Image-forming device, method for controlling image-forming device, terminal, method for controlling terminal, and computer program

An image-forming device comprises an identifier-storage unit for storing an identifier in correlation with one of a plurality of feeding units on which at least one sheet used for image-forming processing is loaded, a specification unit for specifying the feeding unit by using the identifier, and a usability-determination unit for determining whether use of the specified feeding unit is permitted, where the image-forming device forms an image by feeding the sheet from the specified feeding unit based on the determination result made by the usability-determination unit.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an image-forming device and a terminal, and particularly relates to a method for restricting use of a predetermined feeding cassette of the image-forming device.

2. Description of the Related Art

Currently, where printing is performed using forms or the like by a known image-forming device, such as a known printer, a sheet used for the printing often has a special value. For example, the sheet may have a preprint pattern thereon, so as to assure the value of a printed matter obtained by the printing, or the sheet may be watermarked, so as to assure the originality of the printed matter.

The sheet having the special value may be a receipt printed on a special sheet, or a certificate document that is issued by a public office and that is printed on the special sheet, for example. Although it is difficult to replicate the sheet, it is easy to falsify information that is printed on the sheet, where the information includes, for example, characters and rules. Therefore, once the special sheet is obtained, the above-described receipt and certificate document can be easily replicated.

In the past, the above-described special sheet including a pre-printed sheet, a watermarked sheet, and so forth was often placed in a predetermined sheet cassette of the image-forming device. If a user wanted to use the special sheet, the user explicitly specified the sheet cassette in which the special sheet is placed as a feeding source, and performed printing. However, there has always been a danger that a printed matter having a special value and/or meaning may be replicated with ease, once the special sheet is obtained and used.

Japanese Patent Laid-Open No. 5-169745, Japanese Patent Laid-Open No. 7-144822, and Japanese Patent Laid-Open No. 9-220842 have proposed protecting a printed matter from theft by locking a discharge bin. However, these methods are ineffective for a person who issues a print request for an unauthorized purpose.

Accordingly, a function of controlling an access to a predetermined feeding cassette during printing has been needed. For achieving the above-described function, predetermined conditions for specifying the predetermined feeding cassette must be precisely set up, at the time where a function of specifying one of feeding cassettes of the image-forming device and performing printing is provided.

It is essential that the user not be able to perform printing by specifying the feeding cassette via predetermined print software.

Further, if the above-described conditions are met, feeding from the predetermined feeding cassette and printing by using a sheet placed therein should be allowed. Further, access to the predetermined feeding cassette should be physically restricted so that the user cannot take a sheet out of the predetermined feeding cassette.

SUMMARY OF THE INVENTION

Accordingly, the present invention allows controlling access to a predetermined feeding cassette for printing.

The present invention provides an image-forming device including an identifier-storage unit configured to store an identifier in correlation with each of a plurality of feeding units on which at least one sheet used for image-forming processing is loaded, a specification unit configured to specify the feeding unit by using the identifier, a usability-determination unit configured to determine whether use of the specified feeding unit is permitted, and an image-forming unit configured to feed the sheet from the specified feeding unit and performing printing by using the fed sheet based on the results of the determination made by the usability-determination unit.

For example, the identifier-storing unit can assign a first password to each of the feeding units and store the first passwords in correlation with the feeding units. The image-forming device can further include a password-reception unit configured to receive a second password transmitted from an external device. The usability-determination unit can determine whether the first password assigned to the specified feeding unit is necessary. Where it is determined that the first password is necessary, the usability-determination unit can check the first password corresponding to the specified feeding unit against the second password and determine whether the specified feeding unit is usable based on the check result.

In another aspect, the image-forming device can further include a transmission unit configured to transmit information about at least one of the feeding units according to at least one request transmitted from the external device and an identifier-reception unit configured to receive the identifier that is correlated with the feeding unit and that is transmitted from the external device. The identifier-storage unit can store the identifier received by the identifier-reception unit in correlation with the feeding unit.

In still another aspect, the image-forming device can further include an identifier-encryption unit configured to encrypt at least one of the identifiers stored in the identifier-storage unit.

Here, for example, the identifier-encryption unit can encrypt the identifier corresponding to at least one of the plurality of feeding units based on encryption-request information, where the encryption request information is transmitted with the identifier to the identifier-reception unit.

