JP2015123730A - Image processing system and log recording method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image processing system 1 capable of raising security without managing a password regarding log recording.SOLUTION: In an image processing system 1, a terminal 300 comprises: file creation means 402 for storing a file including a public key in an external storage medium 200 when the terminal and the external storage medium 200 are communicably connected with each other; and decryption means 407 for decrypting an encrypted log by a secret key corresponding to the public key when the external storage medium 200 in which the encrypted log is stored is attached, and a compound machine 100 comprises encryption means 406 for encrypting the log by the public key of the file of the external storage medium 200, and storing the encrypted log in the external storage medium 200 when the external storage medium 200 is attached to the compound machine 100.

Description

  The present invention relates to an image processing system and a log recording method, and more particularly to an image processing system and a log recording method capable of improving security without managing a password for log recording.

  Conventionally, when an image forming apparatus such as a copying machine has some trouble, the internal information (log) and image data of the image forming apparatus are taken out into a portable external memory to analyze the cause of the trouble. There is a case.

  The extracted internal information includes confidential information of the user, or the image data itself is confidential information. Further, the external memory is portable and can be easily attached and detached by any number of unspecified people. Therefore, when extracting internal information and image data from the image forming apparatus, it is necessary to consider security in terms of security.

  Therefore, for example, in Japanese Patent Application Laid-Open No. 2011-104796 (Patent Document 1), a storage unit configured by a non-volatile memory, an external I / F configured to be detachable from an external storage medium, and internal information of the device are described. It is determined whether the recorded log and image data are stored in the storage unit or the external storage medium. When the log and image data are stored in the storage unit, the log and image data are not encrypted, and the external storage medium An image forming apparatus including a control unit that encrypts the log and the image data in the case of storing the log and image data is disclosed. Further, the control means determines whether to store the log and image data in which the internal information of the apparatus is stored in a storage unit constituted by a nonvolatile memory or an external storage medium removable from the external I / F, There is disclosed a log recording method including a step of encrypting the log and image data when storing in the storage unit, and encrypting the log and image data when storing in the external storage medium. This makes it possible to ensure security in terms of security when taking out internal information and image data from the apparatus main body.

JP 2011-104796 A

  However, in the technique described in Patent Document 1, information encrypted with a password stored by a user or a service person is decrypted. Therefore, there is a problem that it is necessary to pay careful attention to password management. Further, since the encrypted log can be freely copied to an external storage medium, there is a problem that the encrypted log and customer information may inadvertently flow out to the outside.

  In particular, the log and image data described above often include personal information such as the fax number and mail address of the user or customer who uses the image forming apparatus. If it is illegally decrypted by this, it becomes a big problem in terms of security.

  Accordingly, the present invention has been made to solve the above-described problem, and an object thereof is to provide an image processing system and a log recording method capable of improving security without managing a password for log recording. And

  In order to solve the above-described problems and achieve the object, an image processing system according to the present invention is an image processing system having a terminal device and an image processing device to which an external storage medium can be attached, and has the following configuration. adopt.

  That is, the present invention is an encrypted file creating means for storing a file including a public key in the external storage medium when the terminal apparatus is communicably connected to the external storage medium. When an external storage medium storing a log is loaded, the image processing apparatus includes a decryption unit that decrypts the encrypted log with a secret key corresponding to the public key, and the image processing apparatus stores the file When the external storage medium is attached, the log is encrypted with the public key of the file of the external storage medium, and the encryption log is stored in the external storage medium.

  In addition, when the terminal device and the external storage medium are communicably connected, the file creation unit generates a table in which individual information registered in advance in the external storage medium and the secret key are paired. Then, when the external storage medium storing the encrypted log is attached, the decryption means stores the individual information corresponding to the individual information of the external storage medium. The encrypted log is decrypted with the private key of the table.

  The present invention can be provided as a log storage method for an image processing system having a terminal device to which an external storage medium can be attached and an image processing apparatus.

  That is, according to the present invention, when the external storage medium is communicably connected to the terminal device, the step of storing a file including a public key in the external storage medium, and the external storage medium storing the file are When attached to the image processing apparatus, the log is encrypted with the public key of the file of the external storage medium, the encrypted log is stored in the external storage medium, and the encrypted log is stored And decrypting the encrypted log with a secret key corresponding to the public key when an external storage medium is attached to the terminal device. Even with such a configuration, the same effects as described above can be obtained.

  According to the image processing system and the log recording method of the present invention, it is possible to improve security without managing passwords for log recording.

