JP4018376B2 - Control device, control method, and medium storing control program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
  The present invention applies public key encryption technology to perform data transmission / reception processing.SystemControl device, control method, and controlGopuThe present invention relates to a medium storing a program.
[0002]
[Prior art]
Conventionally, in a peripheral device and a client PC that exchange data using a network, the peripheral device and the client PC hold and distribute the key in the public key encryption technology, and the exchange data is encrypted and decrypted using the key. There was no such thing as maintaining the confidentiality of the data, such as digitization, signature, signature verification. For public key cryptography, "Network Security" (Charlie Kaufman, Radia Perlman, Mike Sveshiner, Keiichiro Ishibashi, Kiyoaki Kikuchi, Aya Matsui, Yusuke Doi, Prentice Hall) was referred to.
[0003]
[Problems to be solved by the invention]
However, when exchanging data between a peripheral device and a client PC using a network, there is a possibility that data may be intercepted at the time of transmission / reception, and confidentiality cannot be protected if unencrypted data is exchanged. It was.
[0004]
In addition, since the signature is not performed, the data transmission source cannot be confirmed.
[0005]
Even when the data source was confirmed, there was no way to express it on the peripheral device.
[0006]
It is possible to protect the confidentiality of the data exchanged between the peripheral device and the client PC via the network, confirm the data transmission source, and express the confirmation using the function of the peripheral device. For the purpose.
[0007]
[Means for Solving the Problems]
  Therefore, in the present invention, the following items (1) to (3)SystemControl device, control method,as well as,SystemGopuThe above object is achieved by providing a medium storing a program.
[0008]
  (1)A control device that creates data using a computer and transmits the data to a peripheral device, wherein at least one user of the peripheral device can use a plurality of keys, and at least one key can be used by a plurality of users A secret key use information storage means for storing secret key use information in which each of a plurality of users of the peripheral device is associated with an identifier of a usable secret key, a user who is permitted to use data, and a user who is not allowed to use data Selecting means for selecting a secret key identifier from the secret key utilization information based on the request, request means for requesting the peripheral device a public key corresponding to the secret key having the identifier selected by the selecting means, and the request Receiving means for receiving a public key transmitted from the peripheral device in response to a request from the means; encryption means for encrypting the created data with the received public key; Control apparatus characterized by a transmission means for transmitting the encrypted data together with the identification information of the public key by means.
(2) A control method for creating data using a computer and transmitting the data to a peripheral device, wherein a plurality of keys can be used by at least one user of the peripheral device, and a plurality of users can use at least one key. A user who is permitted to use data from the secret key usage information stored in the secret key usage information storage unit in association with each of a plurality of users of the peripheral device and an identifier of the available secret key A selection step of selecting an identifier of a secret key based on an unpermitted user, a request step of requesting a public key corresponding to the secret key having the identifier selected in the selection step to the peripheral device, and a request step A reception step of receiving a public key transmitted from the peripheral device in response to a request; an encryption step of encrypting the created data with the received public key; and the encryption process In the control method characterized in that it comprises a transmission step of transmitting the encrypted data together with the identification information of the public key.
(3) A medium storing a control program for causing a computer to create data and transmitting the data to a peripheral device, wherein at least one user of the peripheral device can use a plurality of keys, and a plurality of at least one key is used. Use of data from the secret key usage information stored in the secret key usage information storage unit in association with each of the plurality of users of the peripheral device and the identifier of the available secret key. A selection step of selecting an identifier of a secret key based on a user who performs and an unauthorized user, a requesting step of requesting the peripheral device a public key corresponding to the secret key having the identifier selected in the selection step, A receiving step of receiving a public key transmitted from the peripheral device in response to a request in the requesting step; and the public information receiving the created data In an encryption step of encrypting, medium storing a control program and having a transmission step of transmitting the encrypted data by the encrypting step together with the identification information of the public key.
[0036]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0037]
(Example)
In a system that is an example of the present invention, public key cryptography is used for data exchange.
