program stored in the ROM or the storage unit 27.

  FIG. 7 is a diagram illustrating an example of functions realized by the control unit 28 (see FIG. 2).

  As shown in FIG. 7, the MFP 20 implements a platform 28a as a function for operating an application by executing a platform program 27b (see FIG. 2). The platform 28a is, for example, a Java (registered trademark) platform.

  The MFP 20 implements a resident image log application 28e as an image log application for acquiring an image log by executing an image log application program 27c (see FIG. 2). The resident image log application 28e is a Java application when the platform 28a is a Java platform.

  The MFP 20 implements the application 28f by executing the application program 27d (see FIG. 2). The application 28f is a Java application when the platform 28a is a Java platform.

  The platform 28a operates the resident image log application 28e and the application 28f. The platform 28a provides an image log API (Application Program Interface) 28b for acquiring an image log to the resident image log application 28e. In the image processing system 10, the image log and job log cannot be acquired from the MFP 20 unless the image log API 28 b is used.

  The platform 28a includes a service manager 28c in which services by the resident image log application 28e are registered. The service manager 28c provides a service by the resident image log application 28e, that is, an image log service 28d to the application 28f. The image log service 28d is a resident application service.

  One of the applications 28f of the MFP 20 sets the destination information 27e (see FIG. 2) in response to an instruction input via the operation unit 21 (see FIG. 2) or the communication unit 26 (see FIG. 2). UI (User Interface) is supported.

  FIG. 8 is a diagram illustrating an example of functions realized by the computer 33 (see FIG. 1).

  As shown in FIG. 8, the computer 33 includes an application 33 a that executes various functions, a printer driver 33 b that transmits print data to the MFP 20, the printer dedicated machine 32, and the spool server 35, and the receive server 40 (see FIG. 1). The agent 33c that generates an image log and a job log to be transmitted to () is realized by executing a specific program. The Agent 33c is interposed between the application 33a and the printer driver 33b.

  FIG. 9 is a block diagram of the receive server 40.

  As shown in FIG. 9, the receive server 40 includes an operation unit 41 that is an input device such as a mouse and a keyboard to which various operations are input, and a display unit 42 that is a display device such as an LCD that displays various information. A communication unit 43 that is a network communication device that communicates with an external device via a network, a storage unit 44 that is a non-volatile storage device such as an HDD that stores various types of information, and a control that controls the entire receive server 40 Part 45.

  The storage unit 44 includes an image log generation setting value 44a indicating whether or not to generate an image log, image log generation information 44b for generating an image log, and image log transmission information for transmitting an image log. 44c is stored.

  Here, the receive server 40 provides a Web service that can refer to the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c from a remote location. Therefore, the administrator can set the image log generation setting value 44a, the image log generation information 44b and the image log transmission information 44c on the receive server 40 from the computer 53, for example.

  FIG. 10 is a diagram illustrating an example of the image log generation information 44b.

  As shown in FIG. 10, the image log generation information 44b includes, for example, a setting value of a guarantee level indicating a level for guaranteeing generation of an image log, a setting value of an image log image resolution, and a plurality of pages in a job. This includes the page range setting value to be included in the image log. For example, in the example shown in FIG. 10, “Low”, “200 dpi”, and “first page only” are set as the guarantee level, resolution, and page range, respectively.

  FIG. 11 is a diagram illustrating an example of the image log transmission information 44c.

  As shown in FIG. 11, the image log transmission information 44c includes, for example, a setting value of the transmission timing of the image log. For example, in the example shown in FIG. 11, “when logging out” is set as the transmission timing.

  The control unit 45 illustrated in FIG. 9 includes, for example, a CPU, a ROM that stores programs and various data, and a RAM that is used as a work area of the CPU. The CPU executes a program stored in the storage unit 44 or the ROM.

  The control unit 45 realizes an OCR (Optical Character Recognition) engine 45a as a function of extracting text data from an image included in the image log by executing a specific program.

