JP2008042718A - Image reading system, information processing apparatus, image reader and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security for an image file without imposing a burden on a user in an image reading system for recording the image file on a portable recording medium. <P>SOLUTION: An information processing apparatus comprises a key storage means for storing a public key and a private key, a means for writing the public key on the portable recording medium, and a means which uses the private key to decrypt a common key when the public key, the encrypted common key and an encrypted image file are written on the portable recording medium, and the decrypted common key is used to decrypt the image file. An image reader comprises a means for generating an image file for a read image, and a means which uses a common key different from the public key to encrypt the image file when the public key is written on the recording medium, writes the image file on the portable recording medium, uses the public key written on the portable recording medium to encrypt the common key and writes it on the portable recording medium. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an image reading system, and more particularly to a technique for increasing security of a read image.

  As described in Patent Document 1, a scanner device having an interface for mounting a portable storage device such as a PC card, a memory card, or a USB memory is known.

  In such a scanner device, the read image data can be converted into an image file of a general format such as JPEG, TIFF, PDF, etc., and can be recorded in the attached storage device.

Thereafter, the storage device is mounted on the computer, and the image file recorded in the storage device is read by the computer, so that offline image reading is possible.
JP-A-9-93376

  Since the portable recording medium can be easily attached and removed by not only the owner but also a third party, the security of the recorded image file becomes a problem.

  In order to increase the security of a portable recording medium, a technology for performing password authentication at the time of file access or the like has been put into practical use, but it requires the user to manage passwords and input.

  An object of the present invention is to improve security for an image file in an image reading system for recording an image file on a portable recording medium without imposing a burden on the user.

In order to solve the above problem, according to the first aspect of the present invention,
An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
When the public key, the encrypted common key, and the encrypted image file are written on the mounted portable recording medium, the common key is decrypted using the secret key and decrypted. Decrypting means for decrypting the image file using a common key,
The image reading device includes:
Image file generation means for generating an image file for the read image;
When a public key is written on the mounted portable recording medium, the image file is encrypted using a common key different from the public key, and written to the portable recording medium.
An image reading system is provided, comprising: encryption processing means that encrypts the common key using a public key written in the portable recording medium and writes the encrypted key in the portable recording medium.

  In the present invention, an image file is recorded in an encrypted state on a portable recording medium, and can be decrypted only by an information processing apparatus that records a public key. Therefore, an image recorded on a portable recording medium Security for files can be increased. In addition, when acquiring an image file in the information processing apparatus, it is not necessary to manage and input a password, so that the user is not bothered.

In order to solve the above problem, according to a second aspect of the present invention,
An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
A decryption unit that decrypts the image file using the secret key when the public key and the encrypted image file are written on a mounted portable recording medium;
The image reading device includes:
Image file generation means for generating an image file for the read image;
And a cryptographic processing unit that encrypts the image file using the public key and writes the image file to the portable recording medium when a public key is written on the mounted portable recording medium. An image reading system is provided.

In order to solve the above problem, according to the third aspect of the present invention,
An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
A common key storage means for storing a common key and a key identifier for identifying the common key;
A common key writing means for writing the common key and the key identifier to a mounted portable recording medium;
Decrypting means for decrypting the image file using a common key specified by the written key identifier when the key identifier and the encrypted image file are written in the mounted portable recording medium And
The image reading device includes:
Image file generation means for generating an image file for the read image;
When a common key is written in the mounted portable recording medium, the image file is encrypted using the common key, written to the portable recording medium, and shared from the portable recording medium. An image reading system comprising an encryption processing unit for deleting a key is provided.

  Embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing an example of a hardware configuration in the first embodiment of the present invention. In this embodiment, an image reading system including the PC 10 and the scanner 20 will be described as an example. Here, the PC 10 functions as an information processing apparatus, and the scanner 20 functions as an image reading apparatus. However, the configuration of the image reading system of the present invention is not limited to the PC 10 and the scanner 20. For example, a so-called information home appliance may be used in place of the PC 10, or a multifunction machine having an image reading function may be used in place of the scanner 20.

