JP2007207166A - Program, device, and method of printing instructing - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To protect secrecy of a transmission line at the level intended by a signer of an electronic document when the electronic document is about to be transmitted to a printer and printed. <P>SOLUTION: When a digital signature is given to the electronic document designated as a printing object, a printer driver 11 obtains a necessary security level requested by the signer according to a key length of a public key or the like of the signer of the digital signature. It is determined whether or not the transmission line protection at the necessary security level is possible with a printer 14. When it is not possible, an UI screen indicating that printing is not permitted without permission of the signer is displayed and an enquiry is made of the signer. When the permission is given to the enquiry, the printer driver 11 transmits printing data of the electronic document to the printer 14 after giving an optimal level of transmission line protection which can be established between the printer 14 and itself. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a program (for example, a printer driver) or a print instruction apparatus for transmitting print data to a printer via a network for printing, and more particularly to security of print data on the network.

As a technique for preventing confidential leakage of print data transmitted from a host computer to a printer via a network, a technique disclosed in Patent Document 1 is known. In this technology, the printer driver on the host computer provides a user interface screen for specifying the presence / absence of encryption on the transmission path and the strength of encryption, and print data if necessary according to the input to this screen. Is encrypted and sent to the printer. The printer driver also determines an appropriate encryption strength according to the position of the printer on the network, such as whether or not the route to the destination printer is through the Internet.
JP 2002-31146 A

  When the user himself / herself instructs to print the electronic document created by the user, it is the user's own judgment how strong the electronic document is to be protected. Therefore, in such a case, the content of the electronic document can be appropriately protected even by the method disclosed in Patent Document 1.

  However, there are many cases in the world where an electronic document created by another person or an electronic document copyrighted by another person is acquired and printed. In such a case, how strong the content of the electronic document is to be protected is a problem for the creator of the electronic document and the copyright holder, and it is expected that the person who obtains and prints the document can make an appropriate decision. Therefore, the method of Patent Document 1 cannot be said to sufficiently protect the contents of the electronic document on the network.

  In one aspect, the present invention relates to a level correspondence in which the computer stores the strength of the electronic signature attached to the electronic document and the security level of the transmission path required when transmitting the electronic document in association with each other. Information storage means, request level judgment means for judging the security level of the transmission path required in accordance with the strength of the electronic signature attached to the electronic document to be printed based on the information in the level correspondence information storage means, its computer, Establishable level determination means for determining the security level of a transmission path that can be established with the printer of the print output destination, and when the security level determined by the establishment level determination means is equal to or higher than the security level determined by the request level determination means Transmits the electronic document to be printed or the print data corresponding to the electronic document to the printer of the print output destination, If not resold, it provides a program for causing a print continuation determination process for determining whether or not to continue printing control means for performing a.

  In a preferred aspect of the present invention, the control means displays, on the display of the computer, a user interface screen asking whether to cancel or continue printing as the print continuation determination process, and corresponds to the user interface screen. Then, when an instruction to cancel printing is input, the process for printing the electronic document to be printed is stopped.

  In another preferred aspect, the control means causes the display of the computer to display a user interface screen asking whether to stop or continue printing as the print continuation determination process, and for the user interface screen When an instruction to continue printing is input, the signer of the electronic signature attached to the electronic document to be printed is inquired whether printing is permitted, and printing is permitted for this inquiry. When a response to that effect is received from the signer, the electronic document or print data corresponding to the electronic document is transmitted to the printer.

  In another preferred aspect of the present invention, the control means displays, as the print continuation determination process, a user interface screen for inquiring whether to stop or continue printing on the display of the computer, and the user interface screen When an instruction to continue printing is input in response to, printing is performed for the e-mail address indicated as the subject information in the public key certificate corresponding to the electronic signature attached to the electronic document to be printed. A message asking whether to permit or not is sent as an e-mail.

  In still another preferred aspect of the present invention, the inquiry message includes information indicating a maximum security level that can be established between the computer and the printer of the print output destination. When the signer receives a response to permit printing in response to the inquiry, the transmission path protection of the highest security level is established with the printer, and the electronic document or the electronic document is Corresponding print data is transmitted to the printer.

  In still another preferred aspect of the present invention, when the control means receives an answer from the signer that includes permission to print and information on print settings for the inquiry, the control means Print data corresponding to the electronic document is transmitted to the printer and printed according to the print settings.