[0038]
FIG. 1 shows a system configuration as an example of the present invention. An example of a data creation / transmission processing control device or client PC 101-104, 113-115 as an example of a data reception / analysis processing control device, a printer 106 as an example of a data reception / analysis peripheral device, and an example of a data creation / transmission peripheral device. A certain scanner 107 and a FAX 108 which is an example of a peripheral device for data creation / transmission and reception / analysis are connected via an Ethernet interface cable 109 which is a network interface cable, and constitutes a system capable of mutual communication processing. . Also connected to this network system is a key server machine 105 that holds the key and has the ability to distribute the key to the requester if requested. Further, the printer 106, the scanner 107, and the FAX 108 are connected to the client PCs 113, 114, and 115 via the IEEE 1284 or the IEEE 1394 interface cables 110, 111, and 112, respectively, and can perform communication processing. Each peripheral device analyzes the request and data from the connected client PC, and implements each function using the data according to the request.
[0039]
FIG. 2 is an example of a block diagram of a data creation / transmission processing control device, a data reception / analysis processing control device, or a key server machine constituting the system of the present invention.
[0040]
Unless otherwise specified, these devices are implemented by the following method.
[0041]
In the computer, the CPU 201 controls the RAM 202, ROM 203, user command input device 204, display 205, external storage device 206, HD drive 207, Ethernet interface 208, IEEE 1284 or IEEE 1394 interface 209 via the main bus 210. The user command input device 204 is specifically a mouse, a keyboard, or the like, and the external storage device 206 is a floppy disk drive, an MO disk drive, a CD-ROM drive, an IC memory card drive, or the like.
[0042]
  This control apparatus operates when the CPU 201 executes a basic I / O program, an OS, a data creation / transmission process control program, a data reception / analysis process control program, or a key server program..The basic I / O program is written in the ROM 203, and the OS and data creation / transmission processing control program, data reception / analysis processing control program, or key server program are stored in the HD 207. When the power supply of the control device is turned on, the OS is read from the HD 207 into the RAM 202 by the IPL (Initial Program Loading) function in the basic I / O program, and the operation of the OS is started.
[0043]
In this embodiment, the OS and data creation / transmission process control program, data reception / analysis process control program, or key server program are external to a floppy disk, MO disk, CD-ROM, IC memory card, etc. It may be recorded in a storage medium (medium storing a program to be controlled) 211. The OS and data creation / transmission processing control program, data reception / analysis processing control program, or key server program recorded in the external storage medium 211 are loaded into the computer system through the external storage device 206 as shown in FIG. be able to. When the external storage medium 211 is set in the external storage device 206, the OS and data creation / transmission processing control program, data reception / analysis processing control program, or key server program are controlled under the control of the OS and basic I / O program. It is read from the external storage medium 211 and loaded into the RAM 202 to be operable.
[0044]
The OS and the data creation / transmission processing control program, the data reception / analysis processing control program, or the key server program may be loaded into the RAM 202 via the Ethernet interface 208, the IEEE1284, or the IEEE1394 interface 209 to be operable. . Further, the data creation / transmission processing control program, the data reception / analysis processing control program, or the key server program is recorded in the ROM 203 and is configured to be a part of the memory map. It is also possible to execute with.
[0045]
FIG. 4 shows a memory map in a state in which the data creation / transmission processing control program, data reception / analysis processing control program, or key server program is loaded into the RAM 202 and can be executed.
[0046]
FIG. 5 is an example of a block diagram of a data creation / transmission peripheral device or a data reception / analysis peripheral device according to the present invention.
[0047]
Unless otherwise specified, these peripheral devices are implemented as follows.
[0048]
Inside the peripheral device, the CPU 501 controls the RAM 502, ROM 503, user command input device 504, display 505, HD drive 506, Ethernet interface 507, IEEE1284 or IEEE1394 interface 508, print engine or scanner engine or FAX engine 509 via the main bus 510. And implement.
[0049]
This control device operates when the CPU 501 executes a basic I / O program, an OS, a data creation / transmission processing control program, and a data reception / analysis processing control program. A basic I / O program, an OS, a data creation / transmission processing control program, and a data reception / analysis processing control program are written in the ROM 503.
[0050]
The RAM 502 is a data storage area with no usage restrictions, and is an area used for data expansion and the like.
[0051]
The engine 509 creates data to be transmitted and processes analysis results of received data. As an example of processing, image reading processing, printing processing, and the like can be considered.
[0052]
FIG. 6 is a schematic flow at the time of data encryption / transmission of a client PC which is an example of the data creation / transmission processing control apparatus of the present invention, and FIG. 7 is an example of the peripheral device for data reception / analysis processing of the present invention. FIG. 8 is a schematic flow diagram of a peripheral device at the time of data reception / decoding, and FIG. 8 is a schematic diagram of the above-described processing flow.
