JP2005199627A - Image processor having authentication function for outputting confidential print data - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To raise reliability of confidential printing function and reduce troublesomeness of a user in a procedure of printing in an image processor. <P>SOLUTION: When print data received through a communication network by a computer of the image processor is correlated to user authentication information, the print data correlated to the user authentication information is stored in a memory without printing the print data. When the computer of the image processor receives an electronic mail through the communication network, the computer acquires the user authentication information involved in the electronic mail. When the print data correlated to the user authentication information which is matched with the acquired user authentication information can be fetched from the memory device, the fetched print data is printed out by an output device. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an image processing apparatus such as a printer, a digital copying machine, or a multifunction peripheral, and more particularly to an image processing apparatus connected to a mobile phone, a mobile information terminal, a PDA, a personal computer, or the like via a communication network. .

  Conventionally, when data that requires attention in handling confidential documents (hereinafter referred to as “confidential data”) is printed by an image processing apparatus, first, authentication data such as a user ID and a password is received together with the confidential data from a personal computer or the like. (Hereinafter referred to as “user authentication data”). When the confidential data is actually printed out as a paper medium, the user inputs the user authentication data to the image processing apparatus using an operation button or the like, and when the authentication is confirmed, the confidential data is printed out. .

  In addition, the designation of user authentication data in the image processing apparatus may be set in advance from the client PC before transmitting confidential data. Further, when the confidential data is transmitted to the image processing apparatus, user authentication data for printing out the confidential data is returned from the image processing apparatus to the client PC by e-mail.

  By such a method, it is possible to prevent the confidential data printed from being exposed to unspecified third parties and to prevent information leakage.

There are the following documents related to the technology for managing and printing confidential data as described above.
JP 2001-51915 A JP 2001-251470 A JP 2002-297510 A

  As is well known, in the current network environment, a usage form of a client server type in which a plurality of people use one image processing apparatus is common. Therefore, in the case of an image processing apparatus that is used by many people such as public places, the reliability of a confidential printing function that enables printing only by the owner of the printed matter becomes very important. For the purpose of improving the reliability, the result is that authentication is complicated in the confidential printing function.

  However, in the above-described conventional technology, since a keyboard or the like for directly inputting a personal identification number is not usually provided in the image processing apparatus, complicated input of the personal identification number becomes complicated for the user, and confidential data is printed out. This causes a technical problem that the occupation time of the image processing apparatus becomes long.

  SUMMARY An advantage of some aspects of the invention is that it reduces the complexity of the procedure for printing by the user while increasing the reliability of the confidential printing function in the image processing apparatus.

  In order to solve the above problems, an image processing apparatus according to the present invention includes a storage device that stores print data, an output device that prints out the print data, and a computer that controls these devices.

  In addition, when the user authentication information is associated with the print data received by the computer via the communication network, the image processing apparatus stores the print data associated with the user authentication information without printing out the print data. When the electronic mail is received via the communication network, the step of storing in the device, the step of acquiring the user authentication information included in the electronic mail, and the user authentication information matching the acquired user authentication information are associated. When the obtained print data can be acquired from the storage device, a step of causing the output device to print out the acquired print data is executed.

  According to the present invention, compared to a conventional user authentication method for confidential printing, in which user authentication information is directly input to an image processing apparatus, the complexity of input is greatly reduced by using electronic mail. In addition, reliability can be further improved by combining more complicated authentication. Further, by using electronic mail, it is possible to send data across a firewall, and it is possible to provide an environment that is convenient for the user.

  Another image processing apparatus according to the present invention is characterized in that the user authentication information includes a user ID and a password.

  According to the present invention, it is possible to further improve the security of user authentication by combining passwords.

  Another image processing apparatus according to the present invention is characterized in that the user authentication information includes an e-mail address and a password.

  According to the present invention, it is not necessary to issue a separate user ID by using the sender mail address as the user ID. In addition, since the portable information terminal normally has a mail transmission / reception function, connection to an existing system is easy.

  In another image processing apparatus according to the present invention, the password in the user authentication information is encrypted, and the computer decrypts the password in the encrypted user authentication information. It is a feature.

  By encrypting the password according to the present invention, even if the password is leaked in the middle of the communication network, it is difficult for a third party to decipher, so the security is further improved.

