JP4831461B2 - Document processing apparatus and method - Google Patents

Description

  The present invention relates to processing of a document output by a printer or the like.

  Various types of confidential information held by companies, research institutes, and the like are often leaked when a paper document on which confidential information is printed is taken out of the company. Therefore, at present, there are cases where confidential information is managed as electronic data in principle, and output to a paper medium is restricted as much as possible.

  However, even when such an operation is performed, it is desirable that output to the paper medium be performed as much as possible because of the usefulness of the paper medium. In addition, information included in a document is often a part of information that should be kept secret.

In Japanese Patent Laid-Open No. 6-214862, an access right level for reading and printing is set for each user who can access a document file managed by a server node, and a predetermined area (page, sentence, Each access right level such as reading or printing is set for each unit, and when the user displays or prints a desired document on the client node, the user can compare each access right level by comparing the access right levels. A client / server system is disclosed in which it is determined whether or not a part can be displayed or printed, and a part that cannot be displayed or printed is masked before being displayed or printed.
JP-A-6-214862

  An object of the present invention is to improve the convenience of a document including confidential information while preventing leakage of confidential information.

  A document processing apparatus according to the present invention includes a concealment target part extraction unit that extracts a concealment target part from an electronic document, and a concealment that generates a concealment document in which the concealment target part of the electronic document is replaced with substitute information A processing unit, an identification information generating unit that generates identification information corresponding to the concealment target portion, a storage processing unit that performs processing for associating and storing the concealment target portion and the identification information, and the identification information A code generation unit that generates a machine-readable code (for example, a two-dimensional code), and a synthesis unit that synthesizes the concealed document and the machine-readable code.

  In this case, the image processing apparatus further includes an encryption processing unit that encrypts the concealment target portion, and the identification information generation unit generates identification information corresponding to the concealment target portion encrypted by the encryption processing unit. The storage processing unit may store the encrypted concealment target part and the identification information in association with each other. The code generation means may generate a machine readable code further including a decryption key for decrypting the encrypted concealment target part. Moreover, you may make it further provide the key generation part which produces | generates the pair of an encryption key and a decryption key. For example, the key generation unit generates a pair of an encryption key and a decryption key based on at least a part of the electronic document.

  The storage processing unit may store the concealment target portion and the identification information in a portable recording medium in association with each other.

  Further, the anonymization target portion extraction unit may calculate information related to the arrangement of the anonymization target portion in the output result of the electronic document.

  A second document processing apparatus according to the present invention generates a concealment target part extraction unit that extracts a concealment target part from an electronic document and a concealment document in which the concealment target part of the electronic document is replaced with substitute information Generating a concealment processing unit, a transmission unit for transmitting the concealment target part to the outside, a reception unit for receiving identification information corresponding to the concealment target part from the outside, and a machine-readable code including the identification information And a synthesizing unit that synthesizes the concealed document and the machine-readable code.

  A third document processing apparatus according to the present invention is a document processing apparatus that operates in conjunction with the second document processing apparatus, and encrypts a concealment target portion sent from the second document processing apparatus. A storage for performing processing for associating and storing the encrypted concealment target part and the identification information, an encryption processing part to be encrypted, an identification information generation part that generates identification information corresponding to the concealment target part A processing unit and a transmission unit that transmits the identification information to the second document processing apparatus are provided.

  The document processing method according to the present invention extracts a concealment target part from an electronic document, generates a concealment document in which the concealment target part of the electronic document is replaced with substitute information, and corresponds to the concealment target part Generating identification information, storing the concealment target part and the identification information in association with each other, generating a machine-readable code including the identification information, and synthesizing the concealed document and the machine-readable code; And

  In this case, the concealment target part may be encrypted.

  A program according to the present invention is a document processing program for processing a document, wherein a computer is used as a concealment target part extraction unit for extracting a concealment target part from an electronic document, and the concealment target part of the electronic document is substituted. A concealment processing unit for generating a concealment document replaced with information, an identification information generation unit for generating identification information corresponding to the concealment target part, and a process for storing the concealment target part and the identification information in association with each other The storage processing unit is configured to function as a code generation unit that generates a machine-readable code including the identification information, and a synthesis unit that combines the concealed document and the machine-readable code.

  In this case, the computer may further function as an encryption processing unit that encrypts the concealment target portion.

  The program can be distributed via a portable recording medium such as a CD-ROM or a network.

  According to the present invention, since the concealment target part (for example, confidential information part) of the electronic document is replaced with substitute information, it is possible to prevent leakage of confidential information through the output document.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of a document processing system according to the present invention.