In still yet another aspect, the image-forming device can further include a locking unit configured to physically lock at least one of the plurality of feeding units.

The present invention provides a terminal including a communication unit configured to communicate with at least one image-forming device, an identifier-acquisition unit configured to acquire a predetermined identifier of at least one feeding unit of the image-forming device via the communication unit, a feeding-unit setting unit configured to set a desired feeding unit according to the identifier acquired by the identifier-acquisition unit, and an identifier-transmission unit configured to transmit the identifier corresponding to the feeding unit set by the feeding-unit setting unit to the image-forming device via the communication unit.

Here, for example, the identifier-acquisition unit can acquire at least one encrypted identifier and at least one non-encrypted identifier and produce a display image of the feeding unit and the identifier thereof on a display unit based on the non-encrypted identifier. The identifier-transmission unit can transmit the encrypted identifier corresponding to the feeding unit set by the feeding-unit setting unit.

In another aspect, the terminal can further include a password-transmission unit configured to set a predetermined identifier and a predetermined password corresponding to the feeding unit and transmitting the predetermined identifier and the predetermined password to the image-forming device via the communication unit. The identifier-transmission unit can transmit the password corresponding to the feeding unit set by the feeding-unit setting unit.

Here, for example, the identifier-transmission unit can transmit the identifier and the password with print data whose image is formed by the image-forming device.

In yet another aspect, the terminal can further include a display unit configured to provide at least one user interface for encouraging password supply, where a request for password supply is transmitted from the image-forming device via the communication unit.

The present invention provides a method for controlling an image-forming device. The method includes storing a predetermined identifier in correlation with one of a plurality of feeding units on which at least one sheet used for image-forming processing is loaded, specifying at least one of the feeding units by using the identifier, determining whether use of the specified feeding unit is permitted, and forming at least one image by feeding the sheet from the specified feeding unit and performing printing based on the results of the determination.

The present invention provides a method for controlling a terminal. The method includes acquiring a predetermined identifier of at least one feeding unit of an image-forming device, setting a desired feeding unit based on the acquired identifier, and transmitting the identifier corresponding to the set feeding unit to the image-forming device.

The present invention provides a computer program for carrying out a method for controlling an image-forming device. The method includes storing a predetermined identifier in correlation with one of a plurality of feeding units on which at least one sheet used for image-forming processing is loaded, specifying at least one of the feeding units by using the identifier, determining whether use of the specified feeding unit is permitted, and forming at least one image by feeding the sheet from the specified feeding unit and performing printing based on the results of the determination.

The present invention provides a computer program for carrying out a method for controlling a terminal. The method includes acquiring a predetermined identifier of at least one feeding unit of an image-forming device, setting a desired feeding unit based on the acquired identifier, and transmitting the identifier corresponding to the set feeding unit to the image-forming device.

DESCRIPTION OF THE EMBODIMENTS

First Embodiment

FIG. 17is a block diagram showing an example of the image-forming device of the present invention, where the provided image-forming device is a printer. An image input-and-output device1600is connected to computers1720and1730that are client terminals via a local area network (LAN)1710such as Ethernet®.

The image-forming device includes a reader unit1602for reading image data, a printer unit1604for outputting the image data, an operation unit1707having keys used for inputting and outputting the image data, a liquid-crystal touch panel for producing display images of image data and/or various functions (not shown), and a hard disk1608with a control program, image data, and so forth that were stored therein in advance. The reader unit1602includes a document feeding unit1610and a scanner unit1611. The image-forming device further includes a controller unit1702that is connected to the above-described elements and that controls the above-described elements.

The controller unit1702functions as a scanner for converting the image data read by the reader unit1602into code data and transmitting the code data to the computers1720and1730and/or other terminals (not shown) on the LAN1710via the LAN1710. The controller unit1702also functions as a printer for converting the code data transmitted from the computers1720and1730, and other terminals (not shown) via the LAN1710into image data and transmitting the image data to the printer unit1604. The controller unit1702includes other functional blocks (not shown).

FIG. 16illustrates an internal configuration of the image-forming device1600, so as to show the details of the reader unit1602and the printer unit1604. The reader unit1602is mounted on the printer unit1604. In the reader unit1602, document sheets stacked on a document-feeding unit1610are transmitted onto a platen glass1615in sequence from the top on a one-by-one basis in the order in which the document sheets are laminated. After a scanner unit1611reads a document sheet by performing a predetermined reading operation, the read document sheet is transmitted from the platen glass1615and discharged to the document-feeding unit1610.

