JP4114932B2 - Information management device - Google Patents

Description

  The present invention relates to an information management apparatus for sending document information via a network, for example, a server system that distributes document information files from a document server to a computer, and an imaging such as an electronic camera or an image scanner having a document server function. The present invention can be used in an image processing system that distributes an image file from an apparatus, a printer, a facsimile machine, or a copying machine to a computer.

JP 2000-124866 A JP 2002-229835 A JP 2003-177967 A Japanese Patent Laid-Open No. 2003-264685 JP-A-8-241403 Japanese Patent No. 3269442 JP 2003-115989 A In a document use system in which a device or device having a document server function is accessed by a computer such as a personal computer via a network to obtain and use a document information file, falsification of the document information of the server is a problem. May be. Patent Document 1 discloses that contents such as audio, still images, characters, music, and the like are distributed from a host to a receiving device through satellite communication with an electronic watermark added thereto, and the watermark lock is transmitted from the host to the receiving device via an ISDN line. An information distribution system for transmitting a release key is described. Patent Document 2 describes a file management system that creates falsification detection information based on secret information every time a file is updated. Patent Document 3 describes an electronic document management system that records a history of changes in access rights in an object to be distributed as access control history data that can be tampered with. Patent Document 4 extracts image feature information from a document image, embeds it in the document image as original image feature information, and prints the document image. When reading a printed document image, the image feature information is extracted from the read information, the embedded original image feature information is extracted, the image feature information is compared, and if there is a difference, the document is determined to be falsified. The image tampering determination is described.

  An electronic watermark may be used as one means for adding falsification or duplication determination information to document information. For example, Patent Document 5 discloses a watermark processing method in which a watermark is embedded in an image for copyright protection, a watermark is removed from the image in which the watermark is embedded, and a clear original image is reproduced, and a copy that implements the watermark processing method. An apparatus is described. Patent Document 6 describes an embedding process and an extraction process for an electronic watermark, and when image data embedded with an electronic watermark is read from a recording medium and transferred, different image data is transferred. A fraud prevention system is described. Patent Document 7 describes an electronic watermark embedding device that generates an authentication code from input image information to be protected and embeds the authentication code in a portion other than the important area of the image information. Patent Document 8 describes an electronic watermark device that extracts a predetermined character from a Japanese document image to be watermarked by character recognition and applies an electronic watermark embedding process to the character.

  A document utilization system, file management system, or information distribution system that obtains and uses an information file by accessing a device or device having a document server function via a network with a computer, for example, a personal computer, includes a document that is being operated. Measures are taken to ensure security, and as disclosed in the above-mentioned patent document, falsification detection or falsification prevention is adopted as one means for ensuring security. However, the file security is not ensured between the time when the file is created and when the file management system is used. For example, it is conceivable that the document information is altered and registered in the server. There may be a case where a plurality of people intervene after generating the document information for server registration and registering it with the server. Therefore, it is desired to ensure security from the time point when the document information is generated.

  The first object of the present invention is to secure the document information from the time of generation of the document information file, and the second object is to easily protect the originality and copyright of the document information.

(1) Memory means (HDD / DS1) for storing the document information file;
Means for registering the management data and tampering address data of該書image information to the picture information embedding, in the memory means to generate the picture information file including picture information and the management data of the embedded (ACP: DRE / PC1);
Communication means (IMAC / DS1) for transmitting the document information file of the memory means (HDD) to the information processing equipment (PC / PC1 to 3) via the network (LAN, W);
The extracts control data and tampering address data embedded in the document information of the document information file read out from the memory means, to determine whether the management data the extracted matches the management data of the picture information file, Falsification handling means (PC: DUA / PC1 to 3) that executes the process that the extracted data for handling falsification means if they do not match ;
An information management device comprising:

  In addition, in order to make an understanding easy, the code | symbol of the corresponding element or the corresponding matter of the Example shown in drawing and mentioned later in parentheses was added as reference for reference. The same applies to the following.

According to this, when generating a document information file, management data and tampering countermeasure data are embedded in the document information. Of該書image information file, before and after the registration to the memory means, the management data by the falsification of the document information file is Ru River, falsification corresponding means (PC: DUA / PC1~3) is, falsification deal for the data makes sense Execute the process. This process can secure the document information.

(2 ) The means for registering (ACP: DRE) uses management data of document information as reference data, embeds the reference data and falsification countermeasure data in the document information, and includes the document information and the management data Generating a document information file and registering it in the memory means (HDD);
The falsification handling means (PC: DUA) extracts the reference data and falsification countermeasure data embedded in the document information of the document information file read from the memory means (HDD), and manages the document information file management data. Is compared with the reference data to detect falsification, and when it is detected that falsification has occurred, the processing meant by the falsification countermeasure data is executed;
The information management apparatus according to (1) above.