  As shown in the figure, a document processing system 100 according to the present invention includes a document server 110, a document browsing terminal device 120, a scanner 121, a printer 130, and a confidential document processing server 140. The document server 110, the document browsing terminal device 120, the printer 130, and the confidential document processing server 140 are each connected to a network 180 such as a LAN. The scanner 121 is locally connected to the document browsing terminal device 120 via an interface such as a USB.

  The document server 110 is a server that holds and manages an electronic confidential document, and includes, for example, a normal personal computer (hereinafter referred to as a PC) and other computers. More specifically, the document server 110 includes a CPU, a main memory, a display device, a hard disk device, an input device, and the like. The display device is configured by, for example, a CRT display device or an LCD display device, and the input device is configured by, for example, a keyboard, a mouse, or other pointing device.

  The document browsing terminal device 120 reads the confidential document stored in the document server 110 via the network 180 and displays it on the screen, thereby browsing the confidential document, and if necessary, reading the confidential document. This is a terminal device for outputting to the printer 130, and is composed of, for example, a normal PC or other computer.

  The scanner 121 is a document reading device that reads a paper document or the like output from the printer 130 and imports it into the document browsing terminal device 120 as image data.

  The printer 130 is an output device that outputs a document or the like in accordance with an instruction from the document browsing terminal device 120 or the like, and includes, for example, a normal network compatible laser printer or inkjet printer.

  The confidential document processing server 140 performs a concealment process (described later) so that the printer 130 can output the confidential document sent from the document browsing terminal device 120 or the like. Further, the confidential part that has been concealed is restored (deconcealed) from a paper document or the like that has been concealed and output. The confidential document processing server 140 is configured by, for example, a normal PC or other computer.

  2 and 3 are diagrams showing a functional configuration of the confidential document processing server 140. FIG. 2 shows a functional configuration when the confidential part is concealed so that the confidential document can be printed by the printer 130, and FIG. 3 shows the concealment from the paper document or the like output after the concealment process. The functional configuration in the case of restoring the confidential part made is shown.

  First, a functional configuration when the confidential part is concealed so that the confidential document can be printed will be described.

  As shown in FIG. 2, the confidential document processing server 140 includes a confidential part extraction unit 210, an encryption processing unit 220, a key generation unit 221, an identification information generation unit 230, a storage processing unit 240, a two-dimensional code. A generation unit 250, a concealment processing unit 260, and a document composition unit 270 are provided. Each unit 210 to 270 is basically realized by the CPU executing a program loaded in the main memory.

  The confidential part extraction unit 210 extracts a confidential part from confidential document data sent from the document browsing terminal device 120 or the like. The confidential portion includes, for example, personal information such as customer information, text data such as research data and company performance data, and image data such as graphs. In the document processing system 100, the confidential document data is created in a format that can identify the confidential portion. For example, in the case of normal word processor document data or the like, the confidential portion is created using a specific font or a specific color that is predetermined for identifying the confidential portion. Further, when a specific attribute indicating a confidential part can be set in a part designated by the user in software for document creation or the like, the attribute is set in the confidential part. In the case of document data described in XML or the like, a tag indicating a confidential part is defined, and the confidential part is designated by the tag. The confidential part extraction unit 210 analyzes the confidential document data, and extracts a part in which the attribute or the like is set as a confidential part. Furthermore, when the confidential document is output to the printer 130 or the like, the confidential part extraction unit 210 also calculates a position (arrangement information) where the extracted confidential part is arranged in the output result. The calculated arrangement information is output by being included in the confidential part data.

  The encryption processing unit 220 encrypts the confidential part data extracted by the confidential part extraction unit 210. The encryption performed by the encryption processing unit 220 means that the confidential partial data is converted into data whose original contents are not known. The encryption method is a common key encryption method such as DES according to the mounting conditions. An appropriate method such as a public key cryptosystem such as RSA cryptography or a method of rearranging confidential partial data according to a predetermined rule can be selected. Here, it is assumed that the encryption processing unit 220 encrypts the confidential partial data using the encryption key generated by the key generation unit 221.

  The key generation unit 221 generates an encryption key used by the encryption processing unit 220 and a decryption key for decrypting the confidential partial data encrypted by the encryption processing unit 220. For example, a hash value of confidential document data is obtained using a one-way hash function, and an encryption key and a decryption key are generated based on the hash value. If the encryption method in the encryption processing unit 220 does not require different encryption keys for each confidential document, the key generation unit 221 may not be provided.