Further, in the above-described scanner unit1611, a document sheet is transmitted onto the platen glass1615, and a lamp1616comes on. Then, an optical unit1617starts moving, so that the document sheet is irradiated from downward with the light of the lamp1616and scanned. Then, light reflected off the document sheet is led to a charge-coupled device (CCD) image sensor1622via a plurality of mirrors1618,1619, and1620, and a lens1621. Hereinafter, the CCD image sensor1622will be simply referred to as the CCD1622. The scanned document image is read by the CCD1622.

Then, the image data read by the CCD1622is subjected to predetermined processing, and transferred to the controller unit1702shown inFIG. 17. Otherwise, the lamp1616comes on, the optical unit1617starts moving, and the document sheet placed on the platen glass1615is irradiated from downward with the light of the lamp1616and scanned, so that the scanned document image can be read by the CCD1622. The image data transmitted from the reader unit1602in the above-described manner is transmitted to the controller unit1702.

Next, in the printer unit1604, laser light corresponding to the image data transmitted from the controller unit1702is generated from a laser-light emission unit1624driven by a laser driver (not shown), and a photoconductive drum1625is irradiated with the laser light, so that an electrostatic-latent image corresponding to the laser light is generated on the photoconductive drum1625. Further, a developer adheres to the electrostatic-latent image through a developer unit1626.

On the other hand, upon starting the laser-light irradiation, a recording sheet is transmitted from either a feeding cassette1612or a feeding cassette1613and transferred to a transfer unit1627so that the developer adhered to the photoconductive drum1625is transferred to the recording sheet. The recording sheet to which the image data is transferred is carried to a fuser unit1628, and heated and pressurized therein. Subsequently, the image data is fused to the recording sheet.

Where the image data is recorded on a single side of the recording sheet, the recording sheet that had passed through the fuser unit1628is discharged to a discharge unit1614by a discharge roller1629. The discharge unit1614binds and sorts discharged recording sheets. Further, the discharge unit1614performs finishing processing such as stapling for the sorted recording sheets.

Further, where the image data is recorded on both sides of the recording sheet, the recording sheet is carried to the discharge roller1629, and the rotation direction of the discharge roller1629is reversed, so that the recording sheet is led to a refed-sheet transmission passage1631by a flapper1630. The recording sheet led to the refed-sheet transmission passage1631is transmitted to the transfer unit1627in the above-described manner.

FIG. 18is a block diagram illustrating the configuration of the controller unit1702. The controller unit1702is connected to the reader unit1602functioning as an image-input device and the printer unit1604functioning as an image-output device. The controller unit1702is further connected to the LAN1710and a public line1851including a wide-area network (WAN), so as to input and output image information and/or device information. A central processor unit (CPU)1801is a controller that controls the entire system. A random access memory (RAM)1802is a system work memory necessary for the CPU1801operating and an image memory for temporarily storing image data. A read only memory (ROM)1803is a boot ROM storing a boot program of the system. A hard-disk drive (HDD)1804is a hard disk drive storing a system software, image data, and so forth. An operation-unit interface (I/F)1806is the interface between the controller unit1702and a user interface (UI)1707. The operation-unit I/F1806transmits image data to the UI1707so that the display image of the image data is produced on the UI1707. Further, the operation unit I/F1806transmits information inputted by a user through the UI1707to the CPU1801. A network interface card (NIC)1810is connected to the LAN1710, so as to input and output information. A modem1850is connected to the public line1851, so as to input and output information. A scanner-and-printer-communication I/F1809is an interface for performing communications between the controller unit1702and a CPU (not shown) including the reader unit1602and the printer unit1604. The above-described devices are arranged on a system bus1807.

An image bus I/F1805is a bus bridge that connects the system bus1807to an image bus1808for transferring the image data with high speed, so as to convert the data configuration. The image bus1808includes a PCI bus, or an IEEE 1394. The following devices are arranged on the image bus1808. A raster image processor (RIP)1860expands a page-description-language (PDL) code into a bit-map image. A device I/F1820connects the reader unit1602, the printer unit1604, and the controller unit1702to one another, so as to convert the image data between synchronous system and asynchronous system. A scanner-image processing unit1880performs modification, processing, and edits for image data transmitted thereto. A printer-image processing unit1890performs a corrective action for the printer, resolution conversion, and so forth for the data on an image transmitted from the printer. An image-rotation unit1830rotates the image data. An image-compression unit1840performs compression-and-extension processing for image data. That is to say, the image-compression unit1840uses the joint photographic experts group (JPEG) method for multilevel image data and the joint bi-level image experts group (JBIG) method, the modified-modified read (MMR) method, and the modified Huffman (MH) method for binary image data.

