Abstract:
A peripheral device has a mounting portion and a storage unit. The mounting portion is configured to mount a removable storage. The storage unit is configured to store data. The reading out unit reads out specific information from the removable storage medium when the removable storage medium is mounted to the mounting portion. The deletion unit deletes at least part of the data in the storage unit based on the specific information read out by the reading out unit.

Description:
CROSS REFERENCE TO RELATED APPLICATIONS  
       [0001]     This application claims priority from Japanese Patent Application No. 2006-101255 filed Mar. 31, 2006. The entire content of the priority application is incorporated herein by reference.  
       TECHNICAL FIELD  
       [0002]     The present invention relates to a peripheral device and a method for managing a data deletion authority. More particularly, the present invention relates to a peripheral device including an interface to which a removable storage medium can be connected, and a method for managing a data deletion authority.  
       BACKGROUND  
       [0003]     A printing device authenticates the user by using an operating panel and an IC (Integrated Circuit) card, and restricts functions including a function of deleting data. To be authenticated, the user with the IC card inputs a password and E-mail address by using the operating panel. One such device is disclosed in a document on the web (URL: http://www.sharp.co.jp/products/mx4501fn/text/security.html), Sharp Corporation. The published date of this document is unknown. However, the inventors of this application were familiar with this document at the time of Mar. 23, 2006.  
         [0004]     In addition, an image forming device, disclosed in U.S. Patent Application Publication No. 2005/213997 A1 (corresponding to Japanese Patent Application Publication No. 2005-301212) communicates with an IC tag mounted in a consumable part, and determines whether the consumable part mounting the IC tag can be used based on information obtained from the IC tag by the communication. If the consumable part cannot be used, the image forming device restricts the user from accessing information stored in a storage area of the IC tag mounted in the consumable part.  
       SUMMARY  
       [0005]     Aspects of the present invention relate to a peripheral device and a method for managing a deletion authority of data with mounting and removing removable storage medium but without inputting operation of a password, to achieve improved usability.  
         [0006]     In another aspect, the present invention provides a peripheral device and a method for managing a deletion authority of data, in which a deletion authority of data can be changed depending on a removable storage medium that a user has.  
         [0007]     In still another aspect, the present invention provides a peripheral device, a method for managing a deletion authority of data, and a program, in which data and a trace of data left undeleted in the peripheral device can be physically deleted, based on a deletion authority of data.  
         [0008]     In still another aspect, the invention provides a peripheral device. The peripheral device includes a mounting portion, a storage unit, a reading out unit, a deletion unit. The mounting portion is configured to mount a removable storage. The storage unit is configured to store data. The reading out unit reads out specific information from the removable storage medium when the removable storage medium is mounted to the mounting portion. The deletion unit deletes at least part of the data in the storage unit based on the specific information read out by the reading out unit.  
         [0009]     In still another aspect, the invention provides a peripheral device. The peripheral device includes a mounting portion, a storage unit, a reading out unit, a deletion authority specifying unit, and a permitting unit. The mounting portion is configured to mount a removable storage. The storage unit is configured to store data. The reading out unit reads out specific information from the removable storage medium when the removable storage medium is mounted. The deletion authority specifying unit specifies a deletion authority for specifying authority to delete data based on the specific information read out by the reading out unit. The permitting unit permits deletion of data in the storage unit based on the deletion authority specified by the deletion authority specifying unit.  
         [0010]     In still another aspect, the invention provides a method for managing deletion of data in a peripheral device which includes a mounting portion that is configured to mount a removable storage medium and a storage unit that is configured to store data. The method includes reading out specific information from the removal storage medium when the removable storage medium is mounted to the mounting portion and deleting at least part of the data in the storage unit based on the specific information read out from the removable storage medium.  