  The identification information generation unit 230 generates identification information for identifying the confidential partial data encrypted by the encryption processing unit 220. The identification information is used later to access the encrypted confidential data. As the identification information, for example, a hash value generated from encrypted confidential partial data using a one-way hash function can be used.

  The storage processing unit 240 associates the encrypted confidential partial data with the identification information of the data and stores them in a storage device (for example, a hard disk device) provided in the confidential document processing server 140.

  The two-dimensional code generation unit 250 converts (encodes) the identification information generated by the identification information generation unit 230 and the decryption key generated by the key generation unit 221 into two-dimensional code data such as a QR code. is there. The two-dimensional code data generated by the two-dimensional code generation unit 250 is passed to the document composition unit 270.

  The concealment processing unit 260 performs concealment processing that prevents a human from reading the confidential portion of the confidential document, that is, processing for replacing the confidential portion data of the confidential document data with predetermined substitute data. For example, if the confidential data is text data such as characters, each character is replaced with a substitute character such as “■” or “x”. If the confidential data is image data such as a graph, the original image is replaced with a substitute image (for example, an image of the same size painted with a single color).

  The document composition unit 270 synthesizes confidential document data (confidential document data) that has been concealed by the concealment processing unit 260 and two-dimensional code data. The confidential document data output from the document synthesizing unit 270 is sent back to the document browsing terminal device 120 and the like as confidential processed document data.

  Next, a functional configuration of the confidential document processing server 140 in the case where the confidential portion that has been concealed is restored from the paper document that has been concealed and output from the printer 130 will be described.

  As shown in FIG. 3, the confidential document processing server 140 includes a two-dimensional code extraction / decryption unit 310, a confidential part data acquisition unit 320, a decryption processing unit 330, and an image composition unit 340. Each of the units 310 to 340 is basically realized by the CPU executing a program loaded in the main memory.

  The two-dimensional code extraction / decoding unit 310 extracts a two-dimensional code from the document image data read by the scanner 121 and sent from the document browsing terminal device 120, and performs decoding of the extracted two-dimensional code. The identification information and the decryption key of the confidential partial data included in the two-dimensional code are extracted.

  The confidential part data acquisition unit 320 uses the confidential part data identification information passed from the two-dimensional code extraction / decryption unit 310 to store the confidential part data corresponding to the identification information in the storage device (for example, the confidential document processing server 140). , Hard disk device) or the like.

  The decryption processing unit 330 decrypts the confidential partial data acquired by the confidential partial data acquisition unit 320 by using the decryption key passed from the two-dimensional code extraction / decryption unit 310.

  The image composition unit 340 synthesizes the confidential partial data decrypted by the decryption processing unit 330 with the document image data received from the document viewing terminal device 120 and sends it back to the document viewing terminal device 120. The image composition unit 340 pastes the confidential partial image (an image generated based on the confidential partial data) at the original position in the document image using the arrangement information included in the confidential partial data.

  Next, the operation of the document processing system 100 having the above configuration will be specifically described. First, an operation when a confidential document is printed by the printer 130 will be described.

  When a user browsing a confidential document read from the document server 110 on the screen of the document browsing terminal device 120 instructs the document browsing terminal device 120 to print the confidential document, the document browsing terminal device 120 sends the confidential document data to the confidential document processing server 140 via the network 180 in order to make the confidential document printable.

  When the confidential document processing server 140 receives the confidential document data from the document browsing terminal device 120, the confidential part extraction unit 210 first extracts the confidential part from the confidential document data. Next, the extracted confidential portion data is encrypted by the encryption processing unit 220. Then, the identification information generation unit 230 generates identification information for identifying the encrypted confidential partial data. Then, the confidential part storage processing unit 240 associates the encrypted confidential part data with its identification information and stores them in the hard disk device included in the confidential document processing server 140. Further, the two-dimensional code generation unit 250 converts the identification information generated by the identification information generation unit 230 and the decryption key generated by the key generation unit 221 into two-dimensional code data such as a QR code. Further, the anonymity processing unit 260 replaces the confidential data of the confidential document data with predetermined substitute data. Finally, the confidential document data (encrypted document data) subjected to the concealment processing by the concealment processing unit 260 and the two-dimensional code data are combined by the document combining unit 270, and the combined result is a terminal device for document browsing Send back to 120.

  When receiving the confidential document data subjected to the confidential processing from the confidential document processing server 140, the document browsing terminal device 120 outputs the confidential document data by the printer 130.

