JP2012098894A - Printing system and print control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform secure communications without slowing down performance of MFP.SOLUTION: In a printing system, an information processor for storing document data is connected to one or more image-forming devices through a network. The information processor comprises: encryption means for, when receiving a print execution request including a document ID to identify document data, using predetermined information to encrypt the document data shown by the document ID; first transmission means for transmitting the data encrypted by the encryption means to the image-forming devices without protecting a communication channel; and second transmission means for transmitting the predetermined information to the image-forming devices with protecting the communication channel. The image-forming devices comprise: decoding means for using the predetermined information received from the information processor to decode the encrypted data; and printing means for printing the data decoded by the decoding means.

Description

  The present invention relates to a printing system and a printing control method.

  In printing a file stored on the cloud server (cloud print), it is possible to download and print print data from the cloud server to the image forming apparatus using the PDF direct printing function. However, since print data flows on the Internet, it is exposed to security threats such as information leakage and tampering.

  Therefore, Patent Document 1 discloses a system that performs printing by passing encrypted electronic data and a decryption key from a server to an image forming apparatus, and “encryption specified by an address (URL) indicating a storage location” is disclosed. ”.

  In the prior art, the communication path is protected by SSL communication in order to perform secure communication. However, if the MFP performs SSL communication, the communication speed becomes very slow, and the performance is degraded. In Patent Document 1, if the storage location is known, the encrypted electronic data can be decrypted.

  SUMMARY An advantage of some aspects of the invention is that it provides a printing system and a printing control method capable of performing secure communication without degrading the performance of the MFP.

  The printing system according to one aspect of the present invention is a printing system in which an information processing apparatus that stores document data and one or more image forming apparatuses are connected via a network, and the information processing apparatus includes the document data When the print execution request including the document ID for identifying the document ID is received, the communication path is protected for the image forming apparatus and the encryption unit that encrypts the document data indicated by the document ID using predetermined information. First transmission means for transmitting the data encrypted by the encryption means, and second transmission means for protecting the communication path and transmitting the predetermined information to the image forming apparatus, The image forming apparatus prints the decryption means for decrypting the encrypted data using the predetermined information received from the information processing apparatus, and the data decrypted by the decryption means It includes a printing means.

  According to another aspect of the present invention, there is provided a printing control method in a printing system in which an information processing apparatus that stores document data and one or more image forming apparatuses are connected via a network. When a print execution request including a document ID for identifying the document data is received, an encryption step for encrypting the document data indicated by the document ID using predetermined information, and a communication path for the image forming apparatus. A first transmission step of transmitting data encrypted by the encryption step without protection; a second transmission step of transmitting the predetermined information while protecting a communication path to the image forming apparatus; and the information A decryption step of decrypting the encrypted data using the predetermined information received from the processing device; and printing the data decrypted by the decryption step It has a printing step that, a.

  According to the present invention, secure communication can be performed without degrading the performance of the MFP.

The figure which shows an example of the printing system in each Example. FIG. 2 is a block diagram showing an example of hardware related to an MFP. The block diagram which shows an example of the hardware of information processing apparatus. 1 is a block diagram illustrating an example of a configuration of an MFP according to a first embodiment. FIG. 3 is a block diagram illustrating an example of a configuration of a network print application according to the first embodiment. FIG. 3 is a block diagram illustrating an example of a configuration of a printing module according to the first embodiment. 1 is a block diagram illustrating an example of a configuration of an information processing device according to a first embodiment. FIG. 3 is a block diagram illustrating an example of a configuration of a print service according to the first embodiment. FIG. 6 is a sequence diagram illustrating an example of a print control process according to the first embodiment. FIG. 6 is a block diagram illustrating an example of a configuration of a mobile terminal according to a second embodiment. FIG. 10 is a sequence diagram illustrating an example of print control processing according to the second embodiment. FIG. 9 is a block diagram illustrating an example of a configuration of a mobile terminal according to a third embodiment. FIG. 6 is a diagram illustrating an example of print job information. FIG. 10 is a block diagram illustrating an example of a configuration of a network print application according to a third embodiment. FIG. 10 is a sequence diagram illustrating an example of a print job registration process according to the third embodiment. FIG. 10 is a sequence diagram illustrating an example of print control processing according to a third embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

[Example 1]
<System>
FIG. 1 is a diagram illustrating an example of a printing system in each embodiment. As shown in FIG. 1, an MFP (Multifunction Peripheral) 20, a portable terminal 10, and an information processing apparatus (cloud server) 30 are connected to a printing system via a network.