A Web-server unit1812functions, as a hyper-text transfer protocol (HTTP) server for presenting Web contents including a hyper-text markup language (HTML) file or the like stored in the HDD1804to a Web client. The Web-server unit1812may be provided in the controller unit1702as a freestanding hardware block. Otherwise, the same function as that of the Web-server unit1812may be achieved by storing software executing the Web-server function in the ROM1803and/or the HDD1804, loading the software into the RAM1802, and having the CPU1801execute the software.

FIG. 1is a block diagram illustrating an example configuration of the hardware of each of the information-processing apparatuses, that is, the computers1720and1730shown inFIG. 17. Each of the computers1720and1730can be used for a form-printing system according to the embodiment of the present invention.

Each of the computers1720and1730is a computer system such as a personal computer (PC). The main part of the computer includes a central-processing unit (CPU)12, a memory13including a RAM and/or a ROM functioning as a main memory, an external memory15including a floppy-disk (FD) drive, a hard-disk (HD) drive, and so forth, an input device11such as a keyboard, a mouse, and so forth, a display unit14including a cathode-ray-tube (CRT) display or the like, and an external input-and-output interface16connected to an external network or the LAN1710. A Web browser, that will be described later, has its own software installed in the memory13.

Each of the computers1720and1730operates, where the CPU12thereof executes a basic input/output (I/O) program, an operating system (OS), and a program. The basic I/O program is written into the memory13and the OS is written into the external memory15. Further, when the power of each of the computers1720and1730is turned on, the OS is loaded from the external memory15into the memory13by the initial-program-loading (IPL) function of the basic I/O program, and the OS begins operating.

The program is program code generated based on a flowchart illustrating controlling steps shown in a drawing described below. According to this embodiment, the control program and related data are stored in an FD or the external memory15.FIG. 2shows a memory map30of the stored control program and related data. Volume information31, directory information32, control-program execution file33and control-program-related-data file34are stored in FD15.

The control program and related data stored in the FD can be loaded into each of the computers1720and1730via the FD drive or the external memory15, as shown inFIG. 1. Where the FD is inserted into the FD drive or the external memory15, the control program and the related data are read from the FD drive or the external memory15under the control of the OS and the basic I/O program and loaded into the RAM or the memory13, whereby the control program becomes operable.

FIG. 3denotes a memory map40in the state where the control program is loaded into the RAM or the memory13and becomes operable. Basic program41, operating System (OS)42, control program43, data area44and work area45are stored in RAM13. According to this embodiment, the control program and/or the related data are directly loaded from the FD into the RAM or the memory13and executed. However, the control program and the related data may be stored in the HD or the external memory15and loaded into the RAM or the memory13from the HD or the external memory15. Further, a medium storing the control program may be an optical disk, an IC-memory card, and so forth. Further, the control program may be stored in the ROM or the memory13so that the control program is directly executed by the CPU12.

Next, the embodiment will be described in detail with reference to the attached drawings.

FIG. 4shows part of each of the feeding cassettes1612and1613of the image-forming device1600shown inFIG. 16. According to this embodiment, each of the feeding cassettes1612and1613that are provided as sheet-feeding sources can be physically locked, as shown inFIG. 4. Anyone other than the person who maintains control of the key (hereinafter referred to as the “manager”) associated with the locking mechanism of a particular feeding cassette cannot take a sheet out of the locked feeding cassette and add sheets. Addition of sheets is strictly controlled by the manager for management sake. The manager, also, manages the operation of the image-forming apparatus1600including fixing troubles such as paper jams.

The above-described configuration guards against the possibility that a special sheet can be physically taken out of each of the feeding cassettes1612and1613without any type of management control, and transmitted to the printing path via another feeding port of the image-forming device1600. In addition, the above-described configuration also guards against use of another image-forming device, where the feeding port is permitted to be used by a predetermined user and/or predetermined software so that the special sheet that is printed is obtained through normal printing processing.