  In still another preferred aspect of the present invention, when the control unit receives an answer from the signer that includes permission to print and information on print settings for the inquiry, A user interface screen for inquiring whether to perform printing is displayed on the display of the computer, and the electronic document or print data corresponding to the electronic document is sent to the printer in response to a user response to the inquiry on the user interface screen. Controls whether to transmit.

  Hereinafter, embodiments of the present invention (hereinafter referred to as “embodiments”) will be described with reference to the drawings.

  FIG. 1 is a diagram showing an example of the configuration of a system including a printer 14 according to the present invention. In this system, PCs (personal computers) 10 and 16 and a printer 14 are connected to a network 12 for data communication such as a LAN (local area network) and the Internet. The PC 16 is a PC of a user (referred to as a right holder) who has rights to the electronic document such as a creator, owner, distributor, or copyright holder of the electronic document to be printed. The PC 10 is a PC of a user who acquires the electronic document and wants to print it. A printer driver 11 for causing the printer 14 to print an electronic document is installed in the PC 10. The electronic document here is a document in a file format of application software (hereinafter simply referred to as an application). The printer driver 11 creates print data indicating a print image of the electronic document from the electronic document in the file format of the application, and sends the print data to the printer 14. The print data is described in a page description language (PDL) that can be interpreted by the printer 14. Further, the printer driver 11 creates attribute data in which print attributes such as the number of copies, the paper size, the user name of the user who instructed printing, and the print instruction time are described in the print job language (PJL), and corresponds to the print data. A function for sending to the printer 14 is also provided.

  Some printers have a “direct print” function for receiving and printing an electronic document in a file format of the application for a specific type of application. When the electronic document to be printed is in a file format that can be directly printed by the printer 14, the printer driver 11 does not change the electronic document to PDL print data, but adds attribute data to the electronic document and transmits it to the printer. You can also

  An electronic signature can be attached to an electronic document using secret key information such as an owner of the electronic document or a copyright holder. For example, software that can embed an electronic signature in created documents, such as Microsoft's word processor software “Word” and Adobe Systems ’“ Acrobat ”, has become widespread. An electronic signature can be added by software.

  The electronic signature is generated by encrypting the hash value of the electronic document with the signer's private key. As is well known for XML signatures and the like, information for electronic signatures generally incorporated in electronic documents includes verification values for verifying the signature value in addition to the signature value of the electronic signature (that is, the encryption result of the hash value). Information for identifying the key (ie, the signer's public key) is included. This information may be the verification key itself, the signer's public key certificate, or both.

  When distributing an electronic document, the right holder of the electronic document often attaches the electronic signature of the electronic document for the purpose of ensuring that the electronic document is a person who has correctly distributed the electronic document. Based on this electronic signature, the printer driver 11 of the present embodiment performs processing for security protection of the contents of the electronic document in the transmission path (ie, the network 12) from the PC 10 to the printer 14.

  The basic idea is that if an electronic signature is attached to an electronic document designated for printing, the printer driver 11 determines that the content of the electronic document needs to be protected, and is transmitted from the PC 10 to the printer 14. The path is protected by encryption or the like.

  In the present embodiment, the security level required for the transmission path is changed according to the strength of the electronic signature. In other words, the strength of the electronic signature is the strength of an electronic certificate for verifying the electronic signature (that is, a certificate proving the public key corresponding to the private key used for the electronic signature). The strength of the electronic certificate can be defined by the key length of the public key indicated in the electronic certificate, for example. The longer the key length, the higher the strength. In this embodiment, as one example, the longer the key length of the electronic certificate, the higher the encryption strength of the electronic document.

  The strength of the electronic certificate can also be determined according to the reliability of the CA (certificate authority) that issued the electronic certificate. For example, it can be said that the strength of an electronic certificate issued by a “trusted CA” having a root certificate such as VeriSign is high, whereas an electronic certificate issued by an in-house CA established by a company is “trusted”. It can be said that the strength is lower than that of the “certified CA” certificate. It is conceivable to increase the strength of encryption as the strength of the electronic certificate determined from such a viewpoint is higher. It is also possible to define the strength for a combination of CA reliability and key length. In this case, a strength value may be assigned to a combination of CA and key length.

