JP6961927B2 - System, document management method, relay device, control program of relay device - Google Patents

Description

The present invention relates to a system, a document management method, a relay device , and a control program for the relay device.

Information processing devices such as PCs (Personal Computers) and MFPs (multifunction peripherals) installed in office environments access cloud storage services via networks and manage documents due to improvements in computer performance and the spread of network technology. Etc. are being processed. As such a cloud storage service, an information processing terminal which is a client terminal operated by a user such as a PC, a service providing device that provides a cloud storage service, and a relay device that relays and connects the information processing terminal and the service providing device. It is known that it is composed of and.

Document data stored in a service providing device such as a server in such a cloud storage service is transmitted to an information processing terminal via a relay device. Patent Document 1 discloses a configuration that makes it easy for the user to grasp the search result when searching for the document data intended by the user with respect to the document data stored in the service providing device.

In the technique disclosed in Patent Document 1, the relay device converts the file identifier indicating the search result of the document data received from the service providing device according to the conversion routine, and transmits the file identifier to the information processing device. In this way, when the same document file is stored in each of the plurality of service providing devices, the document file having the same file identifier can be presented to the user as one document file.

By the way, in such a cloud storage service, it is common practice to encrypt document data and store it in a service providing device such as a cloud server. As a technology for handling document data by encrypting it, the relay device encrypts the document data with a user-owned encryption key, and the service providing device provides a storage service using only the encrypted data. A technology called "technology" is drawing attention.

Since the provider that provides the storage service by "Zero Knowledge Technology" handles only the encrypted document data, it can appeal that the contents of the document data provided by the user who is the customer are not viewed. Furthermore, the document data provided when the provider is requested to provide information by public authority is encrypted document data.

Therefore, for the user, there is almost no possibility that the contents of the document data will be viewed by the provider and the information provider that provides the storage service, and the storage service can be used while maintaining the confidentiality of the document data. There are advantages.

However, the technique disclosed in Patent Document 1 does not assume encrypted document data in the first place, and in order to specify a file of document data encrypted by a file identifier in a service providing device, encryption is performed. The converted document data must be decrypted. Therefore, the confidentiality of the document data provided by the user may be impaired.

In order to solve the above problems, it is an object of the present invention to manage document data without impairing confidentiality.

In order to solve the above problems, one aspect of the present invention is an image forming apparatus for transmitting and receiving storage target data which is data to be stored, and data generated based on the storage target data received from the image forming apparatus. a system comprising: a relay device to be stored in the service providing apparatus, the information the image forming apparatus, which includes an image processing unit for generating the data based on the read image, is input to the image forming apparatus The user identifier that identifies the user of the image forming apparatus, the information of the character string unique to each user , the generated data, and the specific information that identifies the storage target data are transmitted to the relay device. The service providing device stores the encrypted data of the storage target data and the user identifier in association with each other for each relay device, and the relay device is unique to each user transmitted from the image forming device. The user information management unit that stores the character string information, the user identifier that identifies the user, and the unique encryption key for each user in association with each other, and the character string information transmitted from the image forming apparatus. An encryption data generation unit that decrypts the encryption key and generates encrypted data from the storage target data received from the image forming apparatus by the composited encryption key, and an identifier that identifies the encrypted data are generated. a specifying information storage unit for storing a previous said an original data encrypted data Kitoku a constant information and the identifier associated Dzu only be to identify the encrypted data based on the identifier associated with the specific information, and the encrypted data storage control unit to be stored in the service providing apparatus in association with identifier generated based on the encrypted data and the encrypted data, stored in the service providing apparatus, the encrypted data specified An encrypted data decryption unit that receives from the service providing device and decrypts the received encrypted data with a unique encryption key for each user, and the storage target data that is the original data decrypted from the encrypted data. Is included in the communication control unit that transmits the image to the image forming apparatus.

According to the present invention, document data can be managed without impairing confidentiality.