  FIG. 4 is a diagram illustrating an example of a confidential document before and after the confidentiality processing by the confidential document processing server 140. FIG. 4A shows an example of a confidential document before concealment processing, and FIG. 4B shows an example of a confidential document after concealment processing. As shown in the figure, the character portion 410 (“100,000”) set as the confidential portion is replaced with a substitute character 420 (“■■■”). Further, as shown in FIG. 6B, the confidential document after the concealment process is added with a two-dimensional code 430 at a predetermined position (a blank portion at the lower right corner). The two-dimensional code 430 is obtained by encoding the identification information of the encrypted confidential partial data and the decryption key necessary for decrypting the encrypted confidential partial data.

  By performing the above processing, when printing a confidential document, the confidential part included in the confidential document is concealed and printed, so it is possible to prevent confidential leakage due to the printed confidential document being taken out. can do.

  Next, an operation in the case where the confidential part that has been concealed is restored from the confidential document printed as described above will be described.

  If a user who has a confidential document printed with a two-dimensional code wants to check the contents of the confidential part that has been concealed (the part that has been replaced with substitute data), first the document A confidential document with a two-dimensional code is set in the scanner 121 connected to the browsing terminal device 120, and the confidential document is read by the scanner 121. The confidential document image data read by the scanner 121 is sent to the confidential document processing server 140 by the document browsing terminal device 120.

  Upon receiving the confidential document image data from the document browsing terminal device 120, the confidential document processing server 140 first extracts and extracts a two-dimensional code from the confidential document image data by the two-dimensional code extraction / decoding unit 310. The two-dimensional code is decrypted, and the identification information and the decryption key of the confidential partial data included in the two-dimensional code are extracted. Next, the confidential part data acquisition unit 320 uses the extracted confidential part data identification information to acquire confidential part data corresponding to the identification information from the hard disk device included in the confidential document processing server 140. Next, the decryption processing unit 330 decrypts the confidential partial data read from the hard disk device using the decryption key extracted from the two-dimensional code. Next, the image synthesizing unit 340 synthesizes the decrypted confidential partial data with the confidential document image data received from the document browsing terminal device 120 and sends it back to the document browsing terminal device 120.

  When the image data of the confidential document that has been subjected to the deciphering process is received from the confidential document processing server 140, the document browsing terminal device 120 displays the data on the display device.

  By performing the processing as described above, even if the confidential portion is concealed and printed, the content of the confidential portion that has been concealed can be easily confirmed.

  Here, in the confidential document processing server 140, the confidential partial data decrypted by the decryption processing unit 330 is combined with the confidential document image data received from the document browsing terminal device 120 to be sent to the document browsing terminal device 120. The identification information of the original confidential document stored in the document server 110 is included in the two-dimensional code, and the confidential document processing server 140 uses the identification information to match the identification information. The original confidential document to be obtained may be acquired and sent back to the document browsing terminal device 120. In this case, as the identification information of the original confidential document, for example, a hash value generated from the confidential document data using a one-way hash function may be used.

  Here, the encrypted confidential data and its identification information are stored in the hard disk device of the confidential document processing server 140, but the encrypted confidential data and its identification information are used for document browsing. It is also conceivable that the data is transmitted to the terminal device 120 or the like and stored in a storage device (for example, a hard disk device) provided in the document browsing terminal device 120 or the like. Furthermore, it is also conceivable to store the encrypted confidential partial data and its identification information in a portable recording medium such as a CD-R, MO, or USB memory attached to the document browsing terminal device 120 or the like. When confidential partial data is stored in a portable recording medium in this way, a certain level of confidentiality is ensured by carrying the portable recording medium together with a paper document that has been concealed and output. However, it is possible to carry confidential documents.

  In the embodiment described above, the arrangement information (position information where the confidential part is arranged) calculated by the confidential part extraction unit 210 is included in the confidential part data and stored in the hard disk device included in the confidential document processing server 140. However, it is also conceivable to include the arrangement information in the two-dimensional code. In this case, in the functional configuration of the confidential information processing server 140 when the confidential part is concealed as shown in FIG. 2, the arrangement information calculated by the confidential part extraction unit 210 is directly passed to the two-dimensional code generation unit 250. Then, it is converted into a two-dimensional code together with the confidential partial data identification information and the decryption key. Further, in the functional configuration of the confidential information processing server 140 in the case where the original confidential document is restored from the paper document or the like that is output after the concealment processing shown in FIG. 3, the two-dimensional code extraction / decoding unit 310 extracts / The arrangement information that is decoded and output is directly transferred to the image composition unit 340 and used at the time of image composition.

