Image processing apparatus, method of controlling the same, image processing system, and storage medium

An information security managing technique for use when a plurality of image processing apparatuses cooperate with each other to process a single job. In a case where a single job is cooperatively executed by a plurality of image processing apparatuses via a network, an image processing apparatus as a cooperation destination determines whether or not an image deletion level designated by an image processing apparatus as a cooperation source in the job is supported. When the image deletion level is not supported, the cooperation-destination image processing apparatus determines whether or not the job can be executed without using an HDD provided in the cooperation-destination image processing apparatus. When the job can be executed without using the HDD, the cooperation-destination image processing apparatus performs control such that the job is executed without using the HDD.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an information security managing technique for use when a plurality of image processing apparatuses cooperate with each other to process a single job.

2. Description of the Related Art

As to a method of deleting image data stored in an image processing apparatus, there has conventionally been proposed an image forming system in which security level information is exchanged in advance between a plurality of image processing apparatuses linked to each other, to thereby enable the image processing apparatuses to operate at the same security level (see Japanese Patent Laid-Open Publication No. 2008-035269).

Further, as to a method of checking deletion of image data, there has been proposed an image processing apparatus in which the status of deletion of image data is recorded in a job log to thereby enable a user to check the status of the deletion (see Japanese Patent Laid-Open Publication No. 2006-211229).

However, in a case where a plurality of image processing apparatuses execute a single job in a cooperative manner, the methods disclosed in Japanese Patent Laid-Open Publication No. 2008-035269 and Japanese Patent Laid-Open Publication No. 2006-211229 suffer from the following problems:

In Japanese Patent Laid-Open Publication No. 2008-035269, an image processing apparatus as a cooperation source operates according to the security level of an image processing apparatus as a cooperation destination. For this reason, even if the cooperation-source image processing apparatus supports a high-security deletion method, when the cooperation-destination image processing apparatus supports only a low-security deletion method, the cooperation-source image processing apparatus is required to delete image data according to the low-security deletion method. Therefore, in a whole system including the cooperation-source and cooperation-destination image processing apparatuses, information security cannot be fully maintained.

When deletion check according to Japanese Patent Laid-Open Publication No. 2006-211229 is performed in a case where a plurality of image processing apparatuses cooperate with each other to execute a single job, the following problem occurs: In the mentioned case, a cooperation-source image processing apparatus and a cooperation-destination image processing apparatus are generally disposed at respective locations remote from each other, and further, users of the cooperation-source and cooperation-destination image processing apparatuses are usually not near the image processing apparatuses they use. Therefore, each user has to go to a place where is installed an image processing apparatuses on which the user desires to perform deletion check. This is troublesome for the user.

Furthermore, e.g. in a cooperative job in which facsimile image data (hereinafter referred to as “FAX data”) received by an image processing apparatus A is transferred to an image processing apparatus B and is printed thereby, the image processing apparatus A only functions as a mere relay apparatus. Consequently, in many cases, a user of the image processing apparatus A does not know even a fact that the image processing apparatus A has relayed FAX data, and therefore it is more convenient that a user of the image processing apparatus B checks print processing and carries out deletion check using the image processing apparatus B.

On the other hand, in a cooperative job in which image data scanned by the image processing apparatus A is transferred to the image processing apparatus B and is then further sent to another apparatus by FAX transmission, the image processing apparatus B only functions as a relay apparatus. Consequently, in many cases, the user of the image processing apparatus B does not know even a fact that the image processing apparatus B has relayed the image data, and therefore it is more convenient that the user of the image processing apparatus A checks scan processing and carries out deletion check using the image processing apparatus A.

As described above, which of a cooperation-source image processing apparatus and a cooperation-destination image processing apparatus should be selected for more convenient image data deletion check depends on the settings of a cooperative job. Therefore, even if the cooperation-source image processing apparatus and the cooperation-destination image processing apparatus are both configured to be capable of performing deletion check, very little merit can be expected.

SUMMARY OF THE INVENTION

The present invention enables an image processing apparatus as a cooperation source and an image processing apparatus as a cooperation destination to improve information security in their entirety in a case where a plurality of image processing apparatuses execute a single job in a cooperative manner.

In a first aspect of the present invention, there is provided an image processing apparatus which functions as a destination device in a case where a single job is cooperatively executed by a plurality of image processing apparatuses, including the claimed image processing apparatus, via a network, comprising a first determining unit configured to determine whether or not the claimed image processing apparatus supports an image deletion method designated in the job by a source image processing apparatus, a second determining unit operable in a case that the first determining unit determines that the claimed image processing apparatus does not support the image deletion method designated by the source image processing apparatus, to determine whether or not the job can be executed without using a specific storage medium provided in the claimed image processing apparatus, and a control unit operable, in a case that the second determining unit determines that the job can be executed without using the specific storage medium, to perform control such that the job is executed without using the specific storage medium.

In a second aspect of the present invention, there is provided an image processing system in which a single job is cooperatively executed by a plurality of image processing apparatuses via a network, the plurality of image processing apparatus comprising a source image processing apparatus and a destination image processing apparatus, wherein the source image processing apparatus functions as a source device for the job, and the source image processing apparatus comprises a designation unit configured to designate a deletion method for deleting image data associated with the job, for the destination image processing apparatus which functions as a destination device for the job, and wherein the destination image processing apparatus comprises a first determining unit configured to determine whether or not the destination image processing apparatus supports the deletion method designated by the designation unit, a second determining unit operable, in a case that the first determining unit determines that the destination image processing apparatus does not support the deletion method designated by the designation unit, to determine whether or not the job can be executed without using a specific storage medium provided in the destination image processing apparatus, and a control unit operable, in a case that the second determining unit determines that the job can be executed without using the specific storage medium, to perform control such that the job is executed without using the specific storage medium.

In a third aspect of the present invention, there is provided a method of controlling an image processing apparatus which functions as a destination device in a case where a single job is cooperatively executed by a plurality of image processing apparatuses, including the controlled image processing apparatus, via a network, comprising determining whether or not the controlled image processing apparatus supports an image deletion method designated in the job by a source image processing apparatus, determining whether or not the job can be executed without using a specific storage medium provided in the controlled image processing apparatus in a case that it is determined that the controlled image processing apparatus does not support the image deletion method designated by the source image processing apparatus, and performing control such that the job is executed without using the specific storage medium when it is determined that the job can be executed without using the specific storage medium.

In a fourth aspect of the present invention, there is provided a non-transitory computer-readable storage medium storing a program for causing a computer to execute a method of controlling an image processing apparatus which functions as a destination device in a case where a single job is cooperatively executed by a plurality of image processing apparatuses, including the controlled image processing apparatus, via a network, wherein the method comprises determining whether or not the controlled image processing apparatus supports an image deletion method designated in the job by a source image processing apparatus, determining whether or not the job can be executed without using a specific storage medium provided in the controlled image processing apparatus in a case that it is determined that the controlled image processing apparatus does not support the image deletion method designated by the source image processing apparatus, and performing control such that the job is executed without using the specific storage medium when it is determined that the job can be executed without using the specific storage medium.

