Information processing method and apparatus for securely sharing personalized information

There is disclosed an apparatus capable of suitably deleting information of, e.g., an operation environment that is personalized in a given apparatus and handled in another apparatus and remains in it, thereby improving the operability and security. An information processing apparatus receives personalized information set in another information processing apparatus and stores the personalized information. A user who requests access to the stored personalized information is authenticated. A user who has passed authentication can obtain an operation environment based on the personalized information. Upon logout of the user or after the elapse of a predetermined time after access, the stored personalized information is erased.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an information processing method and apparatus for securely sharing personalized information.

2. Description of the Related Art

A current information processing apparatus (image processing apparatus) such as a digital multifunctional peripheral (MFP) has a number of functions. Examples of the functions are copying, printing from a personal computer (PC), mail send of documents scanned by a scanner, and storage of scanned documents. A user often saves the information of high frequently operation environments to improve the operability in using these functions of the image processing apparatus. For example, mail address tables and shortcuts of functions with high use frequency are formed.

However, a user does not always use only a specific image reading apparatus. In an environment where a user uses a plurality of image processing apparatuses, the same information must be input to image processing apparatuses to be frequently used.

In this method, however, since the same information must be set in each of image processing apparatuses that require input, the operation is very cumbersome.

An invention to solve this problem is disclosed in, e.g., Japanese Patent Laid-Open No. 2004-312302. According to this invention, in transmitting image data generated by reading a document image to a service on the Internet, service list information is acquired from an IC card, and set windows and set procedures are personalized for the operator. The various personalized settings are transmitted together with the image data.

However, although not mentioned in this prior art, the personalized information remains in other image reading apparatuses and causes a security problem. To solve this problem, conventionally, the user manually deletes information remaining on each image reading apparatus. However, this method depends on the user's manual operation, and the user may forget to delete information in some of a plurality of image reading apparatuses, leaving the security problem unsolved.

SUMMARY OF THE INVENTION

It is an object of the present invention to provide an apparatus for suitably deleting information of, e.g., an operation environment that is personalized in a given apparatus and handled in another apparatus and remains in it, thereby improving operability and security.

According to one aspect of the present invention, the foregoing problem is solved by providing an information processing apparatus comprising a reception unit adapted to receive operation environment information set in another information processing apparatus, a storage unit adapted to store the operation environment information, an authentication unit adapted to authenticate a user who requests access to the stored operation environment information, a setting unit adapted to set an operation environment based on the operation environment information if authentication is successful, and an erase unit adapted to erase the operation environment information from the storage unit on the basis of a condition after setting by the setting unit.

According to one aspect of the present invention, the foregoing problem is solved by providing an information processing apparatus that transmits operation environment information to another information processing apparatus, comprising an authentication unit adapted to authenticate a user, a selection unit adapted to select the other information processing apparatus to be permitted to access the information if authentication is successful, an information setting unit adapted to set details of operation environment information access to which should be permitted for the selected other information processing apparatus, an erase condition setting unit adapted to set a condition to erase the operation environment information and a transmission unit adapted to transmit the operation environment information to the other information processing apparatus selected by the selection unit.

According to one aspect of the present invention, the foregoing problem is solved by providing a method of causing a plurality of information processing apparatuses to share an operation environment, comprising the steps of receiving operation environment information set in another information processing apparatus, storing the operation environment information, authenticating a user who requests access to the stored operation environment information, setting an operation environment based on the operation environment information if authentication is successful and erasing the operation environment information stored in the storing step, on the basis of a condition after setting in the setting step.

According to another aspect of the present invention, the foregoing problem is solved by providing a method of causing a plurality of information processing apparatuses to share operation environment information, comprising the steps of authenticating a user, selecting an information processing apparatus to be permitted to access managed operation environment information if authentication is successful, setting details of operation environment information access to which should be permitted for the selected other information processing apparatus, setting a condition to erase the operation environment information and transmitting the operation environment information to the information processing apparatus selected in the selecting step.

DESCRIPTION OF THE EMBODIMENTS

In this embodiment, an information processing system in which a plurality of information processing apparatuses are connected on a network such as the Internet or a LAN, as shown inFIG. 38, will be described. In the following embodiment, an image reading apparatus will be exemplified as an information processing apparatus. Instead, a digital multifunctional peripheral (MFP) may also be used.