  In the present embodiment, the security level is associated with each value or rank of the electronic certificate strength (that is, electronic signature strength) defined in this way. In this embodiment, the higher the signature strength of an electronic document, the higher the security level required for the transmission path between the PC and the printer. In this way, the security level corresponding to the strength of the electronic signature is referred to as a necessary security level. Information on the correspondence between the strength of the electronic signature and the required security level is given to the printer driver 11 or placed in a storage location accessible from the printer driver 11.

  In this embodiment, a security level is also assigned to the strength of transmission path protection established between the PC 10 and the printer 14. For example, when the protection of the transmission path is realized by SSL (Secure Socket Layer), even if the output printer is changed from the same PC 10, how many bits of SSL communication can be established between the two. The longer the SSL key length that can be established, the higher the security level. Even when a PKI-based secure communication protocol other than SSL is used, the security level can be determined from the strength of the encryption method used in the protocol and the key length of the protocol that can be actually established between the PC and the printer. . If data protection by encryption using a common key encryption method can be realized between the PC and the printer, the security level of the transmission path can be obtained based on the encryption strength or key length of the encryption method. The level of security between different protocols may be determined by the system administrator from theoretical or empirical knowledge. In any case, the secure communication protocol (and the key length of the encryption key to be used) corresponding to the security level can be associated with each security level. A plurality of communication protocols can be associated with one security level, such as the 128-bit key length of SSL and the 128-bit key length of the common key cryptosystem. Information on the correspondence relationship between the security level and each secure communication protocol (and key length) is provided to the printer driver 11 or stored in a storage location accessible from the printer driver 11. Hereinafter, the security level of the transmission path that can be actually established between the PC and the printer is referred to as an establishable security level.

  In this embodiment, when printing of an electronic document is instructed by the user, communication using the secure communication protocol that satisfies the security level corresponding to the strength of the electronic signature attached to the electronic document is performed by the PC 10 and the printer 14. If it can be established, the electronic document data is transmitted from the PC 10 to the printer 14.

  On the other hand, if it cannot be established, for example, it is also preferable to stop the print processing without simply accepting the print instruction. As another method, it is also preferable to inquire whether or not to permit the printing to the signer who performed the electronic signature (that is, the right holder for the electronic document). For example, e-mail can be used for the inquiry. The signer's mail address can be obtained from the public key certificate used when verifying the electronic signature.

  If the inquiry includes information on the protocol of the highest security level that can be established on the transmission path between the PC and printer (but this level does not satisfy the level required by the signature), the signer who received the inquiry Based on the information, it can be determined whether or not the data of the electronic document can be sent through the transmission path. In addition, if information on the print settings (for example, the number of copies and print quality) designated by the print instructor is added to the inquiry, the signer can determine whether or not to permit printing with the print settings.

  The printer driver 11 may receive an answer to the inquiry in the form of a reply mail for the inquiry e-mail, for example. For this purpose, the printer driver 11 has a function of a mail client, and an inquiry may be transmitted from the e-mail address of the printer driver 11 itself.

  It is also preferable to allow printing permission after changing the value of the setting item of the print setting designated by the print instructor in the answer to the inquiry.

  The outline of the present embodiment has been described above. Next, the operation of the printer driver 11 of the present embodiment will be described with reference to FIGS. 2 and 3. For example, the printer driver 11 is activated when a printing instruction is input from a user while an electronic document is opened with an editing or browsing application. The electronic document is to be printed. The printer driver 11 provides a user interface screen for designating various print setting items (print attributes) such as a print destination printer, a page range to be printed, the number of copies, and the like to the user. When the user inputs necessary print setting items on the screen, the printer driver 11 acquires the value of each input print setting item, the name of the user who instructed printing, the current time, and the like from the application or operating system. By describing in PJL, attribute data is created (S101). Further, the printer driver 11 creates print data by describing the print image of the electronic document to be printed in PDL that can be interpreted by the printer at the print destination (S102).

  Then, the printer driver 11 determines whether an electronic signature is attached to the electronic document to be printed (S103). If not attached, the printer driver 11 encrypts the attribute data (S104), and transmits the print data to the printer 14 without encryption. The attribute data is encrypted by a predetermined encryption method that can be decrypted by the printer 14. Here, the attribute data is encrypted because the attribute data includes personal information such as a user name.