         [0011]     In still another aspect, the invention provides a method for managing deletion of data in a peripheral device which includes a mounting portion that is configured to mount a removable storage medium and a storage unit that is configured to store data. The method includes reading out specific information from the removable storage medium when the removable storage medium is mounted to the mounting unit, specifying a deletion authority for specifying authority to delete data based on the specific information read out from the removable storage medium, and permitting deletion of data in the storage unit based on the specified deletion authority. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0012]     Illustrative aspects in accordance with the invention will be described in detail with reference to the following figures wherein:  
         [0013]      FIG. 1  is a perspective view of an external appearance of a printing device according to an embodiment of the present invention;  
         [0014]      FIG. 2  is a block diagram of the printing device;  
         [0015]      FIG. 3  is an explanatory diagram showing details of a storage unit;  
         [0016]      FIG. 4  is a table showing a configuration example of a deletion authority management table;  
         [0017]      FIG. 5  is a table showing a configuration example of a printing data storage area;  
         [0018]      FIG. 6  is a block diagram showing a configuration of a personal computer for creating a delete command file;  
         [0019]      FIG. 7  is a flowchart showing a delete command file creation process in the personal computer for creating a delete command file;  
         [0020]      FIG. 8  is a screen shot showing an example of a display at the time of creating a delete command file;  
         [0021]      FIG. 9  is a table showing an example of a relationship between a delete command filename and a delete command;  
         [0022]      FIG. 10  is a screen shot showing an example of a display at the time of creating a delete command file after  FIG. 8 ;  
         [0023]      FIG. 11  is a table showing an example of a deletion method stored in the deletion authority storage unit;  
         [0024]      FIG. 12  is a flowchart showing a data delete setting process in the printing device;  
         [0025]      FIG. 13  is a screen shot showing an example of a display at the time of executing the data delete setting process;  
         [0026]      FIG. 14  is a screen shot showing an example of a display at the time of executing the data delete setting process after  FIG. 13 ;  
         [0027]      FIG. 15  is a table showing an example of an deletion range level stored in a deletion authority storage unit;  
         [0028]      FIG. 16  is a screen shot showing an example of a display at the time of executing the data delete setting process after  FIG. 14 ; and  
         [0029]      FIG. 17  is a flowchart showing a printing device process in the printing device. 
     
    
     DETAILED DESCRIPTION  
       [0030]     A peripheral device and a method for managing a data deletion authority according to some aspects of the invention will be described while referring to the accompanying drawings wherein like parts and components are designated by the same reference numerals to avoid duplicating description.  
         [0031]      FIG. 1  is a perspective view showing an external view of a printing device  1  which is a peripheral device according to an embodiment of the present invention. In the following description, the expressions “front”, “rear”, “upper”, “lower”, “right”, and “left” are used to define the various parts when the printing device  1  is disposed in an orientation in which it is intended to be used. In use, the printing device  1  is disposed as shown in  FIG. 1 .  
         [0032]     The printing device  1  includes a housing  2  and a paper feed tray  5 . The paper feed tray  5  is disposed on the lower part of the housing  2 . The paper feed tray  5  contains a stack of sheets of paper. The paper feed tray  5  can be mounted on the housing  2 , and can be removed from the housing  2  by being pulled out to the front direction of the printing device  1 .  
         [0033]     The printing device  1  includes an operating panel  20  and a USB (Universal Serial Bus) host I/F (interface)  16 . The operating panel  20  is disposed on the rear edge on the top surface of the printing device  1 . The operating panel  20  includes a displaying unit  14  and an operating unit  15 . The USB host I/F  16  is provided on a front surface of the printing device  1 . As shown in  FIG. 2 , a USB memory  3 , as a removable storage medium, is detachably installed (mounted) to the USB host I/F  16 . The USB memory  3  has a serial number (identification data) that identifies the USB memory  3 . The printing device  1  reads the serial number of the USB memory  3  when the USB memory  3  is mounted to the USB host I/F  16 .  