FIG. 1is a block diagram showing the detailed arrangement of an image reading apparatus in an information processing system according to an embodiment of the present invention.

The image reading apparatus according to this embodiment comprises a controller unit100, as shown inFIG. 1. The controller unit100inputs/outputs image information and device information by connecting a scanner170serving as an image input device and a printer195serving as an image output device and also a LAN111and a public line (WAN)151.

The controller unit100comprises a CPU101to control the overall apparatus, and a RAM102that provides the work area of the CPU101and temporarily stores image data. The controller unit100also comprises a ROM103to store a boot program, and an HDD (hard disk device)104that stores application programs such as a system program and image data.

In addition to the ROM103, RAM102, and HDD104, a VRAM105, operation unit I/F106, image bus109, network I/F110, and modem150are connected to the CPU101through a system bus107. The VRAM105is a memory to store an operation unit display image that is generated by the CPU101and displayed on an operation unit112. The operation unit I/F106serving as an interface to the operation unit (UI)112outputs, to the operation unit112, image data that is stored in the VRAM105and should be displayed on the operation unit112. The operation unit112transfers information input by the user to the CPU101. The network I/F110is connected to the LAN111to input/output information through the LAN111. The modem150is connected to the public line151to input/output information through the public line151.

The image bus109is a bus bridge that converts a data structure by connecting the system bus107to an image bus108to transfer image data at a high speed. The image bus108is formed from a PCI bus or IEEE1394. A raster image processor (RIP)160, device I/F120, scanner image processing unit180, printer image processing unit190, image rotating unit130, and image compression unit140are connected to the image bus108.

The raster image processor160rasterizes a PDL code to a bitmap image. The device I/F120is an interface to connect the scanner170and printer195serving as image input/output devices to the controller unit100and converts the synchronous/asynchronous system of image data. The device I/F120and scanner170are connected through a scanner interface171. The device I/F120and printer195are connected through a printer interface196. The scanner image processing unit180corrects, manipulates, and edits input image data. The printer image processing unit190executes printer correction and resolution conversion for print output image data. The image rotating unit130rotates image data. The image compression unit140compresses multivalued image data by JPEG and binary image data by JBIG, MMR, or MH and decompresses image data.

The arrangement of the operation unit112will be described next with reference toFIGS. 2 and 3.FIG. 2is a view showing the outer arrangement of the operation unit112.FIG. 3is a block diagram showing the detailed arrangement of the operation unit112and operation unit I/F106.

As shown inFIG. 2, the operation unit112has an LCD display unit202with a touch panel201bonded on it. The LCD display unit202displays the system operation window and software keys. When the portion of a displayed key is pressed, the LCD display unit202transmits the position information to the CPU101. The operation unit112has various kinds of hardware keys. The hardware keys include a start key203, stop key204, reset key205, ten-key pad206, clear key207, ID key208, guide key209, user mode key210, counter key211, power saving key212, and power key213.

The start key203is used to, e.g., start a document image reading operation. The start key203has a 2-color LED215of red and green at its central portion to indicate by the color whether the start key203is valid/invalid. The stop key204acts to stop an operation in progress. The reset key205is used to initialize the settings of the operation unit112. The ten-key pad206is used to input a numerical value and includes number keys of 0 to 9. The clear key207is used to clear an input numerical value. The ID key208is used by the user to input a user ID.

The guide key209is used to display help for setting and input method. The user mode key210is used to do special setting or detailed setting of the operation of the apparatus. The counter key211is used to confirm the number of paper sheets printed by the apparatus. The power saving key212is used to make the apparatus stand by and reduce power consumption. The power key213turns on/off the apparatus.

The operation unit112also has tally lamps216and217that blink or light up when the apparatus is operating or has an error. A power lamp218is provided on the operation unit112. The power lamp218lights up when the apparatus is powered on by the power key213.

As shown inFIG. 3, the operation unit I/F106has an input device controller301and an output device controller302. The input device controller301receives a user input from the touch panel201and a key group220(hardware keys203to213) of the operation unit112and transfer, to the CPU101, the received user input as operation contents. The CPU101generates display window data on the basis of the input operation contents and a control program (to be described later with reference to the flowchart inFIG. 8) stored in the HDD104. The generated window data is temporarily stored in the VRAM105and output to the LCD202through the output device controller302of the operation unit I/F106.

