JP2003308194A - Printer, information processor, print server, control method for printer and print system and information processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a secure print system in which security is improved. <P>SOLUTION: A print server 200 produces unique data in response to receiving of a user name 301 from a host computer 100 and transmits the data to the host computer 100 together with a job ID (302). Besides, a password corresponding to the user name is obtained from a database 400 and encrypted by using the produced unique data to produce an encrypted password, and the encrypted password is paired with the job ID and stored in a database 401. The host computer 100 encrypts the password by using the received unique data and transmits a print job embedded with the obtained encrypted password and the received job ID (303). When the job ID and the encrypted password registered in the database 401 are the same as the job ID and the encrypted password received from the host computer 100, the relevant print job is outputted to a printer 300. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a printing system shared by a plurality of users via a network or the like, and more particularly to a printing system having a so-called secure print function.

[0002]

2. Description of the Related Art Some printers commonly used by a plurality of users via a network or the like realize so-called secure printing, which realizes restriction of printing execution by user authentication. This secure print is generally realized by embedding a user name and a plaintext password or a reversible encrypted password in a print job.

[0003]

Therefore, the following problems occur. 1. The password is easily leaked by converting the print job into a file by analyzing the print job. 2. By repeatedly sending a print job that has been made into a file to the printer, it is possible to print again and again.

Further, in a printer device shared by a plurality of users via a network or the like, if the printer device itself does not have a user authentication function, secure printing itself cannot be performed in many cases.

The present invention has been made in view of the above problems.
The purpose is to be able to provide a secure print system with improved security. Another object of the present invention is to improve security by making it impossible to determine a password even when a filed print job is analyzed. Another object of the present invention is to improve security by preventing a print job from being executed only once. Another object of the present invention is to enable secure printing even with a printer device that does not have a user authentication function.

[0006]

A printer according to the present invention for achieving the above object has the following configuration. That is, a generation unit that generates unique data in response to the reception of a user name, a transmission unit that transmits the unique data generated by the generation unit to a sender of the user name, and a password corresponding to the user name. An encryption means for encrypting using the unique data to generate an encrypted password,
A comparison means for extracting the encrypted password embedded in the print job received in response to the transmission of the unique data and comparing it with the encrypted password generated by the encryption means; A print control means for executing printing by the print job when the passwords match.

Further, the information processing apparatus according to the present invention for achieving the above object, the first transmitting means for transmitting the user name prior to the transmission of the print job, and the receiving in response to the transmission by the first transmitting means. Encryption means for encrypting the password corresponding to the user name using the generated unique data, embedding means for embedding the encrypted password in a print job, and embedding the encrypted password Second transmitting means for transmitting the printed print job.

According to another aspect of the present invention for achieving the above object, there is provided a print server having the following configuration. That is, a generation unit that generates unique data in response to the reception of a user name, a transmission unit that transmits the unique data generated by the generation unit to a sender of the user name, and a password corresponding to the user name. Is encrypted using the unique data to generate an encrypted password, and the encrypted password embedded in the print job received in response to the transmission of the unique data is extracted. Comparing means for comparing with the encrypted password generated by the encrypting means, and output means for outputting the print job to an external printing device when both encrypted passwords are matched by the comparing means.

Furthermore, the printing system according to the present invention for achieving the above-mentioned object is the first to issue a print job.
A system including an apparatus and a second apparatus for processing the print job, wherein the first apparatus transmits a user name prior to transmitting the print job, and the second apparatus includes the user name. Second transmission means for generating unique data in response to the reception of the password and transmitting the unique data to the first device, and the password corresponding to the user name using the unique data in each of the first and second devices. Encryption means for encrypting the encrypted password, generating an encrypted password, third transmitting means for transmitting the print job in which the encrypted password is embedded to the second device, and an encrypted password embedded in the print job. , Comparing means for comparing the encrypted passwords obtained by the encrypting means of the second device and both comparing encrypted passwords by the comparing means If, and an output means for outputting the print job.