1 is a schematic diagram of an image processing system according to an embodiment of the present invention. It is a conceptual diagram which shows the whole structure of the operation part which concerns on embodiment of this invention. It is a figure which shows the structure of the control system hardware of the image processing system which concerns on this invention. It is a functional block diagram of the image processing system of this invention. It is a flowchart for showing the execution procedure of this invention. It is a conceptual diagram which shows the exchange of data of the image processing system of this invention.

  In the following, an embodiment of an image processing system of the present invention will be described with reference to the accompanying drawings for understanding of the present invention. In addition, the following embodiment is an example which actualized this invention, Comprising: The thing of the character which limits the technical scope of this invention is not. Moreover, the alphabet S added before the number in a flowchart means a step.

<Image processing system>
Hereinafter, an image processing system including an image processing device and a terminal device will be described as an image processing system according to an embodiment of the present invention. FIG. 1 is a schematic diagram of an image processing system according to an embodiment of the present invention. However, details of each part not directly related to the present invention are omitted. Note that the image processing apparatus of the present invention corresponds to, for example, a multi-function peripheral having functions such as a copy, a scanner, and a printer, and functions as an image processing apparatus having a copy function, a scanner function, a printer function, and the like.

  Hereinafter, for example, the operation of the MFP 100 (Multi Function Peripheral) when the user uses the copy function will be briefly described.

  First, when the user uses the multifunction machine 100, a document is placed on the document table 101 provided on the upper surface of the casing, and an operation unit 102 (operation panel) provided in the vicinity of the document table 101 is provided. The input of the setting condition regarding the image processing is input from the operation screen of the operation unit 102. When the user presses a start key provided on the operation unit 102, the multi-function device 100 starts image processing (copy function, print processing).

  Next, in the image reading unit 103, the light emitted from the light source 104 is reflected by the document placed on the document table 101. The reflected light is guided to the image sensor 108 by the mirrors 105, 106, and 107. The guided light is photoelectrically converted by the image sensor 108, and image data corresponding to the original is generated.

  An image forming unit 109 forms a toner image based on the image data. The image forming unit 109 is provided with a photosensitive drum 110. The photosensitive drum 110 rotates in a predetermined direction at a constant speed, and around the charger drum, the exposure unit 112, the developing unit 113, the transfer unit 114, the cleaning unit 115, and the like, in that order from the upstream side in the rotation direction. Is arranged.

  The charger 111 uniformly charges the surface of the photosensitive drum 110. The exposure unit 112 irradiates the charged surface of the photosensitive drum 110 with a laser based on the image data to form an electrostatic latent image. The developer 114 forms a toner image by attaching toner to the formed electrostatic latent image. The formed toner image is transferred to a recording medium (for example, paper, sheet) by the transfer device 114. The cleaning unit 115 removes excess toner left on the surface of the photosensitive drum 110. A series of these processes is executed by rotating the photosensitive drum 110.

  The sheets are conveyed from a plurality of paper feed cassettes 116 provided in the multi function peripheral 100. When the sheet is conveyed, the sheet is pulled out from any one of the sheet feeding cassettes 116 to the conveyance path by the pickup roller 117. Each sheet cassette 116 stores sheets of different paper types, and the sheets are fed based on setting conditions relating to image processing.

  The sheet pulled out to the conveyance path is fed between the photosensitive drum 110 and the transfer device 114 by the conveyance roller 118 and the registration roller 119. When the sheet is fed, the toner image is transferred to the sheet by the transfer unit 114 and conveyed to the fixing device 120.

  When the sheet on which the toner image is transferred passes between a heating roller and a pressure roller provided in the fixing device 120, heat and pressure are applied to the toner image, and the visible image is fixed on the sheet. The The amount of heat of the heating roller is optimally set according to the paper type, and the fixing is performed appropriately. The visible image is fixed on the sheet, and the image formation is completed. The sheet is discharged by a conveying roller 118 to a cylinder tray 122 provided in the cylinder of the casing unit via a sheet discharge port 121. The The sheets are stacked and stored on the in-body tray 122. Through the above procedure, the multi-function device 100 provides a copy function to the user.

  Here, for example, when the MFP 100 executes the copy function, the internal information is stored as a log in a predetermined internal storage medium. In this internal storage medium, a log of processing executed by the multifunction device 100 is accumulated.

  For example, a user such as a service person attaches an external storage medium 200 (for example, a USB memory) with the terminal device 300, registers the external storage medium 200, and attaches the external storage medium 200 to the multi function device 100. Thus, the log of the internal storage medium of the multifunction peripheral 100 is stored in the external storage medium 200. When the user re-attaches the external storage medium 200 to the terminal device 300, the log stored in the external storage medium 200 is stored in a predetermined storage medium of the terminal device 300, and log storage (migration) is performed. Is completed (details will be described later).