  According to this, since the management information of the document information file is different from the reference data if there is a falsification, the falsification handling means (PC: DUA / PC1 to 3) detects that the falsification has occurred, and the tampering countermeasure data means Execute the process. This process can secure the document information.

(3) Memory means for storing the document information file, and the document information file sent from the network (LAN, W) are registered in the memory means, and the document information file in the memory means is sent to the network (LAN, W). A communication server including a document server (DS1);
Image capturing means (10) for generating image data representing an image plane, and embedding management data and falsification countermeasure data in the image data generated by the image capturing means, and generating a document information file including the image data and the management data An imaging device (C1) including means (ACP: DRE) for registering with the document server (DS1) via the network (LAN, W);
Said network (LAN, W) to extract the management data and tampering address data embedded in the document information of the document information file read out from the document server (DS1) via a management data the extracted said picture information Computers (PCs 1 to 3) that determine whether or not the file management data matches and execute the processing that the extracted tampering countermeasure data means if they do not match ;
An information management device (FIGS. 8 to 10).

According to this, when the imaging device (C1) generates the document information file of the image data generated by the imaging means (10), the management data and the tampering countermeasure data are embedded in the image data. Of該書image information file, before and after the registration to the document server (DS1), Ri Kaizangaa to document information file, the management data of the file you change, computer (PC: DUA / PC1~3) is The tampering is detected, and the processing indicated by the tampering countermeasure data is executed. This process can secure the document information.

  (4) The information management apparatus according to any one of (1) to (3), wherein the tampering countermeasure data includes contact data that notifies the presence of tampering. According to this, when tampering is detected, the presence of tampering is notified at the location indicated by the contact data.

  (5) The information management device according to (4), wherein the contact data is a domain name of the computer. According to this, when tampering is detected, the presence of tampering is notified to the computer of the domain name. The user of the computer can take measures such as deleting the corresponding document information file in the memory means, restoring it to the initial registration, or requesting it from the administrator.

  (6) The information management apparatus according to any one of (1) to (5), wherein the tampering countermeasure data includes data instructing transmission of an instruction to delete the corresponding document information file in the memory unit. According to this, the corresponding document information file is erased from the memory means in response to the detection of falsification, and the falsified document information is not distributed.

(7) Memory means (HDD) for storing the document information file, using the management data of the document information as reference data, embedding the reference data and falsification countermeasure data in the document information, and storing the document information and the management data The document information file of the memory means (HDD) is generated in the information processing device (PC) via the network (LAN, W), the means (ACP: DRE) for generating the document information file including the information and registering it in the memory means (HDD). An image forming apparatus (A1) comprising: a communication unit (IMAC) for transmitting the document; and a printer (100) for printing the document information stored in the memory unit;
The reference data and the falsification countermeasure data embedded in the document information of the document information file read from the memory means (HDD) via the network (LAN, W) are extracted, and management data of the document information file is obtained. Computers (PC: DUA / PC1 to 3) that detect the falsification by comparing with the reference data, and execute the process implied by the falsification countermeasure data when the falsification is detected;
An information management device comprising:

(8) Memory means (HDD) for storing image files, photographing means (10) for generating image data representing the image plane, management data of the image data generated by the photographing means as reference data for the image data Means (ACP: DRE) for embedding the reference data and tampering countermeasure data, generating an image file including the image data and the management data, and registering it in the memory means (HDD); and a network (LAN, W ) An imaging device (A1 / C1) comprising communication means (IMAC) for transmitting the image file of the memory means (HDD) to the information processing equipment (PC / PC1 to 3) via
The reference data embedded in the image data of the image file read from the memory means (HDD) via the network (LAN, W) and the tampering countermeasure data are extracted, and the management data of the image file is used as the reference data. A computer (PC: DUA / PC1 to 3) that executes a process that means the falsification countermeasure data when it is detected that the falsification is detected.
An information management device comprising:

  (9) The information management apparatus according to (8), further including a printer (100) that prints document information stored in the memory unit.

  Other objects and features of the present invention will become apparent from the following description of embodiments with reference to the drawings.

  FIG. 1 shows the external appearance of a multifunctional full-color digital copying machine A1 that is a member of the information management apparatus according to the first embodiment of the present invention. A full-color copying machine A1 shown in FIG. 1 is roughly composed of units of an automatic document feeder (ADF) 30, an operation board 20, a color scanner 10, a color printer 100, and a paper feed bank 35. . A finisher 34 with a tray capable of stacking a stapler and imaged paper, a double-sided drive unit 33, and a large-capacity paper feed tray 36 are mounted on the printer 100.

  A LAN (Local Area Network) to which a personal computer PC is connected is connected to the image data processing apparatus ACP (FIG. 2) in the apparatus. The personal computer PC and the image data processing apparatus ACP are connected to a wide area communication such as the Internet via a router. It can be connected to the network W. A switch PBX connected to a telephone line PN (facsimile communication line) is connected to the facsimile control unit FCU (FIG. 2). The printed paper of the color printer 100 is discharged onto the paper discharge tray 108 or the finisher 34.