  Another image processing apparatus according to the present invention is characterized in that a password encryption method in the user authentication information is based on a public key cryptosystem.

  In the present invention, since the management of the encryption key is prepared by using the public key method, a more reliable confidential printing function can be realized.

  In another image processing apparatus according to the present invention, when the received print data or e-mail has an electronic signature, the computer performs a step of determining whether the electronic signature is true or false. Yes.

  In the present invention, by adopting an electronic signature technique, authentication of a sender with respect to print data or e-mail is facilitated, so that spoofing can be prevented.

  Another image processing apparatus according to the present invention includes a frame image representing an e-mail address of the image processing apparatus.

  According to the present invention, the e-mail address of the image processing apparatus can be taken in by reading a two-dimensional bar code, etc., and there is no need for the user to transcribe or a transcription mistake, thus providing a confidential printing function with excellent operability. It becomes possible.

  Another image processing apparatus according to the present invention includes a frame image representing an IP address of the image processing apparatus.

  According to the present invention, the IP address of the image processing apparatus can be fetched by reading a two-dimensional barcode, etc., and there is no need for transcription and transcription mistakes, and a confidential printing function with excellent operability can be provided. .

  Another image processing apparatus according to the present invention includes a display device that displays the frame image, and the computer displays the frame image on the display device.

  According to the present invention, even when the IP address or the e-mail address is changed by displaying the two-dimensional barcode on the display device, it is possible to easily cope with the change by changing the setting of the image processing device.

  According to the above-described invention, it is possible to provide an image processing apparatus superior to the prior art that can provide a highly reliable confidential printing function without imposing complicated procedures on the user.

  Hereinafter, embodiments of the present invention will be described with reference to FIGS. FIG. 1 is an overall configuration diagram including an image processing apparatus according to the present invention. As shown in the figure, an image processing apparatus 1 according to the present invention is connected to an information terminal 2 and a server 3 via a communication network 4. Here, the information terminal 2 corresponds to a mobile phone, a mobile information terminal, a PDA, a personal computer, or the like. The server 3 corresponds to a computer such as a WEB server and plays a role of a file server and a role of transmitting file information as print data to the image processing apparatus 1. The communication network 4 corresponds to the Internet, a telephone line, a wireless communication line, a frame relay, and the like. Further, the image processing apparatus 1 corresponds to a printer, a digital copying machine, a multifunction machine, or the like.

  Next, the configuration of the image processing apparatus 1 will be described with reference to FIG.

  As shown in FIG. 1, the image processing apparatus 1 includes a ROM, RAM, HDD, and frame memory that are storage devices, a modem that is a communication interface, various controllers that are interface devices that control software and hardware, and a user. An operation unit that receives instructions from the computer, a display unit that displays information, an output device that prints and outputs data, and a CPU that is a computer that controls these units, each via a main bus or a local bus Connected. Here, the display unit (display device) corresponds to a liquid crystal display or the like. The output device corresponds to various printer devices such as an ink jet type or a laser type. The operation unit corresponds to a touch panel or the like. As described above, the image processing apparatus 1 operates when a CPU, which is a computer, instructs the above hardware such as a storage device.

  Next, the operation of each component (image processing apparatus 1, information terminal 2, server 3) of this embodiment will be described based on FIG.

  First, the CPU of the image processing apparatus 1 loads a public key generation program stored in its own HDD into the RAM, and generates a public key (public key data) by executing the program. Then, the CPU of the image processing apparatus 1 transmits the generated public key from its own modem to the information terminal 2 via the communication network 4, and the information terminal 2 receives the public key. The public key of the image processing apparatus 1 may be registered in advance in another WEB server, and the information terminal 2 may obtain it from the server.

  Next, when the user inputs a password when executing printing in the information terminal 2, the information terminal 2 encrypts the password using the public key of the image processing apparatus 1 received earlier (hereinafter, “ Encrypted password "). Then, the user causes the information terminal 2 to read the address of the image processing apparatus 1. The “address of the image processing apparatus 1” corresponds to information for identifying a computer on a communication network such as an e-mail address, an IP address, and a URL.