         [0034]      FIG. 2  is a circuit block diagram of the printing device  1 . The printing device  1  includes a control unit  11 , a recording unit  12 , a storage unit  13 , the displaying unit  14 , the operating unit  15 , the USB host I/F  16  and a shut off part  17 . The control unit  11  includes a CPU (Central Processing Unit)  11   a,  a ROM (Read Only Memory)  11   b,  a RAM (Random Access Memory)  11   c,  and peripheral circuits thereof. The recording unit  12  includes a photosensitive drum  12   a,  a lock part  12   b,  a shut off part  12   c,  a laser-beam system (not shown) and an ink-jet system (not shown). The lock part  12   b  mechanically locks the rotation of the photosensitive drum  12   a.  The shut off part  12   c  cuts out an electric power supply. The storage unit  13  is, for example, a hard disc drive (HDD). The displaying unit  14  includes a liquid-crystal display. The operating unit  15  includes a variety of operating buttons. The ROM  11   b  stores a control program  11   p.  The CPU  11   a  executes the control program  11   p  and therefore the printing device  1  carries out a variety of operations. The shut off part  17  includes a fuse  17   a.  The shut off part  17  shuts off the power supply of the printing device  1  by blowing up the fuse  17   a.  The recording unit  12  may includes a photosensitive belt instead of the photosensitive drum  12   a.    
         [0035]      FIG. 3  shows a detail of the storage unit  13 . The storage unit  13  includes a deletion authority storage area  13   a,  a printing data storage area  13   b,  a printing setting storage area  13   c,  and a common data storage area  13   d.  The deletion authority storage area  13   a  stores a deletion authority management table shown in  FIG. 4  (details thereof will be described later).  
         [0036]      FIG. 5  shows an example of a configuration of the printing data storage area  13   b.  The printing data storage area  13   b  stores data of the date and time of printing, a user ID of the user who carries out printing, and printed contents including the name of a printed file. The printing data storage area  13   b  may include a printing JOB number which is a serial number for each time of printing.  
         [0037]     The printing setting storage area  13   c  includes printing parameters necessary for printing. The printing parameters include a size of paper for printing, a direction of paper, a rate of enlargement or reduction in size, and a number of sheets of paper to be printed. The printing setting storage area  13   c  stores printing parameters for the printing carried out immediately before, or printing parameters for each user. The common data storage area  13   d  stores data including a printing template which is set in the printing device  1  regardless of users.  
         [0038]      FIG. 6  shows an example of a configuration of a personal computer (hereinafter, abbreviated merely as PC)  4  used for generating a delete command file. The PC  4  is configured as a well-known personal computer, and includes an HDD (abbreviated as HDD in  FIG. 1 )  51 , a USB host I/F  52 , a displaying unit  53 , an operating unit  54 , and a controlling circuit  40 . The controlling circuit  40  is connected to the HDD  51 , the USB host I/F  52 , the displaying unit  53 , and the operating unit  54 . The USB memory  3  can be detachably inserted into the USB host I/F  52 .  
         [0039]     The HDD  51  stores an OS program  51 S, an application program  51 A, a delete command file creating program  51 P, and other data necessary for operation of each program. The OS program  51 S functions as an operating system (OS) which operates the PC  4 . The application program  51 A operates on the OS. The delete command file creating program  51 P operates on the OS in a similar manner.  
         [0040]     The displaying unit  53  includes a displaying device such as a liquid crystal display and a CRT display. The operating unit  54  includes an operating means including a pointing device such as a mouse and a keyboard.  
         [0041]     A controlling circuit  40  includes a CPU  41 , a ROM  42 , a RAM  43 , an input/output interface (I/O)  44 , and a bus line  45 . The bus line  45  is connected to the CPU  41 , the ROM  42 , the RAM  43 , and the I/O interface  44 . The RAM  43  includes an OS work memory  43 S, an application work memory  43 A, and a work memory  43 P. The CPU  41  controls the PC  4  based on the OS program  51 S stored in the HDD  51 . The OS program  51 S is executed in the OS work memory  43 S as a working area on the RAM  43 . In addition, the application program  51 A and the delete command file creating program  51 P are executed in the application work memory  43 A and the work memory  43 P as a working area, respectively.  
         [0042]     A set of processes concerning deleting data in the present embodiment will be described. In summary, first, in a delete command file creating process, a delete command file is created and transferred to the USB memory  3  that is inserted to the PC  4 . Second, a deletion authority for the user of the USB memory  3  is set in the printing device  1  in a data delete setting process. When the USB memory  3  is inserted to the printing device  1 , the printing device  1  inquires the deletion authority of the command file in the USB memory  3 .  