  The color printer 100 is a laser printer. In this laser printer 100, four sets of toner image forming units for forming images of each color of magenta (M), cyan (C), yellow (Y), and black (black: K) are in the transfer paper moving direction. Are arranged in this order. That is, it is a four-drum type full-color image forming apparatus. In addition to these magenta (M), cyan (C), yellow (Y) and black (K) toner image forming units, each carries a laser exposure unit by laser scanning, a paper feed cassette, a pair of registration rollers, and transfer paper. A transfer belt unit having a transfer conveyance belt that conveys the toner image forming unit so as to pass through a transfer position, a belt fixing type fixing unit, a paper discharge tray, a double-sided drive (surface reversal) unit, and the like are provided. The laser printer 100 also includes a manual feed tray, a toner supply container, a waste toner bottle, and the like (not shown).

  The finisher 34 has a stacker tray, that is, a stacking / lowering tray 34hs and a sort tray group 34st. It has a sorter paper discharge mode.

  The sheet fed from the printer 100 to the finisher 34 is transported in the upper left direction, passes through the upside down U-shaped transport path, switches the transport direction downward, and then ejects the stacker according to the set mode. In the mode, the sheet is discharged from the discharge port to the loading / lowering tray 34hs. In the sorter paper discharge mode, the paper being discharged at that time of the sorter tray group 34st is discharged to the assigned sorter tray.

  When the sorter paper discharge mode is designated, the finisher internal paper discharge controller drives the sort tray group 34st placed at the lowermost overlapping retract position to the use position indicated by a two-dot chain line in FIG. Increase the spacing. In the sorter paper discharge mode, for a set number of copies or prints (one person), when the sorter paper discharge mode is set for copy sorting, each transfer paper on which the same document (image) is printed is sorted into the sort tray group 34st. Assorted and stored in each tray. When the sorter discharge mode is set for page sorting, each tray is assigned to each page (image), and each transfer sheet on which the same page is printed is stacked on one sort tray.

  FIG. 2 shows an outline of the configuration of the information management apparatus according to the first embodiment of the present invention and the configuration of the image processing system of the copying machine A1 shown in FIG. A color document scanner 12 including a reading unit 11 of the copying machine A1 and an image data output I / F (Interface) 12 is connected to an image data interface control CDIC (hereinafter simply referred to as CDIC) of the image data processing apparatus ACP. Yes. A color printer 100 is also connected to the image data processing apparatus ACP. The color printer 100 receives the recorded image data from the image data processor IPP (Image Processing Processor; hereinafter simply referred to as IPP) of the image data processing apparatus ACP to the writing I / F 134 and prints it out at the image forming unit 135. .

  The image data processing device ACP (hereinafter simply referred to as ACP) includes a parallel bus Pb, a memory access control IMAC (hereinafter simply referred to as IMAC), a memory module that is an image memory (hereinafter simply referred to as MEM), and a nonvolatile memory. A hard disk device HDD (hereinafter simply referred to as HDD), system controller 1, RAM 4, nonvolatile memory 5, font ROM 6, CDIC, IPP, and the like are provided. A facsimile control unit FCU (hereinafter simply referred to as FCU) is connected to the parallel bus Pb. The operation board 20 is connected to the system controller 1.

  The reading unit 11 that optically reads the original of the color original scanner 10 photoelectrically converts the reflected light of the lamp irradiation on the original by the CCD 207 (FIG. 2) on the sensor board unit SBU (hereinafter simply referred to as SBU). R, G, B image signals are generated, converted to RGB image data by an A / D converter, subjected to shading correction, and sent to the CDIC via the output I / F 12. The RGB image data is multi-value image data (for example, 8-bit configuration) representing multi-gradation having a configuration of 3 bits or more.

  The CDIC performs data transfer between the document scanner 10 (output I / F 12), the parallel bus Pb, and the IPP, and communication between the process controller 131 and the system controller 1 that controls the entire ACP. The RAM 132 is used as a work area for the process controller 131, and the ROM 133 stores an operation program for the process controller 131.

  Memory access control IMAC (hereinafter simply referred to as IMAC) controls writing / reading of image data and control data to / from MEM and HDD. The system controller 1 controls the operation of each component connected to the parallel bus Pb. The RAM 4 is used as a work area for the system controller 1, and the nonvolatile memory 5 stores an operation program for the system controller 1, a copier user password, and the like.

  The operation board 20 instructs processing to be performed by the ACP. For example, the type of processing (copying, facsimile transmission, image reading, printing, etc.), the number of processings, etc. are input. Thereby, the image data control information can be input.