In the case of the image-forming device1600that can lock the feeding cassettes1612and1613, the “manager” can directly set up a feeding-cassette configuration to the image-forming device1500. At that time, where the feeding-cassette configuration is set up by using software that can communicate with the image-forming device1600, the software may be a printer driver. Otherwise, a widely used Web browser including Internet Explorer®, Netscape®, and so forth may be used as the software, where the IP address of the image-forming device1600is specified and where the image-forming device1600can respond thereto and display a Web page. Of course, a special-purpose application for setting up configuration may be used.

Further, where the feeding-cassette configuration is set up by the image-forming device1600, an operation panel1707of the image-forming device1600facilitates setting up the feeding-cassette configuration. However, if prime importance is placed on security, special-purpose hardware for setting up configuration may be provided separately from the image-forming device1600. According to this embodiment, the Web browser of each of the computers1720and1730on a network or the LAN1710can set up the configuration to the image-forming device1600.

FIG. 5shows an image-setting page transmitted from the image-forming device1600. The image-setting page is displayed by specifying an Internet protocol (IP) address assigned to the image-forming device1600by using the Web browser installed in either the computer1720or the computer1730and making an access to the Web-server unit1812of the image-forming device1600. Where the image-forming device1600is introduced, the manager's password is determined, the password being necessary for changing the settings via the information-setting page. Here, a user operating the Web browser produces the display image of an information-setting screen500through the Web browser by using the password.

On the information-setting screen500, a feeding-cassette-setting screen is opened on a page of the Web browser, so as to set a name for each of the feeding cassettes. Reference number502denotes a box for showing the uniform resource location (URL) of the Web server of the image-forming device1600. Where a checkbox506reading “ENCRYPTION” is marked, as shown in this drawing, and a setting button508is selected, the detailed data of the settings shown on the information-setting screen500is transmitted to the Web server of the image-forming device1600. The controller unit1702encrypts and stores the character string of a cassette name corresponding to the marked checkbox506reading “ENCRYPTION” in the HDD1804of the image-forming device1600. In an example shown inFIG. 6, “WATERMARKED SHEET A” is encrypted and stored in the HDD1804. According to this embodiment, encryption is performed according to a known common-key encryption method such as the data encryption standard (DES), the triple DES, and the advanced encryption standard (AES), and so forth by using a common key in the possession of the image-forming device1600. However, other encryption methods may be used. On the other hand, where the name “OHP sheet” is set for a feeding cassette2and the checkbox reading “ENCRYPTION” corresponding thereto is not marked, the character string “OHP SHEET” is not encrypted and stored in the HDD1804.

In general, a printer driver is installed on each of the computers1720and1730, and the information of the image-forming device1600is obtained by communications, and setting information set on the information-setting screen500of the Web browser is obtained by the printer driver of each of the computers1720and1730for use. However, the encrypted cassette name remains encrypted, even though the printer driver requests information. Subsequently, the encrypted cassette is determined to be a cassette that cannot be used through the printer driver. Otherwise, the controller unit1702may not inform a computer that has not logged on in a manner that will be described later of the encrypted cassette name. Usually, a sheet cassette that cannot be identified by a printer driver cannot be used by widely used software.

As has been described, where a feeding cassette is locked, it becomes possible to physically prevent a predetermined sheet from being obtained and used. Further, it becomes possible to prevent the predetermined sheet in the locked feeding cassette from being specified and fed through software. Subsequently, it becomes possible to prevent the predetermined sheet from being used for printing by widely used software.

Next, a method for using a sheet cassette on which use restriction is placed through predetermined software will be described. Here, an example of form-printing software for superimposing and overlaying a form and field data that is installed in the computers1720and1730so as to print the form and the field data for obtaining a finished printed form will be described. The functions used for form printing are known.

The form-printing software generates a form including information about rule, information about the position on which the field data is printed, and so forth. In the course of generation, where a predetermined form is printed, sheet information for informing the user that a sheet is fed from a predetermined feeding cassette of the image-forming device1600is shown in the form. The above-described technology is already known.

By using the above-described technology, a method for specifying a predetermined feeding cassette on which use restriction is placed for generating the form is provided. Subsequently, it becomes possible to use the above-described feeding cassette only through predetermined software or the form printing software in place of the printer driver. Subsequently, a secure system including an image-forming device and software can be provided.