  The MFP 20 has a scan function, a copy function, a printer function, a facsimile function, and the like mounted in one housing. The MFP 20 issues a print execution request to the information processing apparatus 30, acquires print data, and performs print processing. Hereinafter, the MFP 20 will be described as an example of the image forming apparatus. However, the present invention can be applied to each embodiment as long as the printer has a communication function and a printing function.

  The information processing apparatus 30 stores a file of document data (print data) and plays a role as a cloud technology server. The information processing apparatus 30 encrypts the print data with a password and transmits it to the MFP 20, and transmits the password to the MFP 20 while protecting the communication path (for example, SSL communication). As a technique for storing the file in the information processing apparatus 30, a known technique may be used.

  The portable terminal 10 issues a print instruction to a document data file stored in the information processing apparatus 30 by a user operation.

  With the development of Web services and cloud technology, services can be provided on the Internet.

<Hardware>
FIG. 2 is a block diagram illustrating an example of hardware related to the MFP 20 in FIG. As hardware of the MFP 20, there are a controller 201, an operation panel 202, a facsimile control unit (FCU) 203, and a plotter 204.

  The controller 201 includes a CPU 211, ASIC 212, NB 221, SB 222, MEM-P 231, MEM-C 232, HDD (hard disk drive) 233, NIC (network interface controller) 241, USB device 242, IEEE 1394 device 243, and Centronics device 244.

  The CPU 211 is an IC for various information processing. The ASIC 212 is an IC for various image processing. The NB 221 is a north bridge of the controller 201. The SB 222 is a south bridge of the controller 201. The MEM-P 231 is a system memory of the MFP 20. The MEM-C 232 is a local memory of the MFP 20. The HDD 233 is a storage of the MFP 20.

  The NIC 241 is a controller for network communication using a MAC address. The USB device 242 is a device for providing a USB standard connection terminal. The IEEE 1394 device 243 is a device for providing a connection terminal of the IEEE 1394 standard. The Centronics device 244 is a device for providing a Centronics specification connection terminal.

  The operation panel 202 is hardware (operation unit) for an operator to input to the MFP 20 and hardware (display unit) for an operator to obtain an output from the MFP 20.

  The FCU 203 stores the received fax data and transmits / receives the fax data according to the normal G3 standard. The FCU 203 may further include G3 standard and G4 standard as options. The plotter 204 performs a printing process.

  FIG. 3 is a block diagram illustrating an example of hardware of the information processing apparatus 30 in the embodiment. As illustrated in FIG. 3, the information processing apparatus 30 includes a control unit 301, a main storage unit 302, an auxiliary storage unit 303, an external recording device I / F unit 304, a network I / F unit 306, an input unit 307, and a display unit 308. including. These components are connected to each other via a bus so as to be able to transmit and receive data.

  The control unit 301 is a CPU that controls each device, calculates data, and processes in a computer. The control unit 301 is an arithmetic device that executes a program stored in the main storage unit 302. The control unit 301 receives data from the input device or the storage device, calculates and processes the data, and outputs the data to the output device or the storage device.

  The main storage unit 302 is a ROM (Read Only Memory), a RAM (Random Access Memory), or the like, and a storage device that stores or temporarily stores programs and data such as an OS and application software that are basic software executed by the control unit 301. It is.

  The auxiliary storage unit 303 is an HDD (Hard Disk Drive) or the like, and is a storage device that stores data related to application software and the like.

  The external recording device I / F unit 304 is an interface between the information processing device 30 and a recording medium 305 (for example, a flash memory, an SD card, etc.) connected via a data transmission path such as USB (Universal Serial Bus). .

