JP2002207636A - Network device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To appropriately determine communication protocols by which a client obtains documents for every document, according to the secrecy of the documents inputted and stored in a device. SOLUTION: In this network device 10, a hard disk 15 is provided with a document storage means for storing an inputted document and a secrecy judging means which judges the secrecy of the inputted document, a protocol determining means for determining a communication protocol for allowing a client to obtain a stored document according to its secrecy, an acquisition request receiving means for receiving a document acquisition request from the client by the determined communication protocol, and a document sending means for sending the stored document to the client by the communication protocol when the acquisition request is received from the client are actualized by programs of a CPU 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network device, and more particularly, to a network device, which has a confidentiality and an authenticity on a network according to the confidentiality of documents input and stored from a scanner interface, a network interface or a facsimile interface. The present invention relates to a network device that controls acquisition of a document from a client on a network so as to appropriately secure the document, and a network device that controls execution of printing of the document in accordance with confidentiality of the document. Furthermore, the present invention relates to a network device that encrypts a document and securely transmits the document to a transfer destination without acquiring and storing the public key of the transfer destination of the document in advance in the device.

[0002]

2. Description of the Related Art In recent years, a Web server function has been provided in a digital multifunction peripheral or an Internet facsimile machine having a scanner interface, a facsimile interface, a network interface, or a network device connected to a network such as a scanner server or a fax server. Then, the document input and stored in the device is transmitted from a client on the network to the WE.
It can be browsed by the B browser.

As such a technique, for example, Japanese Patent Application Laid-Open
In JP-A-112716, a received FAX document is stored in a personal or common box according to the user ID, the document is transmitted in response to an acquisition request of a WEB browser by a client on a network, and browsing of the document is performed. An enabled FAX data management system is disclosed.

[0004] Similarly, Japanese Patent Application Laid-Open No. H11-239238 discloses
In the official gazette, it is determined whether the received FAX document is a confidential document and stored in a separate area. First, a notification of the receipt of the document is sent to a notification destination client corresponding to the document by e-mail. There is disclosed a facsimile apparatus which transmits a document in response to an acquisition request of a client's WEB browser and allows browsing of the document.

Further, in a network device such as an electronic mail device or an Internet facsimile device capable of transmitting and receiving electronic mail, when a document is transmitted by electronic mail, it is necessary to secure the confidentiality and integrity of the document on the network. In addition, a method using an encrypted electronic mail based on a public key cryptosystem is known.

As such a technique, for example, Japanese Unexamined Patent Application Publication No.
Japanese Patent Application Laid-Open No. 224898 discloses a method in which a public key of a destination is stored in advance in its own address book, and an electronic mail is encrypted and transmitted to the destination using the public key of the designated destination. To search for destinations in two stages,
There is disclosed an encrypted electronic mail device capable of detecting an error in destination designation. In this encrypted electronic mail device, when an encrypted electronic mail is received, the electronic mail is decrypted and displayed or printed out.

[0007]

However, in the above-described conventional network apparatus, the documents input and accumulated from interfaces such as a scanner interface, a facsimile interface, and a network interface are transmitted from a client on the network to a W client.
When browsing using an EB browser, a communication protocol for receiving a document acquisition request from a client and a communication protocol for transmitting a document to the client are determined in advance by the device in units of devices or folders, regardless of the confidentiality of the document. Communication protocol.

For this reason, for example, a communication protocol for document browsing is set to HT in advance for each device or folder.
If it is determined to be TP (Hyper Text Transfer Protocol), even if the input document has confidentiality, it is transmitted by HTTP, so the document can be eavesdropped on another person on the network. There is a problem that will be done.

A communication protocol for document browsing is set in advance by HTTPS (secure HTTP, HTTP using SSL or TLS) in device units or folder units.
P, SSL: Secure Socket Layer, TLS: Transport Layer S
ecurity), even if the input document does not have confidentiality, all the documents are transmitted by HTTPS, so in a client that does not support SSL or TLS, There is a problem that a document having no confidentiality cannot be browsed.

In the conventional network apparatus described above, when a document input from an interface such as a scanner interface, a facsimile interface, or a network interface and stored is viewed from a client on the network using a web browser, An authentication method for browsing a document from a client is a predetermined authentication method for each device or folder regardless of the confidentiality of the document.

For this reason, for example, if the authentication method for document browsing is set in advance for each device or folder and no authentication or simple password authentication is performed, the temporarily input document has confidentiality. Even if you do
There is a possibility that the document can be obtained without authentication, or that the password can be eavesdropped on by another person because the password is transferred as it is over the network without being encrypted.

When the authentication method for document browsing is set in advance to digest password authentication for each device or folder, even if the input document does not have confidentiality, Since digest password authentication is required for browsing all documents, there arises a problem that browsing a document having no confidentiality requires a redundant procedure for authentication.

In the above-described conventional network apparatus, a document input and stored from an interface such as a scanner interface, a facsimile interface, and a network interface is encrypted to a transfer destination corresponding to the document and transferred by e-mail. In this case, it is necessary to obtain and store the public key of the transfer destination in advance.

For this reason, a storage capacity for storing the encryption key of the transfer destination is required, and when there are a large number of transfer destinations, the storage capacity required for storing the public key increases. There's a problem.

In the case where the public key is stored, the stored public key of the transfer destination is monitored for revocation due to expiration or the like, and when the public key is revoked, a new public key is obtained again. Such a complicated process of public key management is required.

