JP2004139163A - Data processor and data processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure the security of data stored in a hard disk drive. <P>SOLUTION: This data processor is provided with an instructing means for instructing the encryption of acquired data from a control panel 10 incorporated in the data processor itself when temporarily storing acquired data, that is, at least either data received from information equipment 2 connected to a network or data captured from a data capturing part 11 incorporated in the processor itself into a hard disk drive 9 incorporated in the processor itself, an encrypting means for encrypting the instructed acquired data into encrypted data and a decoding means for decoding the encrypted data into the original acquired data. Thus, it is possible to secure the security of the acquired data stored in the hard disk drive. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a data processing device and a data processing method, and in particular, receives data from a host computer or a built-in data capturing unit connected to a network, and stores the received data in a built-in hard disk drive as necessary. The present invention relates to a data processing device and a data processing method for performing the same.
[0002]
[Prior art]
In recent years, with the spread of network systems such as the Internet, various data such as e-mails have been communicated over a network, and encryption of these data has been promoted. Further, a printing apparatus as a data processing apparatus connected to a network using Ethernet (R) or the like has been put to practical use.
[0003]
The printing apparatus described above, for example, when the printing apparatus is a laser beam printer, when printing information from an information processing system such as a host computer is input via an output control system such as a printer server and driver software, The print information is analyzed, then developed into bitmap data as output data, and a laser beam modulated based on the bitmap data is scanned and exposed on a photosensitive drum to record an image. In addition to such print functions, MFPs having various server functions such as a scanner function, a FAX function, mail transmission / reception, and job management have also been put into practical use, and store data used by these functions. In order to read and write data, a large-capacity hard disk drive is often built-in.
[0004]
[Problems to be solved by the invention]
However, the data stored in the hard disk drive built in the printing apparatus described above depends on each function using the hard disk drive, and whether the stored data is encrypted is Function varied. As a result, if the data stored in the hard disk drive is unencrypted data, this is an obstacle to ensuring security.
[0005]
The present invention has been made in view of the above-described problems, and has as its object to realize a data processing device and a data processing method that ensure the security of data stored in a hard disk drive.
[0006]
[Means for Solving the Problems]
The data processing device of the present invention is a data processing device connected to a network, or a stand-alone data processing device, and data received from an information device connected to the network or data contained therein. When holding at least one of the acquired data from the capturing unit in the hard disk drive built therein, an instruction is given from the operation panel built therein to encrypt the obtained data. Instruction means, encryption means for encrypting the obtained data to encrypted data when instructed by the instruction means, and decryption means for decrypting the encrypted data to the original obtained data. Which is characterized by having
[0007]
Another feature of the data processing device of the present invention is that the encrypting means encrypts the obtained data using a device identification number set differently for each device. is there.
[0008]
According to another feature of the data processing device of the present invention, the decryption unit decrypts the encrypted data using a device identification number set differently for each device. It is assumed that.
[0009]
The data processing method of the present invention is a data processing method in a data processing device connected to a network or a stand-alone data processing device, wherein the data is received from an information device connected to the network or embedded in itself. When the acquired data of at least one of the data taken in from the data take-in unit is once stored in the hard disk drive built therein, the obtained data is encrypted from the operation panel built therein. An instructing step for instructing that the acquired data is encrypted into encrypted data when instructed by the instructing step; and decrypting the encrypted data to the original obtained data. And a decoding step.
[0010]
BEST MODE FOR CARRYING OUT THE INVENTION
Next, an embodiment of a data processing device and a data processing method of the present invention will be described with reference to the accompanying drawings. In the present embodiment, a printing apparatus will be described as an example of the data processing apparatus of the present invention.
[0011]
FIG. 1 is a block diagram of a printing apparatus according to the present embodiment.
In FIG. 1, a printing apparatus main body 1 indicated by a broken line is connected to an external host computer 2 via a connector (not shown), and image data, a font designation command, a character code, a paper ejection command, etc. And prints out. Further, it is also configured to receive image data from the image reading unit 11 provided in the printing apparatus main body 1 and perform printout.
[0012]
In the printing apparatus main body 1, the CPU device 3 loads the execution program stored in the hard disk drive 8 onto the RAM 6 according to the control procedure of the boot program stored in the boot ROM 5, and prints the program according to the control procedure of the loaded execution program. The entire device body 1 is controlled. The transmission / reception buffer 4 receives image data received from the host computer 2, received data such as a font designation command, a character code, and a paper ejection command, print device information to be transmitted to the host computer 2, and the image data read by the image reading unit 11. Stores transmission data.