         [0043]     The delete command file creating process on the PC  4  will be described in detail by using  FIG. 7 . The process is included in the delete command file creating program  51 P, and repeatedly executed together with other programs including the application program  51 A on the OS. First, when the USB memory  3  is inserted into the USB host I/F  42 , insert information showing insertion of the USB memory into the USB host I/F  42  is sent to the controlling circuit  40  from the USB host I/F  42  (S 201 ). Next, as shown in  FIG. 8 , a deletion authority setting screen including a USB memory serial number for identifying the USB memory  3 is displayed on the display of the displaying unit  53 . In S 202 , the user sets a level of a deletion range of the deletion authority on the deletion authority setting screen, and sets whether a backup is necessary or not by clicking a necessary button or an unnecessary button on the deletion authority screen.  
         [0044]      FIG. 9  shows an example of a relationship between a delete command filename and a delete command. As will be described hereinafter, contents of the delete command are shown by the delete command filename.  
         [0045]     (1) “PersonalDelete.cmd” shows a personal data delete command (without backup) and “PersonalDeleteSave.cmd” shows a personal data delete command (with backup). These are the delete command with the deletion range being Level 1.  
         [0046]     (2) “AllDelete.cmd” shows an all data delete command (without backup) and “AllDeleteSave.cmd” shows an all data delete command (with backup). These are the delete command with the deletion range being Level 2.  
         [0047]     (3) “PhysicalDelete.cmd” shows a physical trace delete command (without backup) and “PhysicalDeleteSave.cmd” shows a physical trace delete command (with backup). These are the delete command with the deletion range being Level 3.  
         [0048]     (4) “Destroy.cmd” shows a physical destruction command (without backup) and “DestroySave.cmd” shows a physical destruction command (with backup). These are the delete command with the deletion range being Level 4.  
         [0049]     In the present embodiment, the delete commands are classified into a delete command with backup and a delete command without backup. If the user selects the delete command with backup, the data to be deleted is can be backed up in the USB memory  3 , in case deleted data becomes necessary.  
         [0050]     For example, if the user selects the “Level 1” button and the “necessary” button and clicks the “OK” button on the display shown in  FIG. 8 , the delete command filename is “PersonalDeleteSave.cmd” (personal data erasing, with backup). The contents of the setting are retained in the work memory  43 P.  
         [0051]     Next, a screen shown in  FIG. 10  is displayed, and the user sets a deletion method within the deletion range set above as the deletion authority (S 203 ). The deletion method is defined, for example, as shown in  FIG. 11 .  
         [0052]     (i) Normal—For example, data such as 00h (h: hexadecimal number) is written in the deletion range once (data is written once in total).  
         [0053]     (ii) Intermediate—For example, 00h is written in the deletion range once and ffh is written in the deletion range once (data is written twice in total).  
         [0054]     (iii) DoD—This method complies with the standard of the US Department of Defense (DoD). For example, data is written in the deletion range in the order of 00h—ffh—designated data (512 byte) (data is written three times in total).  
         [0055]     (iV) NATO—This method complies with the standard of NATO (the North Atlantic Treaty Organization). Data is written in the deletion range in the order of 00h—ffh—00h—ffh—00h—ffh—designated data (512 byte) (data is written seven times in total).  
         [0056]     The set contents are retained in the work memory  43 P. That is, the set contents are stored in the delete command file. In addition, a security level is highest in the method (iv), and is lower and lower in the order of the methods (iii), (ii), and (i).  
         [0057]     Finally, the set contents retained in the work memory  43 P are sent to the USB memory  3  (S 204 ). That is, the delete command file is transferred and stored in the USB memory  3 . The deletion method is stored in the delete command file.  
         [0058]     A combination of the deletion range and the deletion method of the deletion authority may be decided at the user&#39;s own discretion without any particular limitation.  
         [0059]     The deletion authority may include only the deletion range. In this case, a process of step S 203  is skipped in the flowchart of  FIG. 7 . In addition, in this case, the delete command file to be created may be an empty file only having the filename.  