According to the present invention, in a case where a plurality of image processing apparatuses execute a single job in a cooperative manner, it is possible for an image processing apparatus as a cooperation source (source device) and an image processing apparatus as a cooperation destination (destination device) to improve information security in their entirety. For example, even when a cooperation-destination image processing apparatus is not capable of performing image deletion according to an image deletion method designated by a cooperation-source image processing apparatus, it is possible to prevent an associated image from leaking out, to thereby maintain information security.

Further features of the present invention will become apparent from the following description of an exemplary embodiment (with reference to the attached drawings).

DETAILED DESCRIPTION OF THE EMBODIMENTS

FIG. 1is a functional block diagram of an image processing system according to a first embodiment of the present invention, including an image processing apparatus as a cooperation source and an image processing apparatus as a cooperation destination. The cooperation-source image processing apparatus1and the cooperation-destination image processing apparatus2appearing inFIG. 1are connected to a same network4to execute a single job in a cooperative manner. In short, the image processing apparatuses1and2function as component apparatuses forming the image processing system for executing cooperative jobs. In the present embodiment, the cooperation-source image processing apparatus1is implemented by a multifunction peripheral (MFP), while the cooperation-destination image processing apparatus2is implemented by a network printer. Therefore, the two apparatuses are slightly different in hardware configuration, as described hereinafter.

However, the two apparatuses have substantially the same functional blocks unique to the present embodiment as shown inFIG. 1. More specifically, the cooperation-source image processing apparatus1and the cooperation-destination image processing apparatus2are different from each other only in that the former has an image data input section105, whereas the latter has an image forming and output section205in place of an image data input section.

Except for the image data input section105and the image forming and output section205, the image processing apparatuses1and2have the same functional blocks, i.e. job control sections101and201, storage sections103and203, image data deletion sections104and204, and operating display sections110and210. The image processing apparatuses1and2are interconnected via respective interface sections102and202and the network4.

The job control section101(201) of the image processing apparatus1(2) has a job management table109(209). The storage section103(203) of the image processing apparatus1(2) stores image data106(206) and a job log107(207). Further, an image deletion level108(208) is set in the image data deletion section104(204) of the image processing apparatus1(2).

The cooperation-source image processing apparatus1stores image data input by the image data input section105in the storage section103, and sends the image data to the cooperation-destination image processing apparatus2via the interface section102and the network4. The image processing apparatus2outputs the image data received from the image processing apparatus1, from the image forming and output section205after storing the image data in the storage section203(more specifically, an HDD2006, referred to hereinafter), or without storing the same in the storage section203. This point “after storage” or “without storage” is a feature of the present embodiments, and therefore detailed description thereof will be given hereinafter.

A job in which a cooperation-source image processing apparatus and a cooperation-destination image processing apparatus input and output image data in a cooperative manner as mentioned above will be referred to as “a cooperative job”.

FIG. 2is a diagram illustrating an example of a FAX reception cooperative job in which FAX data received by the cooperation-source image processing apparatus1is sent to the cooperation-destination image processing apparatus2or a cooperation-destination image processing apparatus3, and is printed out by the cooperation-destination image processing apparatus2or3.

The image processing apparatuses1to3are connected to the same network4to cooperate with each other to execute the FAX reception cooperative job. The image processing apparatus1functions as a cooperation-source image processing apparatus, and is implemented by an MFP equipped with the scan function, the print function, and the facsimile function. Each of the image processing apparatuses2and3functions as a cooperation-destination image processing apparatus. The image processing apparatus2is configured as a network printer, and the image processing apparatus3is configured as a copying machine equipped with the scan function and the print function.

The FAX reception cooperative job is executed following a procedure in which FAX data received by the cooperation-source image processing apparatus1is sent to the cooperation-destination image processing apparatus2or3and is printed out by the same.

FIG. 3is a block diagram of the hardware configuration of the image processing apparatus1. The image processing apparatus1is implemented by an MFP as mentioned hereinabove, and has a controller10connected to a scanner13, a printer12, and an operation panel11.

The controller10is comprised of a CPU1001, a ROM1010, a RAM1011, a panel interface1003, a FAX modem1004, an image processing section1005, an HDD1006, a printer interface1007, a scanner interface1008, and a network interface1009. These devices are interconnected by a bus1002such that data can be transferred therebetween.

The panel interface1003is connected to the operation panel11to transfer operation signals transmitted from the operation panel11to the CPU1001and output messages from the CPU1001, soft buttons, etc. onto a touch panel (not shown) of the operation panel11. The FAX modem1004exchanges FAX data with other facsimile machines connected to a public communication line5.

The scanner interface1008is connected to the scanner13to supply image data read by the scanner13to the image processing section1005. The printer interface1007is connected to the printer12to output image data having undergone image processing by the image processing section1005and stored in the HDD1006to the printer12. The network interface1009transmits and receives data to and from external apparatuses connected to the network4. The HDD1006stores image data input from the FAX modem1004, the scanner interface1008, and the network interface1009and having undergone image processing by the image processing section1005. The HDD1006also stores job logs. The image processing section1005performs various kinds of image processing, such as compression/expansion, correction, and filtering, on image data under the control of the CPU1001before output or after input of the image data.

The CPU1001controls each of the devices of the controller10according to a control program stored in the ROM1010. The ROM1010stores not only the control programs but also UI screen information to be displayed on the touch panel of the operation panel11. The RAM1011provides a work area for the CPU1001and is used e.g. for temporarily storing image data.

Now, a description will be given of correspondences between theFIG. 1functional block diagram of the image processing apparatus1and theFIG. 3block diagram of the hardware configuration of the same. The job control section101and the image data deletion section104inFIG. 1correspond to the CPU1001, the ROM1010, the RAM1011, and the image processing section1005inFIG. 3. The interface section102inFIG. 1corresponds to the network interface1009inFIG. 3. The storage section103inFIG. 1corresponds to the HDD1006inFIG. 3. The image data input section105inFIG. 1corresponds to the FAX modem1004inFIG. 3. The operating display section110inFIG. 1corresponds to the operation panel11, the panel interface1003, the CPU1001, the ROM1010, and the RAM1011.

FIG. 4is a block diagram of the hardware configuration of the image processing apparatus2. The image processing apparatus2functions as a network printer, and therefore it is different from the image processing apparatus1configured as an MFP in that the former does not include devices corresponding to the FAX modem1004, the scanner13, and the scanner interface1008.

Now, a description will be given of correspondences between theFIG. 1functional block diagram of the image processing apparatus2and theFIG. 4block diagram of the hardware configuration of the same. The job control section201and the image data deletion section204inFIG. 1correspond to a CPU2001, a ROM2010, a RAM2011, and an image processing section2005inFIG. 4. The interface section202inFIG. 1corresponds to a network interface2009inFIG. 4. The storage section203inFIG. 1corresponds to an HDD2006inFIG. 4. The image forming and output section205inFIG. 1corresponds to a printer interface2007inFIG. 4and a printer22. The operating display section210inFIG. 1corresponds to an operation panel21, a panel interface2003, the CPU2001, the ROM2010, and the RAM2011inFIG. 4. The CPU1001, the panel interface2003, the image processing section2005, the HDD2006, the printer interface2007, the network interface2009, the ROM2010, and the RAM2011form a controller20.

Next, processing executed by the image processing apparatuses1and2for the FAX reception cooperative job will be described in detail.FIGS. 5 to 10are flowcharts of respective processes executed by the cooperation-source image processing apparatus1for the FAX reception cooperative job.

