An image processing apparatus capable of preventing image processing from being performed on data for which an appropriate image processing cannot be carried out and improving the reliability of equipment signature. An MFP as the image processing apparatus reads an original, creates and stores electronic data, and stores electronic data created by an external unit. The electronic data created by the MFP is stored in association with MFP identification information. Electronic data created by the MFP among the stored electronic data is determined based on the MFP identification information. Execution of a function of the MFP on electronic data created by the external unit is restricted.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an image processing apparatus, an image processing method, and a storage medium storing a program for executing the method, and more particularly, to an image processing apparatus having a storage unit in which electronic data created by an external unit are saved.

2. Description of the Related Art

An image processing apparatus such as a digital multifunction peripheral (MFP) is conventionally able to save print data or document data obtained by scanning documents into a storage unit thereof and convert the saved data into an arbitrary electronic format for transmission.

Also proposed is a technique in which data saved into a storage unit of an image processing apparatus is added with an electronic signature unique to the image processing apparatus (hereinafter referred to as equipment signature) and transmitted to the outside (see, for example, Japanese Laid-open Patent Publication No. 2007-274404). Equipment signature verifies that data has been created by the image processing apparatus.

Incidentally, if a storage unit of an image processing apparatus is made open via network to external personal computers or other external units, digitized data/electronic data (hereinafter collectively referred to as electronic data) created by external units are saved into the storage unit as well as print data and document data created by the image processing apparatus. When data created by the image processing apparatus and external units are mixedly saved into the storage unit of the image processing apparatus, the following problems are posed.

For example, if data created by some external unit and stored in the image processing apparatus is added with equipment signature and transmitted to the outside, the reliability of equipment signature (more generally, identification information) is lowered.

Most of data created by external units cannot be image-processed by the image processing apparatus. Therefore, even if the image processing apparatus accepts a request for image processing on data created by some external unit, it cannot perform image processing on that data in some cases.

SUMMARY OF THE INVENTION

The present invention provides an image processing apparatus capable of preventing execution of image processing on data unable to be appropriately image-processed and capable of improving the reliability of identification information representing the image processing apparatus.

According to a first aspect of this invention, there is provided an image processing apparatus having a creation unit adapted to read an original and create electronic data, which comprises a storage unit adapted to store electronic data created by the creation unit and electronic data created by an external unit, the storage unit being adapted to store electronic data created by the creation unit in association with identification information representing the image processing apparatus, a determination unit adapted to determine electronic data created by the creation unit based on the identification information among electronic data stored in the storage unit, and a restriction unit adapted, based on a result of determination by the determination unit, to restrict execution of a function of the image processing apparatus on electronic data created by the external unit among electronic data stored in the storage unit.

According to a second aspect of this invention, there is provided an image processing method for an image processing apparatus having a creation unit adapted to read an original and create electronic data, which comprises a storage step of storing electronic data created by the creation unit in a storage unit in association with identification information representing the image processing apparatus, the storage unit being adapted to store electronic data created by the creation unit and electronic data created by an external unit, a determination step of determining electronic data created by the creation unit based on the identification information among electronic data stored in the storage unit in the storage step, and a restriction step of restricting, based on a result in the determination step, execution of a function of the image processing apparatus on electronic data created by the external unit among electronic data stored in the storage unit in the storage step.

According to a third aspect of this invention, there is provided a computer-readable storage medium storing a program for causing a computer to execute the image processing method according to the second aspect of this invention.

With this invention, it is possible to prevent image processing from being performed on data which cannot appropriately be image-processed, and the reliability of identification information representing the image processing apparatus, e.g., an equipment signature, can be improved.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

The present invention will now be described in detail below with reference to the drawings showing preferred embodiments thereof.

First, a description is given of an information processing system having image processing apparatuses each according to a first embodiment of this invention.

FIG. 1schematically shows the construction of the information processing system.

Referring toFIG. 1, the information processing system100includes a mail server101, an FTP server102, client PCs103,104, and MFPs105,106as image processing apparatuses. They are connected to a network107for communication with one another.

The mail server101has a function of transmitting an e-mail, transmitted from the client PC103or104or the like, to a transmission destination.

The FTP server102has a function of opening a folder on the server102via the network107.

The client PCs103,104are able to conduct FTP transmission of electronic data via the network107to a folder on the FTP server102.

MFPs105,106each have a function of copying a paper document and a function of converting image data of scanned document into an arbitrary file format and transmitting the resultant electronic data in the form of e-mail or transmitting it to a folder on the FTP server102.