         [0060]     The data delete setting process in the printing device  1  is explained by using  FIG. 12 . The data delete setting process is included in the control program  11   p  and executed repeatedly together with other processes in the control program  11   p.  First, the operating unit  15  is operated to display a data delete setting screen shown in  FIG. 13  on the displaying unit  14 . In S 101 , in accordance with the guidance on the screen, the user sets the USB memory serial number. At this time, when the user ID or the volume label is stored in the USB memory  3 , the user ID may be set as well. Or, the user ID or the volume label may be set instead of the USB memory serial number.  
         [0061]     When the user inputs the USB serial number and presses “OK” button, a screen of setting a level of the deletion range as shown in  FIG. 14  is displayed. Then, in S 102 , the user sets a level. This level is same as the level of the deletion range of the deletion authority in the delete command file creating process carried out in the PC  4  described above. As shown in  FIG. 15 , Level 1 is the authority to delete only personal data, Level 2 is the authority to delete all data in the designated area of the storing unit  13 , Level 3 is the authority to physically erase a trace of data in the storage, for example a photosensitive drum  12  (or a photosensitive belt) in the recording unit  12 , and Level 4 is the authority to physically destroy the storage. The level with a larger number is a higher level, and the user having the deletion authority of a higher level can execute the deleting of a lower level as well. Data necessary for setting the level is stored in the deletion authority storage area  13   a.    
         [0062]     When the user selects a level of the deletion range and clicks “OK” button on the screen shown in  FIG. 14 , a screen of setting the deletion method as shown in  FIG. 16  is displayed. Then, the user sets the deletion method (S 103 ). The deletion method is as shown in  FIG. 11  described above, and data necessary for setting the deletion method is stored in the deletion authority storage area  13   a.    
         [0063]     In S 104 , when the user sets the deletion method and clicks the “OK” button, the above-set contents are stored in a free space of the deletion authority management table.  FIG. 4  shows an example of the configuration of the deletion authority management table. The deletion authority management table stores the USB memory serial number for identifying the USB memory  3 , the user ID for identifying the user using the USB memory  3 , the level of the deletion range in the deletion authority, the deletion method of the deletion authority and information to determine whether back up data is necessary. In addition, the deletion authority management table may include the volume label.  
         [0064]     A printing device process of the printing device  1  is explained by using  FIG. 17 . The printing device process is included in the controlling program  11   p  and repeatedly executed together with other processes included in the controlling program  11   p.  First, the controlling unit  11  determines whether the USB memory  3  is inserted into the USB host I/F  16 . If the USB memory  3  is not inserted into the USB host I/F  16  (S 301 : NO), the controlling unit  11  waits until the USB memory  3  is inserted into the USB host I/F  16 .  
         [0065]     On the other hand, if the USB memory  3  is inserted into the USB host I/F  16  (S 301 : YES), in S 302 , the controlling unit  11  reads out storage contents of the USB memory  3  to the RAM  11   c  to determine whether any unprocessed delete command file is included in the storage contents. To explain more particularly, the file read out from the USB memory  3  determines whether, for example, there is any unprocessed file included in the delete command file table which is stored in the deletion authority storage area  13   a  and has a similar configuration as the configuration shown in  FIG. 5 . If no unprocessed file is included in the delete command file table (S 302 : NO), the printing device process ends.  
         [0066]     If the delete command file is included in the file read out from the USB memory  3  (S 302 : YES), the controlling unit  11  reads out the serial number (S 303 ) and the deletion authority of the USB memory  3  (S 304 ) and carries out an inquiry for the deletion authority (S 305 ). More specifically, the controlling unit  11  searches for the deletion authority management table retained in the deletion authority storage area  13   a  by using the USB memory serial number as a key, and checks whether the USB memory serial number is registered. If the USB memory serial number is registered, the controlling unit  11  checks a level of the deletion authority corresponding to the USB memory serial Number.  
         [0067]     If the user ID or the volume label is stored in the USB memory  3 , the controlling unit  11  may refer to the user ID or the volume label stored corresponding to the USB memory serial number of the deletion authority management table. Thereby, the controlling unit  11  determines whether both of the user IDs match with each other. Only when both of the user IDs match with each other, the controlling unit  11  proceeds to the next step (S 304 ). If the user IDs do not match with each other, the process returns to step S 301 .  