The CPU101supplies a control signal to the output device controller302in accordance with the control program on the basis of a user input or device state. The output device controller302turns on/off the LEDs215to218included in the LED group203.

FIG. 4is a block diagram showing the functional arrangement to process set data which is stored in the HDD104in the image reading apparatus shown inFIG. 1and related to access permission executed by the CPU101.FIG. 4shows the essential functions of the image reading apparatus shown inFIG. 1, with which a plurality of image reading apparatuses operate in cooperation with each other.

This functional arrangement is obtained by causing the CPU101to execute the control program stored in the HDD104. With this functional arrangement, processing corresponding to procedures shown inFIGS. 35,36, and37is executed.

A control unit401controls the overall apparatus on the basis of the program stored in the HDD104and executes various kinds of processing on the basis of contents set from the operation unit112.

User information402stores information to specify the user of the image reading apparatus. Box information403stores information about document storage one-layer folders (to be referred to as “boxes” hereinafter) stored in the image reading apparatus. Box document information404stores information about documents stored in each box of the box information403. Address table information405stores information about e-mail addresses. Device information406stores information about devices connected by the LAN111.

Customized information407stores information with access permission from a specific image reading apparatus to another image reading apparatus and information about the state. If information with access permission from a specific image reading apparatus to another image reading apparatus is present, security information408stores information about a method of deleting the information. Access information409stores information about keys for access permission from a specific image reading apparatus to another image reading apparatus.

A series of processing operations according to this embodiment will be described next with reference to window examples inFIGS. 5 to 26which are displayed on the LCD202. The processing is roughly divided into two flows.

The first processing uses the windows shown inFIGS. 5 to 11.FIGS. 5 to 11show windows (to be referred to as an access permission set window group in an “original” image reading apparatus hereinafter) to execute setting for permitting a remote device to access information. The windows shown inFIGS. 5 to 11are merely examples.

The second processing uses the windows shown inFIGS. 12 to 26.FIGS. 12 to 26show windows (to be referred to as a use window group in a “remote” image reading apparatus hereinafter) to be used when an information access permission is acquired from the remote image reading apparatus. The windows shown inFIGS. 12 to 26are examples.

Each window of the access permission set window group in the “original” image reading apparatus will be described first with reference toFIGS. 5 to 11. As a supplementary explanation for parts irrelevant to the spirit of the present invention, a description of software keys, buttons, list boxes, and messages in some windows will be omitted.

FIG. 5is a view showing a user authentication window501as an example of a window for user authentication of an original image reading apparatus. The window shown inFIG. 5has a user ID key502and a password key503as software keys. The window also has a user ID input field504and a password input field505as input fields. The user inputs the user ID and password to the fields and presses the ID key208. Then, user authentication is executed.

FIG. 6is a view showing a management menu601as an example of a menu window of remote access permission of the original image reading apparatus. Only a remote access permission key602as a software key related to the present invention will be explained here, and a description of irrelevant software keys will be omitted. When the user presses the remote access permission key602, display changes to the window shown inFIG. 7.

FIG. 7is a view showing a remote access permission menu window701as an example of a remote access permission setting start window of the original image reading apparatus. The remote access permission menu window701shown inFIG. 7is an example of a window before change to the menus shown inFIGS. 8,9, and10. Software keys include a remote access permission set key702and a “close” key703. When the user presses the remote access permission set key702, display changes to the window shown inFIG. 8. On the other hand, when the user presses the “close” key703, display returns to the window shown inFIG. 6.

FIG. 8is a view showing an example of a device selection list window801of the original image reading apparatus. The device selection list window801shown inFIG. 8is an example of a window to make the user select a device to permit access. This window has a device selection list802as a list and a domain search key803, group search key804, network-connected device search key805, “cancel setting” key806, “return” key807, and “next” key808as software keys. The domain search key803extracts and displays only devices set in a domain in the list. The group search key804extracts and displays only devices set in a group in the list. The network-connected device search key805extracts and displays devices connected to the Internet. The “cancel setting” key806cancels settings on this window and changes display to the precedingly displayed window. The “return” key807changes display to the previous window. The “next” key808changes display to the window shown inFIG. 9. In the device selection list802, one or a plurality of devices can be selected.

FIG. 9is a view showing an example of a customized information setting list window901of the original image reading apparatus. The customized information setting list window901shown inFIG. 9is an example of a window to set information for access permission from a remote image reading apparatus. This window has, as software keys, a box set key902, address table set key903, fixed operation button set key904, one-touch button set key905, mode memory set key906, “cancel setting” key907, “return” key908, and “next” key909.