  When an electronic signature is attached to the electronic document to be printed, the printer driver 11 confirms the strength of the electronic certificate corresponding to the electronic signature (S105). As is well known in the XML signature or the like, the digital signature data includes a public key certificate for verifying the digital signature or identification information uniquely indicating the certificate. If the certificate is included, the printer driver can determine the strength of the certificate (ie, the strength of the signature) based on the key length of the public key in the certificate and / or information on the issuer of the certificate. ). If the certificate is not included, the printer driver 11 may obtain a certificate corresponding to the identification information in the data of the electronic signature from the CA or the directory server, and obtain the strength of the certificate.

  When the strength of the certificate can be confirmed, the printer driver 11 obtains the required security level of the transmission path between the PC and the printer according to the strength (S106).

  Further, the printer driver 11 additionally sets a confidential print attribute for the attribute data generated in step S101 (S107). When receiving the print data in which the confidential print attribute is set, the printer 14 does not immediately print out the print data but stores the print data. When the user inputs a correct password from the control panel of the printer 14, the print data is printed out. In step S107, the printer driver 11 displays a user interface screen for password entry on the display of the PC 10, and adds the password input by the user accordingly to the attribute data as a confidential print password.

  Next, the printer driver 11 checks the transmission path security level that can be established with the printer 14 (S108). The security level of the transmission line can be distinguished by the presence or absence of protection by SSL (Secure Socket Layer), for example. Even when protected by the same SSL, the strength is higher when the key length is 128 bits than when the key length is 40 bits. Based on the presence / absence of SSL and the SSL key length, the value of the security strength of the transmission path is defined. In step S108, the printer driver 11 inquires of the printer 14 whether a communication protocol corresponding to the required security level can be established among various secure communication protocols (and usable key lengths) that can be used by the PC 10. If there are multiple protocols that meet the required security level, each protocol is queried until it can be established. Then, it is determined whether or not a communication protocol corresponding to the necessary security level that can be established between the PC and the printer has been found (S109). If such a communication protocol is found, the printer driver 11 reflects the encryption strength and confidential print attribute values automatically set in steps S6 and S7 on the user interface screen for setting print attributes and displays them. (S111). The user can know what setting is made by looking at this display, and can change the setting contents as necessary. Then, by establishing a communication session with the printer 14 using the found communication protocol, a protected transmission path that satisfies the required security level is formed (S112), and attribute data and printing are transmitted via the transmission path. Data is transmitted (S113).

  On the other hand, if no communication protocol that can be established between the PC and the printer among the communication protocols corresponding to the required security level is found in step S109, the process proceeds to step S120 in FIG. In step S120, the printer driver 11 obtains permission from the right holder to continue the printing that the required security level requested by the right holder of the electronic document cannot be established between the PC and the printer on the display of the PC 10. A driver UI (user interface) screen is displayed indicating that a certain amount of time is required because processing is required. On this UI screen, GUI (graphical user interface) parts (for example, buttons) for instructing whether to stop or continue printing are displayed, and the user who has instructed printing prints using the GUI parts. You can instruct to stop or continue. In step S121, an instruction from the user is determined.

  When receiving a print cancel instruction, the printer driver 11 performs a process of canceling the printing of the electronic document (S122), and deletes the print job data (such as attribute data and print data) created so far (S123). ).

  On the contrary, when receiving an instruction to continue printing, the printer driver 11 obtains the e-mail address of the signer of the electronic document as described above, and sends an e-mail inquiring whether printing is possible to the e-mail address. Then, the print job processing for the electronic document is temporarily stopped (S125).

  An example of the text content of the inquiry e-mail transmitted at this time is shown in FIG. In this example, the e-mail says, “You are asked to authorize printing for the following print targets you signed with the following print conditions and print settings. Change the "Print permission" value from "NG" to "OK" and reply. The values of each item in the “Print Settings” field can be changed. Select the value to be changed from the options in []. “Number of copies” is a positive integer value, and “Print page” specifies the page range that allows printing. , Etc., includes an explanatory note 22 indicating that printing permission is requested, operation contents to be taken when printing is permitted, printing method (attribute) changing method when permission is permitted, and the like. It is. The e-mail includes columns for a print target 24, a print condition 26, a print setting 28, and a print permission 29. The print target 24 includes information on the required security level corresponding to the name of the electronic document to be printed (document name) and the strength of the electronic signature attached to the electronic document. In this example, the combination of the type of secure communication protocol and the key length (for example, SSL 128 bits) is shown as the required security level, so that it is easy to understand intuitively for the person who received the inquiry. In the printing condition 26, information on the highest security level that can be actually established between the PC and the printer is indicated by a combination of a communication protocol and a key length, for example. The person who has received the inquiry can determine whether or not to permit printing by comparing the printing object 24 with the printing condition 26.