  In addition, a predetermined program is stored in the recording medium 305, and the program stored in the recording medium 305 is installed in the information processing apparatus 30 via the external recording apparatus I / F unit 304, and the installed predetermined program is It can be executed by the information processing apparatus 30.

  The network I / F unit 306 is a peripheral having a communication function connected via a network such as a LAN (Local Area Network) or a WAN (Wide Area Network) constructed by a data transmission path such as a wired and / or wireless line. This is an interface between the device and the information processing apparatus 30.

  The input unit 307 includes a keyboard having cursor keys, numeric input, various function keys, and the like, a mouse and a slice pad for selecting keys on the display screen of the display unit 308, and the like. The input unit 307 is a user interface for a user to give an operation instruction to the control unit 301 or input data.

  The display unit 308 is configured by a CRT, an LCD, or the like, and performs display according to display data input from the control unit 301.

<Configuration>
MFP 20
FIG. 4 is a block diagram illustrating an example of the configuration of the MFP 20 according to the first embodiment. As illustrated in FIG. 4, the MFP 20 includes an operation unit 401, a network print application (also referred to as a network print application) 402, a print module 403, and a print unit 404. The operation unit 401 is realized by, for example, the operation panel 202, the network print application 402 and the print module 403 are realized by, for example, the CPU 211, and the printing unit 404 can be realized by, for example, the plotter 204.

  The operation unit 401 displays an operation screen for the user to operate in response to an instruction from the application. The operation unit 401 receives an operation from the user and notifies the operation content to other modules.

  The network print application 402 acquires print data on the information processing apparatus 30 and controls printing. The network print application 402 has the configuration shown in FIG.

  FIG. 5 is a block diagram illustrating an example of the configuration of the network print application 402 according to the first embodiment. In the example illustrated in FIG. 5, the network print application 402 includes an application control unit 500, a print execution request unit 501, a password request unit 502, and a reception unit 503.

  The application control unit 500 acquires the contents of the user operation from the operation unit 401 and controls each process of the network print application 402.

  When the print execution request unit 501 receives a print data (document data) from the information processing apparatus 30 from the application control unit 500 and receives a print request, the print execution request unit 501 processes the print execution request including the file ID of the print data. To device 30. At this time, the print execution request unit 501 performs communication without protecting the communication path. A technique for protecting a communication path is, for example, SSL (Secure Socket Layer) communication. Further, the print execution request unit 501 may perform transmission by including the user account and password in the print execution request.

  The receiving unit 503 receives the encrypted print data from the information processing apparatus 30. When the reception unit 503 receives the encrypted print data, the application control unit 500 notifies the password request unit 502 to that effect.

  When receiving the print data from the application control unit 500, the password request unit 502 transmits a password acquisition request including a file ID to the information processing apparatus 30. At this time, the password request unit 502 performs communication while protecting the communication path. When the information processing apparatus 30 encrypts each file using the same password, the password acquisition request does not need to include the file ID.

  The receiving unit 503 acquires a password from the information processing apparatus 30 in a state where the communication path is protected. The receiving unit 503 has been described as having a configuration separated from the print execution request unit 501 and the password request unit 502. However, in consideration of the module design, the print execution request unit 501 acquires encrypted print data and receives a password request. The means 502 may acquire a password.

  When the receiving unit 503 acquires a password, the application control unit 500 outputs the password and the encrypted print data to the print module 403.

  Returning to FIG. 4, the print module 403 receives the print request from the application and controls the printing unit 404 to execute printing.

  FIG. 6 is a block diagram illustrating an example of the configuration of the printing module 403 according to the first embodiment. In the example illustrated in FIG. 6, the print module 403 includes a decryption unit 601. When the encrypted print data and password are acquired from the network print application 402, the decryption unit 601 decrypts the encrypted print data using the acquired password. The print module 403 controls the printing unit 404 to print the decrypted print data.

  Returning to FIG. 4, the printing unit 404 is controlled by the printing module 403 to execute the printing process of the encrypted print data.