Further, according to the present invention, there is provided a method for print processing corresponding to the above-mentioned printing apparatus, information processing apparatus and printing system. A control program for causing the computer to execute the methods is also provided.

[0011]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

<First Embodiment> [System Configuration] FIG. 1 is a diagram showing an example of the system configuration of the first embodiment. The secure print function according to the present embodiment is realized between each host computer 100 and the print server 200 in FIG. 2 is a block diagram showing a configuration example of the host computer, the print server, and the printer of FIG.

As shown in FIG. 1, the secure print system of this embodiment includes a host computer 100, a print server 200, and a printer 3 that provide an operating environment based on an operating system (hereinafter referred to as OS).
It consists of 00. OS of host computer 100
Assumes Windows (registered trademark) (manufactured by Microsoft), but is not limited to this.

The host computer 100 has a CPU 10
4 is provided. The CPU 104 operates according to a basic input / output program (BIOS) stored in the ROM 105.
By executing the (Operating system) program, the OS is constructed, and the corresponding application program on the OS is executed by using the RAM 106 as a work area to perform the corresponding processing. In RAM 106,
The above-mentioned OS program, application program, and data necessary for executing the OS program are loaded from the hard disk device (HD) 103.

The hard disk device 103 has the above-mentioned O
The S program and the corresponding application program are stored. In the present embodiment, a hard disk device is used as a storage device for storing the application program. However, in addition to this hard disk device, another storage device such as an FD (floppy disk device) or a CDROM (CDROM reading device) is used. The corresponding application program may be stored.

The CPU 104 includes the ROM 105,
KBC (keyboard controller) 107, CRTC (display controller) 1 together with RAM 106
08, HDC (hard disk controller) 109,
Ethernet (registered trademark) I / F 110 is CPU bus 1
It is connected via 11.

The KBC 107 receives a key signal and an instruction signal input from the input device 101 such as a keyboard and a mouse, and performs control for transmission to the CPU 104 via the CPU bus 111. CRTC108 is CPU1
The display control for displaying the application execution result etc. by 04 on the display 102 is performed. HDC1
Reference numeral 09 controls the writing and reading of data to and from the hard disk device 103. The Ethernet I / F 110 is an interface for connecting to Ethernet.
In the first embodiment, Ethernet and Ethernet I / F
The print server 200 is connected via 110, and communication is performed with the print server 200 using a predetermined communication protocol.

The application programs stored in the hard disk device 103 include print control programs, and the CPU 104 reads and executes these programs to construct a print control environment. Details of print control will be described later.

In the configuration of the print server 200, the input device 201, the display 202, the HD 203, the CP
U204, ROM205, RAM206, KBC20
7, CRTC208, HDC209, Ethernet I /
The configurations of the F210 and the CPU bus 211 are the same as the configurations of the reference numerals 101 to 111 shown in the host computer 100, and thus the description thereof will be omitted.

The printer 300 is the print server 200.
Ethernet I / F 210, which is connected to the Ethernet I / F 210 of the host server and communicates with the print server 200 using a predetermined communication protocol, and an instruction input from the host print server 200 via the Ethernet I / F 304. And a CPU 301 that executes control programs such as print control processing and communication control processing stored in the ROM 302 according to the above. RAM3 is used as a work area when the CPU 301 executes the control program.
03 is used. The RAM 303 is also used as a page memory for image expansion processing.

The CPU 301 includes a ROM 302,
The RAM 303, the Ethernet I / F 304, the bus controller I / F 305, and the engine I / F 306 are C
It is connected via the PU bus 307. Engine I /
F306 is an engine unit 308 that mechanically outputs an image.
It is an input / output interface for exchanging data and signals with the engine I / F 306, and an engine unit 308 is connected to the engine I / F 306.

[Data Flow Between Host Computer 100, Print Server 200, and Printer 300] FIG. 3 shows the host computer 100 and print server 20.
3 is a diagram showing a data flow between 0 and the printer 300. FIG. The host computer 100, the print server 200, and the printer 300 are connected by Ethernet, but any connection form such as USB, IEEE1394, or wireless LAN may be used as long as it constitutes a network. I don't care.