  In the column of the print setting 28, values of print setting items set by the print instructor are listed, and options for each item are shown in []. For example, the setting item “print mode” indicating the print quality has three options of “high quality”, “standard”, and “draft” in descending order of quality. “Security print” means confidential box print. If this value is “ON”, it means that confidential box print is designated. In addition, there are items describing an integer value, a range indicated by an integer value of an upper limit and / or a lower limit, and the like, such as “number of copies” and “print page” indicating a range of pages permitted to be printed. “Watermark” is a process for printing a character string or pattern such as “sample” thinly on a document image, and when this value is “ON”, the watermark is printed. “Watermark text” is a column for designating a character string to be superimposed as a watermark. The print permission 29 is a column for setting whether or not the person who received the inquiry permits printing. In this field, a value of “NG” indicating that permission is not set is set by default.

  In addition, user identification information (name, user name, etc.) of the user requesting permission (the person who issued the print instruction) may be included in the inquiry e-mail.

  Upon receiving the inquiry, the right holder can instruct whether to permit printing by sending a reply to the inquiry mail to the mail address of the printer driver 11. When printing is permitted, the value of printing permission 29 in the reply mail may be changed from “NG” to “OK”. Also, when printing is permitted by changing the print setting, the right holder changes the value of a necessary item in the print setting 28 and creates a reply mail with the value of the print permission 29 set to “NG”. do it. FIG. 5 shows a main part of an example of a reply mail for the inquiry mail in FIG. In this example, the “color mode” is changed from “color” to “black and white”, the “print mode” is changed from “standard” to “draft”, and the “print page” is changed from “all” to “1-5” (1-5). Page) and printing is permitted. That is, according to this reply mail, the right holder has made an intention to accept printing up to the fifth page and if it is a black and white rough image.

Returning to the description of FIG. 3 again, after sending an inquiry mail, the printer driver 11 waits for an answer mail (S126, 127). The printer driver 11 has a mail client function, and if a reply mail comes to itself, it acquires it from the mail server and analyzes it.
Here, if there is no answer even after a predetermined waiting time has elapsed, a timeout occurs (S127). In this case, the printer driver 11 displays on the UI screen an explanation of the situation such that printing cannot be performed because the right holder has not been given permission to print (S128), stops the processing of the print job (S122), and print job Is deleted (S123). If there is an answer before the timeout, it is determined whether or not the answer permits printing (S127). This determination can be made by checking the value of the print permission 29 in the reply mail. If this answer does not permit printing, the process proceeds to step S128 and subsequent steps as in the case of timeout.

  If it is determined in step S127 that the response permits printing, the printer driver 11 reads the value of each item of the print setting 26 from the response mail, and displays a UI screen indicating the value of each setting item on the display. The user (printing instructor) is inquired whether printing is executed with this setting or printing is canceled with this setting (S129). If the user replies to this inquiry to execute printing (the determination result in S130 is Y), the printer driver 11 changes the attribute data according to the print setting contents displayed in S129 (S131), and the inquiry in step S124. In step S132, processing for establishing transmission path security at the highest security level between the PC and the printer informed to the right holder is performed (S132), and attribute data and print data are transmitted to the printer 14 (S133). When the printer 14 is notified of the completion of printing, the printer driver 11 sends a message to the signer (right holder) indicating that printing has been performed with the permitted print settings by e-mail or the like. Notification is made (S134). This electronic mail may be a reply to the reply mail from the right holder.

  On the other hand, if the print instructor determines that printing is not necessary according to the print settings permitted by the right holder, the print instructor inputs a message to cancel printing on the UI screen provided in step S129 (S130). The determination result is N). In this case, the printer driver 11 stops processing the print job for the electronic document (S135), deletes the print job (S136), and sends a message indicating that the document has not been printed, such as an e-mail. (S137). This electronic mail may be a reply to the reply mail from the right holder.