Information processing apparatus 30
Next, the configuration of the information processing apparatus 30 will be described. FIG. 7 is a block diagram illustrating an example of the configuration of the information processing apparatus 30 according to the first embodiment. In the example illustrated in FIG. 7, the information processing apparatus 30 includes a print service 701, an authentication control module 702, and an information storage unit 703. The print service 701 and the authentication control module 702 are realized by, for example, the control unit 301 and the main storage unit 302 as a work memory, and the information storage unit 703 can be realized by the auxiliary storage unit 303 and the main storage unit 302, for example.

  The print service 701 provides a print function for print data (document data) stored on the information processing apparatus 30. FIG. 8 is a block diagram illustrating an example of the configuration of the print service 701 according to the first embodiment. 8 includes a service control unit 801, an encryption unit 802, a print data transmission unit 803, and a password transmission unit 804.

  A service control unit 801 controls each process of the print service 701. For example, the service control unit 801 controls each process when a predetermined request is received from the MFP 20. Further, the service control unit 801 may cause the authentication control module 702 to perform user authentication when the print execution request includes a user account and a password. The service control unit 801 provides a print service only to users who have been successfully authenticated. Thereby, it is possible to prevent the printing process from being executed by an unauthorized user.

  When the service control unit 801 notifies the encryption unit 802 that the MFP 20 has received a print execution request, the encryption unit 802 stores document data corresponding to the file ID included in the print execution request and predetermined information (for example, a password) as an information storage unit 703. Read from. The encryption unit 802 encrypts the document data using the read password. The encryption unit 802 outputs the encrypted data to the print data transmission unit 803. Note that the predetermined information may not be stored in the information storage unit 703 in advance, but may be generated when the information processing apparatus 30 receives a print execution request.

  The print data transmission unit 803 transmits the data encrypted by the encryption unit 802 to the MFP 20 that has made the print execution request. At this time, the print data transmission unit 803 performs communication without protecting the communication path.

  When the service control unit 801 notifies the MFP 20 that a password acquisition request has been received, the password transmission unit 804 transmits the password used by the encryption unit 802 to the MFP 20 while protecting the communication path (for example, SSL communication). .

  Returning to FIG. 7, the authentication control module 702 receives the authentication request from the print service 701 and performs user authentication. The authentication control module 702 notifies the print service 701 of the authentication result. The information storage unit 703 stores a file serving as print data, predetermined information (for example, a password) associated with the file, and job management information.

  As a result, it is possible to improve performance degradation during SSL communication, and by encrypting the print data, the print data is transferred from the information processing apparatus 30 to the image forming apparatus in a non-SSL environment with security protected. Can be sent.

<Operation>
Next, the operation of the printing system in the first embodiment will be described. FIG. 9 is a sequence diagram illustrating an example of the print control process according to the first embodiment. In step S <b> 101 shown in FIG. 9, the operation unit 401 detects that the user has pressed the print execution button. For example, a screen such as a print setting screen 901 is displayed on the operation panel 202, and the user selects a target file and inputs print conditions.

  As a method for specifying a file to be printed, a list of files on the information processing apparatus 30 may be displayed and selected, or may be specified by directly inputting a file name.

  In step S102, the operation unit 401 notifies the network application 402 that the print execution button has been pressed.

  In step S <b> 103, the network print application 402 transmits a print execution request including the file ID to the information processing apparatus 30. At this time, the print execution request may include a user account and a password. At this time, the communication path is not protected (non-SSL communication). Here, if user authentication is performed before the print data is acquired, a printing operation by an unauthorized user can be prevented.

  In step S104, when the information processing apparatus 30 acquires the print execution request, the information processing apparatus 30 acquires a file and a password corresponding to the file ID included in the print execution request. The information processing apparatus 30 encrypts the file with the acquired password.

  In step S105, the information processing apparatus 30 transmits the encrypted data (for example, PDF data) to the network print application 402. At this time, the communication path is not protected (non-SSL communication).

  In step S <b> 106, the network print application 402 transmits a password acquisition request including a file ID to the information processing apparatus 30. At this time, the communication path is protected (SSL communication). Further, when the information processing apparatus 30 always uses the same password for encryption, it is not necessary to include the file ID in the password acquisition request.

