JP4453688B2 - Decryption / verification device, Internet facsimile machine, and network system - Google Patents

Description

  The present invention relates to a decryption / verification apparatus, an Internet facsimile apparatus, and a network system.

  Patent Document 1 (Japanese Patent Laid-Open No. 2002-135515) discloses an Internet facsimile machine that transmits an image data for each page of image data using electronic mail. In such an Internet facsimile apparatus, image data is transmitted and received as an attached file together with the body of an electronic mail.

Patent Document 2 (Japanese Patent Laid-Open No. 2006-60369) discloses a result of verifying a signature when a communication unit that receives an e-mail, a printing unit that prints information, and an e-mail with a signature received by the communication unit. And a control unit that causes the printing unit to print the contents of the e-mail by adding the above. As a result, an electronic mail with a signature attached or encrypted can be output or transferred so that the user can see it.
JP 2002-135515 A JP 2006-60369 A

  By the way, in the Internet facsimile apparatus as shown in Patent Document 1, in order to save the received print paper, it can be set not to print the body of the e-mail on the transmission side. If this setting is configured, the email body itself will not be printed.If the signature verification result is set to be printed on the same page as the email body on the receiving side, the verification result will be There was a problem that printing was not possible.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a technique capable of printing a verification result of an email regardless of the setting of the email on the transmission side. There is.

According to the present invention,
A decryption / verification device for decrypting / verifying an email addressed to an Internet facsimile machine that prints an attached file of an email as a facsimile document,
A receiving unit for receiving an email including a body and an attached file;
After verifying whether or not the email is encrypted and whether or not an electronic signature is attached to the email, and decrypting the email when the email is encrypted, A decryption / verification unit that verifies the presence or absence of tampering when an electronic signature is attached to the email ;
A multi-part message generation unit that generates a multi-part message of a main body having the text received by the reception unit as a first part and information indicating a verification result by the decoding / verification unit as a second part;
An output unit for outputting an e-mail including the multipart message;
Including
The multipart message generation unit is provided with a decoding / verification device that generates a header of the second part so that the second part is printed by the Internet facsimile apparatus.

In this way, even if the header information of the body of the e-mail sent from the sender includes instruction information that does not print the body, the verification result is printed on the receiving Internet facsimile machine. it is Ru can be.

  According to the present invention, there is provided an Internet facsimile machine including the decryption / verification device, wherein the output unit is a printing unit that prints out the electronic mail.

  In the decryption / verification apparatus according to the present invention, the output unit may be a transmission unit that transmits the electronic mail to the Internet facsimile apparatus.

  According to the present invention, there is provided a network system including the decryption / verification apparatus and the Internet facsimile apparatus.

  It should be noted that any combination of the above-described constituent elements and a conversion of the expression of the present invention between a method, an apparatus, a system, a recording medium, a computer program, etc. are also effective as an aspect of the present invention.

  According to the present invention, an e-mail verification result can be printed regardless of the setting of the e-mail on the transmission side.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.

  FIG. 1 is a block diagram showing a configuration of a network system including an Internet facsimile machine 100 and a decryption / verification server (decryption / verification apparatus) 200 in the present embodiment.

  The Internet facsimile machine 400 transmits an e-mail addressed to the Internet facsimile machine 100. The encryption processing server 500 encrypts an electronic mail transmitted by the Internet facsimile machine 400 and gives an electronic signature to the electronic mail. The decryption / verification server 200 receives the electronic mail addressed to the Internet facsimile machine 100 and verifies the encryption state. The decryption / verification server 200 transfers the e-mail with the verification result added to the Internet facsimile machine 100. The decryption / verification server 200 performs decryption processing when the electronic mail addressed to the Internet facsimile machine 100 is encrypted, and transfers the decrypted electronic mail to the Internet facsimile machine 100. The mail server 600 and the mail server 300 relay electronic mail transmitted and received between the Internet facsimile machine 400 and the Internet facsimile machine 100.

  The internet facsimile machine 400 and the encryption processing server 500, and the decryption / verification server 200 and the internet facsimile machine 100 are connected via a private network such as a LAN (Local Area Network), for example. Can do. A configuration in which the encryption processing server 500 and the mail server 600, the mail server 600 and the mail server 300, and the mail server 300 and the decryption / verification server 200 are connected via an external network such as the Internet, for example. can do.

  For example, when the Internet facsimile machine 400 and the encryption processing server 500 are connected to an in-house network, an electronic mail transmitted and received between the Internet facsimile machine 400 and the encryption processing server 500 may not be encrypted. On the other hand, it is preferable to encrypt electronic mail sent to an external network such as the Internet. In such a case, the encryption processing server 500 may receive e-mails sent to the external network from a plurality of terminals connected to the in-house network, encrypt them appropriately, and send them to the external network. it can.