Before sending a print job from the host computer 100, data containing a user name is first sent from the host computer 100 to the print server 200 (301). In response to this, the print server 200
Returns the error code, job ID, and unique data (302).

Then, the host computer 100 sends to the print server 200 a print job in which the encrypted password obtained based on the password and the unique data and the job ID are embedded (303). The print server 200 authenticates with the job ID and the encrypted password, and if the authentication is obtained, the print server 200 sends the print job to the printer 300 and executes printing (304).

The print server 200 holds a database 400 composed of a pair of a user name and a plaintext password in order to execute the above authentication. The database 400 is managed independently of print processing. As the database management method, it is only necessary to get the plaintext password from the user name, and existing technology can be applied.
Detailed description is omitted in this embodiment. Further, the print server 200 holds a database 401 composed of a pair of job ID and encrypted password. The element data of the database 401 is generated and discarded each time the print processing is executed. In the above authentication, the job ID and the encrypted password embedded in the print job received from the host computer are compared with the job ID and the encrypted password stored in the database 401.

The processing described above is executed by the host computer 1.
The flowchart described from the 00 side is FIG. 4, and the flowchart described from the print server 200 side is FIG. Hereinafter, the details of the process will be described with reference to FIGS. 4 and 5.

[Processing Flow of Host Computer 100] The processing inside the host computer 100 will be described with reference to the flowchart shown in FIG.

All the processes described in FIG. 4 are executed by a program operating inside the host computer 100. The execution mode of the program of the present embodiment is an application, a print spooler, a printer driver, a language monitor (a module located after the printer driver in the processing site and a module upstream from the port monitor, and is a module that controls bidirectional communication. Can be executed in various forms.

Prior to the printing process, first, a dialog box prompting the user to input the user name and the plaintext password is displayed, and the user name and the plaintext password are input to obtain them (step S401). Then, the data including the user name is transmitted to the print server 200 (step S
402). This means checking the user name and requesting the transmission of the job ID and unique data.

An error code and job I are sent from the print server 200 to the user name sent in step S402.
Data unique to D is received (step S403). Then, it is determined from the error code whether the user name is invalid. If the user name is incorrect, only the error code needs to be transmitted, and the job ID and unique data need not be transmitted.

The job ID may take any form as long as it is a data format that can be identified by the host computer 100. Generally, the job ID is often a numerical value or a character string. The unique data may have any form as long as the data format can be identified by the host computer 100. Generally, the unique data is a number or character string generated from a time stamp, or the time or MAC address (Media Access
GUID (Global U generated from Control Address)
nique ID) etc.

If the error code is determined to be illegal, that is, if the user is an illegal user (step S40)
4) The print executor is notified that the user is an unauthorized user (step S408). This notification often displays a dialog box or the like.

If it is determined that the user is correct,
The plaintext password obtained in step S401 and the unique data obtained in step S403 are combined and subjected to irreversible encryption to obtain an encrypted password (step S405). By combining unique data, the encrypted password can be changed each time printing is executed. In addition, as the lossy encryption processing, MD is generally used.
An example is one that uses a digest algorithm such as 5 (Message Digest 5).

Then, in step S40 for the print job.
The job ID obtained in step 1 and the encrypted password generated in step S405 are embedded in the print job (step S406). The print job in which the encrypted password is embedded is transmitted to the print server 200 (step S407).

[Processing Flow of Print Server 200] Next, the processing inside the print server 200 shown in FIG. 3 will be described with reference to the flowchart shown in FIG. It should be noted that all the processes described in FIG. 5 are executed by a program operating inside the print server 200.

Prior to the printing process, the user name is first transmitted from the host computer 100 (step S5).
01). By comparing the received user name with the user name registered in the database 400, it is determined whether or not the user name is invalid (step S502). If it is determined that the user name is an unauthorized user, an error code indicating an unauthorized user is transmitted to the host computer 100 and the process ends (step S512).