The figure which shows the operation mode of the document management system which concerns on embodiment of this invention. The figure which shows the hardware structure of the information processing apparatus which concerns on embodiment of this invention. The figure which shows the hardware structure of the image forming apparatus which concerns on embodiment of this invention. The figure which shows the functional structure of the relay device which concerns on embodiment of this invention. The figure which shows the functional structure of the service providing apparatus which concerns on embodiment of this invention. The figure which shows the functional structure of the image forming apparatus which concerns on embodiment of this invention. The figure which shows the functional structure of the PC which concerns on embodiment of this invention. The figure which shows the information structure of the user information management table which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of registering the user information which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of registering the user information which concerns on embodiment of this invention. The figure which shows the information structure of the document management table which concerns on embodiment of this invention. The figure which shows the information structure of the document management table which concerns on embodiment of this invention. The figure which shows the information structure of the storage data management table which shows the encrypted document data which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of encrypting the document data which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process which stores the encrypted document data which concerns on embodiment of this invention in a service providing apparatus. The sequence diagram which shows the flow of the process of reading the encrypted document data stored in the service providing apparatus which concerns on embodiment of this invention. The figure which shows the display mode of the document data management UI which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of reading the encrypted document data which concerns on embodiment of this invention from a service providing apparatus. The sequence diagram which shows the flow of the process of encrypting the document data which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of encrypting the document data which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process which stores the document data which concerns on embodiment of this invention in a service providing apparatus. The sequence diagram which shows the flow of the process which blocks access to the stored document data which concerns on embodiment of this invention. The sequence diagram which shows the flow of the process of deleting the encrypted document data stored in the service providing apparatus which concerns on embodiment of this invention. The figure which shows the display mode of the document data management UI which concerns on embodiment of this invention. The figure which shows the display mode of the document data management UI which concerns on embodiment of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the present embodiment, an information processing device such as a PC which is a client terminal operated by a user, an image forming device such as an MFP, a service providing device for providing a storage service, and between the client terminal and the service providing device as described above. A document management system composed of a relay device that mediates between the above will be described as an example. The image forming apparatus in the present embodiment will be described by taking an MFP (Multifunction Peripheral: multifunction device) including an image reading apparatus as an example.

FIG. 1 is a diagram illustrating an operation mode of the document management system 6 according to the present embodiment. As shown in FIG. 1, the document management system 6 according to the present embodiment includes a PC 1, an image forming device 2 including input / output functions such as a printer and a scanner, a service providing device 3 as a storage destination of document data, a PC 1, and an image. A relay device 5 that connects the forming device 2 and the service providing device 3 via the network 4 and mediates the exchange of document data is included. It should be noted that the number of PCs 1 or the image forming apparatus 2 shown in FIG. 1 may be included in the configuration.

The PC 1 functions as a first information processing device which is a client terminal operated by a user who transmits document data which is storage target data to the service providing device 3. In addition to a PC, it may be realized by an information terminal such as a smartphone or a tablet terminal. An application for generating document data including character information, images, and charts is installed on the PC1 by a user operation. The PC 1 transmits the document data to be stored to the relay device 5.

The image forming apparatus 2 functions as a first information processing apparatus such as an MFP which is a client terminal that can be used as a printer, a facsimile, a scanner, and a copying machine by providing an image forming function, an image forming function, a communication function, and the like. Is. Further, the image forming apparatus 2 is a color printer that generates CMYK or monochrome drawing information based on the image information included in the drawing instruction transmitted from the PC 1 and executes the image forming output based on the generated drawing information. And has a function as a monochrome printer. Further, the image forming apparatus 2 is equipped with software for generating document data based on the image read by the scanner. The image forming apparatus 2 transmits the document data to be stored to the relay apparatus 5.

The service providing device 3 includes a storage device that stores data received via the network 4, and functions as a third information processing device. The relay device 5 is an information processing device having a function of connecting a network between a client device used by a user of a document management system 6 such as a PC 1 and an image forming device 2 and a service providing device 3, and the client device and the service providing device. It is an information processing device that encrypts or decrypts data transmitted to and received from 3 and mediates the exchange of data, and functions as a second information processing device.

The document data encrypted by the relay device 5 is transmitted to the service providing device 3 via the network 4 and stored. In the present embodiment, when the user of the document management system 6 uses the data stored in the service providing device 3, the document data encrypted by the service providing device 3 is not decrypted, but is encrypted in the relay device 5. The converted document data is decrypted into the original document data. As described above, it is a gist of the present invention to manage document data without impairing the confidentiality of encrypted data such as document data encrypted by decryption in the relay device 5.

Next, the hardware configuration of the PC 1 according to the present embodiment will be described. FIG. 2 is a block diagram showing a hardware configuration of the PC 1 according to the present embodiment. In the present embodiment, the service providing device 3 and the relay device 5 also have the same hardware configuration as the PC 1. As shown in FIG. 2, the PC 1 according to the present embodiment includes a CPU (Central Processing Unit) 10, a RAM (Random Access Memory) 20, a ROM (Read Only Memory) 30, an HDD (Hard Disk Drive) 40, and an I / F 50. It is connected via bus 90.

Further, an LCD (Liquid Crystal Display) 60 and an operation unit 70 are connected to the I / F 50. The service providing device 3 and the relay device 5 may be configured not to include the LCD 60 and the operation unit 70.

The CPU 10 is a calculation means and controls the operation of the entire PC1. The RAM 20 is a volatile storage medium capable of reading and writing information at high speed, and is used as a work area when the CPU 10 processes information. The ROM 30 is a read-only non-volatile storage medium, and stores programs such as firmware. The HDD 40 is a non-volatile storage medium capable of reading and writing information, and stores an OS (Operating System), various control programs, application programs, and the like.

The I / F 50 connects and controls the bus 90 with various hardware, networks, and the like. The LCD 60 is a display unit for the user to confirm the state of the PC1. The operation unit 70 is an input unit for the user to input information on the PC 1, and in the present embodiment, the operation unit 70 is composed of a touch panel, hard keys, and the like.