FIG. 2shows in block diagram the hardware construction of each of the mail server101, FTP server102, client PCs103,104.

Referring toFIG. 2, the apparatuses101to104each include an arithmetic processing unit (CPU)201for arithmetic processing, a keyboard202for use by a user for data input, a display unit203for display of a computer screen, a mouse203manipulated by the user, a hard disk unit (HDD)205for data storage, a network interface unit206for communication with the network107, and a memory207for temporary data storage.

FIG. 3shows in block diagram the hardware construction of each of the MFPs105,106.

As shown inFIG. 3, the MFPs105,106each include an arithmetic processing unit (CPU)301for arithmetic processing, an operation unit302for use by a user for manipulation of the MFP105or106, an output image processing unit303for processing an input image, a printer unit304for outputting print data on a sheet of paper, a memory305for temporary data storage, a hard disk unit (HDD)306for storing (saving) electronic data, secret key, and public key certificate unique to device, etc., a network interface unit307for communication with the network107, a FAX communication unit308for FAX transmission, and an input image processing unit309for scanning a paper document.

There are a variety of methods to input electronic data to the hard disk unit306, such as a method for scanning a paper document by the input image processing unit309and inputting the resultant data into the unit306, a method for transmitting and storing into the hard disk unit306electronic data created by the client PC103or104or the like via the network107and the network interface unit307using SMB or FTP or other file transfer protocol, and a method for transmitting and storing into the hard disk unit306electronic data created by the client PC103or104or the like via the network107and the unit307in the form of print data. It should be noted that the method to input electronic data into the hard disk unit306is not limited to the above methods.

Next, a data save process executed by each MFP, e.g., MFP105, will be described.

FIG. 4shows in flowchart the data save process executed by the MFP105to save image data of a document scanned by the input image processing unit309.

In step S401inFIG. 4, a paper document (original) is scanned by the unit309of the MFP105. Then, image data of the scanned paper document is format-converted by the output image processing unit303into a file format (e.g., PDF or JPEG) specified by the user by manipulating the operation unit302(step S402), and the resultant electronic data is saved into the hard disk unit306(step S403). In step S404, a document management table shown inFIG. 5is updated based on the electronic data and is saved into the hard disk unit306separately from the electronic data.

As shown inFIG. 5, the document management table includes document IDs each associated with a set of document attributes and document attribute values. Each set of document attributes consist of creation date, file name, and origin of document. The attribute value of creation date is described by, e.g., year, month and date, the attribute value of file name is described by, e.g., a file name with extension, and the attribute value of the origin of document is described by, e.g., a character string that specifies an apparatus that created the document.

The document scanned by the input image processing unit309in step S401is guaranteed to have been created by the MFP105, and therefore, the attribute value of the origin of document is described by, e.g., a character string “device” indicating that the document has been created by the MFP105, i.e., indicating that the apparatus that created the document is the MFP105. In a case where a plurality of MFPs (MFPs105,106in this embodiment) are connected to the network107, the attribute value of the origin of each document may be described by an identifier (e.g., “device105” or “device106”) uniquely specifying the corresponding MFP.

On the other hand, in a case that electronic data created by the client PC103or104or the like is transmitted via the network107and saved into the hard disk unit306, the MFP105carries out a data save process other than, but similar to, that shown inFIG. 4. As a result, a corresponding part of the document management table is created to update the table and the updated table is saved into the hard disk unit306. In that case, the attribute value of the origin of document is described by, e.g., a character string “other” indicating that the document has been created by an apparatus other than the MFP105, i.e., indicating that the apparatus that created the document is an apparatus other than MFP105.

According to the above-described data save process, when electronic data is saved into the hard disk unit306, a document ID, attribute, and attribute value corresponding to the electronic data are stored into the document management table. By referring to the document management table and on the basis of the document ID, attribute, and attribute value corresponding to the electronic data (especially, the attribute value of origin of document), the MFP105is able to determine whether each electronic data (document) has been created by its own device or by a device of another apparatus.

Next, a description is given of a data transmission process, which is executed by the MFP105.

FIG. 6shows in flowchart the data transmission process executed by the MFP105to transmit electronic data of document selected by a user from among electronic data stored in the hard disk unit306.

In step S601inFIG. 6, the CPU301of the MFP105causes the operation unit302to display a selection screen shown inFIG. 8. The selection screen includes an icon area801in which icons that represent corresponding ones of the data saved in the hard disk unit306are indicated, a file name area802in which file names of the electronic data are indicated, and an origin area803in which origins of the electronic data are indicated. It should be noted that the display of documents on the selection screen can be scrolled by using roll up/down buttons on the right side of the screen and each icon in the icon area801can be indicated differently depending on whether the corresponding document was created by the MFP105.