  The search server 51 shown in FIG. 1 realizes a search engine 51a as a function for searching for a specific keyword included in an image log and a job log by executing a specific program.

  Next, the operation of the image processing system 10 will be described.

  First, the operation of the MFP 20 when the application program 27d is installed will be described.

  The provider of the application program 27d to be installed in the MFP 20 applies to, for example, the manufacturer of the MFP 20 to use the image log service 28d, and receives an approval key that is data indicating approval of the use of the image log service 28d. Get issued from. Then, the provider of the application program 27d includes an approval key in the installation file of the application program 27d.

  FIG. 12 is a flowchart of the operation of the MFP 20 when the application program 27d is installed.

  As shown in FIG. 12, the platform 28a of the MFP 20 determines whether or not an approval key is included in the installation file (S61).

  When the platform 28a determines that the approval key is included in the installation file, the platform 28a includes the identification information of the application program 27d installed by the installation file, that is, the identification information of the application 28f in the image log use approved application information 27h. (S62) The application program 27d is installed by the installation file (S63), and the operation shown in FIG.

  On the other hand, when the platform 28a determines that the installation file does not include the approval key, the platform 28a installs the application program 27d using the installation file (S63), and ends the operation shown in FIG.

  Here, the approval key may be fixed data regardless of the application program 27d, or may be data generated according to a specific rule based on the application program 27d. When the approval key is data generated by a specific rule based on the application program 27d, the platform 28a determines whether the installation file includes the approval key generated by the specific rule based on the application program 27d. Is determined in the process of S61. When the approval key is data generated according to a specific rule based on the application program 27d, the provider of the application program 27d approves the use of the image log service 28d from the manufacturer of the MFP 20 in the application program 27d. It is necessary to receive for each type.

  Next, the operation of the MFP 20 when the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c are set via the application 28f will be described.

  FIG. 13 is a flowchart of the operation of the MFP 20 when the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c are set via the application 28f.

  As illustrated in FIG. 13, the platform 28a of the MFP 20 determines whether or not the identification information of the application 28f being executed is included in the application information 27h approved for image log use (S71).

  If the platform 28a determines in S71 that the identification information of the application 28f being executed is not included in the application information 27h approved for image log use, the platform 28a ends the operation shown in FIG. That is, the platform 28a does not permit setting of the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c.

  When the platform 28a determines in S71 that the identification information of the application 28f being executed is included in the application information 27h approved for image log use, the platform 28a determines whether the user who is logged in to the MFP 20 is an administrator. (S72). Here, the login to the MFP 20 is performed using the authentication authorization server 34. When the MFP 20 recognizes the login of the user authenticated by the authentication / authorization server 34, the MFP 20 can recognize whether or not the user is an administrator based on the notification from the authentication / authorization server 34.

  If the platform 28a determines in S72 that the user who is logged in to the MFP 20 is not an administrator, the operation shown in FIG. That is, the platform 28a does not permit setting of the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c.

  If the platform 28a determines in S72 that the user who is logged in to the MFP 20 is an administrator, the image log generation setting value 44a, the image log generation information 44b, and the image log in the receive server 40 via the application 28f that is being executed. The setting of the transmission information 44c is permitted (S73), and the operation shown in FIG. 13 is terminated. Therefore, the administrator who is logged in to the MFP 20 can set the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c in the receive server 40 via the application 28f that is being executed.

  Note that the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c in the receive server 40 may be set only from the MFP 20 via the application 28f.

  Further, the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c in the receive server 40 may exist for each type of application 28f. The image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c in the receive server 40 may be set only via the corresponding application 28f.

  Next, the operation of the image processing system 10 when the MFP 20 processes an image in response to an instruction via the operation unit 21 of the MFP 20 will be described.

  FIG. 14 is a block diagram illustrating a processing flow of the image processing system 10 when the MFP 20 processes an image in response to an instruction via the operation unit 21 of the MFP 20.

  As shown in FIG. 14, when the user causes the IC card reader 31 to read an IC card storing authentication information for user authentication, the control unit 28 of the MFP 20 reads the IC card using the IC card reader 31. The received authentication information is received (S101).