  The image data read from the reading unit 11 of the scanner 10 is subjected to shading correction by the SBU of the scanner 10 and then subjected to image processing for correcting reading distortion such as background removal, scanner gamma correction, and filter processing by the IPP. To MEM or HDD. When printing out MEM or HDD image data, IPP performs color conversion of RGB signals to YMCK signals, and performs image quality processing such as printer gamma conversion, gradation conversion, and gradation processing such as dither processing or error diffusion processing. Do. The image data after the image quality processing is transferred from the IPP to the writing I / F 134. The writing I / F 134 performs laser control on the gradation processed signal by pulse width and power modulation. Thereafter, the image data is sent to the image forming unit 135, and the image forming unit 135 forms a reproduced image on the transfer paper.

  Based on the control of the system controller 1, IMAC controls the access of image data and MEM or HDD, develops data for printing on a personal computer PC connected to the LAN (hereinafter simply referred to as PC), and makes effective use of MEM and HDD. Compress / decompress image data for

  The image data sent to the IMAC is stored in the MEM or HDD after data compression, and the stored image data is read out as necessary. The read image data is decompressed, returned to the original image data, and returned from the IMAC to the CDIC via the parallel bus Pb. After the transfer from the CDIC to the IPP, image quality processing is performed and the image is output to the writing I / F 134, and a reproduced image is formed on the transfer paper in the image forming unit 135.

  In the flow of image data, the functions of the digital multi-function peripheral are realized by the bus control by the parallel bus Pb and the CDIC. Facsimile transmission is performed by performing image processing on the read image data by IPP and transferring it to the FCU via the CDIC and the parallel bus Pb. The FCU performs data conversion to the communication network and transmits it as facsimile data to the public line PN. Facsimile reception is performed by converting line data from the public line PN into image data by the FCU and transferring it to the IPP via the parallel bus Pb and CDIC. In this case, no special image quality processing is performed, and the image is output from the writing I / F 134 and a reproduced image is formed on the transfer paper in the image forming unit 135.

  In a situation where a plurality of jobs, for example, a copy function, a facsimile transmission / reception function, and a printer output function operate in parallel, the usage rights of the reading unit 11, the image forming unit 135, and the parallel bus Pb are allocated to the system controller 1 and the process. Control is performed by the controller 131. The process controller 131 controls the flow of image data, and the system controller 1 controls the entire system and manages the activation of each resource. The function selection of the digital multi-function peripheral is performed on the operation board 20, and processing contents such as a copy function and a facsimile function are set by a selection input of the operation board 20.

  The system controller 1 and the process controller 131 communicate with each other via the parallel bus Pb, CDIC, and serial bus Sb. Specifically, communication between the system controller 1 and the process controller 131 is performed by performing data format conversion for data and interface between the parallel bus Pb and the serial bus Sb in the CDIC.

  Various bus interfaces, such as a parallel bus I / F 7, a serial bus I / F 9, a local bus I / F 3, and a network I / F 8, are connected to the IMAC. The controller unit 1 is connected to related units via a plurality of types of buses in order to maintain independence in the entire ACP.

  The system controller 1 controls other functional units via the parallel bus Pb. The parallel bus Pb is used for transferring image data. The system controller 1 issues an operation control command for causing the IMAC to store and register image data in the MEM and HDD. This operation control command is sent via IMAC, parallel bus I / F 7, and parallel bus Pb.

  In response to this operation control command, the image data is sent from the CDIC to the IMAC via the parallel bus Pb and the parallel bus I / F 7. The image data is stored in the MEM or HDD under the control of the IMAC.

  The copier A1 and each PC connected to the LAN have a common domain name and a global IP address is assigned to it. Each of the copier A1 and each PC connected to the LAN has an individual name and a private IP address assigned to it, and can send and receive document information files to each other in the LAN and connected to the wide area network W You can send and receive document information files to and from the server and personal computer.

  On the other hand, the ACP system controller 1 functions as network control and serial bus control in the case of calling from a PC as a printer function or a document server function. In the case of via the network B, the IMAC receives print output request data or storage / registration request data via the network B via the network I / F 8. The document information file request data (foreign command) via the network B is notified to the system controller 1, and the IMAC transfers the storage and registration data (document information file) via the network B according to the command from the system controller 1 that responds to it. I do.

  In the case of a general-purpose serial bus connection, the IMAC receives print output request data via the serial bus I / F 9. The general-purpose serial bus I / F 9 corresponds to a plurality of types of standards, and corresponds to an interface of a standard such as USB (Universal Serial Bus), 1284 or 1394, for example.

  Print output request data from the PC is developed into image data by the system controller 1. The development destination is an area in MEM. Font data necessary for expansion is obtained by referring to the font ROM 6 via the local bus I / F 3 and the local bus Rb. The local bus Rb connects the controller 1 to the nonvolatile memory 5 and the RAM 4.

  Regarding the serial bus Sb, in addition to the external serial port 2 for connection with the PC, there is also an interface for transfer with the operation board 20 which is an operation unit of the ACP. This is not print development data, but communicates with the system controller 1 via IMAC, accepts processing procedures, displays system status, and the like.