  In step S <b> 107, when the information processing apparatus 30 receives the password acquisition request, the information processing apparatus 30 transmits a password corresponding to the file ID included in the password acquisition request to the network print application 402. At this time, the communication path is protected (SSL communication). Note that the password is held in association with the file ID and the device ID on the information processing apparatus 30 until a password acquisition request is received.

  In step S <b> 108, the network print application 402 makes a print request to the print module 403. The network print application 402 outputs encrypted data (for example, PDF data), a password, and print conditions when making a print request.

  In step S <b> 109, the printing module 403 decrypts the PDF data using a password, and controls the plotter 204 to execute the printing process on the decrypted data.

  The file encryption may be performed at the timing of the print data acquisition request, or may be performed in advance. The print module 403 decrypts the encrypted print data, but the network print application 402 may decrypt the print data.

  As described above, according to the first embodiment, secure communication can be performed in response to a print execution request from the MFP 20 without degrading the performance of the MFP 20. For example, encrypted data communication is performed by non-SSL communication, and password communication is performed by SSL communication, so that the performance of the MFP 20 is not degraded while security is protected.

[Example 2]
Next, a printing system according to the second embodiment will be described. In the second embodiment, the user uses the mobile terminal 10 to request the information processing apparatus 30 to execute printing. Even in this case, an embodiment in which secure communication is performed without reducing the performance of the MFP 20 will be described below. Note that the hardware of the MFP 20 and the information processing apparatus 30 in the second embodiment is the same as that in the first embodiment, and thus description thereof is omitted.

<Configuration>
Next, the configuration of each device will be described. Since the configurations of the MFP 20 and the information processing apparatus 30 are the same as those in the first embodiment, description will be made using the same reference numerals as those in the first embodiment.

-Mobile terminal 10
FIG. 10 is a block diagram illustrating an example of the configuration of the mobile terminal 10 according to the second embodiment. The portable terminal 10 includes an operation unit 1001 and a print execution request unit 1002. The operation unit 1001 can be realized by an input unit (hard key or touch panel function) of the portable terminal 10, and the print execution request unit 1002 can be realized by a control unit or a main storage unit as a work memory.

  The operation unit 1001 receives a user operation. The user operation may be, for example, a print instruction specifying a file ID, device ID, and printing conditions (number of copies, etc.).

  When receiving a print instruction from the operation unit 1001, the print execution request unit 1002 transmits a print execution request including a file ID, a device ID, and a printing condition to the information processing apparatus 30.

Information processing apparatus 30
When receiving a print execution request from the mobile terminal 10, the information processing apparatus 30 encrypts the file with the password by the encryption unit 802 as in the first embodiment. The information processing apparatus 30 transmits a print request including encrypted data and print conditions to the MFP 20. At this time, the communication path is not protected (non-SSL communication).

  In addition, when the information processing apparatus 30 acquires the job ID from the MFP 20, the information processing apparatus 30 transmits the password and the job ID used for encryption to the MFP 20. At this time, the communication path is protected (SSL communication).

MFP 20
Upon receiving a print request from the information processing apparatus 30, the network print application 402 of the MFP 20 generates a job for this print and transmits a job ID to the information processing apparatus 30. At this time, the communication path is not protected (non-SSL communication).

  Upon receiving the password notification from the information processing apparatus 30, the network print application 402 returns a response indicating that it has been received. At this time, this communication is SSL communication. The network print application 402 outputs a print request including encrypted data (for example, PDF data), a password, and print conditions to the print module 403.

  As in the first embodiment, the print module 403 decrypts the encrypted data, controls the plotter 204, and executes print processing.

  Thereby, even if a print request is made from the mobile terminal 10, secure communication can be performed without degrading the performance of the MFP 20.