  Next, the control unit 28 of the MFP 20 transmits the authentication information received in S101 to the authentication authorization server 34 (S102). The authentication authorization server 34 authenticates the user based on the authentication information transmitted in S102. Then, when the authentication of the user is successful, the authentication / authorization server 34 transmits the authorization information of the user who has been successfully authenticated to the MFP 20.

  When the authorization information is transmitted from the authentication / authorization server 34, the control unit 28 of the MFP 20 permits the user to use the function within a range corresponding to the transmitted authorization information. Accordingly, the user can, for example, scan a function of reading an image by the scanner 23, a copy function of printing an image read by the scanner 23 by the printer 24, and a fax by which the image read by the scanner 23 is faxed by the fax communication unit 25. Execution of a function permitted by the control unit 28 such as a transmission function, that is, execution of a job by the MFP 20 can be instructed via the operation unit 21. The control unit 28 of the MFP 20 executes a job corresponding to an instruction via the operation unit 21.

  Then, the resident image log application 28e of the MFP 20 generates an image log and job log of the executed job, and transmits the generated image log and job log to the receive server 40 (S103). The resident image log application 28e generates an image log in a searchable PDF format that allows text search. However, the resident image log application 28e may generate an image log not in a searchable PDF but in a normal PDF format in which text search is impossible.

  When the image log and job log are transmitted in S103, the OCR engine 45a of the receive server 40 generates a text file including text extracted from the transmitted image log and job log, and the generated text file; The image log and the job log are transmitted to the search server 51 (S104). Here, the OCR engine 45a transmits a searchable PDF format image log in S104. The OCR engine 45a extracts text from the image included in the image log received from the MFP 20 by OCR processing, and generates a searchable PDF format image log based on the extracted text and the image included in the image log. . The OCR engine 45a generates a text file using the generated searchable PDF format image log.

  When the image log, job log, and text file are transmitted in S104, the search engine 51a of the search server 51 searches for a specific keyword in the transmitted text file, and the searched specific keyword is on any page. Determine how many are included. For example, the specific keyword is a word that is preferably not included in the image log or job log, such as “printing prohibited”.

  When the determination result based on the specific keyword satisfies the specific criterion, that is, when it is determined that the image processing in the target job is not a security problem, the search engine 51a has been transmitted in S104. The image log, job log, and text file are stored in the storage server 52 (S105).

  On the other hand, if the search engine 51a determines that the determination result based on a specific keyword does not satisfy a specific criterion, that is, if the image processing in the target job is determined to be a security problem, a violation regarding security is found. An e-mail notifying that is transmitted to a specific mail address (S106). Therefore, the administrator can recognize that a violation related to security has been found by receiving the electronic mail transmitted in S106 by the computer 53, for example.

  In the operation illustrated in FIG. 14, the authentication information is input from the IC card, but may be input via the operation unit 21.

  Next, the operation of the image processing system 10 when the MFP 20 processes an image in response to an instruction from the computer 33 will be described.

  FIG. 15 is a block diagram illustrating a processing flow of the image processing system 10 when the MFP 20 processes an image in response to an instruction from the computer 33.

  As shown in FIG. 15, when authentication information for user authentication is input via an operation unit (not shown) of the computer 33, the computer 33 converts the input authentication information into an authentication authorization server 34. (S111). The authentication authorization server 34 authenticates the user based on the authentication information transmitted in S111. Then, when the user authentication is successful, the authentication authorization server 34 transmits the authorization information of the user who has been successfully authenticated to the computer 33.

  When the authorization information is transmitted from the authentication / authorization server 34, the computer 33 permits the user to use the function within a range corresponding to the transmitted authorization information. Accordingly, the user can use a computer such as a print function for printing by the printer 24 based on print data received from the computer 33, a network fax transmission function for faxing an image received from the computer 33 by the fax communication unit 25, and the like. The MFP 20 can be instructed to execute the function permitted by the user 33, that is, to execute the job, via the operation unit of the computer 33. Accordingly, when the execution of a job by the MFP 20 is instructed via the operation unit, the computer 33 instructs the MFP 20 to execute this job (S112). If the job is a print function job, the printer driver 33b of the computer 33 transmits print data to the MFP 20 instead of an instruction to execute the job.