  Data transmission / reception between the system controller 1 and the MEM, HDD, and various buses is performed via the IMAC. Jobs that use MEM and HDD are centrally managed in the entire ACP.

  FIG. 3 shows a schematic configuration of the IMAC. The IMAC includes an access control 172, a memory control 173, a secondary compression / decompression module 176, an image editing module 177, a system I / F 179, a local bus control 180, a parallel bus control 171, a serial port control 175, a serial port 174, and a network. A control 178 is provided. The secondary compression / decompression module 176, the image editing module 177, the parallel bus control 171, the serial port control 175, and the network control 178 are connected to the access control 172 via DMAC (direct memory access control), respectively.

  The system I / F 179 transmits / receives commands or data to / from the system controller 1. Basically, the system controller 1 controls the entire ACP. The system controller 1 manages resource allocation of MEM and HDD, and controls other units through the system I / F 179, the parallel bus control 171 and the parallel bus Pb.

  Each unit of ACP is basically connected to the parallel bus Pb. Therefore, the parallel bus control 171 manages the transmission / reception of data to / from the system controller 1 and the MEM and HDD by controlling the bus occupation.

  The network control 178 controls connection with the LAN and the wide area network W. The network control 178 manages transmission / reception of data to / from an external expansion device connected to a network (LAN, wide area communication network W). Here, the system controller 1 is not involved in the operation management of the connected devices on the network, but controls the interface in the IMAC. Although not particularly limited, in this embodiment, control for 100BASE-T is added.

  The serial port 174 connected to the serial bus has a plurality of ports. The serial port control 175 includes a number of port control mechanisms corresponding to the types of buses prepared. Although not particularly limited, in this embodiment, port control for USB and 1284 is performed. In addition to the external serial port, it controls the command reception with the operation unit or the transmission / reception of data related to display.

  The local bus control 180 interfaces with the local serial bus Rb to which the RAM 4 necessary for starting up the system controller 1, the nonvolatile memory 5, and the font ROM 6 for expanding printer code data are connected.

  The access control 172 performs command control by the system controller 1 from the system I / F 179. The memory control 173 manages MEM and HDD access from an external unit centering on the MEM and HDD. Image data is transferred from the CDIC to the IMAC via the parallel bus Pb. Then, the image data is taken into the IMAC by the parallel bus control 171.

  Memory access of the captured image data leaves the management of the system controller 1. That is, the memory access is performed by direct memory access control (DMAC) independently of the system control. For access to the MEM and HDD, the access control 172 arbitrates access requests from a plurality of units. The memory control 173 controls the access operation of the MEM and HDD or the data read / write.

  When accessing the MEM and HDD from the network, data taken into the IMAC from the network via the network control 178 is transferred to the MEM and HDD by the direct memory access control DMAC. The access control 172 arbitrates access to the MEM and HDD in a plurality of jobs. The memory control 173 reads / writes data to / from the MEM and HDD.

  When accessing the MEM and HDD from the serial bus, the data taken into the IMAC via the serial port 174 by the serial port control 175 is transferred to the MEM and HDD by the direct memory access control DMAC. The access control 172 arbitrates access to the MEM and HDD in a plurality of jobs. The memory control 173 reads / writes data to / from the MEM and HDD.

  Print output data from a PC connected to a network or a serial bus is developed by the system controller 1 in a memory area in the MEM or HDD using the font data on the local bus.

  The system controller 1 manages the interface with each external unit. For data transfer after being taken into the IMAC, each DMAC shown in FIG. 3 manages memory access. In this case, since each DMAC performs data transfer independently of each other, the access control 172 prioritizes job collision or access request for access to the MEM and HDD.

  Here, access to the MEM and HDD includes access from the system controller 1 via the system I / F 179 for developing bitmaps of stored data in addition to access by each DMAC. The DMAC data permitted to access the MEM and HDD in the access control 172 or the data from the system I / F 179 is directly transferred to the MEM and HDD by the memory control 173.

  The IMAC has a secondary compression / decompression module 176 and an image editing module 177 for data processing therein. The secondary compression / decompression module 176 compresses and decompresses data so that image data or code data can be effectively stored in the MEM and HDD. The secondary compression / decompression module 176 controls the interface with the MEM and HDD by DMAC.

  The image data once stored in the MEM and HDD is called from the MEM and HDD to the secondary compression / decompression module 176 via the memory control 173 and the access control 172 by the direct memory access control DMAC. The image data thus converted is returned to the MEM and HDD by the direct memory access control DMAC or output to the external bus.