FIG. 5is a flowchart showing the outline of a FAX reception cooperative process executed by the cooperation-source image processing apparatus1for the FAX reception cooperative job.

When FAX data is input from the image data input section105(FAX modem1004), the job control section101of the cooperation-source image processing apparatus1generates the job management table109and sets information items in the job management table109to respective values (S501). The information items in the job management table109and the values set in the step S501are shown inFIG. 11.

An item “JobID” inFIG. 11indicates the identifier of a job, and is set to an ID value assigned to the job by the job control section101. An item “Job Type” indicates the type of a cooperative job, and is set to “FAX reception”. An item “Job Reception Time” indicates the reception time of a cooperative job, and is set to time at which the step S501inFIG. 5is executed. An item “Job Processing Status” indicates the processing status of a cooperative job, and is set to “data input” at a time point corresponding to the step S501. An item “FAX Reception Information” indicates various kinds of information concerning FAX reception, and is set to information, such as the telephone number of a FAX sender. An item “Image Storage Information” indicates information concerning storage of image data in the storage section103, and is set to information, such as an image storage destination address.

An item “Image Deletion Level” indicates the deletion level (0/1/2) of image data to be handled in the cooperative job. For example, “Image Deletion Level” is configured as “Level 0: only logical deletion”, “Level 1: one-time overwriting with random data”, and “Level 2: three-time overwriting with random data”.

In this case, the degree of security of information is held as Level 0<Level 1<Level 2. This means that as the number of times of overwriting with random data is larger, the degree of unclearness of original data is higher, and therefore the actual effect of preventing information leakage is increased.

In the step S501, the value of an image deletion level set in the image processing apparatus1in advance is set in the job management table109. An item “Image Deletion Check” indicates which of the cooperation source and the cooperation destination is to check image deletion related to the cooperative job, and one of the cooperation source and the cooperation destination is set e.g. according to the type of the cooperative job.

In the FAX reception cooperative job, it is more convenient to check image deletion in the cooperation-destination image processing apparatus that prints out FAX data than by the cooperation-source image processing apparatus that only transfers FAX data, and therefore the item “Image Deletion Check” is set to “cooperation destination”.

An item “Image Deletion State at Self-Apparatus” indicates the deletion state (undeleted/deleted) of image data106stored in the storage section103of the image processing apparatus1(cooperation source). At this time point, “Image Deletion State at Self-Apparatus” is set to “undeleted”. An item “Image Output Destination” indicates information for designating the output destination (cooperation destination) of image data, and is set to the IP address or the like of a cooperation-destination image processing apparatus, for example. At the present time point, however, since no cooperation destination has been designated yet, the item “Image Output Destination” is set to nothing.

An item “Image Transmission Mode” indicates an image transmission method (multi/single) for transmitting image data from a cooperation source to a cooperation destination. The value “multi” indicates a method of transmitting all pages of image data in a batch, and the value “single” indicates a method of transmitting image data on a page-by-page basis. In the first embodiment, the cooperation-source image processing apparatus1stores in the storage section103the image data106in an amount corresponding to a plurality of pages to be sent to the cooperation-destination image processing apparatus2, and therefore, at the present time point, “multi” is set by default.

An item “Image Deletion Completion Notification from Cooperation Destination” indicates information indicative of whether or not a notification of image data deletion completion has been received from a cooperation source. At the present time point, however, since the image data106has not been transmitted yet, the item “Image Deletion Completion Notification from Cooperation Destination” is set to nothing. An item “Image Deletion State at Cooperation Destination” indicates the image data deletion state (undeleted/deleted) at a cooperation destination. At the present time point, however, since the image data106has not been transmitted yet, the item “Image Deletion State at Cooperation Destination” is set to nothing.

The job control section101sequentially executes an image data input process (S502) for inputting image data from the image data input section105, an image data output process (S503) for outputting the image data to the image processing apparatus2, an image data deletion process (S504), and a job termination process (S505) in the mentioned order.

Hereafter, the processes will be sequentially described in the mentioned order.

FIG. 6is a flowchart of the image data input process executed by the cooperation source. The job control section101of the cooperation-source image processing apparatus1sequentially stores image data (pages)106input by the image data input section105(FAX modem1004) in the storage section103(HDD1006) (S601to S602). Then, the job control section101determines whether or not the processing for inputting image data has been normally terminated (S603).

If the processing for inputting image data has been normally terminated, the job control section101updates “Job Processing Status” in the job management table109to “image data input completion” (S604), followed by terminating the image data input process. If the processing for inputting image data has not been normally terminated, the job control section101updates “Job Processing Status” in the job management table109to “image data input error” (S605) and then executes the job termination process (S606), followed by terminating the FAX reception cooperative job at the cooperation source.

FIG. 7is a flowchart of the image data output process executed by the cooperation source. The job control section101of the cooperation-source image processing apparatus1determines an image data output destination (cooperation destination) and sets “Image Output Destination” in the job management table109to the image data output destination (S701).

Although various methods can be employed to determine a cooperation destination, a method of determining a cooperation destination according to the telephone number of a FAX sender is employed in the present embodiment. For example, a correspondence table (not shown) associating the telephone numbers of FAX senders with respective cooperation sources is set in the cooperation-source image processing apparatus1in advance.

This enables the job control section101to search the correspondence table for the telephone number of the FAX sender set in the job management table109and then determine a cooperation destination. In this case, when a plurality of image processing apparatuses each equipped with the FAX function exist on the network4, each of the image processing apparatuses can operate as a cooperation source. Therefore, it is preferred that each of the image processing apparatuses equipped with the FAX function has the correspondence table (not shown) set therein.

The job control section101sends the image data106stored in the storage section103in the step S601to the cooperation destination (image processing apparatus2) via the interface section102(S702).

Now, an image data transmission process will be described in detail basically with reference toFIG. 8before steps S703et sec. are described. FIGS.12,13, and16to18show respective commands to be exchanged between the image processing apparatus1(cooperation source) and the image processing apparatus2(cooperation destination) in the image data transmission process. Further, each ofFIGS. 14 and 15shows a sequence of command exchange between the image processing apparatus1(cooperation source) and the image processing apparatus2(cooperation destination).

First, the job control section101of the image processing apparatus1(cooperation source) sends a “JobStart” command indicative of the start of a cooperative job to the image processing apparatus2(cooperation destination) (S801inFIG. 8). The “JobStart” command is comprised of information items shown inFIG. 12, and each of the information items is set to a value of an associated one of the information items in the job management table109.

As shown inFIG. 12, the “JobStart” command not only notifies a cooperation destination of the start of a cooperative job, but also contains instruction information on deletion of image data to be handled by the cooperative job (“image deletion level” and “image deletion check”).

When a response “JobStartAck” command (seeFIG. 13) as a response to the “JobStart” command is received from the image processing apparatus2, the job control section101determines whether or not “Status” in the command is set to “OK” (S802). If “Status”=“NG”, the job control section101updates the item “Job Processing Status” in the job management table109to “cooperation destination-side reception error” (S804) and then executes the job termination process (S805), thereby terminating the FAX reception cooperative job by the cooperation source.