  The PC 10 and the scanner 20 are provided with a connector for mounting a portable recording medium, and the image data read by the scanner 20 can be read by the PC 10 via the portable recording medium. . For this reason, the PC 10 and the scanner 20 do not necessarily have to be connected via a network.

  In this embodiment, it is assumed that the USB memory 30 is used as a portable recording medium. For this reason, the PC 10 and the scanner 20 include a USB connector 13 and a USB connector 24, respectively. Of course, the portable recording medium is not limited to the USB memory 30. A PC card, a memory card, and other recording media can be used.

  The PC 10 includes a control unit 11 including a CPU, a RAM, a ROM, and the like, an input / output interface unit 12 that performs communication processing with an external device, and the USB connector 13 described above. Note that parts not directly related to the present embodiment are omitted.

  A monitor 15, a keyboard 16, and a mouse 17 are connected to the PC 10 via the input / output interface unit 12.

  The scanner 20 includes a reading mechanism 21 including a CCD / light source / drive motor, a control unit 22 including a CPU / RAM / ROM, an input / output interface unit 23 that performs communication processing with an external device, and the USB connector described above. 24.

  FIG. 2 is a block diagram illustrating a functional configuration of an image reading system including the PC 10 and the scanner 20. However, parts that are not directly related to the present invention are omitted.

  As shown in the figure, the PC 10 includes a scanner control unit 110 and a USB memory access unit 120.

  The scanner control unit 110 is a functional unit that performs image reading by the scanner 20 or processing for an image read by the scanner 20. For this purpose, the scanner control unit 110 includes a reading control unit 111. For example, the scanner control unit 110 is virtually configured by the CPU of the PC 10 executing a scanner driver program corresponding to the scanner 20.

  The USB memory access unit 120 accesses the USB memory 30 attached to the USB connector 13 and performs processing for reading and writing data. The USB memory access unit 120 is configured virtually, for example, when the CPU of the PC 10 executes a USB driver program.

  In this embodiment, the scanner control unit 110 further includes an encryption control unit 112 and a key management unit 113.

  The encryption control unit 112 performs processing for enhancing the security of the image file recorded on the USB 30 as described later. The key management unit 113 manages the public key 120 and the private key 140 used by the encryption control unit 112. The public key 120 and the private key 140 are keys that are paired in the public key cryptosystem. The public key 120 and the private key 140 may be generated by the key management unit 113, or may be acquired from the outside by the key management unit 113. Further, the public key 120 and the secret key 140 may be changed as appropriate.

  The scanner 20 includes a reading processing unit 210 that reads an image, an image processing unit 220 that performs predetermined image processing on the read image and converts the image into a specified image format, and a USB memory 30 that is attached to the USB connector 24. A USB memory access unit 230 that performs a process of accessing and reading and writing data and an encryption processing unit 240 are provided.

  The encryption processing unit 240 performs processing for encrypting the image data changed to the designated image format.

  Next, the flow of processing of the image reading system in the first embodiment will be described with reference to the flowcharts of FIGS.

  In this embodiment, first, the USB memory 30 is connected to the PC 10 (S101).

  The scanner control unit 110 records the public key 120 managed by the key management unit 113 in the USB memory 30 (S102). The recording of the public key 120 is performed based on an instruction from the user, for example. The public key 120 may be recorded as a file with a predetermined name, or may be recorded in a predetermined area of the USB memory 30.

  The key management unit 113 may generate / acquire the public key 120 and the private key 140 after receiving an instruction to record the public key, or may generate / acquire it in advance.

  FIG. 3 schematically shows the USB memory 30a in which the public key 120 is recorded.

  The user can remove the USB memory 30a from the PC 10 (S103) and connect it to the scanner 20 (S104).