  The image editing module 177 controls the MEM and HDD by the DMAC, and processes the data in the MEM and HDD. Specifically, in addition to clearing the memory area, the image editing module 177 performs rotation processing of image data, composition of different images, and the like as data processing. The image editing module 177 reads the secondary compressed data from the MEM and HDD, decompresses the secondary compressed data to the primary compressed data by the secondary compression / decompression module 176, and uses the same decoding logic as the CDIC data decompression 163 in the module 177. The next compressed data is decompressed into image data, expanded in the memory in the module 177, and processed. The processed image data is subjected to primary compression with the same encoding logic as the CDIC primary compression logic, and further subjected to secondary compression with the secondary compression / decompression module 176, and written to the MEM and HDD.

  The image editing module 177 has a watermark data embedding function 177a and a watermark data extraction function 177b. When registering the document information file (file content = management information data + document information data) in the HDD, the image editing module 177 adds the management information data and the alteration countermeasure information data to be added to the document information file as alteration detection data. The watermark data is embedded in the watermark data embedding function 177a, and the print data (image data) of the “watermark” embedding area of the document screen to be transferred (for example, A4 size) is supplied to the watermark data embedding function 177a. The “watermark” data is embedded in the “watermark” embedded area by the embedding function 177a. Then, after replacing the “watermark” embedding area of the image data of the document information file with the watermark-embedded image data, the document information file is registered in the HDD.

  When the IMAC checks whether the document information file registered in the HDD is falsified, the image editing module 177 extracts the image data in the “watermark” embedded area of the image data in the document information file to be checked. The watermark data extraction function 177b is used to extract watermark data (management information data added as alteration detection data and alteration countermeasure information data), and to the extracted alteration detection data, a document information file (management information data + Whether the management information data in the document information data) matches or not is determined. When there is alteration, the extracted alteration countermeasure information data is decoded and a procedure indicated by the data is executed. In the present embodiment, the contents of the management information data added as the falsification detection data include file name, type of document information, registration directory in A1 (HDD), source (user ID, device ID), transfer source, registration date and time, Edit history. The falsification countermeasure information data is used to instruct the source device to perform notification, deregistration, or notification to a transfer source (personal computer) administrator. When the falsification information data is “notify source device” when there is falsification, the IMAC has a falsification in the document information file at the source (device ID) in the management information data in the electronic watermark data. Is notified. If the falsification countermeasure information data is “deregistration”, the document information file is deleted from the HDD, and the origin (device ID) is informed that registration has been deleted because the document information file has been falsified. When the falsification countermeasure information data is “notify the transfer source administrator”, the transfer source in the management information data in the electronic watermark data is notified that the document information file has been falsified.

  As shown in FIG. 4, in addition to the liquid crystal touch panel 79, the operation board 20 includes a ten key 80a, a clear / stop key 80b, a start key 80c, an initial setting key 80d, a mode clear key 80e, and a test print key 80f. The test print key 80f is a key for printing only one copy regardless of the set number of print copies and confirming the print result. By pressing the initial setting key 80d, the initial state of the machine can be arbitrarily customized. The paper size stored in the machine can be set or the state set when the copy function reset key is pressed can be arbitrarily set. When the initial setting key 80d is operated, an “initial value setting” function for setting various initial values, a “password registration” function, a “copyright registration / setting” function, an “usage record output” function, etc. A selection button to specify is displayed. Also, select applications that are preferentially selected when there is no operation for a certain period of time, set the transition time to low power according to the International Energy Star Plan, and set the transition time to auto-off / sleep mode. It is possible to set.

  On the liquid crystal touch panel 79, various function keys and a message indicating the state of the image forming apparatus are displayed. The liquid crystal touch panel 79 has a “copy” function, a “scanner” function, a “print” function, a “facsimile” function, an “store” function, an “edit” function, a “register” function, and other functions for selecting and executing. A function selection key 80g is displayed.

  The “accumulate” function is a function for storing image data of a document read by the document scanner 10, facsimile reception data, and a document from a PC as a document information file and storing it in a storage area of the HDD. The “Register” function is a function that stores information in the HDD registration area. Of the document information files stored in the HDD storage area, a document that is highly common for use by many users, a document that is desired to be stored for a long time, This is a function for storing a document for which proper management is set in a registration area of the HDD.

  The liquid crystal touch panel 79 displays an input / output screen determined by the function designated by the function selection key 80g. For example, when the “copy” function is designated, as shown in FIG. 4, the function keys 79a, 79b and A message indicating the number of copies and the state of the image forming apparatus is displayed. When the operator touches a key displayed on the liquid crystal touch panel 79, the key indicating the selected function is inverted in gray. When the details of the function must be specified (for example, the type of page printing), the detailed function setting screen is displayed by touching the key. Thus, since the liquid crystal touch panel uses a dot display device, it is possible to graphically perform an optimal display at that time.

  FIG. 5 shows processing in the process of registering the document information file in the HDD of the system controller 1 shown in FIG. When reading an original image with the original scanner 10 or receiving document information from a PC, the controller 1 first stores the read image data or document information in the HDD (step 1). In the following, the word “step” is omitted in parentheses, and step no. Only write. Next, the controller 1 displays an input screen for “registration” on the liquid crystal touch panel 79.