  Similarly, when the Internet facsimile machine 100 and the decryption / verification server 200 are connected to an in-house network, the electronic mail transmitted / received between the decryption / verification server 200 and the Internet facsimile machine 100 may not be encrypted. Therefore, the decryption / verification server 200 receives e-mails addressed to the terminals connected to the in-house network from the external network, decrypts them if they are encrypted, and sends them to the destination terminal. be able to.

  The Internet facsimile machine 400 may have a function of the encryption processing server 500 in its own apparatus. Further, the Internet facsimile machine 100 may be configured to have the function of the decryption / verification server 200.

  In the present embodiment, Internet facsimile apparatus 400 transmits an electronic mail having a facsimile document as an attached file to Internet facsimile apparatus 100. The Internet facsimile machine 100 prints the attached file of the received e-mail as a facsimile document. In the present embodiment, Internet facsimile machine 400 and Internet facsimile machine 100 transmit and receive electronic mail by S / MIME (Secure Multipurpose Internet Mail Extensions). The Internet facsimile machine 400 and the Internet facsimile machine 100 can be configured to be able to use the MIME multi-part function.

  The Internet facsimile machine 400 can include a field in the header of the e-mail body to be transmitted that prevents the e-mail body from being printed by the receiving Internet facsimile machine 100. For example, by including “IGNORE” as the tag name indicating that the text is not printed in the MIME header and the value thereof, it is possible to prevent the Internet facsimile apparatus 100 from printing the email text.

  FIG. 2 is a block diagram showing the configuration of the decryption / verification server 200 and the Internet facsimile machine 100 in the present embodiment.

  Each component of the Internet facsimile machine 100 and the decryption / verification server 200 shown in FIG. 2 is not a hardware unit configuration but a functional unit block. Each component of the Internet facsimile machine 100 and the decryption / verification server 200 includes an arbitrary computer CPU, memory, a program for realizing the components shown in the figure loaded in the memory, a storage unit such as a hard disk for storing the program, It is realized by any combination of hardware and software, centering on the network connection interface. It will be understood by those skilled in the art that there are various modifications to the implementation method and apparatus.

  The decryption / verification server 200 includes a transmission / reception unit 202, a control unit 204, a decryption / verification unit 206, a multipart message generation unit 208, and a verification data storage unit 210.

  The transmission / reception unit 202 receives an email from the mail server 300 via the second network 800 such as the Internet. In the present embodiment, the transmission / reception unit 202 has a function of transmitting / receiving an electronic mail by a Secure Multipurpose Internet Mail Extensions (S / MIME) method based on PKI (Public Key Infrastructure). Note that the e-mail addressed to the Internet facsimile machine 100 includes a text and an attached file.

  The control unit 204 controls each function of the decryption / verification server 200. Although not shown, for example, the decryption / verification server 200 determines whether or not to print the verification result in the Internet facsimile machine 100, and decrypts and verifies when the e-mail transferred to the Internet facsimile machine 100 is encrypted. A storage unit that stores settings such as whether or not to perform decryption in the server 200 can be included. In this case, referring to the storage unit, the control unit 204 refers to the Internet facsimile machine 100 without attaching the verification result or performing decoding in the case of the setting not to print the verification result or the setting not to perform the decoding. E-mail can be transferred.

  When the transmission / reception unit 202 receives an electronic mail addressed to the Internet facsimile machine 100, the decryption / verification unit 206 determines whether the electronic mail is encrypted. In the present embodiment, the decryption / verification unit 206 determines whether or not the e-mail is encrypted. Whether or not the electronic mail is encrypted can be determined from the S / MIME header. The decryption / verification unit 206 decrypts the electronic mail when it is encrypted. When the electronic signature is attached, the decryption / verification unit 206 verifies whether or not tampering has occurred. The verification data storage unit 210 stores a sender certificate used when the decryption / verification unit 206 verifies the presence / absence of falsification based on the electronic signature, a decryption key used when performing decryption, and the like.

  The multi-part message generation unit 208 generates a multi-part message in which the text of the email received by the transmission / reception unit 202 is the first part and the information indicating the verification result by the decryption / verification unit 206 is the second part. To do. At this time, the multi-part message generator 208 generates the header of the second part so that the second part is printed by the Internet facsimile machine.

FIG. 3 is a diagram showing a configuration of an electronic mail transmitted / received by the decryption / verification server 200.
FIG. 3A shows a configuration of the electronic mail 10 received by the transmission / reception unit 202 from the Internet facsimile machine 400 via the encryption processing server 500 or the like. The e-mail 10 has a multi-part specification in which a body message and attached file data are divided by a delimiter “” = _44444444444444444_ = ””. Here, the text header includes a field “Content-X-CIAJWNETFAX: IGNORE”. As a result, the text is not printed.

  FIG. 3B shows a configuration of the electronic mail 20 in a state where the multipart message generation unit 208 adds the verification result by the decryption / verification unit 206 to the electronic mail 10 as a new part. The e-mail 20 is configured to include three parts in which a body message, a verification result message, and attached file data are each divided by a delimiter “” = _44444444444444444_ = ””. Here, the header for the body includes a field “Content-X-CIAJWNETFAX: IGNORE” as in the electronic mail 10 of FIG. As a result, the text is not printed. On the other hand, the verification result header does not include such a field. Therefore, the verification result message can be printed by the Internet facsimile machine 100.