  When the USB memory 30a is attached, the scanner 20 determines whether or not the public key 120 is recorded in the USB memory 30a (S105). This determination can be made according to whether a file with a predetermined name is recorded, whether data is recorded in a predetermined area, or the like according to the recording method of the public key 120 in the scanner control unit 110 of the PC 10. Further, this determination may be made automatically or based on an instruction from the user.

  As a result, when the public key 120 is not recorded (S105: N), the conventional reading operation and image file recording operation are performed (S106).

  On the other hand, when the public key 120 is recorded (S105: Y), the encryption processing unit 240 generates a common key. This common key may be unrelated to the public key 120.

  Then, in accordance with a scan start instruction from the user, the image of the original is read and converted into image data of a specified format (S108). Image reading processing and format conversion processing can be performed in the same manner as in the past. The scan start instruction can be given by, for example, operating the operation panel, pressing a scan start button, or the like.

  The encryption processing unit 240 encrypts the read image data of the document using the generated common key (S109). Here, the encryption using the common key is generally faster because the encryption / decryption using the common key is faster than the encryption using the public key and the private key. It is. Of course, you may make it encrypt using a public key so that it may mention later.

  The scanner 20 records the image file encrypted using the common key in the USB memory 30a (S110). FIG. 3 schematically shows a USB memory 30b in which an encrypted image file is recorded in addition to the public key 120.

  Next, the encryption processing unit 240 encrypts the common key used for encrypting the image file using the public key 120 recorded in the USB memory 30b (S111).

  Then, the encrypted common key is recorded in the USB memory 30b (S112). FIG. 3 schematically shows a USB memory 30c in which an encryption common key is recorded in addition to the public key 120 and the encrypted image file.

  The user can remove the USB memory 30c in which the public key 120, the encrypted image file, and the encrypted common key are recorded from the scanner 20 (S113).

  Moving to FIG. 4, the user can connect the USB memory 30c in which the public key 120, the encrypted image file, and the encrypted common key are recorded to the PC 10 (S114).

  When the USB memory 30c is installed, the PC 10 determines whether or not a public key that matches the public key 120 managed by the key management unit 113 is recorded in the USB memory 30c (S115). This determination can be made by first checking whether or not a public key is recorded, and if it is recorded, determining whether or not it matches the public key 120 managed by the key management unit 113. This determination may be made automatically or based on an instruction from the user.

  As a result, when a public key that matches the public key 120 managed by the key management unit 113 is not recorded in the USB memory 30c (S115: N), a conventional image file acquisition process is performed (S116).

  On the other hand, when a public key that matches the public key 120 managed by the key management unit 113 is recorded (S155: Y), the encryption control unit 112 first uses the private key 140 managed by the key management unit 113. Then, the encrypted common key recorded in the USB memory 30c is decrypted to obtain the common key (S117).

  Then, the encrypted image file recorded in the USB memory 30c is decrypted using the decrypted common key (S118). Note that this process is not performed when the encrypted image file is not recorded in the USB memory 30c.

  Thereby, the PC 10 can acquire the image file read by the scanner 20 (S119).

In this embodiment, since the image file is recorded in the USB memory 30 in an encrypted state and can be decrypted only by the PC 10 that has recorded the public key 120, security for the image file recorded in the USB memory 30 is improved. Can be increased. In addition, when the image file is acquired by the PC 10, password management and input are not required, so that the user's hand is not bothered.
In the above-described embodiment, the key management unit 113 of the PC 10 manages a set of public key 120 and private key 140. However, as shown in FIG. 5, a plurality of sets of public key 120 and secret key 140 may be managed. In this case, in the process (S102), any one of the public keys 120 is recorded in the USB memory 30, and in the process (S116), the secret key 140 set with the recorded public key 120 is used as a common key. Decoding should be performed.

  Next, a second embodiment of the present invention will be described. The present embodiment is an example when a common key is not used. That is, the scanner 20 encrypts the image file using the public key 120. The hardware configuration and functional configuration of the PC 10 and the scanner 20 can be the same as those shown in FIGS.

  A processing flow of the image reading system in the second embodiment will be described with reference to the flowcharts of FIGS. Note that the description of the processes common to the first embodiment will be simplified.