In the above-described conventional network apparatus, when a document input from an interface such as a scanner interface, a facsimile interface, or a network interface and stored is printed, whether the document is encrypted or not is determined. , Or all of the input documents are printed, regardless of whether the communication protocol is encryption communication.

For this reason, when the document is encrypted or input by encrypted communication, the document is printed out in spite of the high possibility that the document has confidentiality. There is a problem that the result can be seen.

The present invention has been made in view of such a problem, and an object of the present invention is to allow a client to acquire a document for each document in accordance with the confidentiality of the document input and stored in the apparatus. The protocol is appropriately determined, and the client with a proper communication protocol can use the appropriate communication protocol without confidential documents being intercepted and tampered with in the middle of non-confidential communication, and without performing unnecessary confidential communication on non-confidential documents. An object of the present invention is to provide a network device capable of acquiring a document.

Another object of the present invention is to provide an authentication method for a client to obtain a document for each document in accordance with the confidentiality of a document input and stored in an apparatus, thereby providing confidentiality. A network device that allows a client to acquire a document by an appropriate authentication method without performing security-vulnerable authentication for acquiring a document or unnecessary authentication for acquiring a document with no confidentiality It is to provide.

Another object of the present invention is to encrypt a document input and stored in a device and transfer the document to a transfer destination by e-mail without storing the public key of the transfer destination in advance.
An object of the present invention is to provide a network device capable of encrypting a document and sending the document to a transfer destination by e-mail.

Further, another object of the present invention is to, when an input document is encrypted or input by encrypted communication, store the document in a print standby state without receiving a print instruction from a user without performing printing. An object of the present invention is to provide a network device in which the document is automatically printed out so that another person cannot see the print result.

[0022]

According to a first aspect of the present invention, there is provided a network apparatus, comprising: a confidentiality judging means when a document is inputted from a scanner interface, a facsimile interface, a network interface, or the like by a document inputting means; Determines the confidentiality of the document, and the document storage means stores the document.
Then, the protocol determining means, in accordance with the confidentiality of the stored document, obtains a communication protocol (for example, HTTP or HTTP) from a client on the network.
TPS, etc.), and the acquisition request receiving means receives a document acquisition request from the client according to the determined communication protocol. When the acquisition request receiving unit receives the document acquisition request, the document transmission unit transmits the document to the client using the determined communication protocol, so only the confidential document is transmitted to the client using the secure communication protocol, Eavesdropping and tampering on the network transmission of the document to the client can be prevented. In addition, since a document having no confidentiality is transmitted to a client using a normal communication protocol, a client (eg, a mobile terminal) that does not support a secure communication protocol can acquire the document.

According to a second aspect of the present invention, when a document is input from a scanner interface, a facsimile interface, a network interface, or the like by the document input unit, the confidentiality determining unit determines the confidentiality of the document and simultaneously stores the document. Stores the document. Then, the authentication method determining means determines an authentication method (for example, no authentication, simple password authentication, digest password authentication, etc.) for obtaining from the client on the network according to the confidentiality of the stored document, The income request receiving means receives a document acquisition request from the client. When the acquisition request receiving unit receives the document acquisition request, the authentication unit authenticates the acquisition request by the determined authentication method. When the authentication unit approves the authentication, the document is transmitted to the client by the document transmission unit, so only the confidential document is transmitted to the client after being authenticated by the strong authentication method,
It is possible to prevent illegal document retrieval from the client. Further, a document having no confidentiality is transmitted to the client after authentication without authentication or with a simple authentication method, and the client can acquire the document without performing unnecessary strong authentication.

According to a third aspect of the present invention, in the network device of the first aspect, a communication protocol for acquiring the document determined by the protocol determining means, and address information of the document stored by the document storing means. , Link information generating means generates link information (eg, URL: Uniform Resource Locator) of the document, and the link information setting means converts the link information to HTML (Hyper
Text Markup Language) is set as data that can be referred to by the client, so the client detects the input of the document by referring to the link information of the document sent from the link information transmitting means in response to the request, and converts the link information into By accessing with the communication protocol determined by the network device, the document can be safely obtained from the network device according to the confidentiality of the document.

According to a fourth aspect of the present invention, in the network device of the second aspect, an authentication method for acquiring the document determined by the authentication method determination means, and address information of the document stored in the document storage means And from
Link information generating means for generating link information of a document (for example, U
RL), and the link information setting unit sets the link information as data that can be referred to by the client, such as HTTP or SMTP. Therefore, the client refers to the link information of the document sent from the link information transmission unit upon request. This makes it possible to detect the input of the document, access the link information by the authentication method determined by the network device, and securely obtain the document from the network device according to the confidentiality of the document.

According to a fifth aspect of the present invention, when a document is input from a scanner interface, a facsimile interface, a network interface, or the like by the document input unit, the confidentiality determining unit determines the confidentiality of the document and also stores the document. Stores the document. If the document does not have confidentiality, the document mail sending means sends the document by e-mail to the transfer destination corresponding to the document, and if the document has confidentiality, the link information mail sending means sends the document The link information (for example, URL) for acquiring the document is transmitted to the transfer destination corresponding to the e-mail, and the client acquires the document based on the link information. In order to prevent eavesdropping and tampering on transmission, it is possible to control so that only a confidential document is obtained by another secure communication channel or a strong authentication method.

According to a sixth aspect of the present invention, when a document is input from a scanner interface, a facsimile interface, a network interface, or the like by the document input unit, the confidentiality determining unit determines the confidentiality of the document and also stores the document. Stores the document. If the document does not have confidentiality, the document mail sending means sends the document by e-mail to the transfer destination corresponding to the document, and if the document has confidentiality, the notification mail sending means sends the document to the document. A notification that the document has been input and stored to the corresponding transfer destination is sent by e-mail. Thus, when a confidential document is stored, it can be notified by e-mail before the document is output.