If “Status”=“OK”, the job control section101overwrites the value (multi/single) of “Image Transmission Mode” in the job management table109with the value of “Image Transmission Mode” in the command to thereby update the former (S803). This step is executed because in a case where the cooperation destination is not capable of operating in an “image transmission mode” designated by the cooperation source, the cooperation source is required to switch the value of “Image Transmission Mode” to the value (multi/single) of an “image transmission mode” in which the cooperation-destination image processing apparatus can operate.

The job control section101determines whether the item “Image Transmission Mode” in the job management table109is set to “multi” or “single” (S806). If “Image Transmission Mode”=“Multi”, the job control section101sends all pages of the image data106to the image processing apparatus2in a batch (S807).

FIG. 14shows a command sequence executed in a case where “Image Transmission Mode”=“multi”. When “Image Transmission Mode”=“multi”, transmission of all pages of image data is performed in a single page sequence from a “PageStart” command indicative of the start of transmission to an “PageEndAck” command indicative of the termination of the transmission.

If “Image Transmission Mode”=“single”, the job control section101sends the image data106to the image processing apparatus2on a page-by-page basis (S808). When “Image Transmission Mode”=“single”, page-by-page image data transmission operations are sequentially performed in a plurality of page sequences from the “PageStart” command to the “PageEndAck” command as shown inFIG. 15. In other words, in this case, the page sequence from the “PageStart” command to the “PageEndAck” command is repeatedly executed the same number of times as a page count.

When the transmission of the image data106is terminated, the job control section101sends a “JobEnd” command indicative of the termination of the image data transmission to the image processing apparatus2(S809). When a “JobEndAck” command as a response to the “JobEnd” command is received from the image processing apparatus2, the job control section101determines whether or not the item “Status” in the received command is set to “OK” (S810).

If “Status”=“OK”, the job control section101updates the item “Job Processing Status” in the job management table109to “image data transmission end” (S811), followed by terminating the image data transmission process.

On the other hand, if “Status”=“NG”, the job control section101updates the item “Job Processing Status” in the job management table109to “image data transmission error” (S812) and then executes the job termination process (S813), followed by terminating the FAX reception cooperative job by the cooperation source.

Returning to the description of the image data output process inFIG. 7, when the image data transmission process for transmitting the image data106to the image processing apparatus2is terminated, the job control section101awaits arrival of a printing completion notification (“JobCompleted” event) from the image processing apparatus2(S703). This printing completion notification (“JobCompleted” event) contains an item “Image Deletion Completion Notification (OFF/OFF)” as shown inFIG. 16.

When the printing completion notification is received from the image processing apparatus2, the job control section101updates the job management table109(S704). In this case, the job control section101updates the item “Job Processing Status” in the job management table109to “printing end” and sets “Image Deletion Completion Notification from Cooperation destination” to a set value of the item “Image Deletion Completion Notification (OFF/ON)” in the “JobCompleted” event.

Then, the job control section101adds a new record to the job log107and records the values of information items in the job management table109or the like associated with respective information items of the job log107in the added record (S705), followed by terminating the image data output process.FIG. 17shows the configuration of a record of the job log107and examples of the values set by the job control section101in the step S705.

An item “Record Number” is set to the record number of the added record. Items “JobID”, “Job Type”, “Job Reception Time”, “Fax Reception Information”, and “Image Output destination” are set to values of the respective associated information items in the job management table109. Items “Job End Result” and “Print Sheet Count” are set to the respective values of “Status” and “Page Count” set in the printing completion notification sent from the image processing apparatus2. An item “Job End Time” is set to current time.

An item “Image Deletion State at Self-Apparatus” indicates an image data deletion state (undeleted/deleted) in a cooperation-source apparatus itself (the image processing apparatus1in the present example). At this time point, the item “Image Deletion State at Self-Apparatus” is set to “undeleted”. Items “Image Deletion Time at Self-Apparatus” and “Image Deletion Level” are set when “Image Deletion State” is set to “deleted”. Therefore, at this time point, the items “Image Deletion Time at Self-Apparatus” and “Image Deletion Level” are set to nothing.

An item “Image Deletion State at Cooperation Destination” indicates an image data deletion state (undeleted/deleted) at a cooperation destination (the image processing apparatus2in the present example). At this time point, the item “Image Deletion State at Cooperation destination” is set to “undeleted”. An item “Image Deletion Time at Cooperation Destination” is set when “Image Deletion State” is set to “deleted”. Therefore, at this time point, the item “Image Deletion Time at Cooperation Destination” is set to nothing.

FIGS. 9A and 9Bare a flowchart of the image data deletion process executed by the cooperation source. The job control section101of the cooperation-source image processing apparatus1instructs the image data deletion section104to delete the image data used in the FAX reception cooperative job (S901).

At this time, the job control section101designates, as an image data deletion method, the value (0/1/2) set as “Image Deletion Level” in the job management table109. The image data deletion section104deletes the image data used in the present job, by the deletion method according to “Image Deletion Level” designated by the job control section101. The image data deletion process by the image data deletion section104is executed in parallel with processing by the job control section101.

The job control section101refers to the item “Image Deletion Check (cooperation source/cooperation destination)” in the job management table109(S902). If the item “Image Deletion Check” is set to “cooperation source”, the process proceeds to a step S903, whereas if the item “Image Deletion Check” is set to “cooperation destination”, the process proceeds to a step S908.

If “Image Deletion Check”=“cooperation source”, the job control section101refers to the item “Image Deletion Completion Notification from Cooperation Destination (OFF/ON)” in the job management table109in the step S903.

If “Image Deletion Completion Notification from Cooperation destination”=“ON”, the job control section101awaits both arrival of “Image Deletion Completion Notification” from the cooperation destination (image processing apparatus2) (S904) and completion of image deletion at the self-apparatus (image data deletion section104) (S905). On the other hand, if “Image Deletion Completion Notification from Cooperation Destination”=“OFF”, the job control section101awaits only completion of image deletion at the self-apparatus (image data deletion section104) (S905).

If it is determined in the step S902that “Image Deletion Check”=“cooperation destination”, the job control section101awaits completion of image deletion at the self-apparatus (image data deletion section104) (S908). Then, when image deletion is completed, the job control section101sends an image deletion completion notification to the cooperation-destination image processing apparatus2(S909). This image deletion completion notification (“DeleteCompleted” event) contains an Item “Image Deletion Level (0/1/2)” as shown inFIG. 18.

It should be noted that when “Image Deletion Check”=“cooperation destination”, the image deletion completion notification (OFF/ON), i.e. theFIG. 16printing completion notification (“JobCompleted” event) containing the image deletion completion notification (OFF/ON) is by no means sent from the cooperation destination, as described hereinafter.

Therefore, differently from a case where “Image Deletion Check”=“cooperation source”, when “Image Deletion Check”=“cooperation destination”, the job control section101does not refer to the item “Image Deletion Completion Notification from Cooperation destination (OFF/ON)” in the job management table109. In the present example, since the job control section101determines that “Image Deletion Check”=“cooperation destination”, the process proceeds from the step S902to the step S908.

When image deletion at the self-apparatus or the cooperation destination (image processing apparatus2) is completed, i.e. when processing in the step S905or S909is completed, the job control section101updates the item “Job Processing Status” in the job management table109to “image deletion completed” (S906).