  Here, a frame image sticker as shown in FIG. 4 is affixed to the outer surface of the image processing apparatus 1. The frame image sticker is read as a two-dimensional barcode information by a reading device such as a barcode reader provided in the information terminal 2, thereby obtaining an IP address, URL, or e-mail address as an address of the image processing device 1. It can be acquired as information. Further, the frame image may be displayed on the display unit of the image processing apparatus 1 as shown in FIG. In this case, when a frame image display command is instructed via the operation unit of the image processing apparatus 1, the CPU of the image processing apparatus 1 displays the frame image stored in its own HDD based on the instruction on its own display unit. Is displayed. The frame image displayed on the display unit of the image processing apparatus 1 is read by a reading device such as a barcode reader provided in the information terminal 2, thereby obtaining the IP address, URL, or e-mail address of the image processing device 1. It can be acquired as information.

  Subsequently, when the information terminal 2 accesses the server 3 via the communication network 4, the server 3 requests the information terminal 2 for general authentication such as a user ID and a password. When the information terminal 2 finishes the authentication, the server 3 transmits service screen data as WEB data to the information terminal 2 via the communication network 4. As an example of this service screen data, as shown in FIG. 6, it is possible to select which file is to be printed, and it is encrypted with the user ID, an address such as the URL of the image processing apparatus, and the public key. The password can be stored as information.

  Here, in the information terminal 2, when the user inputs the user ID and selects a file to be printed, the information is stored in the service screen data. Further, the address of the image processing apparatus 1 is obtained by the information terminal 2 from the frame image, the encrypted password is the password encrypted by the information terminal 2, and the information terminal 2 stores the service screen data. In this way, the information terminal 2 transmits data (hereinafter referred to as “setting data”) in which information is set in the service screen data to the server 3 via the communication network 4.

  Then, the server 3 recognizes the file to be printed based on the received setting data and generates print data for the file. This print data is print data in a printer language that is used for printing by an image processing apparatus such as a normal printer.

  Then, the generated print data, the user ID and the encrypted password included in the setting data are transmitted to the image processing apparatus 1 through the communication network 4 as a print data set. At this time, the server 3 accesses the image processing apparatus 1 using the address of the image processing apparatus 1 included in the setting data.

  When the CPU of the image processing apparatus 1 receives the print data set from the server 3 via the modem, the CPU generates image data that can be printed based on the print data included in the received print data set. To do. The drawing data is data in a format configured so that the image processing apparatus 1 can immediately print out using its own output device.

  Then, as shown in FIG. 7, the CPU of the image processing apparatus 1 associates the user ID and password included in the print data set with the drawing data as user authentication information and stores them in the HDD. At this time, the CPU of the image processing apparatus 1 loads the decryption program and decryption key data stored in its own HDD into the RAM, and executes the program using the decryption key data, thereby executing the above printing. The encrypted password included in the data set is decrypted into the original password, and is used as a part of the user authentication information.

  Here, when the user authentication information is associated with the drawing data as the print data stored in its own HDD, the CPU of the image processing apparatus 1 recognizes that the drawing data is confidential printing. That is, it is recognized that the print data (drawing data) associated with the user authentication information is data (confidential data) that can be printed out only after the authentication is completed. Therefore, the CPU of the image processing apparatus 1 does not immediately print out confidential data.

  Subsequently, when the user instructs the information terminal 2 to print confidential data, the information terminal 2 transmits the user ID and the encrypted password as an e-mail to the image processing apparatus 1 via the communication network 4. As the user ID and the encrypted password, the same information as that previously transmitted to the server 3 by the information terminal 2 is stored in its own storage device (HDD, RAM, etc.). Further, the e-mail address of the image processing apparatus 1 is the one previously taken from the frame image.

  When the CPU of the image processing apparatus 1 receives this e-mail via the communication network 4, the CPU of the image processing apparatus 1 acquires an encrypted password included in the received e-mail. Then, the CPU of the image processing apparatus 1 loads the decryption program and decryption key data stored in its own HDD into the RAM, and executes the program using the decryption key data to obtain the obtained encryption The password is decrypted.

  Next, the CPU of the image processing apparatus 1 performs a search process on the user authentication information stored in its own HDD using the decrypted password and the user ID included in the e-mail as key items. When the user authentication information matches, the CPU of the image processing apparatus 1 causes the output device to print out the drawing data associated with the matched user authentication information. This is because the drawing data associated with the matched user authentication information is considered to have been printed by the owner.