According to a seventh aspect of the present invention, in the network device of the sixth aspect, when the public key receiving means receives the electronic mail with the public key attached from the transfer destination notified by the notification mail transmitting means, The verification unit verifies the validity of the correspondence between the transfer destination public key and the mail address, and when the validity is verified, the document mail transmission unit discloses the publicity of the transfer destination received by the public key reception unit. Use the key to encrypt the document and send it by e-mail to the destination. As a result, the document can be transferred by unencrypted e-mail to prevent eavesdropping or tampering on the network transmission, and only the confidential document uses the public key of the transfer destination. The document can be encrypted and sent by e-mail and sent to the destination safely. Also, without acquiring and storing the public key of the transfer destination in advance,
Only when it is necessary to send a confidential document by e-mail, it is obtained from the transfer destination. Therefore, it is not necessary to store the public keys of all the transfer destinations. This eliminates the need for processing related to public key management, such as performing it in a symmetric manner.

An eighth aspect of the present invention provides the network apparatus according to any one of the first to sixth aspects, further comprising an encryption unit for encrypting the document, and having confidentiality. When a document is entered,
This is encrypted with the encryption key of the device generated in advance or each time and stored in the document storage means. Therefore, even if the storage means of the document is illegally removed from the device and taken out, the stored confidentiality is kept. It is possible to prevent a document having sex from being exposed to others.

According to a ninth aspect of the present invention, in the network device according to any one of the first to sixth aspects, the document storage means separates the document according to the confidentiality of the document. , The confidentiality information does not need to be stored for each document, and the confidentiality information needs to be set only for the folder. The storage capacity can be used efficiently.

In the network device according to the present invention, when a document is input from a scanner interface, a facsimile interface, a network interface, or the like by the document input unit, the document storage unit stores the document. Then, the notification mail transmitting means sends a notification to the transfer destination corresponding to the document that the document has been input and stored by e-mail, and the public key receiving means receives the e-mail with the public key attached from the transfer destination, The validity verification unit verifies the validity of the correspondence between the public key of the transfer destination and the mail address, and when the validity is verified, the document mail transmission unit checks the transfer destination received by the public key reception unit. Encrypts the document using the public key and sends it to the destination via e-mail. As a result, the document can be transferred by unencrypted e-mail to prevent eavesdropping or tampering on the network transmission. It can be sent by e-mail and safely sent to the destination. In addition, the public key of the transfer destination is not obtained and stored in advance, but is obtained from the transfer destination only when electronic mail transmission of the document to the transfer destination is necessary. Therefore, it is not necessary to store the public keys of all the transfer destinations. In addition, processing related to public key management such as periodically performing processing for determining the expiration date of the stored public key becomes unnecessary.

In the network device according to the present invention, when a document is inputted from a scanner interface, a facsimile interface, a network interface, or the like by the document input means, the communication when the document is inputted by the document input means by the encryption communication judging means. Determine whether the protocol is encrypted communication, the print control means, if the encrypted communication, without printing the document input by the document input means, waits for storage until there is a print instruction from the user, If the communication is not encrypted communication, the document input by the document input unit is printed. As a result, it is possible to prevent the confidential document input by the encryption communication from being automatically printed and the print result being viewed by others.

According to a twelfth aspect of the present invention, when a document is input from a scanner interface, facsimile interface, network interface, or the like by the document input means, the document input by the encrypted document determination means is encrypted by the document input means. Determine if it is. If the document is encrypted, the printing control means waits for accumulation until a print instruction is issued from the user without printing the document, and if the document is not encrypted, Print. Thus, it is possible to prevent an encrypted document having confidentiality from being automatically printed and the print result being viewed by another person.

According to a thirteenth aspect of the present invention, in the network device according to any one of the first to twelfth aspects, the document input means includes: a scanner interface for receiving a document from a scanner; Network interface to receive from,
It is composed of at least one interface among facsimile interfaces for facsimile receiving a document from a public line, whereby it is possible to cope with processing of a document received and input from various interfaces.

[0035]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 shows a network device 1 according to the first to third embodiments of the present invention.
FIG. 1 is a diagram showing a schematic configuration and a network configuration of a network 0.

In FIG. 1, a network device 10 is connected to a network 21 and the network device 1
The document data received and input from the scanner interface 18, the network interface 19, and the facsimile interface 20 (document input means) of the client 23 can be browsed from the web browser of the client 23 connected to the network 21.

When the mail address of the client 23 is set as the transfer destination or the notification destination address of the document, when the document is received and input to the network device 10, the document or the reception notification is transmitted to the client by e-mail. 23.

The network device 22 is connected to the network 21 and the network interface 19
To send and receive document data to and from the network device 10 via the Internet.

The network device 10 includes a CPU 11, R
OM (read only memory) 13, RAM (random access memory) 14, hard disk (H
D) 15, printer unit 16, operation display unit 17, scanner interface 18, network interface 19
And a facsimile interface 20.
Each unit is connected by an address / data bus 12.

The CPU 11 controls the apparatus according to a program stored in the ROM 13.
The address / data bus 12 performs data communication by connecting to each part to be controlled by the CPU 11.