  In the above-described embodiment, the concealment process and the deconcealment process are performed by the confidential document processing server 140. However, all of these processes may be performed by the document browsing terminal device 120. It is also conceivable that part of the processing performed by the confidential document processing server 140 is performed by the document browsing terminal device 120.

  FIG. 5 is a diagram illustrating an example of a functional configuration in a case where confidential processing for confidential documents is performed in cooperation with the document browsing terminal device 120 and the confidential document processing server 140. In the figure, the same components as those shown in FIG. 2 are denoted by the same reference numerals.

  As shown in FIG. 5, the document browsing terminal device 120 includes a confidential part extraction unit 210, a two-dimensional code generation unit 250, a concealment processing unit 260, and a document composition unit 270. The confidential document processing server 140 includes an encryption processing unit 220, a key generation unit 221, an identification information generation unit 230, and a storage processing unit 240.

  In the case of the configuration shown in the figure, when a user browsing a confidential department on the screen of the document browsing terminal device 120 instructs the document browsing terminal device 120 to print the confidential document, the document browsing terminal device 120 The terminal device 120 extracts the confidential part from the confidential document data by the confidential part extraction unit 210 and transmits the extracted confidential part data to the confidential document processing server 140 via the network 180. When the confidential document processing server 140 receives confidential partial data via the network 180, the encryption processing unit 220 encrypts the received confidential partial data. Then, the identification information generation unit 230 generates identification information for identifying the encrypted confidential part data, and the confidential part storage processing unit 240 associates the encrypted confidential part data with the identification information. And stored in a hard disk device included in the confidential document processing server 140. Then, the confidential document processing server 140 transmits the identification information generated by the identification information generation unit 230 and the decryption key generated by the key generation unit 221 to the document browsing terminal device 120 via the network 180. When the document browsing terminal device 120 receives the confidential partial data identification information and the decryption key from the confidential document processing server 140 via the network 180, the two-dimensional code generation unit 250 converts the received identification information and the decryption key into a QR code. To two-dimensional code data. Then, the two-dimensional code and the confidential document data that has been concealed by the concealment processing unit 260 are combined by the document combining unit 270, and the combined result is output by the printer 130.

It is a figure which shows the structure of the document processing system 100 by this invention. It is a figure which shows the function structure of the confidential document processing server 140 at the time of concealing a confidential document. It is a figure which shows the function structure of the confidential document processing server 140 at the time of releasing the anonymity of a confidential document. It is a figure which shows the example of the confidential document before and behind the concealment process by the confidential document processing server. It is a figure which shows the function structure of the terminal device 120 for document browsing and the confidential document processing server 140 in the case of performing confidentialization of a confidential document in cooperation.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Document processing system 110 Document server 120 Document browsing terminal device 121 Scanner 130 Printer 140 Confidential document processing server 180 Network 210 Confidential portion extraction unit 220 Encryption processing unit 221 Key generation unit 230 Identification information generation unit 240 Confidential portion storage processing unit 250 Two-dimensional code generation unit 260 Concealment processing unit 270 Document composition unit 310 Decoding unit 320 Confidential part data acquisition unit 330 Decoding unit 340 Image composition unit 410 Confidential character part 420 Substitute character 430 Two-dimensional code

Claims (10)