<Operation>
Next, the operation of the printing system according to the second embodiment will be described. FIG. 11 is a sequence diagram illustrating an example of a print control process according to the second embodiment. As illustrated in FIG. 11, in step S <b> 201, when the mobile terminal 10 receives a print instruction from the user, the mobile terminal 10 transmits a print execution request including a file ID, a device ID, and a print condition to the information processing apparatus 30. The file ID, device ID, and printing conditions can be set from the mobile terminal 10. The setting method of the image forming apparatus may be selected from a list of image forming apparatuses or input an IP address of the image forming apparatus.

  Thus, when a print execution request is made from the portable terminal 10 to the information processing apparatus 30, the file to be printed is specified by the file ID and the target image forming apparatus is specified by the device ID (such as the IP address of the device).

  When the information processing apparatus 30 receives a print execution request from the mobile terminal 10, the information processing apparatus 30 acquires the print capability of the MFP 20 indicated by the device ID and confirms in advance whether or not printing is possible under the specified print conditions. May be.

  In step S202, when the information processing apparatus 30 receives a print execution request from the mobile terminal 10, the information processing apparatus 30 generates data encrypted with a password based on the file specified by the file ID.

  In step S203, the information processing apparatus 30 transmits a print request by non-SSL communication to the image forming apparatus specified by the device ID. The print request includes encrypted data (PDF file) and printing conditions.

  In step S204, the network print application 402 of the MFP 20 generates a job for the print request and transmits the job ID to the information processing apparatus 30 by non-SSL communication.

  In step S205, the information processing apparatus 30 transmits the password used for encryption together with the job ID by SSL communication.

  In step S206, the MFP 20 notifies the information processing apparatus 30 by SSL communication that the password has been received.

  Steps S207 and S208 are the same as steps S108 and S109 shown in FIG.

  As described above, according to the second embodiment, even when a print request is made from the mobile terminal 10, secure communication can be performed without degrading the performance of the MFP 20 as in the first embodiment.

[Example 3]
Next, a printing system according to the third embodiment will be described. In the third embodiment, the information processing apparatus 30 stores a print job, and the MFP 20 periodically acquires the print job and performs print processing. Also in this case, as in the first embodiment, secure communication can be performed without reducing the performance of the MFP 20. Note that the hardware of the MFP 20 and the information processing apparatus 30 in the third embodiment is the same as that in the first embodiment, and a description thereof will be omitted.

<Configuration>
Next, the configuration of each device will be described. The configurations of the MFP 20 and the information processing apparatus 30 that are the same as those in the first embodiment will be described using the same reference numerals as those in the first embodiment.

-Mobile terminal 10
FIG. 12 is a block diagram illustrating an example of the configuration of the mobile terminal 10 according to the third embodiment. In the example illustrated in FIG. 12, the mobile terminal 10 includes an operation unit 1201, a print execution request unit 1002, and a print job registration unit 1202. In the configuration shown in FIG. 12, the same components as those shown in FIG.

  The operation unit 1201 receives an instruction to register a print job from the user. When the operation unit 1201 receives a print job registration instruction, the operation unit 1201 outputs a file ID, a device ID, and a print condition to the print job registration unit 1202. Note that the operation unit 1201 makes it possible to set a file ID, a device ID, and a printing condition.

  When the print job registration unit 1202 receives a print job registration instruction from the operation unit 1201, the print job registration unit 1202 transmits a print job registration request including a file ID, a device ID, and a print condition to the information processing apparatus 30. In addition to using the mobile terminal 10, the user may register a print job using a PC (Personal Computer).

Information processing apparatus 30
When the print service 701 of the information processing apparatus 30 according to the third embodiment receives a print job registration request from the mobile terminal 10, the print service 701 encrypts the file. The print service 701 registers a print job including encrypted data in the information storage unit 703 as a job.

  FIG. 13 is a diagram illustrating an example of print job information stored in the information storage unit 703. In the example illustrated in FIG. 13, a print job is held in association with a job ID, a device ID, encrypted PDF data, a password used for encryption, and printing conditions.

  Further, the information processing apparatus 30 periodically acquires this print job from the MFP 20.

MFP 20
The configuration of the MFP 20 in the third embodiment is the same as the configuration illustrated in FIG. 4, but the configuration of the network print application 402 is different, so the configuration of the network print application 402 will be described below.