Access permission of each item of the keys902to906can be set to ON or OFF. The “cancel setting” key907cancels settings on this window and changes display to the precedingly displayed window. The “return” key908changes display to the previous window. The “next” key909changes display to the window shown inFIG. 10. Even an item that is not displayed on this window can also be displayed on this window and selected if the item is customizable by the user and enables access permission from a remote site.

FIG. 10is a view showing an example of a security rule set window1001of the original image reading apparatus. The security rule set window1001shown inFIG. 10is an example of a window to set how to handle information inFIG. 9(to be referred to as a “security rule” hereinafter) on the device set inFIG. 8in the remote image reading apparatus.

Software keys include an “erase upon logout” key1002, “erase after predetermined time” key1003, “cancel setting” key1005, “return” key1006, an “OK” key1007. The window also has a time input field1004as an input field. In this window, whether to automatically erase information upon logout can be selected by pressing the “erase upon logout” key1002. Alternatively, whether to automatically erase information after a predetermined time can be selected by pressing the “erase after predetermined time” key1003and inputting a time to the input field. When the “cancel setting” key1005is pressed, settings on this window are canceled, and display returns to the precedingly displayed window. When the “return” key1006is pressed, display returns to the previous window. When the “determine” key is pressed, items set on the windows shown inFIGS. 8,9, and10are determined and saved in the original image reading apparatus. In addition, the window shown inFIG. 11is displayed.

In this embodiment, the erase timing upon logout and the erase timing after the elapse of predetermined time have been described as examples. However, any other timing such as automatic erase after the elapse of a predetermined number of days can also be set if the timing allows automatic erase.

An example of a window to issue an access permission key inFIG. 11will be described next.FIG. 11is a view showing an example of an access permission key issue window1101of the original image reading apparatus. The access key display window1101is a dialogue that displays a key to permit access from a “remote” image reading apparatus. When an OK key1102as a software key is pressed, the window closes, and display changes to the window shown inFIG. 6. The access key displayed on this window is transmitted to the device permitted to access.

The access permission set window group in the original image reading apparatus has been described above.

Each window of the use window group in the “remote” image reading apparatus will be described next with reference toFIGS. 12 to 26. The supplementary explanation is the same as that for the use window group in the “original” image reading apparatus.

Before displaying the window shown inFIG. 12, the user authentication window501is displayed even in the “remote” image reading apparatus to execute user authentication.FIG. 12is a view showing an example of an access permission authentication window1201of the remote image reading apparatus.FIG. 12shows an example of a window to execute authentication to acquire information with access permission from the “original” image reading apparatus. The window has a user ID key1202, password1203, access permission key1204, cancel key1208, and OK key1209as software keys. The window has a user ID input field1205, password input field1206, and access permission input field1207as input fields.

As the authentication method, the user ID input field1205receives input of the user ID obtained inFIG. 5. The password input field1206receives input of the password obtained inFIG. 5. The access permission input field1207receives input of the access permission key shown on the window1101. When the OK key1209is pressed, user authentication of the original image reading apparatus and authentication of the access permission key are executed. When the cancel key1208is pressed, display changes to one of the windows shown inFIGS. 23 to 25which is set as an initial display window without adding access-permitted information.

FIG. 13is a view showing a dialogue1301displayed when access permission authentication has failed on the window shown inFIG. 12. When an OK key1302as a software key is pressed, display changes to the access permission key input window1201. Access permission is impossible not only in case of mismatch of the access permission key but also, e.g., when the “original” image reading apparatus stops access permission. In this case, a dialogue like the dialogue1301is displayed to present a message indicating that access permission is impossible.

FIG. 14is a view showing an example of a copy initial window1401of the remote image reading apparatus.FIG. 14shows an example of a copy initial window displayed when the original image reading apparatus permits access. As software keys, preset keys1402and1403are displayed. When the user registers print setting conditions in advance in a preset key displayed on the copy window, he/she can easily utilize the complex print conditions any number of times. In this embodiment, setting is done such that a copy window1501shown inFIG. 15is displayed by pressing the preset key1402.