In such a hardware configuration, a program stored in a recording medium such as a ROM 30, HDD 40, or an optical disk is read into the RAM 20, and the CPU 10 performs an operation according to the program, so that the PC 1, the service providing device 3, and the relay are relayed. Each software control unit in the device 5 is configured. By combining the software control unit configured in this way with hardware, functional blocks that realize the functions of the PC 1, the service providing device 3, and the relay device 5 are respectively configured.

Next, the hardware configuration of the image forming apparatus 2 according to the present embodiment will be described. FIG. 3 is a block diagram showing a hardware configuration of the image forming apparatus 2 according to the present embodiment. The image forming apparatus 2 has a configuration in which the controller 200 and the engine unit 33 are connected by a PCI (Peripheral Component Interface) bus.

The controller 200 is a controller that controls the entire image forming apparatus 2 and controls drawing, communication, and input from the operation unit. The engine unit 33 is a printer engine or the like that can be connected to the PCI bus, and is, for example, a black-and-white plotter, a 1-drum color plotter, a 4-drum color plotter, a scanner, a fax unit, or the like. The engine unit 33 includes an image processing portion such as error diffusion and gamma conversion in addition to a so-called engine portion such as a plotter.

The controller 200 includes a CPU 21, a north bridge (NB) 23, a system memory (MEM-P) 22, a south bridge (SB) 24, a local memory (MEM-C) 27, an ASIC (Application Specific Integrated Circuit) 26, and a hard disk drive ( HDD) 35 is included. Further, the north bridge (NB) 23 and the ASIC 26 are connected by an AGP (Accelerated Graphics Port) bus 25. Further, the MEM-P22 includes a ROM (Read Only Memory) 22a and a RAM (Random Access Memory) 22b.

The CPU 21 controls the image forming apparatus 2 and includes a chipset including the NB23, the MEM-P22, and the SB24, and is connected to other devices via the chipset. The NB 23 is a bridge for connecting the CPU 21 to the MEM-P22, SB24, and AGP bus 25, and includes a memory controller that controls reading and writing to the MEM-P22, a PCI master, and an AGP target. The MEM-P22 is a system memory used as a memory for storing programs and data, a memory for expanding programs and data, a memory for drawing a printer, and the like, and includes a ROM 22a and a RAM 22b.

The ROM 22a is a read-only memory used as a memory for storing programs and data, and the RAM 22b is a writeable and readable memory used as a memory for expanding programs and data, a memory for drawing a printer, and the like. The SB24 is a bridge for connecting the NB23 to a PCI device and peripheral devices. The SB 24 is connected to the NB 23 via a PCI bus, and a network interface (I / F) unit may be connected to the PCI bus.

The ASIC 26 is an IC (Integrated Circuit) for image processing applications that has hardware elements for image processing, and realizes the function of a bridge that connects the AGP bus 25, the PCI bus, the HDD 35, and the MEM-C27, respectively. The ASIC 26 includes a PCI target and an AGP master, an arbiter (ARB) that forms the core of the ASIC 26, a memory controller that controls the MEM-C27, and a plurality of DMACs (Direct Memory Access) that rotate image data by hardware logic or the like. It includes a controller) and a PCI unit that transfers data between the engine unit 33 and the engine unit 33 via the PCI bus.

The ASIC 26 is connected to the FCU (Facsimile Control Unit) 28, the USB (Universal Serial Bus) 29, the IEEE 1394 (the Institut of Electrical and Electronic) Interface N.I. Will be done. The operation display unit 34 is directly connected to the ASIC 26. The MEM-C27 is a local memory used as a copy image buffer and a code buffer.

The FCU 28 controls the transmission and reception of facsimiles in the image forming apparatus 2. The USB 29 transmits / receives data between the image forming apparatus 2 and an external terminal connected to the image forming apparatus 2 via USB. The IEEE1394 interface 31 transmits and receives data between the image forming apparatus 2 and an external terminal connected to the image forming apparatus 2 via an IEEE1394 terminal. The NFC interface 32 performs non-contact short-range wireless communication.

The HDD 35 is a storage for accumulating image data, a program, a font data, and a form, and stores a program file of application software executed in the image forming apparatus 2. The AGP bus 25 is a bus interface for a graphics accelerator card proposed to speed up graphic processing, and speeds up the graphics accelerator card by directly accessing the MEM-P22 with high throughput. ..

Next, the functional configuration of the relay device 5 according to the present embodiment will be described with reference to FIG. FIG. 4 is a functional block diagram showing a functional configuration of the relay device 5 according to the present embodiment. As shown in FIG. 4, the relay device 5 according to the present embodiment includes a communication control unit 501, an encryption / decryption processing unit 502, a document information management unit 503, a user information management unit 504, and a web operation control unit 505.