  FIG. 14 is a block diagram illustrating an example of the configuration of the network print application 402 according to the third embodiment. The network print application 402 illustrated in FIG. 14 includes an application control unit 1400, a print execution request unit 501, a password request unit 502, a reception unit 1401, and an inquiry unit 1402. In the configuration illustrated in FIG. 14, the same components as those illustrated in FIG. 5 are denoted by the same reference numerals, and description thereof is omitted.

  The application control unit 1400 has a timer and controls the inquiry unit 1402 to inquire whether the MFP 20 has a print job periodically. The application control unit 1400 controls the print execution request unit 501 and the password request unit 502 so as to acquire print data and a password when the reception unit 1401 acquires one or more print jobs.

  When the inquiry unit 1402 receives an inquiry instruction from the application control unit 1400, the inquiry unit 1402 inquires the information processing apparatus 30 about the print job including the device ID.

  The receiving unit 1401 receives one or more print jobs from the information processing apparatus 30. Other functions of the receiving unit 1401 are the same as those in the first embodiment. The receiving unit 1401 has been described as having a configuration separated from the print execution request unit 501 and the password request unit 502. However, in consideration of the module design, the print execution request unit 501 acquires encrypted print data and receives a password request. The means 502 may acquire a password.

  Thus, even when the information processing apparatus 30 stores the print job and the MFP 20 periodically acquires the print job and performs the print processing, as in the first embodiment, the secure communication can be performed without degrading the performance of the MFP 20. Can be performed.

<Operation>
Next, the operation of the printing system according to the third embodiment will be described. FIG. 15 is a sequence diagram illustrating an example of a print job registration process according to the third embodiment. As illustrated in FIG. 15, in step S <b> 301, the mobile terminal 10 accepts a user operation and transmits a print job registration request including a file ID, a device ID, and printing conditions to the print service 701 of the information processing apparatus 30.

  In step S <b> 302, the print service 701 transmits a print job registration request to the mobile terminal 10.

  In step S303, the print service 701 encrypts the file indicated by the file ID included in the registration request with a password.

  In step S <b> 304, the print service 701 registers a print job including encrypted data, a password, a device ID, and print conditions in the information storage unit 703. Thereby, the information processing apparatus 30 can register and manage print jobs.

  FIG. 16 is a sequence diagram illustrating an example of a print control process according to the third embodiment. As shown in FIG. 16, in step S401, the network print application 402 determines whether a predetermined time has elapsed.

  In step S <b> 402, the network print application 402 transmits an acquisition request (inquiry) for the number of print jobs including the device ID to the information processing apparatus 30 when a predetermined time has elapsed. At this time, the communication path is not protected (non-SSL communication).

  In step S <b> 403, when the print service 701 receives a print job inquiry, the print service 701 acquires a print job corresponding to the device ID included in the inquiry from the information storage unit 703, and the network print application 402 receives all the job IDs of the corresponding print job. Send to. At this time, the communication path is not protected (non-SSL communication).

  In step S404, the network print application 402 makes a print execution request including the job ID to the information processing apparatus 30 (print service 701).

  In step S <b> 405, the print service 701 transmits encrypted data (for example, PDF data) and printing conditions to the network print application 402. At this time, the communication path is not protected (non-SSL communication).

  In step S406, the network print application 402 makes a password acquisition request including the file ID to the print service 701. At this time, the communication path is protected (SSL communication). Further, when the information processing apparatus 30 always uses the same password for encryption, it is not necessary to include the file ID in the password acquisition request. Further, the information included in the password acquisition request may be a job ID instead of a file ID.

  In step S <b> 407, when receiving the password acquisition request, the print service 701 transmits a password corresponding to the file ID included in the password acquisition request to the network print application 402. At this time, the communication path is protected (SSL communication).

  Steps S408 and S409 are the same as steps S108 and S109 shown in FIG. Further, the processes in steps S404 to S409 are repeated for the number of jobs acquired in step S403.