A storage unit that associates and stores encrypted data obtained by encrypting data of a concealment target part in an electronic document and identification information for identifying the encrypted data;
A reading unit that reads the recording medium as image data;
A machine-readable code is extracted from the image data read by the reading unit , and identification information corresponding to the confidential portion data in the image data and a decryption key used for decrypting the encrypted confidential portion are extracted from the code. A take-out section;
Based on the identification information extracted by the extracting unit, the encrypted data obtained by encrypting the data not included in the image data read by the reading unit among the encrypted data stored in the storage unit is acquired. An encrypted data acquisition unit,
A decryption unit that decrypts the encrypted data acquired by the encrypted data acquisition unit using the decryption key extracted by the extraction unit;
A document processing apparatus comprising: a decoded data synthesis unit that synthesizes data decoded by the decoding unit with image data read by the reading unit . A concealment target part extraction unit that extracts data of the concealment target part from the electronic document;
A concealment processing unit that generates a concealment document in which the data of the concealment target portion of the electronic document is replaced with substitute information that is content different from the content of the data;
An encryption processing unit for encrypting data of the concealment target part ;
An identification information generating unit for generating identification information for identifying the data of the concealment target portion encrypted by the encryption processing unit ;
A storage processing unit for performing processing for associating the encrypted data of the part to be concealed with the identification information and storing it in the storage unit ;
A code generation unit for generating a machine-readable code including a decryption key for decrypting the encrypted data to be concealed and the identification information;
A code synthesis unit for synthesizing the anonymized document and the machine-readable code;
The document processing apparatus according to claim 1, characterized in that it comprises a. The document processing apparatus according to claim 2 , further comprising a key generation unit that generates a pair of an encryption key and a decryption key. The document processing apparatus according to claim 3 , wherein the key generation unit generates a pair of an encryption key and a decryption key based on at least a part of the electronic document. The storage processing unit, the portable recording medium, said concealing target portion with the document processing device according to any one of claims 2 to 4, wherein the storing in association with said identification information. The concealment subject part extraction section, the document processing apparatus according to any one of claims 2 to 5, characterized in that to calculate the information regarding the placement of the concealment subject part in the output result of the electronic document. A concealment target part extraction unit that extracts data of the concealment target part from the electronic document;
A concealment processing unit that generates a concealment document in which the data of the concealment target portion of the electronic document is replaced with substitute information that is content different from the content of the data ;
A transmission unit for transmitting the data of the concealment target part to the outside;
An identification information receiving unit for receiving identification information for identifying encrypted data encrypted with respect to the data of the concealment target portion transmitted by the transmission unit;
A code generation unit for generating a machine-readable code including a decryption key for decrypting the encrypted data to be concealed and the identification information;
A code synthesis unit that synthesizes the anonymized document and the machine-readable code ;
A reading unit that reads the recording medium as image data;
A machine-readable code is extracted from the image data read by the reading unit , and identification information corresponding to the confidential portion data in the image data and a decryption key used for decrypting the encrypted confidential portion are extracted from the code. A take-out section;
Encrypted data that is encrypted with respect to data that is not included in the image data read by the reading unit and that is the data of the concealment target portion in the electronic document is extracted by the extracting unit Based on the identification information, the encrypted data receiving unit to receive
A decryption unit that decrypts the encrypted data received by the reception unit using the decryption key extracted by the extraction unit;
A document processing apparatus comprising: a decoded data combining unit that combines the image data read by the reading unit with the data decoded by the decoding unit. A document processing apparatus that operates in conjunction with the document processing apparatus according to claim 7 ,
An encryption processing unit for encrypting data of a concealment target portion sent from the document processing device according to claim 7 ;
An identification information generating unit for generating identification information for identifying data of the concealment target part;
A storage processing unit for performing processing for associating and storing the encrypted concealment target portion data and the identification information;
An identification information transmitting unit that transmits the identification information to the document processing device according to claim 7 ,
The encrypted data to be concealed stored in the storage processing unit based on the identification information sent from the document processing device according to claim 7 is stored in the document processing device according to claim 7. A document processing apparatus comprising an encrypted data transmission unit for transmission . A document processing method for processing a document using a document processing apparatus,
The document processing apparatus includes:
Storing encrypted data obtained by encrypting the data of the concealment target part in the electronic document and identification information for identifying the encrypted data in association with each other;
Read the recording medium as image data,
A machine-readable code is extracted from the read image data , and identification information corresponding to the data of the confidential part in the image data and a decryption key used for decrypting the encrypted confidential part are extracted from the code;
Acquire encrypted data that is encrypted with respect to data that is not included in the read image data among the stored encrypted data, based on the extracted identification information;
Decrypt the obtained encrypted data using the extracted decryption key,
A document processing method comprising combining decoded data with read image data . A document processing program for processing a document, comprising:
A storage unit that associates and stores encrypted data obtained by encrypting data of a concealment target portion in an electronic document and identification information for identifying the encrypted data;
A reading unit for reading a recording medium as image data;
A machine-readable code is extracted from the image data read by the reading unit , and identification information corresponding to the confidential portion data in the image data and a decryption key used for decrypting the encrypted confidential portion are extracted from the code. Extraction department,
Based on the identification information extracted by the extracting unit, the encrypted data obtained by encrypting the data not included in the image data read by the reading unit among the encrypted data stored in the storage unit is acquired. Encrypted data acquisition unit,
A decryption unit that decrypts the encrypted data acquired by the encrypted data acquisition unit using the decryption key extracted by the extraction unit ; and
A document processing program that causes an image data read by the reading unit to function as a decoded data combining unit that combines the data decoded by the decoding unit .

Images