On the other hand, if it is not an invalid user name, arbitrary data unique to the job ID is generated (step S50).
3). As described above, the job ID may take any form as long as it is a data format that can be identified by the host computer 100. Generally, the job ID is often a numerical value or a character string. The unique data may have any form as long as it can be identified by the host computer. In general, unique data is a number or string generated from a timestamp, or
Time and MAC address of network card (Media Ac
GUID (Glob generated from cess Control Address)
al Unique ID).

The plaintext password registered in the database 400 and corresponding to the user name received in step S501 and the unique data generated in step S503 are combined to perform irreversible encryption, and the encrypted password is obtained. It is generated (step S504). By combining unique data, the encrypted password can be changed each time printing is executed. Note that this lossy encryption processing must be completely the same algorithm as the lossy encryption processing (step S405) used in the host computer 100.

Next, the job ID generated in step S503 and the encrypted password generated in step S504 are stored in the database 401 in association with each other (step S505). By this saving, the encrypted password associated with any job ID can be acquired.

As a response to the user name received in step S501, the job ID and unique data generated in step S503, and an error code indicating success are transmitted to the host computer 100 (step S506). In response to the data transmission in step S506, the host computer outputs the print job in which the job ID and the encrypted password are embedded as described in FIG. Therefore, the print server 200 receives this print job from the host computer 100 (step S507).

Since the job ID and the encrypted password are embedded in this print job, these are taken out (step S508) and compared with the job ID and the encrypted password stored in the database 401 in step S505 ( Step S509).

As a result of the comparison, if they completely match, the print job is transmitted to the printer 300 to execute printing (step S510), and the job ID and the encrypted password stored in the database 401 in step S511. Is deleted (step S511). By deleting the job ID and the encrypted password, it is possible to prevent the same print job from being printed multiple times.

As described above, according to the first embodiment, a secure print system is realized even with a printer device that does not have a secure print function.
The password cannot be determined even if the filed print job is analyzed, and printing of the print job is 1
It can be executed only once.

<Second Embodiment> In the first embodiment, by connecting to the printer 300 via the print server 200, it is possible to execute secure print even if the printer does not have a secure print function. It is possible. However, when the printer itself has the secure print function of the print server 200,
Secure print can be realized without going through the print server. In the second embodiment, such a printer will be described.

FIG. 6 is a view showing the arrangement of the printer system according to the second embodiment. The printer 500 is directly connected to the network as a shared printer without going through a print server.

FIG. 7 is a block diagram showing a configuration example of the host computer and printer of FIG. The configuration of the host computer 100 is as described with reference to FIG.
In the embodiment, Ethernet and Ethernet I / F 11
0 to connect to the printer 500 and communicate with the printer 500 using a predetermined communication protocol.

In the printer 500, the Ethernet I
The / F 504 is connected to the Ethernet I / F 110 of the host computer 100,
The communication is performed with a predetermined communication protocol. C
The PU 501 follows an instruction input from the host computer 100 via the Ethernet I / F 504.
A control program such as print control processing and communication control processing stored in the OM 302 is executed.

FIG. 8 is a diagram showing a data flow between the host computer 100 and the printer 500 according to the second embodiment. Although the host computer 100 and the printer 300 are shown as connected by Ethernet, as long as they form a network,
B, IEEE1394, wireless LAN, or any other connection form does not matter.

From the host computer 100 to the printer 5
Before sending the print job to 00, the data including the user name is first transferred from the host computer 100 to the printer 5.
It is transmitted to 00 (801). Receiving it, printer 5
00 returns an error code, a job ID, and unique data (802).

Then, the host computer 100 creates a print job in which the encrypted password obtained based on the password and the unique data and the job ID are embedded, and sends the print job to the printer 500 (803).
The printer 500 authenticates the job ID and the encrypted password, and if the authentication is obtained, prints the print job.

The databases 400 and 401 described in the first embodiment are owned by the printer 500. Then, the printer 500 realizes secure printing by executing the processing of FIG. 5 executed by the print server 200 in the first embodiment. In addition,
In the first embodiment, the processing of the host computer 100 shown in FIG. 4 is for the print server 200, but in the second embodiment, it is processing for the printer 500.