The ROM 13 stores various programs. In the present embodiment, overall control of the network device 10, encryption and decryption processing of e-mail and communication, document reception input processing, WEB server processing, confidentiality determination processing (means), protocol determination processing (means), acquisition request reception Processing (means), document transmission processing (means), authentication method determination processing (means), link information generation processing (means), link information setting processing (means), link information transmission processing (means), document mail transmission processing (means) ), Link information mail transmission processing (means), notification mail transmission processing (means), public key reception processing (means), validity verification processing (means), encrypted document mail transmission processing (means), encryption processing (means) In addition, programs for encryption communication determination processing (means), print control processing (means), encrypted document determination processing (means), and document storage processing are stored.

The RAM 14 serves as a work memory for executing a program and a communication buffer memory for receiving and inputting a document. The hard disk 15 temporarily stores documents input from the scanner network interface 18, the network interface 19, and the facsimile interface 20, stores a confidential box for storing confidential documents and a common box for storing non-confidential documents, and sets various settings of the apparatus. Stores and saves parameters.

The printer section 16 prints out the contents of the e-mail received from the network interface 19. The operation display unit 17 displays the status of the network device 10, sets various parameters, and performs operations such as “scan + store operation” and “scan + email transmission” from a scanner (not shown) connected to the scanner interface 18. Make instructions.

The scanner interface 18 inputs document data (image) from a connected scanner (not shown). The network interface 19 transmits and receives document data to and from a network device such as a network device 22 or a client 23 connected to the network 21. The facsimile interface 20 is connected to a public line (not shown), performs facsimile communication with another facsimile device (not shown) connected to the public line, and transmits and receives image data.

Next, the processing at the time of receiving and inputting the document data by the network device 10 according to the first embodiment of the present invention will be described with reference to the flowcharts of FIGS. In the following description, reference numerals not shown in FIGS. 2 and 3 refer to FIG.

First, in step S100, the network device 10 connects the scanner interface 18, the network interface 19, and the facsimile interface 2.
When a document is received and input from 0, it is checked in step S101 whether there is a confidential box corresponding to the document.

For example, if the document is the scanner interface 1
In the case of inputting from the number 8, it is possible to issue a scan instruction on the operation display unit 17 and set a confidential box for storing the scanned document. When the confidential box is designated on the operation display unit 17, the confidential box name is input from the scanner interface 18 together with the document.

When a document is input from the network interface 19, the communication protocol is S
MTP (Simple Mail Transfer Protocol)
Judge the confidential box from the destination address.

For example, the DNS of the network device 10
(Domain Name System) name is “device.domain.co.jp”
, The destination e-mail address "BOX#001@device.d
"omain.co.jp" indicates a document to be received in the confidential box name "BOX # 001", and the destination mail address is "common@device.doma"
"in.co.jp" indicates a document to be received in the common box.

When a document is input from the facsimile interface 20, when an F code is received, the F code is received.
The confidential box corresponding to the code is selected, and if no F code is received, the common box is selected.
Here, the correspondence between the F code and the confidential box is set and registered in the network device 10 in advance.

If it is determined in step S101 that there is a confidential box corresponding to the input document, the process proceeds to step S101.
Proceed to 102. In step S102, the client 2
The authentication method for accessing from the web browser of No. 3 is set to digest password authentication (authentication method determination processing).

In this case, since the password transmitted from the WEB browser is converted by the message digest and received by the network device 10, it becomes difficult to eavesdrop the password on the network.

Next, in step S103, it is determined whether or not the document input in step S100 has confidentiality (confidentiality determination processing). For example, when a document is input from the scanner interface 18, the operation display unit 1
7, it is possible to set the presence or absence of confidentiality of the scanned document when the scan instruction is issued, and the confidentiality information of the document is input from the scanner interface 18 together with the document.

For example, when a document is input from the network interface 19, if the communication protocol is SMTP, a MIME (Multipurpose Internet Mail Extension) to which the document in the mail is attached is attached.
s) It is possible to set an extension field indicating confidentiality such as X-Secret in the part header of the part.

In such a case, the MIME part to which the document of the received mail is attached includes “X-Secr” indicating no confidentiality.
et: None ”or“ X-Secret: Hig indicating confidentiality
h ”is set, so this is determined.

If the received mail is encrypted, it may be determined that there is confidentiality, and if the received mail is not encrypted, it may be determined that there is no confidentiality. Further, for example, when a document is input from the facsimile interface 20, the confidentiality information of the document can be set in the non-standard field (NSS) of the standard facsimile procedure T.30 to make the determination.

If the document has confidentiality, step S
Proceeding to 104, the document is encrypted with the symmetric encryption key generated by the device (encryption process). This processing is to prevent the contents of the document from being exposed to others when the hard disk 15 is removed from the network device 10 when the confidential document is stored in the hard disk 15 without being encrypted. This is done to prevent it. If the document is encrypted, it is difficult to know the contents of the document stored on the hard disk 15.

Next, in step S105, the encrypted document encrypted in step S104 is copied to the hard disk 15
In a confidential box.

Then, in step S106, HTTPS is set as a communication protocol for a document acquisition request and response from the web browser of the client 23 (protocol determination processing). HTTPS is an encryption communication protocol such as SSL (Secure Socket Layer) or TLS (Transport Layer Security) and HTTP (Hype
r Text Transfer Protocol).

Next, in step S107, link information of the document is generated as a URL (Uniform Resource Locator) (link information generation processing). The URL of the document includes the communication protocol determined in step S106 and the storage address of the document. For example, confidential box name "BOX # 00
URL of document name “document # 001” stored in “1”
Is “https://device.domain.co.jp/BOX#001/document
# 001 ”.