  FIG. 6 shows an input screen for “registration”. The “registration” input screen is used to input the registration destination on the HDD, the name of the document information file to be registered, and the information format of the document information, and to select one type of falsification countermeasure. Referring to FIG. 5 again, when the user completes predetermined input and touches the “Register” key, the instruction to register the document information file to the HDD is completed. In response to this, the controller 1 generates a directory for the document information file in the HDD (2), and writes management information data in the header area of the file (3).

  The contents of the management information data (management information items) are a document information file name, a file type, a directory on the copying machine A1, a source, a transfer source, a registration date, and an editing history. The source is the domain name + individual name (global IP address + private IP address) of the copying machine A1 when the file is the image data file read by the scanner 10, and attached to the document information sent from the PC. Source (if not, domain name of the PC + individual name). The transfer source is the domain name + individual name of the device (for example, PC) that has sent the document information. The edit history is the change and date / time of the management information data excluding the edit history, and the edit (change) and date / time of the in-file document information.

  Next, the controller 1 reads out the countermeasure information of the item selected in “Tampering countermeasure” (FIG. 6) from the HDD (4), and generates electronic watermark data of management information data + countermeasure information data (5). Then, it is embedded in the document information (6) and is written in the document information file (7).

  Therefore, the document information file includes the same management information in the form of management information data itself and an electronic watermark embedded in the document information.

  The personal computer PC shown in FIG. 2 stores an application (program) that uses the copier A1. The application is started up, and the copy using the copier A1 and the scanner 10 of the copier A1 are started from the operation input screen. Document reading to be used (& transfer to PC or storage / registration in A1 HDD), A1 HDD storage / registration document printing, image printing on PC, facsimile transmission / reception printing using copier A1, image on PC Can be instructed to store / register A1 in the A1, read the registered document information file in the HDD of A1, and edit the document in the HDD of the copying machine A1. In summary, the input / output functions of the operation input screen displayed on the display of the PC are the same as those of the operation board 20, and the input / output operations that can be performed by operating the operation board 20 are the same on the personal computer display in the PC. It can be carried out. In this case, input is performed with a mouse and a keyboard.

  FIG. 7 shows an outline of processing of the “document application” DUA, which is reading (data browsing) of a document information file in the HDD in an application using the copying machine A1 loaded on the personal computer PC. When the required document information file is downloaded (11) from A1, the PC uses the same function as the watermark data extraction function 177b shown in FIG. 3 to display electronic watermark data embedded in the document information in the document information file ( Management information data + handling information data) is extracted (12). Then, it is determined whether the management information data in the document information file matches the management information data in the extracted electronic watermark data (13).

  If they do not match, it is assumed that the data has been tampered with, and the processing information data in the extracted electronic watermark data is decoded and a process designated by it is performed (14). That is, if the tampering countermeasure information data is “notify source device”, the origin (device ID) in the management information data in the electronic watermark data is notified that the document information file has been tampered with. If the falsification countermeasure information data is “deregistration”, the document information file is deleted from the HDD, and the origin (device ID) is informed that registration has been deleted because the document information file has been falsified. When the falsification countermeasure information data is “notify the transfer source administrator”, the transfer source in the management information data in the electronic watermark data is notified that the document information file has been falsified.

  FIG. 8 shows an outline of the configuration of the information management apparatus according to the second embodiment of the present invention. The network scanner C1 shown in FIG. 8 is similar to the combination of the document scanner 10, the operation board 20, and the image data processing device ACP shown in FIG. 2, and includes a document image reading function, a document server function, and a document information file. It has a function to transmit / receive to / from the network, and has a document information file registration function DRE shown in FIG. Furthermore, it has a function of storing the document information file registered in the HDD of the network scanner C1 in the data management server DS1, and with this function, the document information in which the management information data and the handling information data are embedded in the document information as watermark data. The information file is stored in the data management server DS1. The network scanner C1 also has a document server function. In the second embodiment, the network scanner C1 is positioned as a document server in a small network (LAN). The server for the entire wide area system shown in FIG. 8 is the data management server DS1.

  The personal computers PC1 and PC2, which are client machines connected to the wide area communication network W and obtained permission for access (data browsing) to the data management server DS1, acquire a desired document information file from the data management server DS1. A personal computer PC1, PC2 and a personal computer PC3 which is a server management computer are loaded with server utilization applications (programs) including the same application as the “document application” DUA shown in FIG. 7 and described above. When the information file is acquired, the electronic watermark data extraction and falsification detection described above are executed. However, the PC1 and PC2 transmit the file name and the falsification countermeasure information data as falsification countermeasures to the personal computer PC3 (domain name: global IP address) of the administrator of the data management server DS1. Then, the personal computer PC3 executes a procedure based on the falsification countermeasure information data.