  In this embodiment, first, the USB memory 30 is connected to the PC 10 (S201).

  The scanner control unit 110 records the public key 120 managed by the key management unit 113 in the USB memory 30 (S202).

  FIG. 6 schematically shows the USB memory 30a in which the public key 120 is recorded.

  The user can remove the USB memory 30a from the PC 10 (S203) and connect it to the scanner 20 (S204).

  When the USB memory 30a is attached, the scanner 20 determines whether or not the public key 120 is recorded in the USB memory 30a (S205).

  As a result, when the public key 120 is not recorded (S205: N), the conventional reading operation and image file recording operation are performed (S206).

  On the other hand, when the public key 120 is recorded (S205: Y), the image of the document is read and converted into image data of a designated format in accordance with a scan start instruction from the user (S207).

  The encryption processing unit 240 encrypts the read image data of the document using the public key 120 (S208).

  The scanner 20 records the image file encrypted using the public key in the USB memory 30a (S209). FIG. 6 schematically shows a USB memory 30b in which an encrypted image file is recorded in addition to the public key 120.

  The user can remove the USB memory 30b in which the public key 120 and the encrypted image file are recorded from the scanner 20 (S210).

  Moving to FIG. 7, the user can connect the USB memory 30b in which the public key 120 and the encrypted image file are recorded to the PC 10 (S211).

  When the USB memory 30b is attached, the PC 10 determines whether or not a public key that matches the public key 120 managed by the key management unit 113 is recorded in the USB memory 30b (S212).

  As a result, if a public key that matches the public key 120 managed by the key management unit 113 is not recorded in the USB memory 30b (S212: N), a conventional image file acquisition process is performed (S213).

  On the other hand, when a public key that matches the public key 120 managed by the key management unit 113 is recorded (S212: Y), the encryption control unit 112 uses the secret key 140 managed by the key management unit 113. Then, the encrypted image file recorded in the USB memory 30b is decrypted (S214).

  Thereby, the PC 10 can acquire the image file read by the scanner 20 (S215).

  Also in this embodiment, since the image file is recorded in the USB memory 30 in an encrypted state and can be decrypted only by the PC 10 that has recorded the public key 120, security for the image file recorded in the USB memory 30 is improved. Can be increased. In addition, when the image file is acquired by the PC 10, password management and input are not required, so that the user's hand is not bothered.

  Also in this embodiment, the key management unit 113 may manage a plurality of sets of public key 120 and secret key 140.

  Next, a third embodiment will be described.

  FIG. 8 is a block diagram showing a functional configuration of the PC 10 in the third embodiment. Below, it demonstrates centering on difference with a 1st Example.

  As shown in the figure, in the third embodiment, the key management unit 113 manages a plurality of key identifiers 172 for identifying the common key 171 and the common key, instead of the public key 120 and the private key 140. That is, the common key 171 can be specified from the key identifier 172. Other functional configurations of the PC 10 can be the same as those shown in FIG.

  The hardware configuration of the PC 10 and the scanner 20 and the functional configuration of the scanner 20 can be the same as those shown in FIGS.

  The flow of processing of the image reading system in the third embodiment will be described with reference to the flowcharts of FIGS. Note that the description of the processes common to the first embodiment will be simplified.

  In this embodiment, first, the USB memory 30 is connected to the PC 10 (S301).

  The scanner control unit 110 records one of the common keys 171 managed by the key management unit 113 and the key identifier 172 corresponding to the common key in the USB memory 30 (S302).

  FIG. 9 schematically shows the USB memory 30d in which the common key 171 and the key identifier 172 are recorded.

  The user can remove the USB memory 30d from the PC 10 (S303) and connect it to the scanner 20 (S304).

  When the USB memory 30d is attached, the scanner 20 determines whether or not the common key 171 is recorded in the USB memory 30d (S305).

  As a result, when the common key 171 is not recorded (S305: N), the conventional reading operation and image file recording operation are performed (S306).