  Next, the processing procedure of the printer 14 will be described with reference to FIG. The printer 14 receives and processes the attribute data and print data encrypted for protecting the transmission path. That is, when the printer 14 receives the attribute data from the PC 10, the attribute data is encrypted and is decrypted to obtain the print attribute information. When the printer 14 receives print data from the PC 10 (S201), the printer 14 determines whether the print data is encrypted (S202), and if it is encrypted, decrypts it (S203). This decoding may be performed according to a transmission path protection protocol established with the PC 10.

  Then, the printer 14 prints the decrypted print data according to the attribute data (S204), and when the printing is completed, deletes the decrypted print data from the storage device in the printer 14 (S205). By this deletion, the contents of the electronic document do not remain in the printer 14, so that high security can be realized.

  The processing procedure in the case where the printer driver 11 converts the electronic document into PDL print data and transmits it to the printer 14 has been described. On the other hand, the procedure of the printer driver 11 in the case of direct printing in which an electronic document is directly sent to the printer 14 does not require the step (S102) of converting the electronic document into PDL data, and the PDL in steps S103 and 133. 2 is different from the processing procedure of FIGS. 2 and 3 in that the electronic document itself is encrypted instead of the print data of FIG.

  As described above, according to the present embodiment, the security of the electronic document data (the electronic document itself or PDL print data) sent from the PC 10 to the printer 14 is protected from the presence or absence of the electronic signature of the electronic document and the electronic document. Control according to signature strength. Therefore, the user who instructs printing can protect the contents of the electronic document on the transmission path with the strength according to the security protection intention of the right holder who signed the electronic document without performing any operation. it can. In this embodiment, when the electronic signature is attached to the electronic document to be printed, the confidential print attribute is automatically set by the printer driver 11, so that the printing result of the electronic document with the electronic signature is the tray of the printer 14. It is possible to reduce the risk of leaking without being output. In the present embodiment, the automatically set encryption strength and confidential print setting contents are displayed on the user interface screen, so that the user can check the setting contents and change them if necessary.

  Also, in this embodiment, when the transmission path between the PC and the printer does not reach the security level required by the rights holder's electronic signature, printing is not possible without obtaining permission from the rights holder. The intention of document protection can be firmly protected.

  In the present embodiment, in the response to the inquiry about whether or not to permit printing, it is possible to specify the print setting contents that the right holder can permit, so that the right holder's right is designated by the right holder itself. It can be meticulously protected.

  In the above, the printer driver 11 has been taken as an example. However, there are programs that can send print data to the printer for printing other than the printer driver. This method is applicable.

  Note that a computer on which a program such as a printer driver is executed has a CPU (central processing unit), a memory (primary storage), various I / O (input / output) interfaces, etc. connected as hardware via a bus. Circuit configuration. In addition, a hard disk drive, a drive for reading portable non-volatile recording media of various standards such as a CD, a DVD, and a flash memory is connected to the bus via, for example, an I / O interface. Such a drive functions as an external storage device for the memory. A program describing the processing contents of the above-described embodiment is stored in such an external storage device and installed in a computer. The program may be held in a ROM (read only memory) accessible from the CPU. The program stored in the external storage device is read into the memory and executed by the CPU, or the program on the ROM is executed from the CPU, whereby the processing of the above-described embodiment is realized.

It is a figure which shows the example of a structure of the system provided with the printer of embodiment. 6 is a flowchart illustrating a part of the processing procedure of the printer driver. 6 is a flowchart showing the remaining part of the processing procedure of the printer driver. FIG. 5 is a diagram illustrating an example of the contents of an inquiry mail created by a printer driver. It is a figure which shows the example of the content of the reply mail with respect to an inquiry mail. 3 is a flowchart illustrating a processing procedure of a printer.

Explanation of symbols

  10, 16 PC (Personal Computer), 11 Printer driver, 12 Network, 14 Printer.