  FIG. 9 shows an outline of the configuration of the information management apparatus according to the third embodiment of the present invention. The network scanner C1 and the data management server DS1 shown in FIG. 9 are the same as those shown in FIG. In the third embodiment, when the personal computers PC1 and PC2 determine that there has been tampering, a measure based on tampering countermeasure information data is executed. That is, if the tampering countermeasure information data is “notify source device”, the origin (device ID) in the management information data in the electronic watermark data is notified that the document information file has been tampered with. If the tampering countermeasure information data is “deregistration”, the data management server DS1 deletes the registration of the corresponding document information file, and indicates that the registration has been erased because the document information file has been altered. ). When the falsification countermeasure information data is “notify the transfer source administrator”, the transfer source in the management information data in the electronic watermark data is notified that the document information file has been falsified.

  FIG. 10 shows one usage mode of the third embodiment. For example, the user A who is an administrator of the personal computer PC1 transfers the document information from the personal computer PC1 (transfer source) to the network scanner C1, and sets the tampering countermeasure data to “notify the transfer source” at the scanner C1. A document information file embedded with electronic watermark data is generated and registered (published) in the data management server DS1. After registration, the user B (personal computer PC2) is requested to access (view data) and edit / update the document information file. After a while or when the user A receives a notification of completion of editing / updating from the user B, the user A accesses and reads the corresponding file with his personal computer PC1. At this time, the presence of tampering is displayed on the personal computer PC1 and it can be confirmed that it has been edited / updated. As described above, the present invention can also be used for checking whether or not there is an update / edit.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a front view showing an external appearance of a multi-function full-color digital copying machine A1 that is a member of an information management apparatus according to a first embodiment of the present invention. It is a block diagram which shows the outline | summary of the image processing system of the information management apparatus shown in FIG. It is a block diagram which shows the outline | summary of a structure of the image memory access control IMAC shown in FIG. FIG. 2 is a plan view of a part of the operation board 20 shown in FIG. 1, showing a state in which an input screen for a “copy” operation is displayed. 3 is a flowchart showing an outline of a document information file registration process of the system controller 1 shown in FIG. 2. It is a top view which shows the input screen for registration of a document information file displayed on the liquid crystal display 79 shown in FIG. 3 is a flowchart showing an outline of a document information file reading process in accordance with an application program of the personal computer PC shown in FIG. It is a system block diagram of the information management apparatus of 2nd Example of this invention. It is a system block diagram of the information management apparatus of 3rd Example of this invention. It is a system block diagram which shows the usage condition of the information management apparatus of 3rd Example.

Explanation of symbols

10: Color document scanner 20: Operation board 30: Automatic document feeder 34: Finisher 34hs: Loading / lowering tray 34ud: Lift platform 34st: Sort tray group
100: Color printer PC: Personal computer PBx: Exchanger PN: Communication line ACP: Image data processing device CDIC: Image data interface control IMAC: Image memory access control IPP: Image data processor HDD: Hard disk device

Claims (6)

Memory means for storing the document information file;
Means for registering the management data and tampering address data of該書image information to the picture information embedding, in the memory means to generate the picture information file including picture information and the management data to said embedding;
Communication means for transmitting the document information file of the memory means to an information processing device via a network; and
The extracts control data and tampering address data embedded in the document information of the document information file read out from the memory means, to determine whether the management data the extracted matches the management data of the picture information file, Tamper countermeasure means for executing the processing that the extracted tampering countermeasure data means if not matched ;
An information management device comprising: The means for registering uses the management data of document information as reference data, embeds the reference data and falsification countermeasure data in the document information, generates a document information file including the document information and the management data, and Register in the memory means;
The falsification handling unit extracts the reference data and falsification countermeasure data embedded in the document information of the document information file read from the memory unit, and compares the management information of the document information file with the reference data for falsification. And when the presence of tampering is detected, the processing meant by the tampering countermeasure data is executed;
The information management apparatus according to claim 1. A document server comprising: memory means for storing a document information file; and communication means for registering a document information file sent from the network to the memory means and sending the document information file in the memory means to the network;
Image capturing means for generating image data representing an image plane, management data and falsification countermeasure data are embedded in image data generated by the image capturing means, and a document information file including the image data and the management data is generated to generate the document data file. Means for registering with the document server via a network; and
Extracting the control data and tampering address data embedded in the document information of the document information file read out from the document server via the network, or management data the extracted matches the management data of the picture information file computer determines and executes processing means said extracted tampered addressed data and do not meet the;
An information management device comprising:   The information management apparatus according to any one of claims 1 to 3, wherein the tampering countermeasure data includes contact data for notifying that tampering has occurred.   The information management apparatus according to claim 4, wherein the contact data is a domain name of the computer.   The information management apparatus according to any one of claims 1 to 5, wherein the tampering countermeasure data includes an instruction to transmit an instruction to delete the corresponding document information file in the memory unit.

Images