The details of processing performed by the form printing software will be described with reference to the attached drawings.

First, the flow of processing performed for generating form data will be described.FIG. 6shows a setting screen produced by the form printing software for generating a predetermined form. The setting screen is used for determining which feeding cassette of the image-forming device1600should be used for feeding a sheet on which the predetermined form is to be printed. The above-described form printing software is already known. Usually, feeding-cassette names shown on the setting screen600are provided, as the list of feeding cassettes that can be used through software programs of every description.

However, according to the present invention, where a button602reading “LOG IN TO PRINTER” on the setting screen600is selected, an image-forming-device selection screen is shown, as inFIG. 7. Then, a user can log in to a selected printer as a user with management authority or a predetermined authority.

When a user logs in to the printer in the above-described manner, the same result as that of the case where the user logs in to the above-described information-setting screen500shown inFIG. 5is obtained. From this point, encrypted communications can be carried out between the image-forming device1600and the computers to which the user logs in by using the secure sockets layer (SSL), the secure shell (SSH), and so forth. Once the user logs in to the computer, the user can acquire an encrypted cassette name held in the image-forming device1600. Further, the user can acquire a cassette name decoded by the image-forming device1600. Subsequently, it becomes possible to acquire the cassette name decoded by the image-forming device1600and produce a display image of the decoded cassette name on the screen, as shown inFIG. 8. On the other hand, it becomes possible to acquire the cassette name that remains encrypted and hold the value of the encrypted cassette name in form data, as a set value. Here, a flag is added to the cassette name stored in the form data, so as to show that the cassette name is encrypted. In this state, the form data is stored, as a file.

Next, the flow of print processing performed by the form printing software will be described with reference to a flowchart shown inFIG. 10.

In this drawing, a form printing application and a printer driver are installed on each of the computers1720and1730. On the other hand, processing procedures performed by the image-forming device1600shown in this drawing are carried out by the CPU1801of the controller unit1702.

The form printing software overlays the form and the field data on each other through known overlay processing by using the form-data file stored in the above-described generation processing and performs overlay printing.

FIG. 9shows the state where the form printing software opens the form-data file and maps information in the form-data file onto the memory13. Data area90, cassette name91, encryption flag92and work area93are stored in memory13. Returning toFIG. 10, the form printing software determines whether feeding-cassette specification was made before it starts drawing (step S1001). Where the feeding-cassette specification was not made in an area91on the memory13, an instruction to make feeding-cassette specification is not issued and the remaining printing processing is continued (step S1015).

Where the feeding-cassette specification was made, it is determined whether the cassette name corresponding to the specified feeding cassette is encrypted by taking a flag out of an area92on the memory13(step S1002). Where it is determined that the cassette name is not encrypted, the character string corresponding to the cassette name is taken out of the area91, so that the cassette name is set to a system that interfaces with the image-forming device1600as a feeding-source cassette, where, for example, the system includes the printer driver (step S1014). Then, the remaining printing processing is continued (step S1015).

Where it is determined that the cassette name is encrypted, the encrypted string corresponding to the cassette name is taken out of the area91, and the form printing software sets the encryption mode to the printer driver under a predetermined protocol (step S1003/step S1004).

Where the cassette name is transmitted to the printer driver, as the encrypted string, the printer driver immediately transmits the encrypted string to the image-forming device1600(step S1005). Upon receiving the encrypted string, the image-forming device1600decrypts the encrypted string, so as to confirm whether the transmitted encrypted string is information that is encrypted in a manner suitable for the image-forming device1600(step S1006).

Where the image-forming device1600determines that the encrypted string transmitted from the printer driver is valid, at step S1006, the image-forming device1600takes the feeding-cassette name out of the decrypted encrypted string, and confirms that the feeding-cassette name is a name that had been set for any one of its own feeding cassettes (step S1007).

Then, where the feeding-cassette name agrees with any one of its own feeding cassettes, the image-forming device1600internally switches to the corresponding feeding cassette and sets itself to a state for receiving subsequent print data (step S1008). In step s1007, if the feeding-cassette name doesn't agree with any one of its own feeding cassettes, it is determined that error is occurred and advances to step s1010. The transmitted print data is printed on a sheet fed from the switched sheet cassette. After that, the image-forming device1600transmits information indicating that no error has occurred to the printer driver (step S1009). The printer driver directly transmits the information transmitted from the image-forming device1600to the form printing software.