The communication control unit 501 makes an authentication processing request to the service providing device 3 based on the certificate unique to the relay device 5 owned by the relay device 5, and secures a communication channel such as HTTPS with the service providing device 3. To send and receive encrypted document data and data such as document data identifiers. It also sends and receives data to and from the PC 1 and the image forming apparatus 2.

The encryption / decryption processing unit 502 stores the document data received from the PC 1 and the image forming apparatus 2 in the HDD 40 of the relay device 5 and the like based on the user key which is an encryption key unique to each user of the document management system 6. It functions as an encrypted data generation unit that encrypts by the encryption algorithm stored in the unit.

Further, the encryption / decryption processing unit 502 uses an encryption algorithm that stores the encrypted document data read from the service providing device 3 in a storage unit such as the HDD 40 of the relay device 5 based on the user key. It functions as an encrypted data decryption unit for decryption.

The document information management unit 503 generates a document data identifier that identifies the document data, and manages information associated with the document data name and the generated document data identifier by a document management table for each user of the document management system 6. Functions as a specific information storage unit. The document management table will be described later.

The user information management unit 504 generates user information, which is information for managing document data for each user of the document management system 6. Specifically, the user information management unit 504 is a user identifier, a passphrase, and a user-specific encryption key for identifying the user when a new user of the document management system 6 is registered and the user information is generated. Each user key is generated and stored in the user information management table described later. The user information management unit 504 encrypts and stores the user key.

The user information management unit 504 decrypts the user key according to the corresponding passphrase, and expands the decrypted user key into the RAM 22b. In this way, the user key stored in the user information management table is decrypted based on the corresponding passphrase.

Further, the user information management unit 504 executes the user authentication process in the document management system 6 based on the generated user identifier, passphrase, and user key. The process of generating the user identifier, passphrase, user key, and user authentication process will be described later.

The web operation control unit 505 performs a process of displaying a UI (User Interface) for storing, reading, and deleting document data using the document management system 6 in a web browser mounted on the PC 1, and user registration. And perform the process of displaying the authentication UI for user authentication. Further, the image forming apparatus 2 provides a Web API (Application Programming Interface) for executing processing for storing document data, user authentication, and user registration by using the document management system 6.

As described above, only the program for executing the encryption algorithm is stored in the relay device 5, and the user key used for encrypting the document data and decrypting the encrypted document data is stored in the relay device 5. It is decrypted by the user of the document management system 6 by inputting a passphrase. Therefore, in order to make the user key required for encryption / decryption available in the relay device 5, the passphrase entered by the authenticated user is required, so that the security is more robust. A document management system 6 can be provided.

Next, the functional configuration of the service providing device 3 according to the present embodiment will be described with reference to FIG. FIG. 5 is a functional block diagram showing a functional configuration of the service providing device 3 according to the present embodiment. As shown in FIG. 5, the service providing device 3 according to the present embodiment includes a communication control unit 301 and a data storage unit 302.

The communication control unit 301 executes an authentication process based on the certificate unique to the relay device 5 held by the relay device 5, and secures a communication channel such as HTTPS (Hypertext Transfer Protocol) with the relay device 5. Is established and data is sent and received. The data storage unit 302 stores the identifier that identifies the document data and the encrypted document data in association with each other.

As described above, the service providing device 3 according to the present embodiment cannot decrypt the stored encrypted document data. Therefore, in the document management system 6, the administrator who manages the service providing device 3 does not know the contents of the encrypted document data.

Next, the functional configuration of the image forming apparatus 2 according to the present embodiment will be described with reference to FIG. FIG. 6 is a functional block diagram showing a functional configuration of the image forming apparatus 2 according to the present embodiment. As shown in FIG. 6, the image forming apparatus 2 according to the present embodiment includes a communication control unit 201, a screen display control unit 202, an input / output control unit 203, and an image processing unit 204.

The communication control unit 201 transmits / receives data to / from the relay device 5. The screen display control unit 202 controls the screen, UI, and the like displayed on the operation display unit 34 of the image forming apparatus 2. The input / output control unit 203 generates instruction information for storing, reading, deleting, and the like of document data based on the operation signals of the screen and UI displayed on the operation display unit 34. The communication control unit 201 transmits the generated instruction information to the relay device 5.

The image processing unit 204 generates document data based on the image of the original document read by the scanner unit of the image forming apparatus 2. In addition, a process of generating drawing information for printing out the data input to the image forming apparatus 2 is executed.

Next, the functional configuration of the PC 1 will be described with reference to FIG. 7. FIG. 7 is a functional block diagram showing a functional configuration of the PC 1. As shown in FIG. 7, the PC 1 includes a communication control unit 101, a screen display control unit 102, and an input / output control unit 103.

The communication control unit 101 transmits / receives data to / from the relay device 5. The screen display control unit 102 controls the screen, UI, and the like displayed on the display unit such as the LCD 60. The input / output control unit 103 generates instruction information for storing, reading, deleting, and the like of document data based on the operation signals of the screen or UI displayed on the display unit such as the LCD 60. The communication control unit 101 transmits the generated instruction information to the relay device 5.