[0013]
The boot ROM 5 stores a boot program of the above-described initial operation of the CPU device 3 and a control procedure for loading the execution program stored in the hard disk drive 8 onto the RAM 6 and executing the program on the CPU device 3. I have. The RAM 6 functions as a storage area for the execution program of the CPU 3 and a work area when the execution program is executed.
[0014]
The output unit 7 visualizes the image according to a known electrophotographic process or the like. The NVRAM 8 stores a unique machine identification number for each of the printing apparatuses 1, and this machine identification number is set at the time of initialization at a factory and cannot be changed thereafter.
[0015]
The hard disk drive 9 stores the execution program described above and various data such as image data used by each function provided by the printing apparatus 1. The operation panel 10 is provided for inputting an instruction from a user to the printing apparatus 1. In the present embodiment, the operation panel 10 issues a data encryption instruction particularly when data is stored in the hard disk drive 9. Further, the image reading unit 11 is attached to the printing apparatus 1, and the read image data is also printed out and stored in the hard disk drive 9.
[0016]
FIG. 2 is a schematic diagram showing a display example of the operation panel 10 built in the printing apparatus 1. When the “encrypt and save data” button displayed on the operation panel 10 shown in FIG. 2 is used, all data stored in the hard disk drive 9 is encrypted thereafter.
FIG. 3 is a schematic diagram showing a display example of the operation panel 10 after using the "encrypt and save data" button in FIG. FIG. 3 shows that the data is stored in the hard disk drive 9 after being encrypted.
[0017]
FIG. 4 is a flowchart illustrating a procedure of a data encryption process and a data storage process of the data processing method according to the present embodiment. This processing program is stored in the hard disk drive 9 or the boot ROM 5, and is processed by the CPU device 3 according to the processing content.
[0018]
First, in step S1, initialization is performed.
Subsequently, in step S2, when writing data to the hard disk drive 9, it is determined whether or not there is an instruction from the user in advance through the operation panel 10 shown in FIG. 2 to encrypt and save the data. I do. If it is determined that there is an instruction to encrypt and save the data, the process proceeds to step S3. On the other hand, if it is determined in step S2 that there is no instruction to encrypt and save the data, the process proceeds to step S6.
[0019]
Subsequently, in step S3, the machine identification number stored in the NVRAM 8 is obtained. Subsequently, in step S4, the data to be written to the hard disk drive 9 is encrypted using the obtained machine identification number. As the encryption method used in step S4, a secret key encryption method using the machine identification number as a key is used. Subsequently, in step S5, an "encrypted" state is set as data information stored in the hard disk drive 9, and the process proceeds to step S7.
[0020]
On the other hand, in step S6, since the encryption is not performed, the encryption “not yet” state is set as the data information stored in the hard disk drive 9.
[0021]
Subsequently, in step S7, data is stored in the hard disk drive 9 together with the data information.
Thereafter, the process proceeds to step S8, and the data encryption and data storage processing according to the instruction from the user is completed. While the data encryption and data storage processes are being performed, the fact that the encryption process is being performed is displayed on the operation panel 10 or the like.
[0022]
FIG. 5 is a flowchart illustrating a procedure of a data decoding process of the data processing method according to the embodiment of the present invention. This processing program is stored in the hard disk drive 9 or the boot ROM 5, and is processed by the CPU device 3 according to the processing content.
[0023]
First, in step S11, initialization is performed.
Subsequently, in step S12, when reading the data stored in the hard disk drive 9, the data requested to be read and the data information of the data are read.
[0024]
Subsequently, in step S13, it is determined whether or not the read data information is encrypted "completed". If the result of this determination is that the data information is "encrypted", the process proceeds to step S14. On the other hand, if it is determined in step S13 that the data information is "unencrypted", the process jumps to step S16.
[0025]
Subsequently, in step S14, the device identification number stored in the NVRAM 8 is obtained because the data is encrypted. Subsequently, in step S15, the read data is decrypted using the obtained machine identification number. As the encryption method used in step S15, a secret key encryption method using the machine identification number as a key is used. If the data information is "unencrypted", it is unencrypted data, so these processes are not performed.
[0026]
Subsequently, in step S16, the data subjected to the decryption processing in step S15 or the data whose data information is determined to be "unencrypted" in step S13 are transmitted to the read request source.
Thereafter, the process proceeds to step S17, and the data decoding and data reading processing ends.
[0027]
In this embodiment, an output unit for visualizing an image according to a known electrophotographic process is used as a print output unit. However, the present invention is not limited to the electrophotographic process, and includes a bubble jet (R) method. The present invention can be applied to an ink jet type output unit and other print output units.