FIG. 15is a view showing an example of the copy window1501of the remote image reading apparatus, i.e., an example of a window developed from the copy initial window inFIG. 14. This window is displayed when the preset key1402is pressed, as described above. On this window, setting is done to execute copy from “double-sided” to “double-sided” in printing and print the print date on the lower side of the printed document.

FIG. 16is a view showing a “copy in progress” window1601of the remote image reading apparatus, i.e., an example of a window displayed when copy processing is actually being executed from the copy window. A dialogue to indicate the number of printed sheets, the number of copies, and the print status in actual copy is displayed on the “copy in progress” window1601.

FIG. 17is a view showing a box list window1701of the remote image reading apparatus, i.e., an example of a box initial window displayed when the original apparatus permits access. A box has the function of a one-layer folder capable of storing files. A box list1702shows the list of boxes. As software keys, box keys1703and1704to display the box number00are displayed. Referring toFIG. 17, the box keys1703and1704indicate that the boxes store access-permitted information.

FIG. 18is a view showing a file list window1801in a box of the remote image reading apparatus, i.e., an example of a window that lists files in a box. A file list1802shows the list of files. In the file list1802, one or a plurality of files can be selected. In the window example of this embodiment, a document titled “20050603 Proceedings” is selected from the file list1802, and a print key1803as a software key is pressed to display a print start window. A red mark in the file list window1801indicates that access-permitted information is stored.

FIG. 19is a view showing a file print window1901in the box of the remote image reading apparatus, i.e., an example of a window before a document is selected from the file list window1801in the box and printed. To start print on the file print window1901in the box, the user presses a print start key1902as a software key. Then, print starts.

FIG. 20is a view showing an example of a “print in progress” window2001of the remote image reading apparatus. A dialogue to indicate the number of printed sheets, the number of copies, and the print status in print is displayed on this window.

FIG. 21is a view showing a send window2101of the remote image reading apparatus, i.e., an example of a send initial window displayed when access is permitted. On the send window2101inFIG. 21, mail and facsimile send is possible. An address table key2102as a software key to display a window2201that displays an e-mail address table (to be described later).

FIG. 22is a view showing an example of the window2201that displays an e-mail address table of the remote image reading apparatus. A list box2203displays members belonging to the address table.

FIG. 23is a view showing an example of a window2301that displays the in-progress state of e-mail send of the remote image reading apparatus. Pieces of information including the page, reading size, and reading density are displayed on the window.

FIG. 24is a view showing an example of the copy initial window1401of the remote image reading apparatus.FIG. 24shows an example of the copy initial window displayed when access information acquisition has failed. The layout is the same as inFIG. 14.

FIG. 25is a view showing an example of the box initial window1701of the remote image reading apparatus.FIG. 25shows an example of the box initial window displayed when access information acquisition has failed. The layout is the same as inFIG. 17.

FIG. 26is a view showing an example of the send initial window2101of the remote image reading apparatus.FIG. 26shows an example of the send initial window displayed when access information acquisition has failed. The layout is the same as inFIG. 21.

The use window group in the “remote” image reading apparatus has been described above with reference toFIGS. 12 to 26.

The structures of piece of information necessary in this embodiment will be described next schematically with reference toFIGS. 27 to 34.

FIG. 27is a view schematically showing an example of the structure of the user information402.

Referring toFIG. 27, user information2701is data used on the user authentication window shown inFIG. 5. A system user ID2702is the identifier of internal data of user information. A user ID2703stores an ID to specify a user. A password2704stores a password to be used to authenticate a user ID.

FIG. 28is a view schematically showing an example of the structure of the box information403. Referring toFIG. 28, box information2801is box information displayed on the window shown inFIG. 17. A box number2802is the identifier of a box. A system user ID2803is data to specify a user who holds a box. A box name2804stores the name of a box. A use amount2805stores the data of the use amount of a box.

FIG. 29is a view schematically showing an example of the structure of the box document information404. Referring toFIG. 29, box document information2901is information of a box document displayed on the window shown inFIG. 18. A box number2902is the identifier of a box. A receipt number2903is the identifier of a box document. A document name2904store the name of a box document. A paper size2905stores a paper size. A page2906stores a page. A date/time2907stores a date/time.

FIG. 30is a view schematically showing an example of the structure of the address table information405. Referring toFIG. 30, address table information3001is information of an address table displayed inFIG. 22. An address number3002is the identifier of an address table. An address Gr3003is the identifier of a group to which an address table belongs. A name3004stores the name of an address. An address3005stores an e-mail address.