  FIG. 2 is a conceptual diagram showing the overall configuration of the operation unit according to the embodiment of the present invention. The user uses the operation unit 102 to input setting conditions for the image processing as described above, and to confirm the input setting conditions. When the setting conditions are input, a touch panel 201 (operation panel), a touch pen 202, and operation keys 203 provided in the operation unit 102 are used.

  The touch panel 201 has both a function for inputting setting conditions and a function for displaying the setting conditions. That is, by pressing a key in the screen displayed on the touch panel 201, a setting condition corresponding to the pressed key is input.

  A display unit (not shown) such as an LCD (Liquid Crystal Display) is provided on the back surface of the touch panel 201, and the display unit displays an operation screen such as the initial screen, for example. A touch pen 202 is provided in the vicinity of the touch panel 201. When the user touches the touch pen 201 with the tip of the touch pen 202, a sensor provided under the touch panel 201 detects the touch destination.

  Further, a predetermined number of operation keys 203 are provided in the vicinity of the touch panel 201, and for example, a ten key 204, a start key 205, a clear key 206, a stop key 207, a reset key 208, and a power key 209 are provided.

  Next, the configuration of the control hardware of the image processing system 1 will be described with reference to FIG. FIG. 3 is a diagram showing the configuration of the control system hardware of the image processing system according to the present invention. However, details of each part not directly related to the present invention are omitted.

  The control circuit of the multifunction peripheral 100 of the image processing system 1 corresponds to a CPU (Central Processing Unit) 301, a ROM (Read Only Memory) 302, a RAM (Random Access Memory) 303, an HDD (Hard Disk Drive) 304, and each drive unit. The driver 305, the operation unit 102, and the mounting port 306 of the external storage medium 200 are connected by an internal bus 307.

  For example, the CPU 301 uses the RAM 303 as a work area, executes a program stored in the ROM 302, the HDD 304, and the like, and based on the execution result, the driver 305, the operation unit 102, and the mounting port 306. 1 receives data, instructions, signals, commands, and the like from the external storage medium 200 attached to and controls the operation of each drive unit shown in FIG.

  In addition, the control circuit of the external storage medium 200 of the image processing system 1 connects the ROM 307, the RAM 308, and the mounting unit 309 via the internal bus 310, and stores the program and data of the terminal device 300 and the log of the multifunction device 100.

  In the control circuit of the terminal device 300 of the image processing system 1, the CPU 311, the ROM 312, the RAM 313, the HDD 314, and the mounting port 315 of the external storage medium 200 are connected by an internal bus 316. The function of each member is the same as described above.

  Also, each means (shown in FIG. 4) other than the drive unit described later is realized by the CPU 301 of the multifunction peripheral 100 and the CPU 311 of the terminal device 300 executing each program. The ROM 302, RAM 303, HDD 304 of the multi-function peripheral 100, ROM 307, RAM 308 of the external storage medium 200, ROM 312, RAM 313, HDD 314, etc. of the terminal device 300 store programs and data for realizing the means described below.

<Embodiment of the present invention>
Next, the configuration and execution procedure according to the embodiment of the present invention will be described with reference to FIGS. 4 and 5. FIG. 4 is a functional block diagram of the image processing system of the present invention. FIG. 5 is a flowchart for showing the execution procedure of the present invention.

  First, a user connects to a terminal device 300 provided in a specific company such as a head office or a development company so as to be able to communicate with a predetermined external storage medium 200 (USB memory) (FIG. 5: S101).

  Here, any method may be used for the terminal device 300 and the external storage medium 200 to be communicably connected. For example, a method in which a user visits a specific company and attaches the attachment unit 309 of the external storage medium 200 to the attachment port 315 of the terminal device 300, or a user who is connected to the terminal device 300 through a network so as to be communicable For example, a method of mounting the mounting portion 309 of the external storage medium on the mounting port of the owned user terminal device can be cited.

  When the user attaches the external storage medium 200 to the terminal device 300, the external storage medium 200 needs to be physically contacted with the terminal device 300. When the terminal device 300 and the external storage medium 200 are communicably connected, there is no need to physically contact the external storage medium 200 with the terminal device 300. Therefore, it is possible to increase the number of new external storage media 200 for log storage easily and safely even if the user (site) is far away from a specific company.