As described above, according to the second embodiment, the print server is unnecessary, and the system can be simplified.

<Other Embodiments> Incidentally, even when the present invention is applied to a system composed of a plurality of devices (for example, a host computer, an interface device, a reader, a printer, etc.), a device composed of one device ( For example, it may be applied to a copying machine, a facsimile machine, etc.).

Further, an object of the present invention is to supply a storage medium (or recording medium) recording a program code of software for realizing the functions of the above-described embodiments to a system or apparatus, and to supply a computer of the system or apparatus ( Needless to say, this can also be achieved by the CPU or MPU) reading and executing the program code stored in the storage medium. In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention. Also,
By executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system (OS) running on the computer based on the instructions of the program code.
Needless to say, this also includes the case where the above-mentioned processes perform part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

Further, after the program code read from the storage medium is written in the memory provided in the function expansion card inserted in the computer or the function expansion unit connected to the computer, based on the instruction of the program code. Needless to say, this also includes a case where a CPU or the like included in the function expansion card or the function expansion unit performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments.

[0056]

As described above, according to the present invention,
A secure printing system with improved security is provided.

[Brief description of drawings]

FIG. 1 is a diagram showing an example of a system configuration of a first embodiment.

FIG. 2 is a block diagram showing a configuration example of a host computer, a print server, and a printer of FIG.

FIG. 3 shows a host computer 100 and a print server 2.
10 is a diagram showing a data flow between 00 and the printer 300. FIG.

FIG. 4 is a flowchart illustrating processing of a host computer according to the embodiment.

FIG. 5 is a flowchart illustrating processing of the print server according to the embodiment.

FIG. 6 is a diagram showing a configuration of a printer system according to a second embodiment.

7 is a block diagram showing a configuration example of a host computer and a printer of FIG.

FIG. 8 is a diagram showing a data flow between a host computer 100 and a printer 500.

Claims (22)