In the document management system 6 configured in this way, the document data created by the PC 1 and the document data generated by using the scanner function of the image forming apparatus 2 are delivered to the service providing device via the relay device 5 and the network 4. A so-called storage service for storing in 3 is generally performed. In the present embodiment, the document data transmitted to the service providing device 3 is encrypted by the relay device 5.

Then, the document data stored in the service providing device 3 can be specified from the PC 1 without decrypting the encrypted document data in the service providing device 3. Therefore, in the network 4 and the service providing device 3, the encrypted document data can be managed without being decrypted, so that the confidentiality of the encrypted document data is maintained.

Next, the flow of the process of managing the document data in the document management system 6 according to the present embodiment will be described with reference to the drawings. First, with reference to FIGS. 8 to 10, a flow of processing for newly registering user information in the document management system 6 will be described.

FIG. 8 is a data table showing the information structure of the user information management table according to the present embodiment. As shown in FIG. 8, the user information according to the present embodiment includes a user identifier, a passphrase, and a user key.

The user identifier is information for identifying the user, and is information that can be arbitrarily set by the user. The passphrase is information for authenticating the user identifier, and is information such as a character string that can be arbitrarily specified by the user. Further, the passphrase is stored in the user information management unit 504 in an irreversible conversion format such as a hash value.

The user key is information required for encrypting and decrypting document data, and is encrypted and stored in the user information management unit 504. Further, when a new user of the document management system 6 is registered and the user information is generated, the user information management unit 504 generates a random number or the like so that the user key does not overlap with the already generated user key. Generated. Further, the user information management unit 504 executes a encryption algorithm using a passphrase in order to decrypt the encrypted user key.

FIG. 9 is a sequence diagram showing a flow of processing for registering user information according to the present embodiment. FIG. 9 describes a flow of processing for registering user information from PC1. In the document management system 6, the user who newly registers from the PC 1 first operates the UI displayed on the PC 1. When an operation requesting user registration is performed in the UI displayed on the PC 1, the input / output control unit 103 requests the relay device 5 to read the authentication UI (S901).

The web operation control unit 505 transmits instruction information for displaying the authentication UI on the PC1 to the PC1 (S902). The screen display control unit 102 causes the display unit to display the authentication UI based on the instruction information received from the relay device 5 (S903).

The user of the document management system 6 operates the operation unit 70 of the PC 1 to input the user identifier and the passphrase. The input / output control unit 103 generates input information to be specified as a user identifier and a passphrase based on the user's operation (S904), and the communication control unit 101 transmits the generated input information to the relay device 5 (). S905).

Upon receiving the input information, the user information management unit 504 generates a user identifier and a passphrase, and further generates a random number to generate a user key (S906). The user information management unit 504 encrypts the generated user key, stores it together with the user identifier and passphrase corresponding to the generated user key, and updates the user information management table (S907).

The user information management unit 504 stores the generated user key together with the corresponding user identifier and passphrase, updates the user information management table, and transmits notification information indicating that the registration of the user information is completed to the PC1 (S908). ). When the screen display control unit 102 receives the notification information, the screen display control unit 102 displays a screen for notifying that the registration of the user information is completed on the display unit (S909), and ends this process.

In this way, although the user identifier and the passphrase are generated in the PC 1, the user key is generated in the relay device 5 and managed as user information in the user information management unit 504.

Next, with reference to FIG. 10, the flow of the process of registering the user information from the image forming apparatus 2 will be described. FIG. 10 is a sequence diagram showing a flow of processing for registering user information according to the present embodiment. In the document management system 6, a user who newly registers from the image forming apparatus 2 first operates the UI displayed on the operation display unit 34. When the operation requesting user registration is performed in the UI displayed on the operation display unit 34, the input / output control unit 203 requests the relay device 5 to read the authentication UI (S1001).

The web operation control unit 505 transmits instruction information for displaying the authentication UI on the operation display unit 34 to the image forming apparatus 2 (S1002). The screen display control unit 202 causes the operation display unit 34 to display the authentication UI based on the instruction information received from the relay device 5 (S1003).

The user of the document management system 6 operates the operation display unit 34 to input the user identifier and the passphrase. The input / output control unit 203 generates input information that identifies the user identifier and the passphrase based on the user's operation (S1004), and the communication control unit 201 transmits the generated input information to the relay device 5. (S1005).

The image forming apparatus 2 is equipped with an NFC interface 32. Therefore, the process of S1004 may be executed by the user bringing the IC card or the like in which the user identifier and the passphrase are stored close to the NFC interface 32.

Upon receiving the input information, the user information management unit 504 generates a user identifier and a passphrase, and further generates a random number to generate a user key (S1006). The user information management unit 504 encrypts the generated user key, stores it together with the user identifier and passphrase corresponding to the generated user key, and updates the user information management table (S1007).