  As described above, in this embodiment, the file as confidential data designated by the user on the information terminal 2 is stored in the user authentication information included in the e-mail from the information terminal 2 by the image processing apparatus 1 according to the user's instruction. An authentication process is performed to determine whether or not to print out. For this reason, it is possible to reduce the complexity of the procedure during printing by the user while maintaining high reliability of the confidential printing function in the image processing apparatus. That is, even if the data length of the password is increased or the public key encryption method is made more complicated, the user simply gives a print processing command to the image processing apparatus 1 by e-mail including user authentication information. Therefore, it is possible to use a confidential printing function with high reliability.

  Further, an e-mail address may be used instead of the user ID. In that case, it suffices if the setting data transmitted from the information terminal 2 to the server 3 includes a transmission source e-mail address item of the portable terminal 2 instead of the user ID. Then, the information terminal 2 transmits an e-mail containing only the encrypted password to the image processing apparatus 1 via the communication network 4. When the CPU of the image processing apparatus 1 receives this e-mail via the communication network 4, the CPU acquires the encrypted password and the transmission source e-mail address included in the received e-mail. Other processing is the same as described above.

  In the present embodiment, the method using the public key method has been described, but another encryption method may be used. For example, instead of adopting the public key method, the information terminal 2 and the image processing apparatus 1 may share the secret key in advance and adopt the secret key method. Furthermore, after adopting a public key method, a secret key method may also be adopted. In that case, there is a method in which the password encrypted by the information terminal 2 with the public key of the image processing apparatus 1 is further encrypted with the secret key.

  Further, it is possible to further improve confidentiality by adopting an electronic signature for an electronic mail from the information terminal 2 to the image processing apparatus 1. This electronic signature method is a method in which a message digest is generated and the digest is encrypted by a public key method, as widely adopted as a known technique.

  Further, after the CPU of the image processing apparatus 1 receives the print data set from the server 3, the CPU of the image processing apparatus 1 does not necessarily generate drawing data from the print data included in the print data set. That is, the drawing data may be generated when printing is performed (when user authentication is successful).

  As described above, the image processing apparatus 1 according to the present invention can flexibly cope with a variety of encryption schemes, increase reliability, and reduce the complexity of user procedures during printing. .

  The present invention can be implemented using an image processing apparatus such as a printer, a digital copying machine, or a multifunction machine, and can be industrially utilized by mass-producing the image processing apparatus. That is, the present invention can be implemented in the form of a network system in which the image processing apparatus and information terminals such as mobile terminals, personal computers, and PDAs are connected via a communication network.

1 is an overall configuration diagram including an image processing apparatus according to the present invention. 1 is a configuration diagram of an image processing apparatus 1. FIG. It is a flowchart of operation | movement of each component in FIG. It is a frame image sticker. 2 is a frame image displayed on a display unit of the image processing apparatus 1. It is an example of service screen data. It is an example of a data structure in which user authentication information and drawing data (print data) are associated.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image processing apparatus 2 Information terminal 3 Server 4 Communication network

Claims (9)

An image processing apparatus comprising: a storage device that stores print data; an output device that prints out the print data; and a computer that controls these devices.
The computer is
If user authentication information is associated with the print data received via the communication network, the print data associated with the user authentication information is stored in the storage device without printing out; and
Receiving an email via a communication network, obtaining user authentication information included in the email; and
If the print data associated with the user authentication information that matches the acquired user authentication information can be acquired from the storage device, printing the acquired print data on the output device; and
An image processing apparatus characterized by executing The user authentication information includes a user ID and a password;
The image processing apparatus according to claim 1. The user authentication information comprises an email address and a password;
The image processing apparatus according to claim 1. The password in the user authentication information is encrypted;
The computer is
The image processing apparatus according to claim 2, wherein a step of decrypting a password in the encrypted user authentication information is performed. The password encryption method in the user authentication information is based on a public key cryptosystem;
The image processing apparatus according to claim 4. If the received print data or e-mail has an electronic signature,
The computer is
The image processing apparatus according to claim 1, further comprising: determining whether the electronic signature is authentic. A frame image representing an email address of the image processing apparatus;
The image processing apparatus according to claim 1. A frame image representing an IP address of the image processing apparatus;
The image processing apparatus according to claim 1. A display device for displaying the frame image;
The computer is
9. The image processing device according to claim 7, wherein the frame image is displayed on the display device.

Images