         [0068]     Next, the controlling unit  11  determines whether the user having the USB memory  3  has the deletion authority of data based on a result of the inquiry for the deletion authority (S 306 ). To explain more specifically, the controlling unit  11  compares the level of the deletion authority, which is checked in S 305 , corresponding to the USB memory serial number with the level of the deletion authority of the delete command shown by the delete command file. That is, the controlling unit  11  determines whether the level of the deletion authority, which is checked in S 305 , corresponding to the USB memory serial number is equal to or higher than the level of the deletion authority of the delete command shown by the delete command file. Thereby, the controlling unit  11  determines whether the user has the deletion authority of data. If the user having the USB memory  3  does not have the deletion authority of data (S 306 : NO), that is, the level of the deletion authority (which is checked in S 305 ) corresponding to the USB memory serial number is lower than the level of the deletion authority of the delete command shown by the delete command file, the controlling unit  11  returns to S 301 .  
         [0069]     In a case where the deletion method is stored in the delete command file read out from the USB memory  3 , in S 306 , the controlling unit  11  may check whether the deletion method is within the deletion authority as well as whether the user has the deletion authority of data. That is, the controlling unit  11  compares the deletion method read out from the USB memory  3  with the deletion method corresponding to the USB memory serial number of the deletion authority management table. Then, if the deletion method read out from the USB memory  3  has a security degree equal to or higher than the deletion method corresponding to the USB memory serial number of the deletion authority management table, the controlling unit  11  determines that the user has the deletion authority.  
         [0070]     If the user having the USB memory  3  has the deletion authority of data (S 306 : YES), that is, the level of the deletion authority, which is checked in S 305 , corresponding to the USB memory serial number is equal to or higher than the level of the deletion authority of the delete command shown by the delete command file, the controlling unit  11  determines whether the delete command has a backup designation (S 307 ). More specifically, the controlling unit  11  determines whether there is a letter string “Save” at the end of the delete command filename except the extension “.cmd”. This is done by using a letter-string comparison method in well-known text data. At this time, if the delete command filename read out from the USB memory  3  does not match with the corresponding delete command filename in the deletion authority management table, the controlling unit  11  may return to step S 301 .  
         [0071]     If there is the backup designation in the delete command (S 307 : YES), that is, there is a letter string “Save” at the end of the delete command filename except the extension “.cmd”, in S 308 , data of the printing device  1  to be deleted by the delete command is retained in a predetermined area of the USB memory  3 . If there is no backup designation (S 307 : No), that is, there is no letter string “Save” at the end of the delete command filename except the extension “.cmd”, the controlling unit  11  skips S 308 .  
         [0072]     Finally, the delete command is executed to delete the corresponding data from the printing device  1  (S 309 ), and the controlling unit  11  returns to step S 301 .  
         [0073]     Hereinafter, details of the level of the deletion authority and the data deletion will be described.  
         [0074]     (1) In a case where the level of the deletion authority is Level 1  
         [0075]     Only printing data corresponding to the user ID in the printing data storage area  13   b  or the printing setting storage area  13   c  is erased.  
         [0076]     (2) In a case where the level of the deletion authority is Level 2  
         [0077]     All data in the printing data storage area  13   b,  the printing setting storage area  13   c,  and the common data storage area  13   d  is erased.  
         [0078]     (3) In a case where the level of the deletion authority is Level 3  
         [0079]     All electronic data and the physical trace of printing (a trace of printing data left undeleted on the photosensitive drum  12   a  (or the photosensitive belt) of the recording unit  12  (so called “ghost”), or a trace of data in the storage unit  13 ) are deleted. For example, as a method for deleting them, there is a method of printing a printable range of printing paper with “all black” for the predetermined number of sheets of paper.  
         [0080]     (4) In a case where the level of the deletion authority is Level 4  
         [0081]     In order to completely prohibit data from being taking out from the printing device  1 , all electronic data and the physical trace of printing are deleted, and further, the printing device  1  (including the photosensitive drum, the photosensitive belt of the recording unit  12 , and the storage unit  13 ) is physically disabled (destroyed) such that printing cannot be carried out. For example, the lock part  12   b  mechanically locks a rotation of the photosensitive drum included in the recording unit  12 , or the shut off part  17  shut off an electric power supply by blowing out the fuse  17   a.    