In step S108, step S107
Link information of the document generated by HTML (Hyper Text
This is set in the document list of the confidential box described in Markup Language (link information setting processing). When the client 23 transmits a request to obtain the document list of the confidential box to the network device 10, the list information of the documents stored in the confidential box and the link information to the document are transmitted. This processing will be described later with reference to FIG.

In step S109, it is determined whether a mail address of the transfer destination is set in the confidential box.
The destination mail address of the confidential box is displayed on the operation display section 1.
7 to set by the administrator.

If the transfer destination mail address has been set, the flow advances to step S110 to transmit the link information generated in step S107 to the transfer destination by e-mail (link information mail transmission processing), and the processing ends.

In the transfer destination client 23, the link information (UR) to the document described in the received e-mail
L) to obtain a document. If the transfer destination e-mail address has not been set, the process ends here. In this case, the client 23 obtains a document list in the confidential box using the web browser,
If there is a newly input document, the user accesses the link information (URL) of the document to obtain the document.

If it is determined in step S103 that the document has no confidentiality, the flow advances to step S111 to determine whether a transfer destination is set in the confidential box. The determination processing in step S111 is performed in step S109.
This is the same as the determination process.

Here, if the transfer destination is set for the document, the flow advances to step S112 to attach the document to an electronic mail and transmit the electronic mail to the transfer destination mail address. In this case, since the document does not have confidentiality, it is determined that there is no problem even if the e-mail attached to the document is eavesdropped by another person on the way. If the transfer destination has not been set for the document, the flow advances to step S113 to store the document in the confidential box on the hard disk 15.

Next, in step S114, HTTP is set as a communication protocol for a document acquisition request and response from the WEB browser of the client 23.

Next, in step S115, link information of the document is generated as a URL (link information generation processing).
The URL of the document includes the communication protocol determined in step S114 and the storage address of the document. For example,
Document name “docum” stored in confidential box name “BOX # 002”
The URL of “ent # 002” is “http://device.domain.co.jp/
BOX # 002 / document # 002 ”.

In step S116, step S115
Is set in the document list of the confidential box described in HTML. Client 2
When the request for acquiring the document list of the confidential box is transmitted to the network device 10, the list information of the documents stored in the confidential box and the link information to the document are transmitted. This processing will be described later with reference to FIG.

If it is determined in step S101 that there is no confidential box corresponding to the input document,
The document will be stored in the shared common box. In that case, first, in step S117, it is determined whether the document has confidentiality. The determination of confidentiality is the same as in step S103.

If it is determined in step S117 that the document has confidentiality, the flow advances to step S118 to encrypt the document with a symmetric encryption key generated by the device.

Next, in step S119, the document is stored in a confidential document folder in the common box. In the common box, a confidential document folder for storing confidential documents and a normal document folder for storing non-confidential documents are automatically generated.

In the present embodiment, the confidential document folder and the normal document folder are generated in the common box and are stored separately according to the confidentiality of the document. Of course, the present invention is not limited to this. Alternatively, the confidential document and the non-confidential document may be stored together in the common box without creating such a folder.

Next, in step S120, the authentication method for accessing from the WEB browser of the client 23 is set to digest password authentication. In this case, since the password transmitted from the WEB browser is converted by the message digest and received by the network device 10, it becomes difficult to eavesdrop the password on the network. Although the input document is a non-confidential document, it has confidentiality, so it is necessary to set authentication for document acquisition firmly.

Next, in step S121, HTTPS is set as a communication protocol for a document acquisition request and response from the web browser of the client 23. HT
When the client 23 obtains a document from the WEB browser by using the TPS, the communication is encrypted, so that the risk of eavesdropping on the content of the document on the network by another person is eliminated.

Next, in step S122, link information of the document is generated as a URL. The URL of the document includes the communication protocol determined in step S130 and the storage address of the document.

In step S123, the link information of the document generated in step S122 is set in a document list of a confidential box described in HTML (link information setting processing).

Then, in a step S124, it is determined whether or not the mail address of the transfer destination is set in the common box. The administrator sets the transfer destination mail address of the common box from the operation display unit 17. If the forwarding e-mail address has been set, the process proceeds to step S125,
The link information generated in step S122 is transmitted to the transfer destination by e-mail (link information mail transmission processing), and the processing ends.

If the mail address of the transfer destination is not set in the common box, the process is terminated. In this case, the client 23 obtains a document list in the confidential box using the WEB browser, and if there is a newly input document, the link information (URL) of the document is obtained.
To get the document.

If it is determined in step S117 that the document does not have confidentiality, the flow advances to step S126 to determine whether a mail address of a transfer destination is set in the common box.

If the mail address of the transfer destination is set, the flow advances to step S127 to transmit the e-mail attached with the document to the mail address of the transfer destination. If the destination mail address is not set, the process proceeds to step S
Proceeding to 128, the document is stored in the normal folder of the common box.

Next, in step S129, the authentication method for accessing from the Web browser of the client 23 is set to no authentication. In this case, it is possible to browse the document from the web browser without authentication.
Here, since the document is not a confidential document and has no confidentiality, it is not usually a problem that the document is browsed without authentication.

Next, in step S130, HTTP is set as a communication protocol for a document acquisition request and response from the web browser of the client 23.

Next, in step S131, link information of the document is generated as a URL. The URL of the document includes the communication protocol determined in step S130 and the storage address of the document.

Then, in step S132, the link information of the document generated in step S131 is set in the document list of the confidential box described in HTML, and the process ends here.

Next, the processing when the network device 10 according to the first embodiment of the present invention receives a request from the WEB browser of the client 23 will be described with reference to the flowchart of FIG. In the following description, reference numerals not shown in FIG. 4 refer to FIGS.