  When the execution of the job is instructed from the computer 33 in S112, the control unit 28 of the MFP 20 executes the job according to the instruction from the computer 33.

  The subsequent processing is the same as the processing of S103 to S106 in the operation shown in FIG.

  Next, after the computer 33 transmits print data to the spool server 35 according to an instruction from the computer 33, the MFP 20 processes an image according to an instruction via the operation unit 21 of the MFP 20. The operation will be described.

  FIG. 16 illustrates an image processing system 10 in a case where the MFP 20 processes an image in accordance with an instruction via the operation unit 21 of the MFP 20 after the computer 33 transmits print data to the spool server 35 in accordance with an instruction from the computer 33. It is a block diagram which shows the flow of this process.

  As illustrated in FIG. 16, when the computer 33 transmits the authentication information to the authentication authorization server 34 as in the process of S111 in the operation illustrated in FIG. 15, the authentication authorization server 34 transmits the authentication information transmitted from the computer 33. If the user authentication is successful, the authorization information of the user who has been successfully authenticated is transmitted to the computer 33.

  When the authorization information is transmitted from the authentication / authorization server 34, the computer 33 permits the user to use the function within a range corresponding to the transmitted authorization information. When the printer driver 33b of the computer 33 is instructed to store print data by the spool server 35 via the operation unit, the printer driver 33b transmits the print data to the spool server 35 together with user identification information (S121).

  When the user causes the IC card reader 31 to read the IC card storing the user authentication information, the control unit 28 of the MFP 20 receives the authentication information read by the IC card reader 31 ( S101).

  Next, the control unit 28 of the MFP 20 transmits the authentication information received in S101 to the authentication authorization server 34 (S102). The authentication authorization server 34 authenticates the user based on the authentication information transmitted in S102. Then, when the authentication of the user is successful, the authentication / authorization server 34 transmits the authorization information of the user who has been successfully authenticated to the MFP 20.

  When the authorization information is transmitted from the authentication / authorization server 34, the control unit 28 of the MFP 20 permits the user to use the function within a range corresponding to the transmitted authorization information. When the execution of the print data stored by the spool server 35 is instructed via the operation unit 21, the control unit 28 of the MFP 20 transmits user identification information to the spool server 35 (S 122), thereby causing the spool server to The user's print data is received from 35, and printing based on the received print data is executed, that is, a job is executed.

  The subsequent processing is the same as the processing of S103 to S106 in the operation shown in FIG.

  In the operation illustrated in FIG. 16, the authentication information is input from the IC card, but may be input via the operation unit 21.

  Next, the operation of the image processing system 10 when the printer dedicated machine 32 processes an image in accordance with an instruction from the computer 33 will be described.

  FIG. 17 is a block diagram illustrating a processing flow of the image processing system 10 when the printer dedicated machine 32 processes an image in accordance with an instruction from the computer 33.

  As illustrated in FIG. 17, when the computer 33 transmits authentication information to the authentication authorization server 34 as in the processing of S111 in the operation illustrated in FIG. 15, the authentication authorization server 34 transmits the authentication information transmitted from the computer 33. If the user authentication is successful, the authorization information of the user who has been successfully authenticated is transmitted to the computer 33.

  When the authorization information is transmitted from the authentication / authorization server 34, the computer 33 permits the user to use the function within a range corresponding to the transmitted authorization information. When the printer driver 33b of the computer 33 is instructed to execute a print job by the printer dedicated machine 32 via the operation unit, the printer driver 33b transmits the print data to the printer dedicated machine 32 (S131).

  When the print data is transmitted from the computer 33 in S <b> 131, the printer-dedicated device 32 executes printing according to the print data transmitted from the computer 33.