Next, a determination process inFIG. 7, described below, is carried out (step S602).

FIG. 7shows in flowchart the determination process executed in step S602inFIG. 6.

In step S701inFIG. 7, the CPU301of the MFP105at least acquires attribute values of origins of documents indicated on the selection screen ofFIG. 8among the documents (electronic data) saved in the hard disk unit306. Next, for each document indicated on the screen, the CPU301determines whether an attribute value representing that the document has been created by the MFP105is set (step S702).

For one or more documents, if any, for each of which it is determined in step S702that an attribute value representing that the document has been created by the MFP105is not set, the CPU301determines whether the document is added with an equipment signature (identification information) of the MFP105, i.e., whether the document is embedded with an equipment signature (step S703). It should be noted that the MFP105has an equipment signature function for adding an electronic signature to electronic data by utilizing a secret key1601unique to the MFP105and a public key certificate1602, which are stored in the hard disk unit306of the MFP105as shown inFIG. 16.

For one or more documents, if any, for each of which it is determined in step S703that the document is added with an equipment signature, the CPU301determines whether the equipment signature is valid (step S704).

Next, one or more documents, for each of which it is determined in step S702that the attribute value representing that the document has been created by the MFP105is set or determined in step S704that the equipment signature is valid, are determined to have been created by the MFP105(step S705), whereupon the determination process inFIG. 7is completed.

On the other hand, one or more documents, for each of which it is determined in step S703that the document is not added with an equipment signature or determined in step S704that the equipment signature is not valid, are determined not to have been created by the MFP105(step S706), whereupon the determination process inFIG. 7is completed.

Referring toFIG. 6again, in step S603, the icons, file names and origins of documents are kept displayed on the selection screen inFIG. 8, but the icons and/or file names and/or origins of documents determined in step S602(determination process inFIG. 7) to have been created by the MFP105and those of documents determined in step S602to have been created by any apparatus other than the MFP105are displayed distinctively from one another. In the example inFIG. 8, the icons are displayed differently between documents created by the MFP105and documents created by other apparatuses.

When the user selects any of the documents indicated on the selection screen ofFIG. 8and depresses a transmission button804, a transmission screen shown inFIG. 9is displayed on the operation unit302(step S604). When a destination setting button901on the transmission screen is depressed, a destination setting screen (not shown) is displayed on the operation unit302to permit the user to select a desired transmission destination. The selected transmission destination is displayed on a transmission destination area902on the transmission screen. When a file format setting button903on the transmission screen is depressed, a file format setting screen shown inFIG. 11is displayed on the operating unit302to enable the user to set a file format for use in transmitting the selected document.

Next, it is determined whether the document selected by the user is one created by the MFP105(step S605).

If it is determined in step S605that the selected document is one created by the MFP105(YES to step S605), execution of a conversion function in which image processing such as character recognition (OCR) or high compression is executed and execution of an equipment signature function are permitted (step S606), where upon the data transmission process ofFIG. 6is completed. It should be noted that the character recognition (OCR), high compression, and equipment signature function can each be selected by depressing a corresponding one of an OCR button1101A, a high compression button1101B, and an equipment signature button1101C on the file format setting screen ofFIG. 11.

On the other hand, if it is determined in step S605that the selected document is one not created by the MFP105(NO to step S605), execution of the conversion function in which image processing such as character recognition or high compression is executed and execution of an equipment signature function are prohibited or restricted (step S607), whereupon the data transmission process ofFIG. 6is completed.

With the data transmission process inFIG. 6, execution of the conversion function requiring image processing is prohibited for a document not created by the MFP105, i.e., for a document on which the MFP105is unable to carry out image processing. Therefore, it is possible to prevent image processing from being performed on a document on which image processing cannot appropriately be performed. In addition, execution of the equipment signature function is prohibited for a document not created by the MFP105, and it is therefore possible to improve the reliability of equipment signature.

For the user-selected document determined in step S605in the data transmission process ofFIG. 6that it has not been created by the MFP105, the file format setting button903can be grayed-out as shown inFIG. 10so as not to be selectable.

Next, a description will be given of an information processing system including image processing apparatuses each according to a second embodiment of this invention.

The information processing system of this embodiment is different from the first embodiment only in that execution/non-execution of enforced equipment signature can be set to the MFP105as image processing apparatus. Therefore, different construction and operation will only be described below, with a duplicated description of construction and operation thereof omitted.