The user information management unit 504 stores the generated user key together with the corresponding user identifier and passphrase, updates the user information management table, and transmits notification information indicating that the registration of the user information is completed to the image forming apparatus 2. (S1008). When the screen display control unit 202 receives the notification information, the screen display control unit 202 displays a screen for notifying that the registration of the user information is completed on the operation display unit 34 (S1009), and ends this process.

In this way, although the user identifier and the passphrase are generated in the image forming apparatus 2, the user key is generated in the relay device 5 and managed as user information in the user information management unit 504.

The user who has registered the user can save the document data from the PC 1 or the image forming device 2 to the service providing device 3 via the relay device 5. Next, the mode of managing the document data identifier and the document data name in the document information management unit 503 will be described with reference to the drawings. FIG. 11 is a diagram showing a data table showing the information structure of the document management table of the user A, and FIG. 12 is a diagram showing a data table showing the information structure of the document management table of the user B.

As shown in FIGS. 11 and 12, the document information management unit 503 generates a random number based on the document data to generate a document data identifier, and associates the document data name with the document data identifier in the document management table. Remember. In addition, the document information management unit 503 manages the document management table for each user. By doing so, the document information management unit 503 can specify the document data based on the document data identifier for each user.

FIG. 11 is a document management table for user A, and FIG. 12 is a document management table for user B. As shown in FIGS. 11 and 12, in the document data management table, a unique document data identifier is stored in association with the document data name. The document information management unit 503 stores the generated document data identifier, prevents the generation of duplicate document data identifiers, and identifies the document data before the document data name and the document data identifier are encrypted. Manage as specific information.

Further, when the user performs an operation to prevent access to the encrypted document data stored in the service providing device 3, or the encrypted document data stored in the service providing device 3 is performed. When is deleted, the document information management unit 503 may delete the document data identifier associated with the stored document data.

Next, the document data identifier and the storage mode of the encrypted document data in the service providing device 3 will be described with reference to FIG. FIG. 13 is a diagram showing an information structure of a data table showing encrypted document data stored in the data storage unit 302.

As shown in FIG. 13, the data storage unit 302 stores the document data identifier and the encrypted document data in association with each other. Further, the data storage unit 302 creates a data table for each relay device 5 and stores the document data identifier and the encrypted document data.

As described with reference to FIGS. 11 to 13, in the document management system 6 according to the present embodiment, the service providing device 3 stores only the encrypted document data and the document data identifier. Next, in the document management system 6 according to the present embodiment, the flow of processing for storing the document data in the service providing device 3 will be described with reference to the drawings. The processing flow described below corresponds to a part of the embodiment of the document management method according to the present invention.

FIG. 14 is a sequence diagram showing a flow of processing for encrypting document data in the document management system 6 according to the present embodiment. The user of the document management system 6 operates the UI displayed on the PC 1 and performs an operation for reading the authentication UI for user authentication from the relay device 5. Based on the operation performed by the user, the input / output control unit 103 generates instruction information for reading the authentication UI and transmits it to the relay device 5 via the communication control unit 101 (S1401).

When the web operation control unit 505 receives the instruction information for reading the authentication UI, the web operation control unit 505 transmits the instruction information for displaying the authentication UI to the PC1 (S1402). The screen display control unit 102 causes the display unit to display the authentication UI based on the instruction information received from the relay device 5 (S1403).

The user of the document management system 6 operates the authentication UI displayed in the process of S1403 and inputs the user identifier and the passphrase. The input / output control unit 103 generates input information that identifies the user identifier and the passphrase based on the user's operation (S1404), and the communication control unit 101 transmits the input information to the relay device 5 to request user authentication. (S1405).

The user information management unit 504 compares the received input information with the user information management table, and when the user information management table has information indicating the user identifier and the passphrase specified by the received input information, the user authentication unit authenticates the user. (S1406). When user authentication is performed, a secure communication channel is established between the communication control unit 501 and the communication control unit 101. The user information management unit 504 decrypts the user key corresponding to the user identifier by using the passphrase (S1407).

When the user key is decrypted, the web operation control unit 505 transmits instruction information for displaying the document data management UI for managing the document data to the PC1 (S1408). When the screen display control unit 102 receives the instruction information for displaying the document data management UI, the screen display control unit 102 displays the document data management UI on the display unit (S1409).

The user of the document management system 6 operates the document data management UI to determine the document data to be stored in the service providing device 3. The input / output control unit 103 determines the document data to be stored in the service providing device 3 based on the operation of the user, and relays the document data determined via the communication control unit 101 and the storage request of the document data. It is transmitted to 5 (S1410).

The encryption / decryption processing unit 502 encrypts the document data received from the PC1 in S1410 based on the user key decrypted in S1407 (S1411), and the document information management unit 503 identifies the encrypted document data. Generate a document data identifier (S1412). The document data transmitted from the PC 1 through the steps of such processing is encrypted in the relay device 5.