[0053]
The peripheral devices 106 to 108 in the system of the present invention hold their own public key and private key. Each client PC 101-104 and 113-115 requests the peripheral device 106-108 to transmit the public key when a public key is required, such as when transmitting data to the peripheral device 106-108 (602, 603). The peripheral devices 106 to 108 transmit public keys to the client PCs 101 to 104 and 113 to 115 in response to requests (702, 703). The client PCs 101-104 and 113-115 encrypt the data using the received public key (604, 605), and the information that the encryption is used for the peripheral devices 106-108 is attached to the data. (606) After that, the encrypted data is transmitted to the peripheral devices 106 to 108 (607). The peripheral devices 106 to 108 confirm the public key used for encrypting the received data (704), and then decrypt the data using the corresponding private key (705, 706).
[0054]
Further, the peripheral devices 106 to 108 may hold a plurality of sets of public keys and secret keys (FIG. 8) and use them for data processing according to levels set for each user. In that case, in the user authentication system of the peripheral devices 106 to 108, a secret key that can be used for each user is set in advance. Secret key use authority information (FIG. 9) indicating who can use which secret key is transmitted to each of the client PCs 101 to 104 and 113 to 115, and the client PCs 101 to 104 and 113 to 115 receive the secret key use authority information (FIG. 9). ). FIG. 11 shows a data encryption / transmission time of a client PC as an example of a data creation / transmission processing control apparatus of the present invention when a peripheral device holds a plurality of sets of public keys and private keys and uses private key utilization authority information. FIG. 12 is a schematic flow of the peripheral device which is an example of the peripheral device for data reception / analysis processing of the present invention when the peripheral device holds a plurality of sets of public keys and secret keys and uses the secret key use authority information. FIG. 13 is a schematic flow chart at the time of data reception / decoding, and FIG.
[0055]
When the client PCs 101 to 104 and 113 to 115 transmit data to the peripheral devices 106 to 108, the client PCs 101 to 104 and 113 to 115 correspond to a secret key to which a user who is permitted to use the data in the transmission destination peripheral device is authorized. The public key used is searched from the private key use authority information (FIG. 9) (1102 to 1104), and the transmission of the public key obtained as a result is requested to the peripheral devices 106 to 108 (1105). The peripheral devices 106 to 108 transmit public keys to the client PCs 101 to 104 and 113 to 115 in response to requests (1202, 1203), and the client PCs 101 to 104 and 113 to 115 encrypt data using the public keys. (1106, 1107) After attaching information that the public key of the peripheral device 106-108 is used for encryption to the data (1108), the data is transmitted to the peripheral device 106-108 (1109). The peripheral devices 106 to 108 do not immediately execute processing such as decryption of received data or print processing, but hold the data in the HD drive 506 or the like as it is (1204, 1205). The user again performs an operation for executing processing of data stored in the peripheral devices 106 to 108. At this time, the user may be the person who created the data, or may be another user. The user can use only a secret key that is re-authenticated by the peripheral devices 106 to 108 and for which the user has been given authority to use in advance. The peripheral devices 106 to 108 confirm the public key used for encryption from the information attached to the data, and the public key that encrypted the data that the user is going to execute corresponds to the private key that can be used by the user Then, the data can be decrypted and processed.
[0056]
For example, when the client PCs 101 to 104 and 113 to 115 permit the use only to the user corresponding to UserID1 in FIG. 9 and transmit the data that the user corresponding to UserID2 and UserID3 does not want to use to the peripheral device, the client PC is secret With reference to the key use authority information (FIG. 9), the key of ID4 or 7 is searched as a key that can be used by the user corresponding to UserID1 and cannot be used by the users corresponding to UserID2 and UserID3. The client PCs 101 to 104 and 113 to 115 request the peripheral devices 106 to 108 to transmit the public key with ID 4 or 7, and encrypt the data using the public key transmitted in response to the request. Information about what is the public key used for encryption is attached to the data, and then transmitted to the peripheral devices 106-108.