  Next, the Agent 33c of the computer 33 generates an image log and job log of the executed print job, and transmits the generated image log and job log to the receive server 40 (S132).

  The subsequent processing is the same as the processing of S104 to S106 in the operation shown in FIG.

  Next, the process of S103 in FIGS. 14 to 16 will be described in detail.

  When execution of a job by the MFP 20 is instructed via the operation unit 21 or the computer 33 of the MFP 20, the application 28f corresponding to this job is provided by the service manager 28c as shown in FIG. 7 after executing this job. The image log service 28d is used (S141).

  FIG. 18 is a flowchart of the operation of the MFP 20 when the image log service 28d is used.

  As shown in FIG. 18, the platform 28a of the MFP 20 determines whether or not the identification information of the application 28f being executed is included in the application information 27h approved for image log (S81).

  If the platform 28a determines in S81 that the identification information of the application 28f being executed is not included in the application information 27h approved for image log use, the platform 28a ends the operation shown in FIG. That is, the platform 28a does not permit the use of the image log service 28d.

  If the platform 28a determines in S81 that the identification information of the application 28f being executed is included in the application information 27h approved for image log use, the platform 28a permits the use of the image log service 28d via the application 28f being executed. Then (S82), the operation shown in FIG.

  As shown in FIG. 7, when the application 28f uses the image log service 28d provided by the service manager 28c (S141), the resident image log application 28e is executed (S142).

  Then, the resident image log application 28e reads out the destination information 27e of the receive server 40 from the storage unit 27, and then acquires various setting values from the receive server 40 using the destination information 27e (S143). That is, the resident image log application 28e acquires the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c from the receive server 40 in the process of S143, and the image log generation setting value, image The log generation information and the image log transmission information are managed on the RAM of the control unit 28. When the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c in the receive server 40 exist for each type of application 28f, the resident image log application 28e is changed to the application 28f being executed. The corresponding image log generation setting value 44a, image log generation information 44b, and image log transmission information 44c may be acquired from the receive server 40.

  Here, the resident image log application 28e displays an error screen on the display unit 22 or the display unit of the computer 33 when acquisition of the image log generation information 44b and the image log transmission information 44c fails. Then, when an instruction to continue the operation is input to the operation unit 21 or the operation unit of the computer 33, the resident image log application 28e sends an image log generation information initial value 27f, an image log transmission, and the like. The credit information initial value 27g is acquired from the storage unit 27 and managed on the RAM of the control unit 28 as image log generation information and image log transmission information, respectively.

  If the image log generation setting value 44a is set so as not to generate an image log, the resident image log application 28e does not execute image log generation and transmission processing described below, and generates a job log. And only send.

  The resident image log application 28e acquires an image log and a job log using the image log API 28b after the processing of S143 (S144). Here, the resident image log application 28e acquires an image log corresponding to the image log generation information acquired in S143. Even if the resident image log application 28e acquires an image log corresponding to the image log generation information acquired in S143 by causing the image log API 28b to generate an image log corresponding to the image log generation information acquired in S143. good. In addition, the resident image log application 28e changes the image log generated by the image log API 28b according to the image log generation information acquired in S143, whereby the image corresponding to the image log generation information acquired in S143. A log may be acquired.

  The resident image log application 28e generates a log file obtained by encrypting the image log and job log acquired in S144 after the process of S144, and uses the generated log file as the image log transmission information acquired in S143. In response, the data is transmitted to the receive server 40. When the resident image log application 28e fails to send the log file to the receive server 40, the resident image log application 28e temporarily stores the failed log file in the storage unit 27, and when other log files that occur thereafter are sent, The log file on the storage unit 27 is also transmitted. Since the receive server 40 provides a web service for receiving the log file, the receive server 40 can receive the log file transmitted from the MFP 20. When receiving the log file from the MFP 20, the receive server 40 decrypts the received log file and acquires an image log and a job log. In the above, the resident image log application 28e transmits the log file obtained by encrypting the image log and the job log to the receive server 40. However, the image log and the job log are not encrypted, and the receive server 40 is encrypted. You may send to.