FIG. 31is a view schematically showing an example of the structure of the device information406. Referring toFIG. 31, device information3101is device information displayed inFIG. 8. A device number3102is the identifier of a device. A device name3103stores a device name. A group number3104stores the group number of a device. A domain number3105stores the domain number of a device. An IP address3106stores the IP address of a device. A security ID3107stores the identifier of associated security information.

FIG. 32is a view schematically showing an example of the structure of the customized information407. Referring toFIG. 32, customized information3201is information displayed inFIG. 9to set access permission. A system user ID3202is an identifier to specify a user who holds this information. A security ID3203is an identifier to specify security information associated with this information. A customized ID3204is the identifier of customized information settable for a plurality of devise. A display order3205stores the display order of windows. A customization type3206stores the type of customizable information. A customization state3207stores information representing whether to permit access.

FIG. 33is a view schematically showing an example of the structure of the security information408. Referring toFIG. 33, security information3301is information about security which is displayed and set inFIG. 10. A system user ID3302is an identifier to specify a user who holds this information. A security ID3303is an identifier to specify security information. A security type3304stores a type of how to erase information. An erase time3305stores a time unit erase.

FIG. 34is a view schematically showing an example of the structure of the access permission information409. Referring toFIG. 34, access permission information3401is information about an access permission key displayed inFIG. 11. A system user ID3402is an identifier to specify a user who holds this information. A security ID3403is an identifier to specify security information. An access permission key3404stores an access permission key for access from a “remote” image reading apparatus. A type3405stores data to determine whether the access permission has been transmitted or received. A state3406is used to manage the transmission and reception states.

The structures of piece of information necessary in this embodiment have been described above schematically with reference toFIGS. 27 to 34.

Two steps according to the embodiment of the present invention will be described next with reference toFIGS. 35 to 38. Of the two steps, the first step is a step of causing the “original” image reading apparatus to permit access from a “remote” image reading apparatus. The second step is a step of causing the “remote” image reading apparatus to execute an operation using access-permitted information in the original image reading apparatus.FIG. 38is a view for explaining the outline of processing in an information processing system comprising the image reading apparatus according to the embodiment of the present invention. Referring toFIG. 38, an original image reading apparatus3801and a remote image reading apparatus3802are connected to each other through a network3803. The flowcharts shown inFIGS. 35 to 37and the system configuration shown inFIG. 38will be referred to below.

FIG. 35is a flowchart for explaining an operation of causing the “original” image reading apparatus to set access information permission from the remote” image reading apparatus. The procedures shown inFIG. 35are executed by the control unit401.

First, when the controller unit100in the original image reading apparatus3801is activated, the control unit401displays the user authentication window501described inFIG. 5(step S3501). The control unit401executes user authentication (step S3502). User authentication is done by comparing data input to the user ID input field504on the user authentication window501with the user ID2703and data input to the password input field505with the password2704.

If user authentication has been done successfully in step S3502(YES), the flow advances to step S3503. If user authentication has failed (NO), the flow returns to step S3501to promote the user to input correct user ID and password again.

In step S3503, the management menu601is displayed. In step S3504, when the remote access permission key602on the management menu601is pressed, the flow advances to step S3505.

In step S3505, the remote access permission menu701is displayed. In step S3506, when the remote access permission set key702on the remote access permission menu701is pressed, the flow advances to step S3507.

In step S3507, the device access permission window801is displayed. In step S3508, a device is selected from the device selection list802on the device access permission window801. When the “next” key808is pressed, the device information3101is updated, and the flow advances to step S3509.

In step S3509, the access permission information setting list window901is displayed. In step S3510, pieces of information to be subjected to access permission are set by setting ON/OFF on the access permission information setting list window901. When the “next” key909is pressed, the customized information3201is updated, and the flow advances to step S3511.

In step S3511, the security rule window1001is displayed. In step S3512, the “erase upon logout” key1002or the “erase after predetermined time” key1003and time input field1004are set to set automatic erase on the “remote” image reading apparatus. When the “OK” key1007on the security rule window1001is pressed, the security information3301is updated, the access permission information3401is added, and the flow advances to step S3513.

In step S3513, the access permission key3404generated on the basis of the access permission information3401is displayed on the access key permission window1101. In step S3514, the customized information3201, security information3301, and access permission information3401are transmitted to a device selected on the basis of the device information3101.