Next, the flow of the process of storing the encrypted document data in the service providing device 3 will be described with reference to FIG. FIG. 15 is a sequence diagram showing a flow of processing for storing the encrypted document data according to the present embodiment in the service providing device 3.

When the document data identifier of the encrypted document data is generated in the relay device 5 (S1412), the communication control unit 501 transmits the information of the certificate unique to the relay device 5 to the service providing device 3 to authenticate the device. Make a request (S1501). The communication control unit 301 executes an authentication process based on the received certificate information and establishes a secure communication channel with the relay device 5 (S1502).

When the authentication process is completed, the communication control unit 301 notifies the relay device 5 of the completion of the authentication process (S1503). The document information management unit 503 transmits the document data encrypted in S1411 and the document data identifier generated in S1412 to the service providing device 3, corresponding to the document data, and makes a storage request to store the document data. (S1504). Therefore, the document information management unit 503 functions as an encrypted data storage control unit.

The data storage unit 302 stores the encrypted document data and the corresponding document data identifier (S1505), and is a data table showing the encrypted document data stored in the service providing device 3 shown in FIG. When the stored data management table is updated, the relay device 5 is notified that the process of storing the document data is completed (S1506).

Upon receiving the notification of S1506, the document information management unit 503 newly adds and updates the document data transmitted in S1504 and the document data identifier thereof to the document management table of the user authenticated in S1406 (S1507). When the document management table is updated, the document information management unit 503 notifies the PC1 that the storage of the document data is completed (S1508).

When the screen display control unit 102 receives the notification that the storage of the document data is completed, the screen display control unit 102 causes the display unit to display that the storage of the document data is completed (S1509). Then, when the user performs an operation of canceling the user authentication from the document data management UI (S1510), the user information management unit 504 deletes the user key decrypted in S1407 and cancels the user authentication (S1511). The authentication UI is displayed on the display unit of the PC1 after the user authentication is canceled.

As described above, in the document management system 6 according to the present embodiment, the document data stored in the service providing device 3 from the client terminal PC1 is encrypted in advance by the relay device 5 and then transmitted to the service providing device 3. do. Next, the process of reading the encrypted document data in the service providing device 3 will be described with reference to the drawings.

FIG. 16 is a sequence diagram showing a flow of processing for reading encrypted document data stored in the service providing device 3 in the document management system 6 according to the present embodiment. The user of the document management system 6 operates the UI displayed on the PC 1 and performs an operation for reading the authentication UI for user authentication from the relay device 5. Based on the operation performed by the user, the input / output control unit 103 generates instruction information for reading the authentication UI and transmits it to the relay device 5 via the communication control unit 101 (S1601).

When the web operation control unit 505 receives the instruction information for reading the authentication UI, the web operation control unit 505 transmits the instruction information for displaying the authentication UI to the PC1 (S1602). The screen display control unit 102 causes the display unit to display the authentication UI based on the instruction information received from the relay device 5 (S1603).

The user of the document management system 6 operates the authentication UI displayed in the process of S1603 and inputs the user identifier and the passphrase. The input / output control unit 103 generates input information that identifies the user identifier and the passphrase based on the user's operation (S1604), and the communication control unit 101 transmits the input information to the relay device 5 to request user authentication. (S1605).

The user information management unit 504 compares the received input information with the user information management table, and when the user information management table has information indicating the user identifier and the passphrase specified by the received input information, the user authentication unit authenticates the user. (S1606). When user authentication is performed, secure communication is established between the communication control unit 501 and the communication control unit 101. The user information management unit 504 decrypts the user key corresponding to the user identifier by using the passphrase (S1607).

When the user key is decrypted, the web operation control unit 505 transmits instruction information for displaying the document data management UI for managing the document data to the PC1 (S1608). In S1608, the information for displaying the document data management UI includes the information of the document management table corresponding to the user authenticated in S1606. When the screen display control unit 102 receives the instruction information for displaying the document data management UI, the screen display control unit 102 displays the document data management UI on the display unit (S1609).

The user of the document management system 6 operates the document data management UI to determine the document data to be read from the service providing device 3. FIG. 17 is a diagram illustrating a document data management UI displayed on the display unit in S1609. As shown in FIG. 17, the document data management UI displays the content for specifying the document data included in the document management table corresponding to the user authenticated in S1606.

In the document data management UI as shown in FIG. 17, the user operates, for example, a UI button for reading "Department A report material.doc". Based on the user's operation, the input / output control unit 103 determines the document data to be read from the service providing device 3, and transmits the document data read request to the relay device 5 via the communication control unit 101 (S1610). At this time, when the UI button for reading the document data: "A department report material.doc" is operated, the input / output control unit 103 relays the read request of the document data: "A department report material.doc". Send to 5.

The document information management unit 503 reads out the document data identifier based on the read request received from the PC1 in S1610 (S1611). Specifically, the document information management unit 503 reads out the document data identifier based on the document data name received from the PC1 in S1610. Therefore, in the process of S1611, the document information management unit 503 reads out the document data identifier "8ab93kd893jgsloq ..." Corresponding to the document data: "A department report material.doc".