[0057]
In this case, the data of one job may be divided into a plurality of pieces and encrypted using different public keys for the divided pieces of data. For example, in FIG. 14, the print job data is divided into four parts, and the client PCs 101 to 104 and 113 to 113 use the public keys Kpu1, Kpu2, Kpu4, and Kpu7 transmitted from the peripheral device 106 by issuing a request, respectively. The data is encrypted by 115 and the public key information used to encrypt the data is attached to each data, then transmitted to the peripheral devices 106 to 108 and held in the peripheral device 106 as encrypted. If the user corresponding to UserID1, UserID2, and UserID3 performs a printing process on this data, the portion for which the user does not have permission to use the private key corresponding to the public key encrypting each portion of the data cannot be decrypted. The printing results are as shown in FIGS.
[0058]
One data may be encrypted using a plurality of public keys.
[0059]
Furthermore, the client PCs 101 to 104 and 113 to 115 in the system of the present invention may hold a public key and a secret key. FIG. 18 is a schematic flow at the time of data encryption / transmission of a client PC, which is an example of the data creation / transmission processing control apparatus of the present invention, and FIG. 19 is an example of a peripheral device for data reception / analysis processing of the present invention. FIG. 20 is a schematic flow chart showing the flow of the above-mentioned processing.
[0060]
The client PCs 101 to 104 and 113 to 115 use their own private keys to sign and encrypt data (1802, 1803), and information indicating which client PCs the private keys used for data encryption belong to After being attached (1804), it is transmitted to the peripheral devices 106 to 108 (1805). The peripheral devices 106 to 108 determine the transmission source of the received data from the information attached to the data (1902, 1903), and request the client PCs 101 to 104 and 113 to 115 of the data transmission source to transmit the public key (1904). ). The client PCs 101 to 104 and 113 to 115 transmit public keys in response to requests (1806 and 1807), and the peripheral devices 106 to 108 perform decryption using the received public keys (1905 and 1906), and attach them to the data. It is confirmed that the transmitted source information and the signature information match (1907).
[0061]
In this case, the combination of the public key and the private key is not held for each of the client PCs 101 to 104 and 113 to 115, but for each user who uses the client PCs 101 to 104 and 113 to 115, the client PCs 101 to 104 and 113 to 115 may be used in the same manner as in the case of being held for each of the client PCs 101 to 104 and 113 to 115.
[0062]
In addition, when the peripheral devices 106 to 108 have a printing function and execute the printing process, if the signature is confirmed, the client PCs 101 to 104 and 113 to 115 or the proof that the signature of the user has been confirmed on the print image. Images may be added and printed. The certification image may be one that is written in the header portion or footer portion (FIGS. 21 and 22), or may be one that prints a low-density image on the entire printed matter in the form of wallpaper (FIG. 23).
[0063]
FIG. 24 is a schematic flow at the time of data encryption / transmission of a peripheral device which is an example of the data creation / transmission processing peripheral device of the present invention, and FIG. 25 is an example of the data reception / analysis processing control device of the present invention. FIG. 26 is a schematic flow chart when a certain client PC receives / decodes data. FIG. 26 is a schematic flow chart of the above-described processing.
[0064]
When the client PCs 101 to 104 and 113 to 115 in the system of the present invention hold a public key and a secret key, the peripheral devices 106 to 108 send destination data when transmitting data to the client PCs 101 to 104 and 113 to 115. The client PCs 101-104 and 113-115 are requested to send public keys (2402, 2403), and the client PCs 101-104 and 113-115 send public keys in response to the requests (2502, 2503), and the peripheral devices 106- 108 encrypts the data using the received public key (2404, 2405), and attaches to the data information that the encryption is used for the public keys of the client PCs 101 to 104 and 113 to 115 (2406). Later, the client PCs 101-104 and 113-115 are encrypted. The client PCs 101 to 104 and 113 to 115 confirm the public key used for encrypting the received data (2504, 2505), and then decrypt the data using the corresponding private key. (2506).
[0065]
In this case, the set of the public key and the private key is not held for each of the client PCs 101 to 104 and 113 to 115, but the client PCs 101 to 104 and 113 for each user who uses the client PCs 101 to 104 and 113 to 115. To 115 and may be used in the same manner as in the case of holding for each of the client PCs 101 to 104 and 113 to 115.
[0066]
FIG. 27 is a schematic flow at the time of data encryption / transmission of a peripheral device which is an example of the data creation / transmission processing peripheral device of the present invention. FIG. 28 is an example of the data reception / analysis processing control device of the present invention. It is a schematic flow at the time of data reception / decryption of a certain client PC, and is a schematic diagram of the above-described processing flow of FIG.