Then, the job control section101terminates the image data deletion process after updating the record of the job log107on the present job as follows (step S907): The job control section101sets “Image Deletion State at Self-Apparatus” to “deleted”, “Image Deletion Time at Self-Apparatus” to “current time”, “Image Deletion State at Cooperation Destination” to “−”, “Image Deletion Time at Cooperation Destination” to “−”, and “Image Deletion Level” to a value of “Image Deletion Level” set in the job management table109.

FIG. 10is a flowchart of the job termination process executed by the cooperation source. The job termination process is executed in the following cases:

Case 1: where processing up to the image data deletion process has been normally executed (step S505inFIG. 5)

Case 2: where the image data input process ends in image data input error (step S606inFIG. 6)

Case 3: where the image data transmission process ends in cooperation destination-side reception error (step S805inFIG. 8)

Case 4: the image data transmission process ends in image data transmission error (step S813inFIG. 8)

First, the job control section101refers to the item “Job Processing Status” in the job management table109and determines which of the above-mentioned cases the item “Job Processing Status” corresponds to (S1001to S1003). If “Job Processing Status” corresponds to Case 1, the job control section101clears the job management table109(S1007), followed by terminating the job termination process.

When the item “Job Processing Status” corresponds to Case 2 or Case 3, the cooperative job is terminated before the image data106is sent to the cooperation destination, and hence it is preferable that image data deletion check is performed at the cooperation source irrespective of the initial settings (step S501inFIG. 5). In this case, therefore, the job control section101updates the item “Image Deletion Check” in the job management table109to “cooperation source” (S1004), and the process proceeds to steps S1005and S1006.

If the item “Job Processing Status” corresponds to Case 4, the image data106has already been sent to the cooperation destination, and therefore the item “Image Deletion Check” in the job management table109is not updated.

The job control section101adds a new record to the job log107after execution of the step S1004or S1003, to thereby record results of the cooperative job (S1005). In Case 2 or 3, the image data deletion process has not been executed yet at this time point, and therefore the job control section101executes the image data deletion process (S1006).

When the image data deletion process is terminated, the job control section101clears the job management table109(S1007), followed by terminating the job termination process.

FIGS. 19 to 22Bare flowcharts of processes executed by the cooperation-destination image processing apparatus2for the FAX reception cooperative job. In the following, the processes executed by the cooperation destination will be described using the flowcharts.

FIG. 19is a flowchart of a FAX reception cooperative process executed by the cooperation-destination image processing apparatus2for the FAX reception cooperative job.

The present FAX reception cooperative process is started by a “JobStart” command indicative of the start of the cooperative job being input from the cooperation-source image processing apparatus1via the interface section202, and is executed by the job control section201of the cooperation-destination image processing apparatus2.

The job control section201sequentially executes a job reception process (S1901), an image data input/output process (S1902), and an image data deletion process (S1903), and finally clears the job management table209(S1904), followed by terminating the FAX reception cooperative job at the cooperation destination.

Hereafter, the above-mentioned processes will be described in the mentioned order.

FIG. 20is a flowchart of the job reception process executed by the cooperation destination. First, the job control section201generates the job management table209and sets the information items of the job management table209to respective values based on the “JobStart” command received from the cooperation source (image processing apparatus1) (S2001).

FIG. 23shows the configuration of the job management table209and values set in the step S2001. First, a description will be given of the information items of the job management table209. Items “JobID” to “Image Deletion State at Self-Apparatus” are the same as those of the job management table109of the cooperation source (image processing apparatus1), and therefore description thereof is omitted.

An item “Image Input Source” indicates an image data input source (cooperation source). An item “HDD Storage” indicates whether or not to store image data received from the cooperation source in the storage section203(HDD2006). An item “Image Deletion State at Cooperation Source” indicates image data deletion state (undeleted/deleted) at the cooperation source.

Next, a description will be given of the values set in the step S2001. The items “JobID”, “Job Type”, “FAX Reception Information”, “Image Deletion Check”, and “Image Input Source” are set to respective associated values designated in the “JobStart” command. An item “Job Reception Time” is set to current time. An item “Job Processing Status” is set to “job being received”.

An item “Image Storage Information” is set to an address or the like of a storage destination where the image data206received from the image processing apparatus1is to be stored. An item “Image Deletion Level” is set to the value of the image deletion level208set in advance in the image processing apparatus1. The items “Image Deletion State at Self-Apparatus”, “HDD Storage”, and “Image Deletion state at Cooperation source” are not yet determined, and hence they are set to nothing.

The job control section201of the image processing apparatus2determines whether or not the image processing apparatus2as the cooperation destination supports an image deletion level designated in the “JobStart” command received from the cooperation source (image processing apparatus1) (S2002). This step provide an example of a first determining unit of the present invention.

If the image deletion level designated by the cooperation source is supported, the job control section201updates the job management table209as follows (S2003): The item “HDD Storage” is set to “ON”, and the item “Image Deletion Level” is updated to the image deletion level designated in the “JobStart” command received from the cooperation source. This enables the cooperation source and the cooperation destination to perform cooperative operation with the image deletion level (deletion method) in the cooperative job adjusted to substantially the same level.

Then, the job control section201sends the “JobStartAck” command to the cooperation-source image processing apparatus1to thereby notify the same that job reception is possible (S2004).

On the other hand, if the image deletion level designated by the cooperation source is not supported, the job control section201determines whether or not the cooperative job can be executed not by using the storage section203(HDD2006), but by using the RAM2011alone (S2005).

The routine of a program for executing the determination processing in the step S2005, the storage medium therefor, and the CPU2001as execution means therefor are an example of a second determining unit of the present invention.

The determination processing in the step S2005is executed for the reason that even if the designated image deletion level is not supported, insofar as image data is not stored in the HDD2006, processing for deleting image data stored in the HDD2006can be dispensed with.

In other words, even if the designated image deletion level is not supported, it is possible to maintain information security at a highest level insofar as image data is not stored in the HDD2006as a nonvolatile storage medium which is incapable of sufficiently ensuring information security.

In this case, even if deletion processing is not actually executed by the cooperation destination, the intention (purpose) of the deletion instruction related to the cooperative job is fulfilled in a substantially most favorable manner, and therefore integrity of the cooperative job (executability of cooperative processing) can be fully maintained.

If it is possible to execute the cooperative job without using the HDD2006, the job control section201sets the item “HDD Storage” in the job management table209to “OFF” (S2006).

As a method that enables execution of the cooperative job without using the HDD2006, a method can be considered in which the transmission mode for sending image data from the cooperation-source image processing apparatus1to the cooperation-destination image processing apparatus2is changed from “multi” to “single”, and image data received by the image processing apparatus2is temporarily stored in the volatile RAM2011.

The method using the volatile RAM2011makes it possible to process approximately 100% of the cooperative job without using the HDD2006. In the event that the RAM2011cannot be used due to memory capacity shortage, it is possible to cope with the problem with ease by additionally providing an inexpensive volatile RAM.

After having set the item “HDD Storage” in the job management table209to “OFF”, the job control section201sends the “JobStartAck” command to the cooperation-source image processing apparatus1to notify the same that job reception is possible (S2007). In this case, the job control section201sets the item “Image Transmission Mode” in the “JobStartAck” command to “single”.