Further, in the present embodiment, the secret key encryption method using the machine identification number as a key is used as the encryption method, but another encryption method may be used. However, it is preferable that the encryption method is not easily decrypted and can perform high-speed processing.
[0028]
Further, in the present embodiment, the files used by the execution program are stored in the hard disk drive 9, but may be stored in the ROM 5.
Further, in the present embodiment, when data is stored in the hard disk drive 9 by the user instructing the operation panel 10 in advance, the data is encrypted so that the data is encrypted. At this time, the data stored in the hard disk 9 may be encrypted by instructing the operation panel 10.
[0029]
Further, in the present embodiment, when data is encrypted, the machine identification number stored in the NVRAM 8 is used, but an arbitrary character string specified by the user from the operation panel 10 may be used. However, in this case, it is necessary to hold a character string used for encryption for each encrypted data.
Further, in the present embodiment, the machine identification number is held in the NVRAM 8, but may be held in another storage medium such as the hard disk drive 9 or the boot ROM 5.
[0030]
(Another embodiment of the present invention)
The present invention may be applied to a system including a plurality of devices or an apparatus including one device.
[0031]
Further, each unit configuring the printing apparatus as the data processing apparatus according to the above-described embodiment and each step of the data processing method (steps S1 to S8 in FIG. 4 and steps S11 to S17 in FIG. 5) are performed by a computer. This can be realized by operating a program stored in a RAM, a ROM, or the like. This program and a computer-readable storage medium storing the program are included in the present invention.
[0032]
Specifically, the program is recorded on a recording medium such as a CD-ROM or provided to a computer via various transmission media. As a recording medium for recording the program, a flexible disk, a hard disk, a magnetic tape, a magneto-optical disk, a nonvolatile memory card, and the like can be used in addition to the CD-ROM. On the other hand, as a transmission medium of the program, a communication medium (wired line such as an optical fiber or the like) in a computer network (LAN, WAN such as the Internet, wireless communication network, etc.) system for transmitting and supplying program information as a carrier wave is provided. Wireless line, etc.).
[0033]
In addition, not only the functions of the above-described embodiments are realized by the computer executing the supplied program, but the program cooperates with an OS (operating system) or other application software running on the computer. In the case where the functions of the above-described embodiment are realized, or in the case where all or a part of the processing of the supplied program is performed by a function expansion board or a function expansion unit of a computer to realize the functions of the above-described embodiment. Such a program is also included in the present invention.
[0034]
【The invention's effect】
According to the present invention, data stored in a hard disk drive can be easily encrypted irrespective of the function of using the hard disk drive built in the data processing device, and the security of the data is ensured. A data processing device and a data processing method can be realized. Further, by performing encryption processing and decryption processing using the machine identification number, different encryption can be performed for each data processing device, so that data security can be further improved.
[Brief description of the drawings]
FIG. 1 is a block diagram of a printing apparatus according to an embodiment.
FIG. 2 is a schematic diagram illustrating a display example of an operation panel built in the printing apparatus.
FIG. 3 is a schematic diagram showing a display example of an operation panel after using an “encrypt and save data” button in FIG. 2;
FIG. 4 is a flowchart illustrating a procedure of a data encryption process and a data storage process of the data processing method according to the embodiment;
FIG. 5 is a flowchart illustrating a procedure of a data decoding process of the data processing method according to the embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Printer main body 2 Host computer 3 CPU device 4 Receive buffer 5 Boot ROM
6 RAM
7 Print output unit 8 NVRAM
9 Hard disk drive 10 Operation panel 11 Image reading unit

Claims (4)

A data processing device connected to a network or a standalone data processing device,
When holding at least one of the data received from the information device connected to the network or the data fetched from the data fetching unit built in itself, once holding in the hard disk drive built in itself Instruction means for instructing to perform encryption of the obtained data from an operation panel built therein,
Encrypting means for encrypting the obtained data into encrypted data when instructed by the instructing means,
A data processing device comprising: decryption means for decrypting the encrypted data into the original obtained data. 2. The data processing device according to claim 1, wherein the encryption unit encrypts the obtained data using a device identification number set differently for each device. The data processing device according to claim 1, wherein the decryption unit decrypts the encrypted data using a device identification number set differently for each device. A data processing method in a data processing device connected to a network or a standalone data processing device,
When holding at least one of the data received from the information device connected to the network or the data fetched from the data fetching unit built in itself, once holding in the hard disk drive built in itself An instruction step of instructing to perform encryption of the obtained data from an operation panel built therein,
When instructed by the instruction step, an encryption step of encrypting the obtained data into encrypted data,
Decrypting the encrypted data to the original obtained data.

Images