Claims (10)

Computer
Level correspondence information storage means for storing the strength of the electronic signature attached to the electronic document and the security level of the transmission path required when transmitting the electronic document in association with each other;
Request level determination means for determining the security level of the transmission path required corresponding to the strength of the electronic signature attached to the electronic document to be printed based on the information in the level correspondence information storage means;
Establishable level determination means for determining the security level of the transmission path that can be established between the computer and the printer of the print output destination;
When the security level determined by the establishable level determination unit is equal to or higher than the security level determined by the request level determination unit, the electronic document to be printed or print data corresponding to the electronic document is transmitted to the printer that is the print output destination. If not, a control means for executing a print continuation determination process for determining whether or not to continue printing;
Program to function as. The program according to claim 1,
The control means displays, as the print continuation determination process, a user interface screen for inquiring whether to cancel or continue printing on the display of the computer, and an instruction to stop printing is input in response to the user interface screen. The processing for printing the electronic document to be printed is stopped,
A program for characterizing this. The program according to claim 1,
The control means displays, as the print continuation determination process, a user interface screen for inquiring whether to stop or continue printing on the display of the computer, and an instruction to continue printing is input to the user interface screen. The signer of the electronic signature attached to the electronic document to be printed is inquired as to whether or not to permit printing, and the signer gives a reply to the effect that printing is permitted. When received, the electronic document or print data corresponding to the electronic document is transmitted to the printer.
A program characterized by that. A program according to claim 3, wherein
The control means displays, as the print continuation determination process, a user interface screen for inquiring whether to cancel or continue printing on the display of the computer, and an instruction to continue printing is input in response to the user interface screen. A message for inquiring whether to permit printing with respect to the e-mail address indicated as the subject information in the public key certificate corresponding to the electronic signature attached to the electronic document to be printed. Send as email,
A program characterized by that. A program according to claim 3, wherein
The inquiry message includes information indicating the highest security level that can be established between the computer and the print destination printer.
When the control means receives an answer from the signer that printing is permitted in response to the inquiry, the control means establishes transmission path protection of the highest security level with the printer, and then the electronic document Or transmitting print data corresponding to the electronic document to the printer,
A program characterized by that. A program according to claim 3, wherein
When the control unit receives an answer from the signer that the print is permitted and print setting information is received from the signer, the control unit sends the electronic document or print data corresponding to the electronic document to the printer. Send and print according to the print settings,
A program characterized by that. A program according to claim 3, wherein
When the control means receives from the signer an answer including permission to print and information on print settings in response to the inquiry, the user interface inquires whether or not to perform printing under the print settings Displaying a screen on the display of the computer, and controlling whether or not to transmit the electronic document or print data corresponding to the electronic document to the printer in response to a user response to an inquiry on the user interface screen;
A program characterized by that. A program according to claim 7, wherein
The control means notifies the signer as to whether or not printing has been performed as a result of the user's selection on the user interface screen that inquires whether or not to perform printing under the print settings designated by the signer.
A program characterized by that. Level correspondence information storage means for storing the strength of the electronic signature attached to the electronic document and the security level of the transmission path required when transmitting the electronic document in association with each other;
A request level determination unit that determines the strength of an electronic signature attached to an electronic document to be printed, and determines a security level of a transmission path required corresponding to the strength based on information in a level correspondence information storage unit;
Establishable level determination means for determining the security level of the transmission path that can be established between the computer and the printer of the print output destination;
When the security level determined by the establishable level determination unit is equal to or higher than the security level determined by the request level determination unit, the electronic document to be printed or print data corresponding to the electronic document is transmitted to the printer that is the print output destination. When the security level determined by the establishable level determination unit is less than the security level determined by the request level determination unit, a control unit that executes a print continuation determination process for determining whether or not to continue printing ,
A printing instruction apparatus including: A printing instruction method for causing a computer connected via a network to print an electronic document possessed by a computer,
The transmission path security level required corresponding to the strength of the electronic signature attached to the electronic document to be printed is required when the electronic signature strength attached to the electronic document and the electronic document are transmitted. Judgment based on the information of the level correspondence information storage means stored in association with the security level of the transmission path,
Determine the security level of the transmission path that can be established between the computer and the printer,
If the determined security level is equal to or higher than the required transmission path security level corresponding to the strength of the electronic signature, the electronic document to be printed or the print data corresponding to the electronic document is sent to the printer of the print output destination. If not, execute a print continuation determination process for determining whether or not to continue printing.
Print instruction method.

Images