First, in step S200, the client 2
When a request is received from the Web browser No. 3 (acquisition request reception processing), the process proceeds to step S201, and it is determined whether the request is a document list acquisition request for a confidential box or a common box. The document list of the confidential document folder in the common box and the document list acquisition request of the normal document folder are determined here.

If there is a document list acquisition request, the flow advances to step S202 to list documents stored in the box or folder and link information (URL) to the documents.
Is transmitted to the WEB browser of the client 23 (link information transmission processing), and the processing ends.

Here, the communication protocol of the document list acquisition request and response uses HTTP, but of course, according to the characteristics of the stored document, the document list to the box or folder in which the confidential document is stored. HTTPS may be used as a communication protocol for the acquisition request and the response of the request.

If it is determined in step S201 that the request from the client 23 is not a document list acquisition request, the flow advances to step S203 to determine whether the request is a document acquisition request. If the request is not a document acquisition request, the process proceeds to step S209 as an invalid request, and a response of request rejection is returned to the client 23.

If the request from the client is a document acquisition request, the flow advances to step S204, and the communication protocol making the document acquisition request is determined in steps S106, S114, S121, and S130. It is determined whether the communication protocol is set for the document.

For example, when HTTPS is set as a communication protocol for obtaining a secret document, H
It is determined whether it is TTPS. Here, if the communication protocol of the document acquisition request is different from the communication protocol set in the document, it is determined as an invalid request in step S20.
Proceed to 9 and return a request rejection response to the client 23.

If the communication protocol of the document acquisition request is the same as the communication protocol set for the document, the flow advances to step S205, and the document acquisition request is sent to step S1.
02, it is determined whether the document has been approved by the authentication method set in steps S120 and S129.

If the document acquisition request is not approved, the process proceeds to step S209 as an authentication error, and returns a request rejection response to the client 23. Also,
If the document acquisition request has been approved, step S206
To determine whether the document is encrypted.

If the document has been encrypted, step S2
In step 07, the document is decrypted with a symmetric encryption key generated by the device in order to encrypt the document. Here, the purpose of decrypting the document is to transmit the document to the WEB browser of the client 23. Also, if the document is not encrypted,
Proceed to step S208.

In step S208, the document is stored in step S208.
The document is transmitted to the WEB browser of the client 23 using the communication protocol set for the document in step 106, step S114, step S121, and step S130 (document transmission process), and the process ends.

Next, the processing at the time of receiving and inputting the document data in the network device 10 according to the second embodiment of the present invention will be described with reference to the flowchart of FIG.

First, in step S300, the network device 10 connects the scanner interface 18, the network interface 19, and the facsimile interface 20.
When a document is received and input from the hard disk 15, the document is stored in the hard disk 15 in step S301.

In step S302, it is determined whether or not the security of the document is to be determined. The setting of whether or not to perform confidentiality determination is set in advance by the administrator from the operation display unit 17.

If it is set to perform confidentiality judgment,
The process advances to step S302 to determine whether the document has confidentiality. For example, if the document is a scanner interface 1
8, it is possible to set the presence or absence of confidentiality of the scanned document when issuing a scan instruction from the operation display unit 17, and the confidentiality information of the document is sent together with the document from the scanner interface 18. Since this is input, this is determined.

When a document is input from the network interface 19, the communication protocol is S
For MTP, MIM with attached document in mail
An extension field indicating confidentiality such as X-Secret can be set in the part header of the E part.

In this case, “X-Secr” indicating no confidentiality is added to the MIME part to which the received mail document is attached.
et: None ”or“ X-Secret: Hig indicating confidentiality
h ”is set, so this is determined.

If the received mail is encrypted, it may be determined that there is confidentiality, and if the received mail is not encrypted, it may be determined that there is no confidentiality. Further, for example, when a document is input from the facsimile interface 20, the confidentiality information of the document can be set in the non-standard field (NSS) of the standard facsimile procedure T.30 to make the determination.

If it is determined in step S302 that the document does not have confidentiality, the flow advances to step S309 to attach the document to an e-mail to the set transfer destination e-mail address and send the e-mail.

If it is determined in step S302 that the information has confidentiality, the process proceeds to step S303.

If it is determined in step S301 that confidentiality is not to be determined, step S3
Go to 03. No determination of confidentiality, step S30
0 and the processing from step S303 to step S308 correspond to the invention described in claim 8.

Next, in step S303, a notification to the effect that the document has been received and input is transmitted to the transfer destination mail address by e-mail (notification mail transmission processing).

Next, in step S304, step S
It is determined whether a signature mail including a public key has been received from the transfer destination notified in 303 (public key reception processing). Until the signature mail including the public key is received from the transfer destination, step S3
Stand by at 03.

In step S303, the transfer destination that has been notified of the document reception input includes, for example, S
/ MlME (SecureMlME) signature and send. S
The X.509 public key certificate of the sender is usually attached to the signature mail of / MlME.

In step S304, when the signature mail including the public key is received from the transfer destination, the process proceeds to step S305, where the correspondence between the public key attached to the e-mail received from the transfer destination and the mail address of the transfer destination is obtained. Confirmation and signature verification are performed (validity verification processing).

If the signature mail is S / MlME, first, the validity period of the X.509 public key certificate is verified and the signature of the certificate issuer is verified. If the X.509 public key certificate has expired or the signature of the certificate issuer of the X.509 public key certificate is invalid, the verification is invalid.