[0067]
Further, when the peripheral devices 106 to 108 in the system of the present invention hold the public key and the private key, the peripheral devices 106 to 108 sign / encrypt data (2702 and 2703) using their private keys. Information on which peripheral device the secret key used for data encryption belongs to is attached to the data (2704), and then transmitted to the client PCs 101 to 104 and 113 to 115 (2705), and the client PCs 101 to 104 and 113 to 115 determine the transmission source of the received data from the information attached to the data (2802 and 2803), request the peripheral devices 106 to 108 of the data transmission source to transmit the public key (2804), and the peripheral device 106 -108 transmit public keys in response to requests (2706, 2707), and client PCs 101-104 and 113-1 5 performs decoding using the received public key (2805,2806), the information of the signature with the sender of the information attached to the data may be to make sure (2807) to match.
[0068]
30 to 32 show a client PC that is an example of the data creation / transmission processing control apparatus of the present invention, a peripheral device that is an example of a data reception / analysis processing peripheral device, and a data encryption / It is the schematic of the flow of a transmission / reception / decoding process.
[0069]
The public key or secret key use authority information of the peripheral devices 106 to 108 is held in the key server machine 105, and the client PCs 101 to 104 and 113 to 115 have the public keys or secret keys of the peripheral devices 106 to 108. When the usage authority information is necessary, the key server machine 105 is requested to transmit the public key or private key usage authority information (3002, 3102, 3107, 3207) and acquired (3005, 3105, 3110, 3210), It may be used (3006, 3106, 3111, 3211). In this case, the key server machine 105 and the client PCs 11 to 104 and 113 to 115 hold the public key and the secret key, and transmit the respective public keys to the other party so that they can communicate safely.
[0070]
33 and 34 show data encryption / transmission of a peripheral device as an example of a data creation / transmission processing peripheral device of the present invention, a client PC as an example of a data reception / analysis processing control device, and a key server machine. It is the schematic of the flow of a transmission / reception / decoding process.
[0071]
The public keys of the client PCs 101 to 104 and 113 to 115 are held in the key server machine 105. When the peripheral devices 106 to 108 need the public keys of the client PCs 101 to 104 and 113 to 115, the key server machine 105 The transmission of the public key may be requested (3302, 3407), acquired (3305, 3410), and used (3306, 3411). In this case, the key server machine 105 and the peripheral devices 106 to 108 hold a public key and a secret key, and transmit each public key to the other party, so that they can communicate safely. Furthermore, the system may have a certification authority that issues certificates. The certificate is obtained by signing and encrypting the IDs of the client PCs 101 to 104 and 113 to 115 and the users and peripheral devices 106 to 108 and the public keys corresponding to the IDs with a secret key created by the certification authority. is there. The certification authority need not be on the network. The public key of the certification authority is distributed to each of the client PCs 101 to 104 and 113 to 115 and the peripheral devices 106 to 108, and each of the client PCs 101 to 104 and 113 to 115 and the peripheral devices 106 to 108 discloses the certificate to the public of the certification authority. By decrypting and authenticating the signature using the key, it is confirmed that the combination of the ID included in the certificate and the public key is a correct combination.
[0072]
【The invention's effect】
  The present inventionCan encrypt the data to be transmitted using the network, but the key for decryption is not intercepted because it does not flow over the network. Even if the data is encrypted, it is unlikely that the encrypted data will be decrypted.Is possible.
[Brief description of the drawings]
FIG. 1 is an example of a system configuration diagram including a client PC and peripheral devices according to the present invention.
FIG. 2 is an example of a block diagram of a data creation / transmission processing control device, a data reception / analysis processing control device, or a key server machine according to the present invention.
FIG. 3 is an example of a diagram showing that a data creation / transmission processing control program, a data reception / analysis processing control program, or a key server program according to the present invention is supplied from a medium to a computer system.
FIG. 4 is an example of a memory map diagram when a data creation / transmission processing control program, a data reception / analysis processing control program, a key server program, or the like according to the present invention operates.
FIG. 5 is an example of a block diagram of a data creation / transmission peripheral device or a data reception / analysis peripheral device according to the present invention.
FIG. 6 shows an example of a schematic flow at the time of data encryption / transmission of the data creation / transmission processing control apparatus according to the present invention.