[Claims] 1. A generation unit that generates unique data in response to the reception of a user name, a transmission unit that transmits the unique data generated by the generation unit to a sender of the user name, and A corresponding password is encrypted using the unique data to generate an encrypted password, and an encrypted password embedded in the print job received in response to the transmission of the unique data is extracted. Comparing means for comparing with the encrypted password generated by the encrypting means, and print control means for executing printing by the print job when both encrypted passwords match by the comparing means. Printing device. 2. A first storage means for storing a user name and a password as a pair, and the encryption means acquires the password corresponding to the user name from the first storage means. The printing apparatus according to claim 1. 3. The notification device according to claim 1, further comprising notification means for notifying an error to a sender of the user name when the received user name is not stored in the first storage means. The printing device described. 4. The generating means generates a job ID together with the unique data, the transmitting means transmits the job ID together with the unique data to the transmission source, and the encrypting means comprises the encryption code. The paired encrypted password and the job ID are stored in the second storage unit, and the comparison unit stores the paired encrypted password and job ID embedded in the print job in the second storage unit. The printing apparatus according to claim 1, wherein the printing password and the job ID are compared with each other. 5. The print control unit erases an encrypted password and a job ID corresponding to the print job stored in the second storage unit when printing is performed by the print job. Claim 4
The printing device according to. 6. The user name is addressed using a first sending unit that sends a user name prior to sending a print job, and unique data received in response to the sending by the first sending unit. An encryption unit for encrypting the password and generating the encrypted password; an embedding unit for embedding the encrypted password in a print job; and a second transmitting unit for transmitting the print job in which the encrypted password is embedded. A characteristic information processing device. 7. The information processing apparatus according to claim 6, further comprising: an interface that prompts the user to enter a user name and a password. 8. The embedding unit embeds the encrypted password and the job ID received together with the unique data in response to the transmission by the first transmitting unit in the print job. Item 6. The information processing device according to item 6. 9. A generation unit that generates unique data in response to receiving a user name, a transmission unit that transmits the unique data generated by the generation unit to a sender of the user name, A corresponding password is encrypted using the unique data to generate an encrypted password, and an encrypted password embedded in the print job received in response to the transmission of the unique data is extracted. Comprising: a comparing means for comparing with the encrypted password generated by the encrypting means; and an output means for outputting the print job to an external printing device when both comparing the encrypted passwords by the comparing means. And a print server. 10. The apparatus further comprises a first storage means for storing a user name and a password as a pair, and the encryption means acquires a password corresponding to the user name from the first storage means. The print server according to claim 9. 11. The notification unit according to claim 9, further comprising a notification unit for notifying an error to a sender of the user name when the received user name is not stored in the first storage unit. Print server described. 12. The generating means generates a job ID together with the unique data, the transmitting means transmits the job ID together with the unique data to the transmission source, and the encrypting means comprises the encryption code. The paired encrypted password and the job ID are stored in the second storage unit, and the comparison unit stores the paired encrypted password and job ID embedded in the print job in the second storage unit. 10. The print server according to claim 9, wherein the print server compares the encrypted password with a job ID pair. 13. The output means deletes the encrypted password and the job ID corresponding to the print job stored in the second storage means when the printing by the print job is executed. Claim 12
The print server described in. 14. A system including a first device that issues a print job and a second device that processes the print job, the first device transmitting a user name prior to transmission of the print job from the first device. Transmitting means, second transmitting means for generating unique data in the second device in response to reception of the user name, and transmitting the data to the first device; and, in each of the first and second devices, the unique data Encryption means for encrypting a password corresponding to the user name using data and generating an encrypted password; and third transmission means for transmitting a print job in which the encrypted password is embedded to the second device. Comparing means for comparing the encrypted password embedded in the print job with the encrypted password obtained by the encrypting means of the second device; A printing system comprising: an output unit that outputs the print job when both the encrypted passwords are matched by the comparison unit. 15. The print device according to claim 14, wherein the second device is an external print device.
Printing system described in. 16. The printing system according to claim 14, wherein the second device is a printing device. 17. A generating step of generating unique data in response to receiving a user name, a transmitting step of transmitting the unique data generated in the generating step to a sender of the user name, and An encryption step of encrypting a corresponding password using the unique data to generate an encrypted password, and extracting the encrypted password embedded in the print job received in response to the transmission of the unique data. A comparison step of comparing with the encrypted password generated in the encryption step, and a print control step of executing printing by the print job when both encrypted passwords match in the comparison step. A method for controlling a printing device. 18. The user name is addressed using a first sending step of sending a user name prior to sending a print job, and unique data received in response to the sending by the first sending step. An encryption step of encrypting the password and generating the encrypted password; an embedding step of embedding the encrypted password in a print job; and a second transmitting step of transmitting the print job in which the encrypted password is embedded. A characteristic information processing method. 19. A generation step of generating unique data in response to reception of a user name, a transmission step of transmitting the unique data generated in the generation step to a sender of the user name, and An encryption step of encrypting a corresponding password using the unique data to generate an encrypted password, and extracting the encrypted password embedded in the print job received in response to the transmission of the unique data. And a comparison step of comparing with the encrypted password generated in the encryption step, and an output step of outputting the print job to an external printing device when both encrypted passwords match in the comparison step. Information processing method. 20. A method of controlling a system including a first device that issues a print job and a second device that processes the print job, wherein a user name is transmitted from the first device prior to transmission of the print job. And a second transmitting step of generating unique data in the second device in response to the reception of the user name in the second device and transmitting the unique data to the first device, in each of the first and second devices, An encryption step of encrypting a password corresponding to the user name using the unique data to generate an encrypted password, and a third step of transmitting a print job in which the encrypted password is embedded to the second device. A ratio of comparing the encrypted password embedded in the print job with the encrypted password obtained by the encryption step of the second device in the sending step. If a step, the comparing step by both encrypted passwords match, the control method for the printing system characterized by an output step of outputting the print job. 21. A control program for realizing the information processing method according to claim 18 by a computer. 22. A storage medium storing a control program for realizing the information processing method according to claim 18 by a computer.