  As described above, since the MFP 20 provides the image log service 28d by the resident image log application 28e to the application 28f, the addition of the application 28f using the image log can be facilitated.

  The platform 28a permits the use of the image log service 28d by the application 28f based on the approval information on the use of the image log service 28d for the application 28f, that is, the application information 27h that has been approved for use of the image log (S81 to S82). That is, the MFP 20 restricts the use of the service by the resident image log application 28e, that is, the application 28f of the image log service 28d for each application 28f. Therefore, the MFP 20 can suppress a decrease in security due to the addition of the application 28f that uses the image log.

  Further, since the MFP 20 cannot directly use the image log API 28b from the application 28f by making the image log API 28b itself private to the application 28f, the security is reduced due to the addition of the application 28f using the image log. Can be suppressed.

  Further, since the MFP 20 provides the image log API 28b as the image log service 28d to the application 28f, the use of the image log API 28b by the application 28f is restricted by restricting the use of the image log service 28d by the application 28f. Can do. For example, the use of the image log service 28d is restricted based on the identification information of the user who executes the application 28f, or the use is restricted according to functions such as copying and scanning executed by the execution of the application 28f. be able to. Therefore, the MFP 20 can suppress a decrease in security due to the addition of the application 28f that uses the image log.

  The platform 28a changes the setting value of the image log service 28d via the application 28f, that is, changes of the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c are approved applications using the image log. Permit based on the information 27h (S71 to S73). That is, since the MFP 20 limits the change of the setting values of the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c via the application 28f for each application 28f, the application using the image log A decrease in security due to the addition of 28f can be suppressed.

  The MFP 20 automatically sets the application information 27h that has been approved for use of the image log by installing the application 28f (S61 to S63). Therefore, it is possible to suppress a decrease in security due to the addition of the application 28f that uses the image log.

  In this embodiment, the MFP 20 acquires the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c from the receive server 40 every time a job for processing an image is executed (S143). It is like that. However, the MFP 20 receives the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c from the receive server 40 at other timing such as when the MFP 20 itself is activated or when the user logs in. You may get The MFP 20 acquires the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c from the receive server 40 as the frequency of acquiring the image log generation setting value 44a, the image log generation information 44b, and the image log transmission information 44c increases. Changes in the values of the information 44b and the image log transmission information 44c can be appropriately reflected.

  The image processing apparatus of the present invention is an MFP in the present embodiment, but may be an image processing apparatus other than an MFP, such as a printer dedicated machine, a copy dedicated machine, a scanner dedicated machine, or a fax dedicated machine.

20 MFP (image processing device)
23 Scanner (image processing unit)
24 Printer (Image processing unit)
25 Fax communication department (image processing department)
27a Image processing device program 27b Platform program 27c Image log application program 27d Application program 27h Image log use approved application information (information on approval of service use for application)
28a platform 28b image log API
28d Image log service (service)
28e Resident Image Log Application (Image Log Application)
28f Application 44a Image log generation setting value (service setting value)
44b Image log generation information (service settings)
44c Image log transmission information (service setting value)

Claims (4)

An image processing unit for processing an image;
An image log application for obtaining an image log as a log of an image processed by the image processing unit;
A platform for operating an application including the image log application,
The platform provides services by the image log application to the application;
The image processing apparatus, wherein the platform permits use of the service by the application based on information on approval of use of the service for the application.   The image processing apparatus according to claim 1, wherein the platform permits the setting value change of the service via the application based on the information.   The image processing apparatus according to claim 1, wherein the information is set by installing the application. An image processing apparatus including an image processing unit that processes an image,
An image log application for obtaining an image log as a log of an image processed by the image processing unit; and
Function as a platform for operating applications including the image log application,
The platform provides services by the image log application to the application;
The program for an image processing apparatus, wherein the platform permits use of the service by the application based on information on approval of use of the service for the application.

Images