FIG. 7 shows an example of a schematic flow of data reception / analysis processing peripheral device data reception / decryption related to the present invention.
FIG. 8 is an example of a schematic diagram of a flow of data encryption / transmission of a data creation / transmission processing control apparatus according to the present invention and data reception / decryption processing of a peripheral device for data reception / analysis processing;
FIG. 9 shows an example of a list of secret keys held by peripheral devices related to the present invention.
FIG. 10 shows an example of secret key use authority information held by a peripheral device according to the present invention.
FIG. 11 shows data encryption / transmission of the data creation / transmission processing control device when a plurality of public keys and secret keys are held and secret key utilization authority information is used in the data reception / analysis processing peripheral device according to the present invention. Example of general flow
FIG. 12 shows data reception / decryption processing in the peripheral device for data reception / analysis processing when a plurality of public keys and secret keys are held in the peripheral device for data reception / analysis processing according to the present invention and secret key utilization authority information is used. Example of general flow
FIG. 13 shows data encryption / transmission of the data creation / transmission processing control apparatus when a plurality of public keys and secret keys are held and secret key utilization authority information is used in the data reception / analysis processing peripheral device according to the present invention. And an example of a schematic diagram of a flow of data reception / decoding processing of data reception / analysis processing peripheral device
FIG. 14 shows an example of the data structure of a print job divided into four parts related to the present invention and encrypted using different public keys.
FIG. 15 shows an example of a result when a print job having the structure shown in FIG. 14 according to the present invention is decrypted and printed by an operation of a user having authority to decrypt all parts.
FIG. 16 shows an example of a result when a print job having the structure of FIG. 14 according to the present invention is decrypted and printed by an operation of a user authorized to decrypt two parts.
FIG. 17 shows an example of a result when a print job having the structure of FIG. 14 according to the present invention is decrypted and printed by an operation of a user having authority to decrypt one part.
FIG. 18 shows an example of a schematic flow at the time of data encryption / transmission of the data creation / transmission processing control apparatus according to the present invention.
FIG. 19 shows an example of a schematic flow at the time of data reception / decoding of a data reception / analysis processing peripheral device according to the present invention.
FIG. 20 is an example of a schematic diagram of a flow of data encryption / transmission of a data creation / transmission processing control apparatus and data reception / decryption processing of a data reception / analysis processing peripheral device according to the present invention;
FIG. 21 shows that when a peripheral device for data reception / analysis processing according to the present invention has a printing function and executes a printing process, a proof image confirming the user's signature is added to the header portion and the printing process is performed. Example of print result when
FIG. 22 shows that when a peripheral device for data reception / analysis processing according to the present invention has a printing function and executes printing processing, a proof image confirming the user signature is added to the footer portion and printing processing is performed. Example of print result when
FIG. 23: When a peripheral device for data reception / analysis processing according to the present invention has a printing function and executes printing processing, a low-density certification image confirming the user's signature is added to the entire printed matter as wallpaper. An example of the print result when printing is performed
FIG. 24 shows an example of a schematic flow of data creation / transmission processing peripheral device data encryption / transmission according to the present invention.
FIG. 25 shows an example of a schematic flow at the time of data reception / decoding of the data reception / analysis processing control apparatus according to the present invention.
FIG. 26 is an example of a schematic diagram of a flow of data encryption / transmission of a data creation / transmission processing peripheral device and data reception / decryption processing of a data reception / analysis processing control apparatus according to the present invention;
FIG. 27 shows an example of a schematic flow at the time of data encryption / transmission of a data creation / transmission processing peripheral device according to the present invention.
FIG. 28 shows an example of a schematic flow at the time of data reception / decoding of the data reception / analysis processing control apparatus according to the present invention.