The step of causing the “remote” image reading apparatus3802to perform an operation using access-permitted information of the “original” image reading apparatus3801will be described next with reference toFIGS. 36 and 37.

FIG. 36is a flowchart for explaining processing procedures using access-permitted information in the “remote” image reading apparatus3802. The processing procedures shown inFIG. 36are executed by the control unit401. Processing in steps S3601and S3602in the flowchart shown inFIG. 36is the same as that in steps S3501and S3502, and a description thereof will be omitted.

In step S3603, an access permission key is received, and it is determined whether reception has successfully been done. If reception is successful (YES), access-permitted information is used, and the flow advances to step S3604. If reception has failed (NO), the flow advances to step S3607. In this case, it is determined that the access-permitted information cannot be received, and the normal initial window of the image reading apparatus is displayed.

In step S3604, the access permission authentication window1201is displayed. In step S3605, authentication and acquisition of access-permitted information are executed on the access permission authentication window1201, and it is determined whether authentication and acquisition have successfully been done. In authentication processing, the user ID and password input in the access permission authentication window are compared with data in the “original” image reading apparatus, and the access permission key is compared with data in the “remote” image reading apparatus.

If authentication has been done successfully (YES), access-permitted information is acquired from the “original” image reading apparatus (step S3606). If authentication has failed (NO), the flow advances to step S3607.

In step S3607, various kinds of processing are executed. Details of the processing in step S3607will be described later with reference to the flowchart inFIG. 37.

After the end of the processing in step S3607, the flow advances to step S3608. In step S3608, it is determined whether access-permitted information is received. If access-permitted information is received (YES), the flow advances to step S3609to delete the access-permitted information. If reception has failed (NO), the processing of this flowchart is ended.

Details of the processing in step S3607will be described next.FIG. 37is a flowchart for explaining details of the processing in step S3607of the flowchart inFIG. 36.

First, it is determined whether processing (in this embodiment, one of copy, box, and send) to be executed in this flowchart is present (step S3701). If processing to be executed is present, one of copy, box, and send is continued. Any other processing may be continued, as a matter of course.

If “YES” is selected, and copy processing is executed, the flow advances to step S3702. In step S3702, it is determined whether access information is present. If access information is present (YES), the copy initial window1401with added access information is displayed in step S3703. If no access information is present, a copy initial window2401without added access information is displayed in step S3704. In step S3705, copy processing is executed.

If “YES” is selected in step S3701, and box processing is executed, the flow advances to step S3706. In step S3706, it is determined whether access information is present. If access information is present (YES), the box list window1701with added access information is displayed in step S3707. If no access information is present (NO), a box initial window2501without added access information is displayed in step S3708. In step S3709, box processing is executed.

If “YES” is selected in step S3701, and send processing is executed, the flow advances to step S3710. In step S3710, it is determined whether access information is present. If access information is present (YES), the send list window2101with added access information is displayed in step S3711. If no access information is present (NO), a send initial window2601without added access information is displayed in step S3712. In step S3713, send processing is executed.

As described above, in this embodiment, setting information that the user normally uses on the image reading apparatus3801can be used even in another device (in this embodiment, the image reading apparatus3802). In addition, the information can automatically be erased on another device. Hence, operability for the user can largely be improved, and operability convenient from the viewpoint of security can be provided.

As described above, according to this embodiment, information of, e.g., an operation environment that is personalized in a given apparatus and handled in another apparatus and remains in it can suitably be deleted so that the operability and security are improved. User information of a specific image reading apparatus can be used even in another image reading apparatus. Hence, information that is usable so far only in a specific image reading apparatus can be used in another image reading apparatus without any cumbersome operation.

According to this embodiment, a mechanism for automatically erasing user information developed in another image reading apparatus can be set. With this arrangement, any omission of erase operation that is manually executed so far can be prevented, and the security can be strengthened. As a result, user information in a specific image reading apparatus can be used safely in another image reading apparatus. In addition, the user information can automatically be deleted from another image reading apparatus after the end of processing. Hence, the cumbersomeness of conventional user operation can be reduced, and the convenience for the user and the security can be improved.

This application claims the benefit of Japanese Patent Laid-Open No. 2005-217395, filed on Jul. 27, 2005, which is hereby incorporated by reference herein in its entirety.