  On the other hand, when the common key 171 is recorded (S305: Y), the image of the document is read and converted into image data of a designated format in accordance with a scan start instruction from the user (S307).

  The encryption processing unit 240 encrypts the read image data of the document using the common key 171 (S308).

  The scanner 20 records the image file encrypted using the common key 171 in the USB memory 30d (S309). FIG. 9 schematically shows a USB memory 30e in which an encrypted image file is recorded in addition to the common key 171 and the key identifier 172.

  Next, the scanner 20 deletes the common key 171 from the USB memory 30e (S310). As a result, the encrypted image file cannot be decrypted from the information recorded in the USB memory 30e. FIG. 9 schematically shows the USB memory 30f from which the common key 171 has been deleted.

  The user can remove the USB memory 30f from which the common key 171 has been deleted from the scanner 20 (S311).

  Referring to FIG. 10, the user can connect the USB memory 30f in which the common key 171 is deleted and the key identifier 172 and the encrypted image file are recorded to the PC 10 (S312).

  When the USB memory 30f is attached, the PC 10 determines whether a key identifier that matches any key identifier 172 managed by the key management unit 113 is recorded in the USB memory 30f (S313).

  As a result, when a key identifier that matches any one of the key identifiers 172 managed by the key management unit 113 is not recorded in the USB memory 30f (S313: N), a conventional image file acquisition process is performed (S314). .

  On the other hand, when a key identifier that matches any one of the key identifiers 172 managed by the key management unit 113 is recorded (S313: Y), the encryption control unit 112 uses the common key 171 managed by the key management unit 113. Among them, the encrypted image file recorded in the USB memory 30f is decrypted using the common key 171 corresponding to the key identifier recorded in the USB memory 30f (S315).

  Thereby, the PC 10 can acquire the image file read by the scanner 20 (S316).

  In this embodiment, since the image file is recorded in the USB memory 30 in an encrypted state and can be decrypted only by the PC 10 having the common key 171 recorded, security for the image file recorded in the USB memory 30 is improved. Can be increased. In addition, when the image file is acquired by the PC 10, it is not necessary to manage and input a password, so that the user's hands are not bothered.

The block diagram which shows an example of the hardware constitutions of a present Example. The block diagram which shows an example of a function structure of a present Example. FIG. 3 is a flowchart for explaining a processing flow of the image reading system in the first embodiment. FIG. 3 is a flowchart for explaining a processing flow of the image reading system in the first embodiment. The block diagram which shows the function structure of PC in the case of managing two or more sets of a public key and a private key. FIG. 10 is a flowchart for explaining a processing flow of the image reading system in the second embodiment. FIG. 10 is a flowchart for explaining a processing flow of the image reading system in the second embodiment. The block diagram which shows the function structure of PC in a 3rd Example. FIG. 10 is a flowchart for explaining a processing flow of an image reading system according to a third embodiment. FIG. 10 is a flowchart for explaining a processing flow of an image reading system according to a third embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... PC, 11 ... Control part, 12 ... Input / output interface part, 13 ... USB connector, 15 ... Monitor, 16 ... Keyboard, 17 ... Mouse, 20 ... Scanner, 21 ... Reading mechanism, 22 ... Control part, 23 ... On Output interface unit, 24 ... USB connector, 30 ... USB memory, 110 ... scanner control unit, 111 ... reading control unit, 112 ... encryption control unit, 113 ... key management unit, 120 ... USB memory access unit, 210 ... read processing unit 220 ... Image processing unit 230 ... USB memory access unit 240 ... Encryption processing unit

Claims (12)