If the cooperative job cannot be processed without using the HDD2006, the job control section201sends the “JobStartAck” command with Status=NG to the cooperation-source image processing apparatus1(S2008) to thereby notify the same that job reception is impossible. In this case, the job control section201clears the job management table209(S2009), and the FAX reception cooperative process by the cooperation destination is terminated.

When execution of the cooperative job is refused as above, the executability of cooperative processing of the cooperative job itself cannot be maintained, but it is possible to maintain information security at the highest possible level. It should be noted that an application program for executing the job reception process shown inFIG. 20, a storage medium storing the application program, and the CPU2001as means for executing the application program provide an example of a control unit of the present invention.

FIG. 21is a flowchart of the image data input/output process executed by the cooperation destination. The job control section201refers to the item “HDD Storage” in the job management table209and determines whether or not the HDD2006is to be used to process the present cooperative job (S2101).

If “HDD Storage”=“ON”, i.e. if the cooperative job is to be processed using the HDD2006, the job control section201receives all pages of image data from the image processing apparatus1in a batch (S2102: the sequence inFIG. 14). Then, the job control section201stores the received image data in the HDD2006(S2102).

Then, the job control section201outputs the image data stored in the HDD2006to the image forming and output section205(printer22) to print out all the pages (S2103).

On the other hand, if “HDD Storage”=“OFF”, i.e. if the cooperative job is to be processed without using the HDD2006, the job control section201receives image data on a page-by-page basis (S2104: the sequence inFIG. 15). The job control section201temporarily stores the received image data of one page in the RAM2011(S2104).

Then, the job control section201outputs the image data stored in the RAM2011to the image forming and output section205(printer22) to print out the one-page image data (S2105). The job control section201repeatedly carries out the steps S2104and S2105and a step S2106a number of times corresponding to the number of pages of the image data to thereby print out all the pages.

When printing of all the pages is completed, the job control section201updates the item “Job Processing Status” in the job management table209to “printing completed” (S2107). Finally, the job control section201adds a record to the job log207and sets the information items of the record to respective values (S2108), followed by terminating the image data input/output process.

FIG. 24shows the configuration of a record of the job log207and the values set by the job control section201in the step S2108. The information items of the record are the same as those of the job log107of the image processing apparatus1, and therefore description thereof is omitted.

An item “Record Number” is set to the record number of the added record. Items “JobID”, “Job Type”, “Job Reception Time”, and “Fax Reception Information” are set to values of the respective associated information items in the job management table209. An item “Image Output Destination” is set to a value (e.g. an IP address) indicative of the image processing apparatus2, i.e. the self-apparatus (cooperation destination) that output the image data.

Items “Job End Result” and “Print Sheet Count” are set to the results of the printing executed by the image forming and output section205. An item “Image Deletion State” indicates an image data deletion state (undeleted/deleted). At this time point, the item “Image Deletion State” is set to “undeleted”. Items “Image Deletion Time” and “Image Deletion Level” are set when the item “Image Deletion State” is set to “deleted”, and therefore they are set to nothing at this time point.

FIGS. 22A and 22Bare a flowchart of the image data deletion process executed by the job control section201of the cooperation-destination image processing apparatus2.

The job control section201refers to the item “Image Deletion Check” (cooperation source/cooperation destination) in the job management table209(S2201). If the item “Image Deletion Check” is set to “cooperation source”, the process proceeds to a step S2202, whereas if the item “Image Deletion Check” is set to “cooperation destination”, the process proceeds to a step S2208.

If “Image Deletion Check=cooperation source” in the step S2201, the job control section201refers to the item “HDD Storage” in the job management table209(S2202). If “HDD Storage”=“ON”, the job control section201sends the printing completion notification (“JobCompleted” event) to the cooperation source (S2203). At this time, the job control section201sets the item “Image Deletion Completion Notification” in the “JobCompleted” event to “ON”.

Then, the job control section201instructs the image data deletion section204to delete the image data used in the cooperative job (S2204). At this time, the job control section201designates a value set as “Image Deletion Level” in the job management table209, as an image data deletion method.

The image data deletion section204deletes the image data used in the cooperative job in an deletion mode corresponding to the image deletion level designated by the job control section201. The image data deletion process by the image data deletion section204is executed in parallel with processing by the job control section201.

Then, the job control section201awaits completion of the image deletion in the self-apparatus (image data deletion section204) (S2205). When the deletion of the image data is completed, the job control section201sends an image deletion completion notification (“DeleteCompleted” event) to the cooperation-source image processing apparatus1(S2206).

If “HDD Storage”=“OFF” in the step S2202, the job control section201sends the printing completion notification (“JobCompleted” event) to the cooperation source (image processing apparatus1) (S2207). In this case, the image data is not stored in the HDD2006of the self-apparatus, and therefore the job control section201sets the item “Image Deletion Completion Notification” in the “JobCompleted” event to “OFF”.

If it is determined in the step S2201that “Image Deletion Check”=“cooperation destination”, the job control section201sends the printing completion notification (“JobCompleted” event) to the cooperation source (image processing apparatus1) (S2208). In this case, the image deletion completion notification is sent from the cooperation source, and therefore the job control section201sets the item “Image Deletion Completion Notification” in the “JobCompleted” event to “OFF” (S2209).

Then, the job control section201awaits both arrival of the image deletion completion notification from the cooperation source (image processing apparatus1) (S2209) and completion of the image deletion in the self-apparatus (image data deletion section204) (S2210).

When the image deletion in the self-apparatus and the cooperation source (image processing apparatus1) is completed, the job control section201updates the item “Job Processing Status” in the job management table209to “image deletion completed” (S2211). Then, the job control section201terminates the image data deletion process after updating the record of the job log207on the present job as follows:“Image Deletion state”=“deleted”“Image Deletion Time”=“current time”“Image Deletion Level”=value of the item “Image Deletion Level” in the job management table209.

FIG. 25shows a sequence of exchanging the printing completion notification (“JobCompleted” event) and the image deletion completion notification (“DeleteCompleted” event) in the present embodiment.

In the processing executed in the present embodiment (corresponding to the illustrated example), since “image deletion check=cooperation destination, first in the step S2208inFIG. 22A, the printing completion notification (“JobCompleted” event) is sent from the cooperation-destination image processing apparatus2to the cooperation-source image processing apparatus1. Then, in the step S909inFIG. 9A, the image deletion completion notification (“DeleteCompleted” event) is sent from the cooperation-source image processing apparatus1to the cooperation-destination image processing apparatus2.

FIGS. 26 and 27illustrate examples of the job log207displayed on the operating display section210of the cooperation-destination image processing apparatus2.

FIG. 26illustrates an example of the job log207displayed when printing is completed by the image processing apparatus2, i.e. when the image input/output process is terminated (S2108inFIG. 21). The image data has not been deleted yet at this time point, and therefore “image deletion” is displayed as “self-apparatus (cooperation destination)=undeleted” and “cooperation source=undeleted”.

FIG. 27illustrates an example of the job log207displayed when the image data deletion process is terminated by both the image processing apparatus1and the image processing apparatus2(step S2212inFIG. 22B). At this time point, in a case where the cooperative job is executed without storing image data in the HDD2006, including a case where execution of the cooperative job is refused, the image data has already been deleted. Therefore, at the time point when the image data deletion process is terminated, “image deletion” is displayed as “self-apparatus (cooperation destination)=deleted” and “cooperation source=deleted”.