Where it is determined in step S1006that the encrypted string transmitted from the printer driver is not valid, the image-forming device1600transmits error information to the printer driver. The printer driver directly transmits the error information transmitted from the image-forming device to the form printing software. After the processing returns, the form printing software cancels the encryption mode (steps S1011/1012).

Upon receiving the information indicating that no error has occurred in the image-forming device1600via the printer driver (“no” at step s1013), the form printing software advances to the printing processing (step S1015). On the other hand, the printing processing is stopped at the time (step s1016) where the form printing software receives error information transmitted from the image-forming device1600via the printer driver (“yes” at step S1013). After that, the form printing software advances to subsequent processing (step S1017).

Thus, the form printing software can specify a sheet cassette and inform the image-forming device1600of information about the specified sheet cassette at the printing time by using the encrypted string that is acquired from the image-forming device1600at the time where the form data is generated. Subsequently, if the user does not have the management authority and/or the predetermined authority when the form data is generated, the user cannot specify a predetermined sheet cassette as a feeding port. However, where the printing is performed, an encrypted sheet-cassette name is transmitted, to the image-forming device1600so that the image-forming device1600determines the validity of the sheet-cassette name. The user can use the form-data file for printing, even though the user does not have the management authority. That is to say, where an ordinary user's form is used, printing can be performed without any problems.

However, where the details of encrypted cassette-name string stored in the form-data file are known due to release of the file-format or the like, a malicious user may counterfeit the form-data file.

Therefore, the above-described form printing software may be used in combination with protection against falsification. For example, an electronic signature may be placed on a generated form-data file.

Second Embodiment

FIG. 11shows an example of the display image of another information-setting page transmitted from the image-forming device1600by using the Web browser installed in each of the computers1720and1730. Where the image-forming device1600is introduced, the “manager's” password is determined, the password being necessary for changing the settings via the information-setting page. Here, the user sees an information-setting screen1100of the image-forming device1600by using the “manager's” password. That is to say, the user cannot access the information-setting screen1100without the management authority.

The information-setting screen1100is opened on a page of the Web browser, so as to set a password for each of the feeding cassettes. Password-setting boxes1102,1104,1106, and1108are used for setting the password for each of the feeding cassettes. When a set button1110is selected, the details of settings made by the Web browser are transmitted to the Web-server unit1812and stored in the HDD1804of the controller-unit1702. For setting a password on the information-setting screen1100, encrypted communications, including the above-described SSL, or SSH, are typically performed between the Web browser of each of the computers1720and1730and the Web-server unit1812. The flow of processing procedures performed by the above-described image-forming device1600is described below.

First, the flow of processing procedures performed for generating the form data is shown.

FIG. 12shows a setting screen produced by the form printing software for generating a predetermined form. The setting screen is used for determining which feeding cassette of the image-forming device1600should be used for feeding a sheet on which the predetermined form is to be printed. Unlike the first embodiment, the setting screen ofFIG. 12shows a list of the entire feeding cassettes of the image-forming device1600via a drop-down menu.

Where the designer of the form determines that a password is required for a predetermined feeding cassette, the password is supplied by marking a password box.

At this stage, communications with the image-forming device1600, such as the log-in in the first embodiment, is not necessarily performed, since the form designer only has to know information for uniquely specifying a predetermined feeding cassette and the password corresponding thereto. A password supplied at this time is encrypted by the form printing application. Then, the encrypted password is embedded and stored in a form-data file. Here, the password is encrypted according to a known common-key encryption method, such as the above-described DES, TribleDES, AES, and so forth by using a common key the computers1720and1730can obtain. However, the password may be encrypted by any another encryption method.

Next, the flow of print processing performed by the form printing software will be described with reference toFIG. 14.

In this drawing, a form printing application and a printer driver are installed on each of the computers1720and1730, as is the case withFIG. 10. Processing procedures performed in the image-forming device1600shown inFIG. 14are carried out by the CPU1801of the controller unit1702.

The form-data file stored in the above-described generation procedures is opened and mapped on the memory13, as shown inFIG. 13. Data area130, specify cassette131, password flag132, password133and work area134are stored in memory13. Returning toFIG. 14, it is first determined whether or feeding-cassette specification was made for performing printing processing (step S1401). If the feeding-cassette specification was not made, an instruction to make feeding-cassette specification is not issued and the remaining printing processing is continued (step S1413).