  As described above, according to the third embodiment, even when the information processing apparatus 30 stores the print job and the MFP 20 periodically acquires the print job and performs the print processing, the performance of the MFP 20 is degraded as in the first embodiment. And secure communication can be performed.

[Modification]
The programs executed by the MFP 20 and the information processing apparatus 30 according to the embodiments are files in an installable format or an executable format, such as a CD-ROM, a flexible disk (FD), a CD-R, and a DVD (Digital Versatile Disk). The program is provided by being recorded on a computer-readable recording medium.

  Further, the program executed by the MFP 20 and the information processing apparatus 30 according to the embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Further, the program executed by the MFP 20 and the information processing apparatus 30 according to the embodiment may be provided or distributed via a network such as the Internet.

  In addition, the program executed by the MFP 20 and the information processing apparatus 30 according to the embodiment may be provided by being incorporated in advance in a ROM or the like.

  The program executed by the MFP 20 and the information processing apparatus 30 according to the embodiment has a module configuration including the above-described units, and as actual hardware, a CPU (processor) reads the program from the auxiliary storage unit and executes it. As a result, one or more of the above means are loaded onto the main memory, and one or more of the means are generated on the main memory.

  In addition, this invention is not limited to the said Example as it is, A component can be deform | transformed and embodied in the range which does not deviate from the summary in an implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above embodiments. For example, some components may be deleted from all the components shown in the embodiments. Moreover, you may combine suitably the component shown by a different Example.

10 Mobile terminal 20 MFP
30 information processing apparatus 401 operation means 402 network print application 403 print module 404 print means 500 application control means 501 print execution request means 502 password request means 503 reception means 601 decryption means 701 print service 702 authentication control module 703 information storage means 801 service Control unit 802 Encryption unit 803 Print data transmission unit 804 Password transmission unit 1001 Operation unit 1002 Print execution request unit 1202 Print job registration unit 1402 Inquiry unit

JP 2010-193054 A

Claims (6)

A printing system in which an information processing apparatus for storing document data and one or more image forming apparatuses are connected via a network,
The information processing apparatus includes:
An encryption unit that encrypts the document data indicated by the document ID using predetermined information when a print execution request including a document ID for identifying the document data is received;
A first transmission unit that transmits data encrypted by the encryption unit without protecting a communication path to the image forming apparatus;
A second transmission unit configured to protect the communication path and transmit the predetermined information to the image forming apparatus;
With
The image forming apparatus includes:
Decryption means for decrypting the encrypted data using the predetermined information received from the information processing apparatus;
Printing means for printing the data decrypted by the decrypting means;
A printing system comprising: The image forming apparatus includes:
The printing system according to claim 1, further comprising requesting means for performing the print execution request and the acquisition request for the predetermined information. The information processing apparatus includes:
An authentication means for performing user authentication;
The first and second transmission means are
The printing system according to claim 1, wherein the transmission process is performed only for a user authenticated by the authentication unit. The information processing apparatus includes:
Storage means for storing one or a plurality of print jobs including document data to be printed, a device ID for identifying the image forming apparatus, and printing conditions;
The image forming apparatus includes:
Inquiry means for periodically inquiring the information processing apparatus whether there is a print job,
The request means includes
The printing system according to claim 2, wherein when there is a print job by the inquiry unit, the print execution request and the predetermined information acquisition request are made. The printing system includes:
Mobile devices are further connected over the network,
The portable terminal is
The printing system according to claim 1, further comprising a request unit that makes the print execution request further including a device ID for identifying the image forming apparatus and a printing condition. A printing control method in a printing system in which an information processing apparatus for storing document data and one or more image forming apparatuses are connected via a network,
An encryption step of encrypting the document data indicated by the document ID using predetermined information when a print execution request including a document ID for identifying the document data is received;
A first transmission step of transmitting data encrypted by the encryption step without protecting a communication path to the image forming apparatus;
A second transmission step of protecting the communication path and transmitting the predetermined information to the image forming apparatus;
A decryption step of decrypting the encrypted data using the predetermined information received from the information processing apparatus;
A printing step of printing the data decrypted by the decrypting step;
A printing control method.

Images