  Returning to FIG. 2, the Internet facsimile machine 100 includes a transmission / reception unit 102, a control unit 104, and a printing unit 112. The transmission / reception unit 102 receives an e-mail from the decryption / verification server 200 via the first network 700 such as a LAN. The control unit 104 controls each function of the Internet facsimile machine 100. When the transmission / reception unit 102 receives an email, the printing unit 112 prints the email based on the control of the control unit 104. At this time, for example, if the header of the body message of the electronic mail includes a field indicating that the body message is not printed, the printing unit 112 does not print the body.

  FIG. 4 is a flowchart showing a processing procedure of the decryption / verification server 200 in the present embodiment.

  When the transmission / reception unit 202 receives an e-mail (YES in S100), the control unit 204 determines whether verification is necessary (S102). When verification is necessary (YES in S102), the control unit 204 causes the decryption / verification unit 206 to perform verification (S104). Subsequently, the control unit 204 determines whether or not the verification result is set to be printed (S106). In the case of setting to print the verification result (YES in S106), the multipart message generation unit 208 generates a multipart message in which the verification result by the decryption / verification unit 206 is included in the e-mail (S108). Thereafter, the transmission / reception unit 202 transmits an electronic mail to the Internet facsimile machine 100 (S110).

  If verification is not necessary in step S102 (NO in S102) and if the verification result is not set to be printed (NO in S106), the process proceeds to step S110, and the transmission / reception unit 202 sends the e-mail to the Internet facsimile machine 100. Transmit (S110).

  As described above, according to the decryption / verification server 200 in the present embodiment, for example, a field for preventing the text from being printed in the header of the text of an e-mail transmitted from the Internet facsimile machine 400 to the Internet facsimile machine 100 is provided. Even if included, since the verification result is printed separately from the original text in the Internet facsimile machine 100, the verification result of the e-mail can be printed.

  As mentioned above, although embodiment of this invention was described with reference to drawings, these are the illustrations of this invention, Various structures other than the above are also employable.

  In the above embodiment, the functions of the Internet facsimile machine 400 on the transmission side and the facsimile machine 100 on the reception side have been described individually, but these may have the same functions. In addition, the functions of the decryption / verification server 200 and the encryption processing server 500 have been described individually. However, the decryption / verification server 200 and the encryption processing server 500 have functions of a decryption / verification server and an encryption processing server. It can be set as the structure which has these. That is, when an e-mail is transmitted from the facsimile apparatus 100 to the Internet facsimile apparatus 400, the decryption / verification server 200 encrypts the e-mail, and the encryption processing server 500 verifies the e-mail. be able to.

  In the Internet facsimile apparatus 100, if the header of the body of the email does not include a field for preventing the body from being printed, the setting is made so that the verification result of the email is printed on the same page as the original body. May be.

1 is a block diagram showing a network configuration including a decryption / verification server and an Internet facsimile machine according to an embodiment of the present invention. It is a block diagram which shows the structure of the decoding / verification server in embodiment of this invention. It is a figure which shows the structure of the email transmitted / received by the decoding / verification server in embodiment of this invention. It is a flowchart which shows the process sequence of the decoding / verification server in embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Internet facsimile apparatus 102 Transmission / reception part 104 Control part 106 Printing part 200 Decoding / verification server 202 Transmission / reception part 204 Control part 206 Decoding / verification part 208 Multipart message generation part 210 Verification data storage part 300 Mail server 400 Internet facsimile apparatus 500 Encryption Server 600 Mail server 700 First network 800 Second network

Claims (4)

A decryption / verification device for decrypting / verifying an email addressed to an Internet facsimile machine that prints an attached file of an email as a facsimile document,
A receiving unit for receiving an email including a body and an attached file;
After verifying whether or not the email is encrypted and whether or not an electronic signature is attached to the email, and decrypting the email when the email is encrypted, A decryption / verification unit that verifies the presence or absence of tampering when an electronic signature is attached to the email ;
A multi-part message generation unit that generates a multi-part message of a main body having the text received by the reception unit as a first part and information indicating a verification result by the decoding / verification unit as a second part;
An output unit for outputting an e-mail including the multipart message;
Including
The multi-part message generator generates a header of the second part so that the second part is printed by the Internet facsimile apparatus. The decoding / verification apparatus according to claim 1 ,
The decryption / verification apparatus, wherein the output unit is a transmission unit that transmits the electronic mail to the Internet facsimile machine. The decoding / verification apparatus according to claim 2 ,
The Internet facsimile machine;
Including network systems. Including the decoding / verification device according to claim 1 ,
An Internet facsimile apparatus, wherein the output unit is a printing unit that prints out the electronic mail.

Images