An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
When the public key, the encrypted common key, and the encrypted image file are written on the mounted portable recording medium, the common key is decrypted using the secret key and decrypted. Decrypting means for decrypting the image file using a common key,
The image reading device includes:
Image file generation means for generating an image file for the read image;
When a public key is written on the mounted portable recording medium, the image file is encrypted using a common key different from the public key, and written to the portable recording medium.
An image reading system comprising: an encryption processing unit that encrypts the common key using a public key written in the portable recording medium and writes the encrypted key in the portable recording medium. An information processing apparatus that can be loaded with a portable recording medium,
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
When the public key, the encrypted common key, and the encrypted image file are written on the mounted portable recording medium, the common key is decrypted using the secret key and decrypted. An information processing apparatus comprising: decrypting means for decrypting the image file using a common key. An image reading apparatus capable of mounting a portable recording medium,
Image file generation means for generating an image file for the read image;
When a public key is written on the mounted portable recording medium, the image file is encrypted using a common key different from the public key, and written to the portable recording medium.
An image reading apparatus comprising: an encryption processing unit that encrypts the common key using a public key written in the portable recording medium and writes the encrypted key in the portable recording medium. A program that can be executed by an information processing apparatus that can be loaded with a portable recording medium,
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
When the public key, the encrypted common key, and the encrypted image file are written on the mounted portable recording medium, the common key is decrypted using the secret key and decrypted. A program that causes the information processing apparatus to function as a decrypting unit that decrypts the image file using a common key. An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
Decryption means for decrypting the image file using the secret key when the public key and the encrypted image file are written in the mounted portable recording medium,
The image reading device includes:
Image file generation means for generating an image file for the read image;
An encryption processing unit that encrypts the image file using the public key and writes the encrypted image file to the portable recording medium when the public key is written on the mounted portable recording medium. Image reading system. An information processing apparatus that can be loaded with a portable recording medium,
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
And a decrypting means for decrypting the image file by using the secret key when the public key and the encrypted image file are written in the mounted portable recording medium. Processing equipment. An image reading apparatus capable of mounting a portable recording medium,
Image file generation means for generating an image file for the read image;
An encryption processing unit that encrypts the image file using the public key and writes the encrypted image file to the portable recording medium when the public key is written on the mounted portable recording medium. An image reading apparatus. A program that can be executed by an information processing apparatus that can be loaded with a portable recording medium,
Key storage means for storing a public key and a private key;
Public key writing means for writing the public key to a mounted portable recording medium;
When the public key and the encrypted image file are written on a mounted portable recording medium, the information processing apparatus functions as a decryption unit that decrypts the image file using the secret key. A program characterized by An image reading system including an image reading device and an information processing device, which can be loaded with a portable recording medium,
The information processing apparatus includes:
A common key storage means for storing a common key and a key identifier for identifying the common key;
A common key writing means for writing the common key and the key identifier to a mounted portable recording medium;
Decrypting means for decrypting the image file using a common key specified by the written key identifier when the key identifier and the encrypted image file are written in the mounted portable recording medium And
The image reading device includes:
Image file generation means for generating an image file for the read image;
When a common key is written in the mounted portable recording medium, the image file is encrypted using the common key, written to the portable recording medium, and shared from the portable recording medium. An image reading system comprising: an encryption processing unit that deletes a key. An information processing apparatus that can be loaded with a portable recording medium,
A common key storage means for storing a common key and a key identifier for identifying the common key;
A common key writing means for writing the common key and the key identifier to a mounted portable recording medium;
Decrypting means for decrypting the image file using a common key specified by the written key identifier when the key identifier and the encrypted image file are written in the mounted portable recording medium An information processing apparatus comprising: An image reading apparatus capable of mounting a portable recording medium,
Image file generation means for generating an image file for the read image;
When a common key is written in the mounted portable recording medium, the image file is encrypted using the common key, written to the portable recording medium, and shared from the portable recording medium. An image reading apparatus comprising: an encryption processing unit that deletes a key. A program that can be executed by an information processing apparatus that can be loaded with a portable recording medium,
A common key storage means for storing a common key and a key identifier for identifying the common key;
A common key writing means for writing the common key and the key identifier to a mounted portable recording medium;
Decrypting means for decrypting the image file using a common key specified by the written key identifier when the key identifier and the encrypted image file are written in the mounted portable recording medium A program for causing the information processing apparatus to function.

Images