  When the terminal device 300 and the external storage medium 200 are communicably connected, the control unit 401 of the terminal device 300 detects the communication connection of the external storage medium 200 and creates a file to that effect. The means 402 is notified. Upon receiving the notification, the file creation unit 402 acquires individual information (for example, “ABC”) registered in advance in the external storage medium 200 as shown in FIG. 6 (FIG. 5: S102).

  Here, as the individual information of the external storage medium 200, for example, a serial number, a manufacturing number, an individual number, a manufacturer name, a model number, or the like that can uniquely identify the external storage medium 200 can be adopted.

  Any method may be used for the file creation unit 402 to acquire the individual information of the external storage medium 200. For example, when the external storage medium 200 and the terminal device 300 are physically connected, the file creation unit 402 acquires individual information directly from the external storage medium 200. Further, as described above, when the external storage medium 200 and the terminal device 300 are not physically connected, that is, the external storage medium 200 is connected to the terminal device via the user terminal device and a network. When connected to 300, the file creation unit 402 acquires individual information from the external storage medium 200 via the user terminal device and the network.

  When the file creation unit 402 acquires the individual information (“ABC”), it creates a file (“File A”) including the public key (“Public Key A”), and creates the file (“File A”). The data is stored in the storage unit 403 of the external storage medium 200 (FIG. 5: S103).

  Here, the public key may be, for example, a key generated in advance in the terminal device 300, or a one-time key generated by attaching the external storage medium 200, such as a one-time password. If it is a one-time key, security can be further enhanced.

  The file is not particularly limited as long as it includes a public key, and may be a simple table or a file having a processing program described later.

When the file creation unit 402 stores the file (“file A”) in the storage unit 403 of the external storage medium 200, for example, a common key (“common key B”) common to the terminal device 300 and the multifunction peripheral 100 is used. If the file is encrypted and then stored in the storage unit 403 of the external storage medium 200, security can be further improved.

  When the file creation unit 402 completes the creation and storage of the file, a table ("" a secret key ("secret key A")) corresponding to the public key of the file and the individual information ("ABC") is paired. Table C ") is generated and stored in a predetermined memory of the terminal device 300 (FIG. 5: S104). Here, the table is not particularly limited as long as it is a table in which individual information and a secret key are paired, and may be a simple table or a table having a processing program described later.

  As a result, a predetermined file (“file A”) is stored in the external storage medium 200, a predetermined table (“table C”) is stored in the terminal device 300, and preparations for storing the log in the external storage medium 200 are made. It will be in order.

  Now, the user disconnects the external storage medium 200 from the terminal device 300 or disconnects the external storage medium 200 from the user terminal device, thereby disconnecting the communication between the external storage medium 200 and the terminal device 300. To do. When the user goes to the multifunction device 100 with the external storage medium 200 and attaches the attachment portion 309 of the external storage medium 200 to the attachment port 306 of the multifunction device 100, the detection means of the multifunction device 100 is detected. 404 detects the attachment of the external storage medium 200 (FIG. 5: S105) and notifies the encryption means 405 to that effect. Upon receiving the notification, the encryption unit 405 confirms that the file is stored in the storage unit 403 of the external storage medium 200, and then uses the public key (“public key A”) of the file for the MFP 100. And the encrypted log is stored in the storage unit 403 of the external storage medium 200 (FIG. 5: S106).

  When the file is encrypted with the common key (“common key B”), the encryption unit 405 decrypts the file using the common key registered in advance in the multifunction machine 100. , Obtain a public key (“public key A”) from the file and execute the encryption.

  Here, the log includes, for example, processing progress information, failure information, internal information, defect information, customer information, facsimile number, e-mail address information, and the like of the multifunction peripheral 100.

  Accordingly, since the log is encrypted with the public key, for example, the user loses the external storage medium 200 having the encrypted log on the way to the terminal device 300, and the other user stores the external storage medium. Even if the medium 200 is obtained and the encrypted log is to be decrypted, it cannot be decrypted unless the terminal device 300 has the private key. Therefore, even if the user loses the external storage medium 200, security can be ensured.

  Now, the user detaches the external storage medium 200 from the multifunction peripheral 100, carries the external storage medium 200, goes to the terminal device 300 again, and inserts the external storage medium into the mounting port 315 of the terminal device 300. When the mounting unit 309 of 200 is mounted, the control unit 401 of the terminal device 300 detects the mounting of the external storage medium 200 (FIG. 5: S107) and notifies the decoding unit 406 to that effect. Upon receiving the notification, the decryption means 406 acquires the individual information (for example, “ABC”) of the external storage medium 200 as shown in FIG. 6 (FIG. 5: S108), and the individual information (“ABC”). The encrypted log is decrypted with the private key (“secret key A”) of the table (see FIG. 5: S109).