In the case of MFP105for which execution of enforced equipment signature is set, an equipment signature is always added to a document created by the MFP105and transmitted via network or the like to the outside of MFP105. It is therefore possible to correctly identify whether the document was created by the MFP105, whereby security can be improved.

Next, a data transmission process executed by each MFP, e.g., MFP105, of this embodiment will be described.

FIG. 12shows a flowchart of a data transmission process executed by the MFP105. The process inFIG. 12is basically the same as that shown inFIG. 6. The same steps as those shown inFIG. 6are denoted by the same step numbers, and steps different from those ofFIG. 6will only be described, with a duplicated description omitted.

As shown inFIG. 12, the same processing as that of steps S601to S603inFIG. 6is first carried out.

Next, the CPU301of the MFP105determines whether execution of enforced equipment signature is set to the MFP105(step S1201). If execution of enforced equipment signature is not set (NO to step S1201), the CPU301carries out the same processing as that of step S604and subsequent steps inFIG. 6.

If it is determined in step S1201that execution of enforced equipment signature is set (YES to step S1201), a transmission prohibition icon1301is indicated, as shown inFIG. 13, in the icon area801on the selection screen for each of documents determined in step S602not to have been created by the MFP105(step S1202). Namely, documents to which no equipment signature must be added at transmission are indicated distinctively from other documents, whereby security and user operability can be improved. In step S1202, instead of distinctively indicating documents to which no equipment signature must be added at transmission, such documents may not be indicated on the selection screen.

Next, the CPU301accepts a document selection by the user on the selection screen ofFIG. 13(step S1203).

Then, the CPU301determines whether the user's selected document is one that has been created by the MFP105(step S1204).

If it is determined in step S1204that the selected document is one created by the MFP105(YES to step S1204), when the transmission button804on the selection screen ofFIG. 13is depressed, the transmission screen shown inFIG. 9is displayed. Then, a transmission destination and file format set on the transmission screen are accepted (step S1205). When a transmission start button904on the transmission screen ofFIG. 9is depressed, the transmission of the selected document is started (step S1206). Since execution of enforced equipment signature is set, an equipment signature is added to the document to be transmitted by utilizing a secret key1601unique to the MFP105and a public key certificate1602, which are shown inFIG. 16and saved in the hard disk unit306of the MFP105(step S1207). Then, the data transmission process ofFIG. 12is completed.

On the other hand, if it is determined in step S1204that the selected document is one not created by the MPP105(NO to step S1204), transmission of the selected document (transmission function) is prohibited or restricted. For example, the transmission button804is grayed out as shown inFIG. 14, whereby the transmission button is disabled (step S1208). Then, the data transmission process ofFIG. 12is completed. It should be noted that when the answer to step S1204becomes NO, the process may proceed to step S1202for re-selection of document, instead of prohibiting the transmission of the document in step S2108.

With the data transmission process inFIG. 12, when the execution of enforced equipment signature is set to the MFP105, transmission of a document not created by the MFP105is prohibited. It is therefore possible to prevent the equipment signature from being added to a document other than a document created by the MFP105, thereby improving the security.

In the above described embodiments, in a case that the client PC103or104is adapted to display documents (electronic data) saved in the hard disk unit306of the MFP105, the client PC may not display documents (refer toFIG. 15) corresponding to those documents for which transmission prohibition icons1301are displayed on the selection screen ofFIG. 13. This makes it possible to prevent the client PCs103,104from acquiring documents whose transmission is prohibited, whereby the security can be improved.

It is to be understood that the present invention may also be accomplished by supplying a system or an apparatus with a storage medium in which a program code of software, which realizes the functions of the above described embodiments is stored and by causing a computer (or CPU or MPU) of the system or apparatus to read out and execute the program code stored in the storage medium. In that case, the program code itself read from the storage medium realizes the functions of the above described embodiments, and therefore the program code and the storage medium in which the program code is stored constitute the present invention.

Examples of the storage medium for supplying the program code include a floppy (registered trademark) disk, a hard disk, and a magnetic-optical disk, a CD-ROM, a CD-R, a CD-RW, a DVD-ROM, a DVD-RAM, a DVD-RW, a DVD+RW, a magnetic tape, a nonvolatile memory card, and a ROM. The program code may be downloaded via a network.

This application claims the benefit of Japanese Patent Application No. 2008-204573, filed Aug. 7, 2008, which is hereby incorporated by reference herein in its entirety.