FIG. 29 is an example of a schematic diagram of a flow of data encryption / transmission of a data creation / transmission processing peripheral device and data reception / decryption processing of a data reception / analysis processing control apparatus according to the present invention;
FIG. 30 shows data encryption / transmission of the data creation / transmission processing control apparatus according to the present invention, data reception / decryption processing of the data reception / analysis processing peripheral device, and disclosure of the data reception / analysis processing peripheral device. An example of a schematic diagram of the process flow in which the key server machine distributes the key
FIG. 31 shows data encryption / transmission of a data creation / transmission processing control device when a plurality of public keys and secret keys are held and secret key utilization authority information is used in a data reception / analysis processing peripheral device according to the present invention; An example of a schematic diagram of a flow of processing in which the key server machine distributes the data reception / decryption processing of the data reception / analysis processing peripheral device and the public key of the data reception / analysis processing peripheral device
FIG. 32: Data encryption / transmission of data creation / transmission processing control apparatus and data reception / decryption processing of data reception / analysis processing peripheral device, and disclosure of data creation / transmission processing control apparatus according to the present invention An example of a schematic diagram of the flow of processing in which a key server machine distributes keys
FIG. 33: Data creation / transmission processing related to the present invention Data encryption / transmission of peripheral devices, data reception / decryption processing of data reception / analysis processing control device, and disclosure of data reception / analysis processing control device An example of a schematic diagram of the flow of processing in which a key server machine distributes keys
34 shows data encryption / transmission of a data creation / transmission processing peripheral device according to the present invention, and data reception / decryption processing of the data reception / analysis processing control device, and disclosure of the data creation / transmission processing peripheral device. An example of a schematic diagram of the flow of processing in which a key server machine distributes keys
[Explanation of symbols]
101, 102, 103, 104 Client PC
105 Key server machine
106 Printer
107 Scanner
108 FAX
109 Ethernet interface cable
110, 111, 112 IEEE 1284 or IEEE 1394 interface cable
113, 114, 115 Client PC
201 CPU
202 RAM
203 ROM
204 User command input device
205 display
206 External storage device
207 HD drive
208 Ethernet interface
209 IEEE1284 or IEEE1394 interface
210 Main bus
211 External storage media
501 CPU
502 RAM
503 ROM
504 User command input device
505 display
506 HD drive
507 Ethernet interface
508 IEEE1284 or IEEE1394 interface
509 engine
510 Main bus
2101, 2201, 2301 Certification image
2102 Printing of signatures made on the header
2202 Printing signatures in the footer
2302 Printing a signature in the form of a wallpaper

Claims (3)

A control device for transmitting to the peripheral device to create data using a computer,
An identifier of a private key that can be used with each of the plurality of users of the peripheral device, wherein at least one user of the peripheral device can use a plurality of keys, and at least one key can be used by a plurality of users; Secret key use information storage means for storing secret key use information associated with
Selecting means for selecting an identifier of a secret key from the secret key usage information based on a user who is permitted to use data and a user who is not permitted to use data;
Request means for requesting the peripheral device a public key corresponding to a secret key having an identifier selected by the selection means;
Receiving means for receiving a public key that will be transmitted from the peripheral device in response to the request of the requesting unit,
Encryption means for encrypting at the public key received data created,
Transmitting means for transmitting data encrypted by the encryption means together with identification information of the public key;
A control device comprising: A control method for transmitting data to the peripheral device to create a using computer,
An identifier of a private key that can be used with each of the plurality of users of the peripheral device, wherein at least one user of the peripheral device can use a plurality of keys, and at least one key can be used by a plurality of users; A selection step of selecting a secret key identifier from the secret key use information stored in the secret key use information storage unit in association with the user permitted to use the data and the user not permitted to use the data;
A requesting step of requesting the peripheral device a public key corresponding to a secret key having the identifier selected in the selecting step;
A reception step of receiving the public key that will be transmitted from the peripheral device in response to the request in the request step,
An encryption step of encrypting at the public key received data created,
Transmitting the data encrypted in the encryption step together with the identification information of the public key;
A control method characterized by comprising: A medium storing a control program Ru is transmitted to the peripheral device by creating data to the computer,
An identifier of a private key that can be used with each of the plurality of users of the peripheral device, wherein at least one user of the peripheral device can use a plurality of keys, and at least one key can be used by a plurality of users; A selection step of selecting an identifier of a secret key based on a user who is permitted to use data and a user who is not permitted to use data from the secret key utilization information stored in the secret key utilization information storage unit in association with
Requesting the peripheral device for a public key corresponding to the secret key having the identifier selected in the selecting step;
A receiving step of receiving the public key that will be transmitted from the peripheral device in response to the request in the requesting step,
An encryption step of encrypting at the public key received data created,
A transmission step of transmitting the data encrypted in the encryption step together with identification information of the public key;
A medium storing a control program characterized by comprising:

Images