  Here, since the encrypted log can be decrypted only by the private key corresponding to the public key, the decryption of the encrypted log is performed only by the terminal device 300 and the terminal device 300 side. Corresponding to managing passwords, security can be further increased.

  In addition, for example, if the public key and the secret key are used as a one-time key, only the external storage device 200 initially attached to the terminal device 300 can generate the public key and the secret key. It becomes possible.

  Further, the above-described log decryption is not performed by the user storing a specific password, but the individual information in the external storage medium 200 is successfully used to achieve the log decryption. Therefore, it is not necessary for the user to memorize the password or to manage it sufficiently, and it is possible to reliably prevent the log from being leaked due to insufficient management of the password.

  Further, in this system 1, since the public key is stored in the external storage medium 200, even if the external storage medium 200 is lost, the new external storage medium 200 is communicated to the terminal device 300 again. If the connection is possible, a new file and table can be created, and the external storage medium 200 for log storage can be easily restored. This advantage is that, for example, if the log storage method permits log storage only in the external storage medium 200 registered in advance in both the multifunction peripheral 100 and the terminal device 300, the external storage medium 200 is lost. Therefore, it becomes necessary to re-register a new external storage medium 200 in the multi-function device 100 and the terminal device 300, and the disadvantage that it is very troublesome can be solved.

  As described above, according to the present invention, when the terminal device 300 is communicably connected to the external storage medium 200, the file creation unit 402 that stores the file including the public key in the external storage medium 200 is encrypted. When the external storage medium 200 storing the log is attached, the MFP 100 includes decryption means 406 for decrypting the encrypted log with a secret key corresponding to the public key. Is attached, the log is encrypted with the public key of the file in the external storage medium 200, and the encryption unit 405 is configured to store the encrypted log in the external storage medium 200.

  This makes it possible to improve security without managing passwords for log recording.

  In the embodiment of the present invention, the steps of the present invention are executed when the external storage medium 200 is attached to the terminal device 300 or the multifunction peripheral 100. However, other configurations may be used. In other words, each step may proceed by displaying a screen for guiding the user at each step or by accepting an input of a key corresponding to the user's intention display.

  In the embodiment of the present invention, the image processing system 1 is configured to include each unit. However, a program that realizes each unit may be stored in a storage medium, and the storage medium may be provided. . In this configuration, the terminal device or the multifunction device is caused to read the program, and the terminal device or the multifunction device realizes the respective units. In that case, the program itself read from the recording medium exhibits the effects of the present invention. Furthermore, it is possible to provide a method for storing the steps executed by each means in a hard disk.

  As described above, the image processing system and the log recording method according to the present invention include an image processing system including a copying machine, a printer, and a terminal device, a tablet terminal device, a laptop computer, a portable terminal device, etc. It is useful for a system, and is effective as an image processing system and a log recording method capable of improving security without managing a password for log recording.

DESCRIPTION OF SYMBOLS 1 Image processing system 100 MFP 200 External storage medium 300 Terminal device 401 Control means 402 File creation means 403 Storage means 404 Detection means 405 Encryption means 406 Decryption means

Claims (3)

An image processing system having a terminal device to which an external storage medium can be attached and an image processing device,
When the terminal device is communicably connected to the terminal device and the external storage medium, a file creation unit that stores a file including a public key in the external storage medium;
Decryption means for decrypting the encrypted log with a secret key corresponding to the public key when an external storage medium storing the encrypted log is attached;
When the external storage medium storing the file is loaded, the image processing apparatus encrypts the log with the public key of the file on the external storage medium, and stores the encrypted log in the external storage medium An image processing system comprising: an image processing unit. When the terminal device and the external storage medium are communicably connected to each other, the file creation unit generates a table in which the individual information registered in advance in the external storage medium and the secret key are paired. , Store it in a predetermined memory of the terminal device,
When the external storage medium storing the encrypted log is loaded, the decryption means refers to a table having individual information corresponding to the individual information of the external storage medium, and uses the private key of the table to The image processing system according to claim 1, wherein the encrypted log is decrypted. A log storage method for an image processing system having a terminal device to which an external storage medium can be attached and an image processing device,
Storing the file including the public key in the external storage medium when the external storage medium is communicably connected to the terminal device;
When the external storage medium storing the file is attached to the image processing apparatus, encrypting the log with the public key of the file of the external storage medium and storing the encrypted log in the external storage medium; ,
When the external storage medium storing the encrypted log is attached to the terminal device, the method includes a step of decrypting the encrypted log with a secret key corresponding to the public key. Log storage method.