The correspondence between the mail address of the transfer destination and the public key is determined by the subject alternative name (Subject) in the X.509 public key certificate.
The determination is made by checking whether the e-mail address of the forwarder set in (Alt Name) matches the e-mail address of the sender of the e-mail received in step S304.

If these match, it can be determined that the public key in the X.509 public key certificate is that of the transfer destination.
The signature verification is performed by determining whether the message digest obtained by decrypting the signature using the public key in the X.509 public key certificate matches the message digest of the received e-mail. If both message digests match, the signature is correct, and if both message digests do not match, the signature is invalid.

Next, in step S306, it is determined whether the correspondence between the public key and the mail address of the transfer destination and the signature are correct based on the verification result in step S305. If all are correct, the process proceeds to step S307, and if any one is incorrect, the process proceeds to step S308.

In step S307, the e-mail attached with the document is encrypted with the transfer destination public key acquired in step S305 and transmitted to the transfer destination (encrypted document mail transmission processing). In detail, the encryption of e-mail is to encrypt the contents of the e-mail with a symmetric encryption key generated by generating a random number,
Next, encrypt the symmetric encryption key with the public key of the transfer destination,
This is performed by sending the contents of the encrypted e-mail and the encrypted symmetric encryption key together to the transfer destination by e-mail.

In step S308, an error notification that the public key received from the transfer destination is invalid is sent to the transfer destination by e-mail.

Next, processing at the time of inputting document data in the network device 10 according to the third embodiment of the present invention will be described with reference to the flowchart of FIG.

First, in step S400, the network device 10 connects the scanner interface 18, the network interface 19, and the facsimile interface 2.
When a document is received and input from 0, it is determined in step S401 whether the document has been input by encrypted communication (encrypted communication determination processing).

For example, when a document is received and input from the network interface 19 by HTTP or HTTPS, if it is HTTPS, it is determined that the document is received and input by encrypted communication, and in the case of HTTP, it is determined that it is not. .

If the document has been input by encrypted communication, the flow advances to step S402 to determine whether the received and input document has been encrypted (encrypted document determination processing). For example, when a document is received and input by e-mail from the network interface 19, the mail is sent to the S / MI
If it is an encrypted mail of ME, it is determined that the document is encrypted. Otherwise, it is determined that the document is not encrypted.

If the document is encrypted, step S4
In step 03, the encrypted document is decrypted and stored in the hard disk 15. The decryption of the encrypted document is performed using a private key corresponding to the public key of the network device 10. If the document has not been encrypted, the flow advances to step S406 to store the document on the hard disk 15.

In step S404, the user operates the operation display unit 17 to execute step S403 or step S406.
It is determined whether or not a print instruction has been issued for the stored document, and the process waits until there is a print instruction.

If a print instruction is input in step S404, the flow advances to step S405 to print out the stored document from the printer unit 16. Step S4
If it is determined in step S01 that the received input document is not encrypted, the process advances to step S405 to print out the received document from the printer unit 16 (print control process).

In the above processing, the encrypted document is decrypted and stored. However, the encrypted document is stored as it is until the print instruction is issued, and after the print instruction is issued, the encrypted document is stored. The print processing may be performed after decoding.

[0125]

As described above, according to the network device of the present invention, a communication protocol for a client to obtain a document for each document is appropriately adjusted according to the confidentiality of the document input and stored in the device. Because it is determined, the confidential document may be intercepted and altered on the way by non-confidential communication,
A client can acquire a document using an appropriate communication protocol without performing unnecessary confidential communication on a document having no confidentiality.

Further, the network device of the present invention has confidentiality because the client appropriately determines the authentication method for acquiring the document for each document according to the confidentiality of the document input and stored in the device. A client can acquire a document by an appropriate authentication method without performing security-vulnerable authentication for acquiring a document or performing unnecessary authentication for acquiring a document having no confidentiality.

Further, in the network device of the present invention,
When the document input and stored in the device is encrypted and transferred to the transfer destination by e-mail, the transfer destination is authenticated and the public key is obtained by the signature mail sent from the transfer destination. Without storing the document in advance, it becomes possible to encrypt the document and send it to the transfer destination by e-mail.

Further, when the input document is encrypted or input by encrypted communication, the network apparatus of the present invention does not print and causes the storage to wait until there is a print instruction from the user. It is possible to prevent the document from being automatically printed out and being viewed by another person.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a schematic configuration and a network configuration of a network device according to an embodiment of the present invention.

FIG. 2 is an operation flowchart (part 1) of a document reception / input process of the network device according to the first embodiment of the present invention.

FIG. 3 is an operation flowchart (part 2) of a document reception / input process of the network device according to the first embodiment of the present invention.

FIG. 4 is an operation flowchart at the time of receiving a WEB request from the client 23 of the network device according to the first embodiment of the present invention.

FIG. 5 is an operation flowchart of a document reception input process of the network device according to the second embodiment of the present invention.

FIG. 6 is an operation flowchart of a document reception / input process of a network device according to a third embodiment of the present invention.