Thus, when “image deletion check”=“cooperation destination”, it is possible for the user of the cooperation-destination image processing apparatus2to check not only deletion of the image data used in the cooperative job by the apparatus2, but also the image data deletion state of the cooperation-source image processing apparatus1functioning only as a relay apparatus for data transmission, which contributes improvement of user-friendliness.

Next, a description will be given of an example of a FAX transmission cooperative job executed by the image processing system according to the present embodiment so as to send image data scanned by a cooperation-source image processing apparatus3(3a) to the cooperation-destination image processing apparatus1and causes the image processing apparatus1to send the image data to another apparatus by FAX transmission.

FIG. 28schematically illustrates how the FAX transmission cooperative job is executed is executed by an image processing system according to a second embodiment of the present invention. The image processing apparatuses1,3, and3aare connected to the same network4to cooperate with each other to execute the FAX transmission cooperative job.

The image processing apparatuses3and3aare cooperation-source image processing apparatuses, and each of them is configured as a copying machine equipped with the scan function and the print function. The image processing apparatus1is a cooperation-destination image processing apparatus. The image processing apparatus1is configured as an MFA equipped with the scan function, the print function, and the facsimile function.

The cooperation-source image processing apparatus3or3astarts a FAX transmission cooperative job executed in the following procedure: The cooperation-source image processing apparatus3(3a) scans an original (document) for the FAX transmission and transfers scanned image data to the cooperation-destination image processing apparatus1, and the cooperation-destination image processing apparatus1sends the received image data to another apparatus by FAX transmission.

FIG. 29is a block diagram of the hardware configuration of the cooperation-source image processing apparatus3(3a) (copying machine) in the present example shown inFIG. 28.

The hardware configuration of the image processing apparatus3(3a) is identical to that of the image processing apparatus1(seeFIG. 3) except that the image processing apparatus3(3a) is not provided with the FAX function (FAX modem1004), and therefore description thereof is omitted.

A detailed description will be given of a FAX transmission cooperative process executed for the FAX transmission cooperative job between the cooperation-source image processing apparatus3and the cooperation-destination image processing apparatus1.

Processing steps of the FAX transmission cooperative process are substantially the same as the corresponding steps of the FAX reception cooperative process inFIG. 5. However, specific processing in the processing steps is slightly different from that in the FAX reception cooperative process. In the following, a description will be given of the difference between the FAX reception cooperative process inFIG. 5and the present FAX transmission cooperative process.

It should be noted that in the case of giving a description of the cooperation-source image processing apparatus3(3a) with reference to functional blocks thereof, the reference numerals denoting the respective functional blocks in the left-hand large block (denoted by reference numeral1) inFIG. 1are used for convenience of description. On the other hand, the cooperation-destination image processing apparatus1will be described using the reference numerals denoting the respective functional blocks in the right-hand large block (denoted by reference numeral2) inFIG. 1.

When an operation instruction for FAX transmission is input to the job control section101of the cooperation-source image processing apparatus3via the operation panel11, a main routine substantially identical to that shown inFIG. 5is started. Therefore, the following description is given by referring to the step numbers inFIG. 5.

First, the job control section101of the cooperation-source image processing apparatus3generates a job management table109and sets information items in the job management table109to respective values (S501).

FIG. 30shows the configuration of the job management table109and the values set in the step S501. The job management table109is different from the job management table109inFIG. 11in the following points:

An item “Job Type” is set to “FAX transmission”. An item “FAX transmission information” indicates various kinds of information on FAX transmission, and the item is set e.g. to the telephone number of a transmission destination. In a FAX transmission cooperative job, it is more convenient to check image deletion at a cooperation source that performs operation for FAX transmission than at a cooperation destination, and therefore in the present example shown inFIG. 30, an item “Image Deletion Check” is set to “cooperation source”.

An image data input process executed by the cooperation source in the present embodiment is similar to the image data input process inFIG. 6in terms of processing steps. However, specific processing in the processing steps is slightly different from that in the image data input process inFIG. 6. In the following, a description will be given of the difference between the processing in the processing steps described with reference toFIG. 6and the image data input process in the present embodiment, by referring to the step numbers inFIG. 6.

The job control section101of the cooperation-source image processing apparatus3sequentially stores image data (pages)106received by the image data input section105(scanner13) in the storage section103(HDD1006) (S601to S602). Steps S603to S606are the same as those in the image data input process inFIG. 6, and therefore description thereof is omitted.

FIG. 31is a flowchart of an image data output process executed by the cooperation source in the present embodiment.

The job control section101of the cooperation-source image processing apparatus3determines an output destination (cooperation destination) for the image data and sets an item “Image Output Destination” in the job management table109to the determined output destination (S3101). Although various methods can be employed to determine a cooperation destination, a method in which a user sets a cooperation destination for the cooperation-source image processing apparatus3in advance is employed in the second embodiment. Therefore, in the step S3101, the job control section101sets the item “Image Output Destination” in the job management table109to the cooperation destination set in advance.

The job control section101sends the image data106stored in the storage section103to the cooperation destination (image processing apparatus1) via the interface section102and the network4(S3102). The present image data transmission process is similar to that inFIG. 8, and therefore description thereof is omitted.

When transmission of the image data to the cooperation-destination image processing apparatus1is completed, the job control section101awaits arrival of a FAX transmission completion notification (“JobCompleted” event) from the cooperation-destination image processing apparatus1(S3103). This FAX transmission completion notification (“JobCompleted” event) is similar to the “JobCompleted” event described with reference toFIG. 16.

When the FAX transmission completion notification is received from the cooperation-destination image processing apparatus1, the job control section101updates the job management table109(S3104). The job control section101updates an item “Job Processing Status” to “FAX transmission completed” and sets an item “Image Deletion Completion Notification from Cooperation destination” to one of values (OFF/ON) set in the FAX transmission completion notification.

Then, the job control section101adds a new record to a job log107, and records a FAX transmission result of the present cooperative job (S3105), followed by terminating the image data output process.

FIG. 32shows the configuration of a record of the job log107and examples of the values set by the job control section101in the step S1305.

The job log107inFIG. 32is different from the job log107inFIG. 17in that the record of the job log107includes an information item “FAX transmission information” inFIG. 32in place of the item “FAX reception information” inFIG. 17and an item “FAX Transmission Sheet Count” inFIG. 32in place of the “Print Sheet Count” inFIG. 17. Further, the job log107is different from the job log107in that an item “Job End Result” is set to “value (status) of FAX transmission completion notification”.

An image data deletion process by the cooperation source in the present embodiment is similar to the image data deletion process inFIGS. 9A and 9B. However, “Image Deletion Check”=“cooperation source” in the present example, and therefore the process proceeds from the step S902to the step S908.

A job termination process by the cooperation source in the second embodiment is identical to the corresponding job termination process inFIG. 10.

The outline of processing executed by the cooperation-destination image processing apparatus1for the FAX transmission cooperative job is also similar to that of the processing executed for the corresponding FAX reception cooperative process inFIG. 19.

A job reception process executed by the cooperation destination in the present embodiment is similar to the corresponding job reception process inFIG. 20in terms of processing steps. However, processing carried out in the step S2001in the present job reception process is slightly different from the corresponding processing in the job reception process inFIG. 20.FIG. 33shows the differences, i.e. the configuration of a job management table209and values set in the step S2001. The job management table209is different from the job management table209in that “Job Type” is set to “FAX transmission” and “Image Deletion Check” to “cooperation source”.