         [0082]     According to the embodiment descried above, when the USB memory  3  storing the command file is inserted into the USB host I/F  16 , the controlling unit  11  refers to the deletion authority management table that shows the relation between the level of the deletion authority and the USB memory serial number and that is registered in the printing device  1  in advance. The controlling unit  11  determines whether the user of the USB memory  3  has the deletion authority. If the user has the deletion authority of data, the data can be deleted by executing the delete command in the delete command file. Therefore, the user is not required to input a password for deleting the data, and the user may only need to insert the USB memory  3  into the USB host I/F  16 . Accordingly, the operability is significantly improved.  
         [0083]     In addition, the deletion authority management table showing the relation between the level of the deletion authority and the USB memory serial number registered in the printing device  1  in advance. Therefore, by rewriting the deletion authority management table, the deletion authority of data can be changed depending on the USB memory  3  that the user has.  
         [0084]     Further, by executing the delete command of the deletion authority of Level 3 and Level 4, even the trace of data left undeleted in the printing device  1  can be physically deleted. Thereby, the printing device  1  may have an advanced information security.  
         [0085]     According to the printing device  1  described above, data in the printing device  1  can be deleted based on the delete command file read out from the USB memory  3 . Since a means for deleting data other than this method is not provided, only the user having the USB memory  3 .  
         [0086]     Since data of the printing device  1  permits to be deleted based on a deletion authority of data, a function of deleting data can be controlled depending on the user&#39;s deletion authority of data.  
         [0087]     Since a physical trace of data stored in the printing device  1  can be deleted. Therefore, data does not leak from the printing device  1 .  
         [0088]     Further, the deleting operation can be carried out depending on the level of the deletion authority of data.  
         [0089]     Since data can be partially or completely deleted depending on the level. Therefore, the printing device  1  can manage the user authorized for the partial deletion and the user authorized for the complete deletion.  
         [0090]     The deletion authority of data is classified into four levels. Therefore, the deletion authority of data can be managed in detail.  
         [0091]     Since data to be deleted is backed up to the USB memory  3 , the user can prepare a case where deleted data becomes necessary.  
         [0092]     While the invention has been described in detail with reference to the above embodiments thereof, it would be apparent to those skilled in the art that various changes and modifications may be made therein without departing from the spirit of the invention.  
         [0093]     In S 202  of the deletion command file creating process in  FIG. 7  described above, the user sets level of a deletion range and whether a back up is necessary on the setting screen shown in  FIG. 8 . The user ID identifying the user using the USB memory  3  may be input on the setting screen as  FIG. 8  and may be stored in the USB memory  3 . In this manner, an authentication of the user can be carried out more precisely. In this case, the user ID is stored in the delete command file. In addition, a volume label of the USB memory  3  may be set.  
         [0094]     The setting of the delete command described above in the delete command file creating process is executed in the PC 4 . However the setting of the delete command and creating the delete command file in the USB memory  3  may be executable in the printing device  1 . In this case, such program is included in the control program  11   p,  and setting of the delete command is carried out by operating the operating unit  15  in accordance with what is displayed on the displaying unit  14 .  
         [0095]     In the embodiment described above, the printing device  1  is described as an example of the peripheral device. However, the present invention may similarly be applicable if the peripheral device is a peripheral device other than a printing device. For example, the present invention is applicable to a multifunction device in which a scanner function or a facsimile function is included in the printing device  1 . In this multifunction device, if the scanner function is included in the multifunction device, scanned image data and scan setting data are stored in the storage unit. In addition, if the multifunction device includes the facsimile function, a telephone directory of destinations (for each user or commonly used) and data of received facsimile documents are stored in the storage unit. The deletion is carried out by applying the classification of levels described above to the data.  
         [0096]     In addition, although a case of using the USB memory  3  as the removable storage medium has been described as an example, it is needless to say that the present invention is applicable in a similar manner if the removable storage medium is other removable storage media including a memory card.