[Explanation of symbols]

10 network device, 11 CPU, 12 address / data bus, 13 ROM, 14 RAM, 15
Hard disk, 16 printer unit, 17 operation display unit, 18 scanner interface, 19 network interface, 20 facsimile interface, 21 network, 23 client

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 17/21 596 G06F 17/21 596Z G09C 1/00 640 G09C 1/00 640B 640D F term (Reference) 5B009 RC01 SA04 SA14 TB13 VC02 5B017 AA03 BA07 CA16 5B089 GA21 GB01 HB18 JA01 KA04 LB10 5J104 AA04 AA08 AA09 AA16 EA05 EA16 LA05 LA06 NA02 NA05 PA08

Claims (13)

[Claims] A document input unit for inputting a document; a confidentiality determining unit for determining confidentiality of the document input by the document input unit; a document storage unit for storing the document input by the document input unit; A protocol determination unit that determines a communication protocol for a client to obtain a document according to the confidentiality determined by the confidentiality determination unit of the document stored in the document storage unit; Acquisition request receiving means for receiving a document acquisition request from a client according to the communication protocol set forth above, and when the acquisition request receiving means receives an acquisition request from a client, the document stored in the document storage means is subjected to the protocol determination. A document transmitting means for transmitting to a client in a communication protocol determined by the means. . 2. A document input unit for inputting a document, confidentiality determining unit for determining confidentiality of the document input by the document input unit, a document storage unit for storing the document input by the document input unit, An authentication method determining unit that determines an authentication method for a client to obtain a document according to confidentiality determined by the confidentiality determining unit of a document stored in the document storage unit; and obtaining a document from the client. An acquisition request receiving unit that receives a request, an authentication unit that, when the acquisition request receiving unit receives an acquisition request from a client, authenticates the request by an authentication method determined by the authentication method determination unit; A document transmission unit for transmitting a document stored in the document storage unit to a client when the authentication is approved. Device. 3. Link information generating means for generating document link information from a communication protocol for acquiring the document determined by the protocol determining means, and document address information stored in the document storage means; Link information setting means for setting the link information generated by the link information generation means as data that can be referred to by the client, and link information transmitting means for transmitting the data set by the link information setting means in response to a request from the client 2. The network device according to claim 1, wherein: 4. An authentication method for acquiring a document determined by said authentication method determination means, link information generation means for generating document link information from address information of the document stored in said document storage means, A link information setting unit that sets the link information generated by the link information generation unit as data that can be referred to by a client; and a link information transmission unit that transmits the data set by the link information setting unit in response to a request from the client. 3. The network device according to claim 2, comprising: 5. A document input unit for inputting a document, confidentiality determining unit for determining confidentiality of the document input by the document input unit, a document storage unit for storing the document input by the document input unit, When the confidentiality determining unit determines that the document does not have confidentiality, a document mail transmitting unit that transmits the document by e-mail to a transfer destination corresponding to the document stored in the document storage unit; When the confidentiality determination unit determines that the document has confidentiality, link information for acquiring the document to a transfer destination corresponding to the document stored in the document storage unit is transmitted by e-mail. A network device comprising: link information mail transmitting means for transmitting. 6. A document input unit for inputting a document, confidentiality determining unit for determining confidentiality of the document input by the document input unit, a document storage unit for storing the document input by the document input unit, When the confidentiality determining unit determines that the document does not have confidentiality, a document mail transmitting unit that transmits the document by e-mail to a transfer destination corresponding to the document stored in the document storage unit; When the confidentiality determining unit determines that the document has confidentiality, a notification that the document has been input to a transfer destination corresponding to the document stored in the document storage unit is sent by e-mail. A network device, comprising: a notification mail transmitting unit for transmitting. 7. A public key receiving means for receiving a public key from the transfer destination notified by the notification mail transmitting means by e-mail, a public key of the transfer destination received by the public key receiving means and a mail address of the transfer destination. Validity verification means for verifying the validity of the correspondence of the transfer received by the public key receiving means when the validity verification means verifies the validity of the correspondence between the public key of the transfer destination and the mail address. 7. The network device according to claim 6, further comprising encrypted document mail transmitting means for encrypting the document using the public key and transmitting the encrypted document to an e-mail destination. 8. An encryption device for encrypting the document, wherein the document storage device encrypts and stores the document by the encryption device when the document has confidentiality. The network device according to any one of claims 1 to 6, which performs the operation. 9. The document storage device according to claim 1, wherein the document storage unit controls to store the document in a different folder according to the confidentiality of the document.
The network device according to the paragraph. 10. A document input unit for inputting a document, a document storage unit for storing the document input by the document input unit, and a document input to a transfer destination corresponding to the document stored in the document storage unit. Notification mail transmitting means for transmitting a notification to that effect by e-mail; a public key receiving means for receiving a public key by e-mail from the transfer destination notified by the notification mail transmitting means; and a transfer destination received by the public key receiving means And a cipher document mail transmitting means for encrypting the document using the public key of the above and transmitting the encrypted document to the transfer destination by e-mail. 11. A document input unit for inputting a document from a network, an encryption communication determination unit for determining whether a communication protocol when the document is input by the document input unit is an encryption communication, and the encryption communication determination unit. If it is determined that the communication protocol is encrypted communication, the document input unit does not print the document and waits for storage until a print instruction is issued from the user, and the encrypted communication determination unit determines that the communication protocol is encrypted. A print control unit that controls to print the document input by the input unit when it is determined that the communication is not communication. 12. A document inputting means for inputting a document from a network, an encrypted document determining means for determining whether the document input by the document inputting means is encrypted, and the document being encrypted by the encrypted document determining means. If it is determined that the document has not been encrypted, the document input unit does not print the input document and waits for accumulation until a print instruction is issued from the user, and determines that the document is not encrypted by the encrypted document determination unit. A print control unit that controls to print the document input by the document input unit when the determination is made. 13. The document input means comprises at least one of a scanner interface for receiving a document from a scanner, a network interface for receiving a document from a network, and a facsimile interface for facsimile receiving a document from a public line. 13. The method according to claim 1, wherein:
The network device according to claim 1.