If the feeding-cassette specification was made, information about the feeding-cassette specification is taken out of an area131on the memory13, so that the cassette name is set to a system that interfaces with the image-forming device1600as a feeding-source cassette. The system includes, for example, the printer driver (step S1402).

If it is determined that the cassette name and the password are specified (step S1405), the form printing application takes the encrypted password string out of an area133on the memory13. That is to say, the encrypted password string embedded in the form data file is taken out. Then, the encrypted password is decrypted and the cassette name is transmitted to the image-forming device1600via the printer driver (step S1406). Where no password is specified, it is determined that an error has occurred, and the print processing is stopped (step S1412). In the case where the password string is transmitted in plain text, the password information may be intercepted. Therefore, encrypted communications, including the above-described SSL and SSH, are typically performed between each of the computers1720and1730and the image-forming device1600.

Upon receiving the password, at step S1406, the image-forming device1600determines whether the password agrees with a password that had been set for the specified feeding cassette (step S1407). If it is determined that the password is valid, the image-information device1600sets its own internal state and switches to the feeding cassette or feeding port corresponding to the valid password (step S1408). Then, it is determined that no error has occurred (step S1409) and the processing proceeds to step S1411. If, in step S1407, it is determined that the password is invalid, error information is transmitted (step S1410) and the process proceeds to step S1411.

In step S1411, if it is determined that no error has occurred, the form printing software advances to print processing (step S1413). If, in step S1411, it is determined that an error has occurred, an error interruption occurs (step S1412). Following steps S1412or S1413, subsequent processing that had been set is performed (step S1414).

According to the above-described embodiment, feeding-cassette specification is not necessarily performed by using the name of a concerned sheet cassette. For example, a simpler parameter such as the identification number of the concerned sheet cassette may be used.

Thus, the above-described embodiment is achieved by using a simple password. Since cassette names and a complex system wherein the image-forming device1600encrypts the cassette names or the like may not be used, implementation of software and hardware is facilitated.

Third Embodiment

According to the above-described second embodiment, a password provided for the predetermined sheet cassette is embedded in a form-data file so that the user who wants a printed form does not have to supply the password. However, the user may be asked to supply the password every time form printing is performed.

When the form printing is performed, a screen shown inFIG. 15is produced at step S1406ofFIG. 14, where the user supplies the password. The supplied password is transmitted to the image-forming device1600via the printer driver. Thus, the supplied password is transmitted to the image-forming device1600through the same path as that of the second embodiment.

Even though the user obtains the form-data file, the user cannot perform printing, unless the user obtains the necessary password. Therefore, for a user in possession of the password of each of the sheet cassettes, the above-described embodiment allows the user to perform printing with higher security than a user without access to the passwords.

Other Embodiments

It is to be understood that the present invention can also be achieved by supplying program code of software for implementing functions of the above-described embodiments to a computer (CPU, MPU, etc.) of an apparatus or system connected to the above-described various devices so that the devices are made to operate for implementing the functions of the above-described embodiments and making the above-described devices operate according to the program stored in the computer of the system or the apparatus.

In that case, the program code itself achieves the functions of the above-described embodiments. Therefore, the program code itself and means for transmitting the program code to the computer, that is, a recording medium storing the program code constitute the present invention. The recording medium for recording the above-described program code may be, for example, a floppy disk, a hard disk, an optical disk, a magnet-optical disk, a CD-ROM, a magnetic tape, a non-volatile memory card, a ROM, and so forth.

Furthermore, not only by the computer executing the transmitted program code, but also by an operating system (OS) running on the computer, or a combination of the OS and other application software or the like, the functions of the above-described embodiments may be achieved. In that case, the program code is included in the embodiments of the present invention.

In another embodiment of the present invention, the transmitted program code is stored in a memory of a function extension board inserted in the computer or a function extension unit connected to the computer. Then, a CPU or the like of the function extension board or the function extension unit executes part of or the entire process according to an instruction of the program code, whereby the functions of the above-described embodiments are achieved.

This application claims priority from Japanese Patent Application No. 2004-170227 filed Jun. 8, 2004, and Japanese Patent Application No. 2005-148537 filed May 20, 2005, which are hereby incorporated by reference herein.