FIG. 34is a flowchart of an image data input/output process executed by the cooperation destination in the second embodiment.

The job control section201of the cooperation-destination image processing apparatus1transmits, by FAX, all pages of image data received in a batch or sequentially on a page-by-page basis from the cooperation-source image processing apparatus3(S3401to S3402and S3403or S3404and S3405).

Then, the job control section201of the cooperation-destination image processing apparatus1reflects a status of reception of the image data in the job management table209(S3407) and records the status in a job log207(S3408).

FIG. 35shows the configuration of a record of the job log207of the cooperation destination and values set by the job control section201in the step S3408. The job log207inFIG. 35is different from the job log207inFIG. 24in that the record of the job log207includes an information item “FAX transmission information” inFIG. 35in place of the item “FAX reception information” inFIG. 24and an item “FAX Transmission Sheet Count” inFIG. 35in place of the “Print Sheet Count” inFIG. 24. Further, inFIG. 35, an item “Job End Result” is set to “FAX transmission result”.

FIGS. 36A and 36Bare a flowchart of an image data deletion process executed by the cooperation destination in the present embodiment. The image data deletion process inFIGS. 36A and 36Bis different from that inFIGS. 22A and 22Bin that a FAX transmission completion notification is sent to a cooperation source (S3603, S3607, and S3608) in place of the printing completion notification sent to a cooperation source (S2203, S2207, and S2208inFIG. 22A).

FIG. 37shows a sequence of sending the FAX transmission completion notification (“JobCompleted” event) and the image deletion completion notification (“DeleteCompleted” event) in the present example.

In the present example, since “Image Deletion Check”=“cooperation source”, first in the step S3603(or S3607) inFIG. 36A, the FAX transmission completion notification (“JobCompleted” event) is sent from the cooperation-destination image processing apparatus1to the cooperation-source image processing apparatus3.

Similarly, in a step S3606inFIG. 36A, the image deletion completion notification (“DeleteCompleted” event) is sent from the cooperation-destination image processing apparatus1to the cooperation-source image processing apparatus3.

FIGS. 38 and 39illustrate examples of the job log107displayed on the operating display section110of the cooperation-source image processing apparatus3.

FIG. 38illustrates an example of the job log107displayed when FAX transmission by the cooperation-destination image processing apparatus1is completed (S3105inFIG. 31). The image data has not been deleted yet at this time point, and therefore “image deletion” is displayed as “self-apparatus (cooperation source)=undeleted” and “cooperation destination=undeleted”.

FIG. 39illustrates an example of the job log107displayed when image data deletion is completed by both the cooperation-source image processing apparatus3and the cooperation-destination image processing apparatus1(step S907inFIG. 9B). The image data has already been deleted at this time point. Therefore, image deletion results (“self-apparatus (cooperation source)”=“deleted”, “cooperation destination”=“deleted”, and “deletion time” and “deletion level”) are displayed.

Thus, when “Image Deletion Check”=“cooperation source”, it is possible for the user of the cooperation-source image processing apparatus3to check not only deletion of the image data used in the cooperative job by the apparatus3, but also image data deletion in the cooperation-destination image processing apparatus1functioning only as a relay apparatus for data transmission, which contributes improvement of user-friendliness.

In other words, in the present embodiment, a cooperative job is executed, with a cooperation-destination image processing apparatus as a relay apparatus for data transmission, and hence display for check of deletion of image data used in the cooperative job from a storage medium is left to a cooperation-source image processing apparatus.

This makes it possible to leave deletion check to a user at a cooperation source who can easily recognize that a cooperative job is currently being executed, and makes it unnecessary for a user at a cooperation destination, who cannot recognize execution of the cooperative job, to perform deletion check. Therefore, user-friendliness is improved.

The above-described image processing system according to the present embodiment provides the following advantageous effects:

First of all, when an image deletion level designated by a cooperation source is supported by a cooperation destination, the cooperation source and the cooperation destination can cooperate with each other to delete image data by a deletion method ensuring information security of the same level. This makes it possible to fully maintain the executability of cooperative processing of a cooperative job while maintaining information security.

On the other hand, when an image deletion level designated by a cooperation source is not supported by a cooperation destination, image data is not stored in an HDD as a nonvolatile storage medium which cannot ensure information security, so that it is possible to maintain information security at the highest possible level.

Further, in a case where an image deletion level designated by a cooperation source is not supported by a cooperation destination, when execution of a cooperative job is refused, it is impossible to maintain the executability of cooperative processing of the cooperative job, but information security can be maintained at the highest possible level.

As described above, when an image deletion level designated at a cooperation source is not supported at a cooperation destination, the actual deletion process is not executed by the cooperation destination. Even in this case, however, the deletion instruction for a cooperative job is fulfilled in a substantially most favorable manner, and therefore the executability of cooperative processing of a cooperative job can be fully maintained.

Further, in a case where a cooperation destination receives image data without using an HDD, the image data is received on a page-by-page basis and temporarily stored in a RAM that can be additionally provided at a low cost, for execution of a cooperative job. Therefore, it is possible to make substantially use of the technological idea according to the present embodiment.

Furthermore, according to the present embodiment, deletion check is performed not by an image processing apparatus functioning only as a relay apparatus for data transmission, but by the other cooperation-source or cooperation-destination image processing apparatus, i.e. an image processing apparatus via which a user can easily recognize existence of a cooperative job. This makes it possible to improve the user-friendliness of the system.

The embodiment described above in detail can be applied to any cooperative job executed by a plurality of image processing apparatuses in cooperation with each other. Further, the cooperation source and the cooperation destination are not always limited to one pair, but a plurality of cooperation destinations may exist.

The image processing apparatus to which the present invention is applied is not limited to a printer, a copying machine, or an MFP, but the technological idea according to the present embodiment can be applied to a scanner device, a facsimile machine, or a computer insofar as the device or apparatus is equipped with a network communication function.

Further, in the case of receiving image data without using an HDD, a cooperation destination can request a cooperation source at least not to send all pages of image data in a batch in place of requesting for page-by-page image data transmission. This makes it possible to suppress reduction of cooperative job execution speed while maintaining information security.

Although in the above-described embodiment, the specific storage medium in the present invention is implemented by an HDD by way of example, even if the specific storage medium is implemented by a storage medium other than an HDD, it is possible to realize the technological idea according to the present embodiment. In this case, the specific storage medium for storing image data may be incorporated in an image processing apparatus or externally (and e.g. removably) attached to the same.

Aspects of the present invention can also be realized by a computer of a system or apparatus (or devices such as a CPU or MPU) that reads out and executes a program recorded on a memory device to perform the functions of the above-described embodiment, and by a method, the steps of which are performed by a computer of a system or apparatus by, for example, reading out and executing a program recorded on a memory device to perform the functions of the above-described embodiment. For this purpose, the program is provided to the computer for example via a network or from a recording medium of various types serving as the memory device (e.g., computer-readable medium).

This application claims the benefit of Japanese Patent Application No. 2009-046267, filed Feb. 27, 2009, which is hereby incorporated by reference herein in its entirety.