Next, the flow of the process of reading the encrypted document data from the service providing device 3 will be described with reference to FIG. FIG. 18 is a sequence diagram showing a flow of processing for reading the encrypted document data according to the present embodiment from the service providing device 3.

When the document data identifier of the document data to be read from the service providing device 3 is read in the relay device 5 (S1611), the communication control unit 501 transmits the information of the certificate unique to the relay device 5 to the service providing device 3, and the device Make an authentication request (S1801). The communication control unit 301 executes an authentication process based on the received certificate information and establishes a secure communication channel with the communication control unit 501 (S1802).

When the authentication process is completed, the communication control unit 301 notifies the relay device 5 of the completion of the authentication process (S1803). The document information management unit 503 corresponds to the document data specified in S1610, transmits the document data identifier read in S1611, to the service providing device 3, and requests to read the document data (S1804). That is, what is transmitted from the relay device 5 to the service providing device 3 is the information indicating the document data identifier: "8ab93kd893jgsloq ...".

The data storage unit 302 reads out the encrypted document data identified by the document data identifier received from the relay device 5 in S1804 from the document data identifier and the corresponding encrypted document data (S1805). The data storage unit 302 transmits the read encrypted document data to the relay device 5 via the communication control unit 301 (S1806).

When the encryption / decryption processing unit 502 receives the encrypted document data (S1807), the encryption / decryption processing unit 502 decrypts the received encrypted document data by using the user key decrypted in S1607 (S1808). Then, the communication control unit 501 transmits the decrypted document data: "A department report material.doc" to the PC1 (S1809).

When the communication control unit 101 receives the document data: "A department report material.doc" (S1810) and the user performs an operation to cancel the user authentication from the document data management UI (S1811), the user information management unit 504 receives the document data: "A department report material.doc". , The user key decrypted in S1607 is deleted to cancel the user authentication (S1812). The authentication UI is displayed on the display unit of the PC1 after the user authentication is canceled.

As described above, the document management system 6 according to the present embodiment stores the encrypted document data in the service providing device 3, and also uses the document data identifier when reading the document data from the service providing device 3. do. Therefore, it is unlikely that the contents of the encrypted document data such as the document data name and the decrypted document data are leaked to the service providing device 3, and the confidentiality of the document data stored in the service providing device 3 is impaired. Document data can be managed without.

In the present embodiment, in addition to the PC 1, the image forming apparatus 2 can be used as a client terminal used by the user of the document management system 6. Next, the flow of the process of storing the document data transmitted from the image forming apparatus 2 in the service providing apparatus 3 will be described with reference to the drawings. FIG. 19 is a sequence diagram showing a flow of processing for encrypting document data in the document management system 6 according to the present embodiment.

When the operation display unit 34 of the image forming apparatus 2 performs an operation to start the scanner application (S1901), the screen display control unit 202 causes the operation display unit 34 to display an authentication UI for performing user authentication (S1902). ).

The user of the document management system 6 operates the authentication UI displayed in the process of S1902 and inputs the user identifier and the passphrase. The input / output control unit 203 generates input information that identifies the user identifier and the passphrase based on the user's operation (S1903).

The image forming apparatus 2 is equipped with an NFC interface 32. Therefore, the process of S1903 may be executed by the user bringing the IC card or the like in which the user identifier and the passphrase are stored close to the NFC interface 32.

When the input information is generated, the screen display control unit 202 causes the operation display unit 34 to display the scan UI for executing the scanner application (S1904). The user of the document management system 6 causes the image forming apparatus 2 to scan the document to be read (S1905), and the image processing unit 204 generates document data based on the read image (S1906).

Then, the user of the document management system 6 performs an operation of designating the document data name for the document data generated in S1906 from the operation display unit 34 (S1907). Next, the communication control unit 201 transmits the input information including the user identifier and passphrase generated in S1093, the document data generated in S1906, and the information of the document data name specified in S1907 to the relay device 5. , Requests the storage of document data (S1908).

The user information management unit 504 compares the received input information with the user information management table, and when the user information management table has information indicating the user identifier and the passphrase specified by the received input information, the user authentication unit authenticates the user. (S1909). When user authentication is performed, secure communication is established between the communication control unit 501 and the communication control unit 201. The user information management unit 504 decrypts the user key corresponding to the user identifier by using the passphrase (S1910).

When the user key is decrypted, the encryption / decryption processing unit 502 encrypts the document data received from the image forming apparatus 2 in S1908 (S1911). Then, the document information management unit 503 generates a document data identifier that identifies the encrypted document data (S1912).

In the image forming apparatus 2 according to the present embodiment, it is also possible to scan the document to be read after once making a user authentication request to the relay device 5. FIG. 20 is a sequence diagram showing a flow of processing for encrypting the document data according to the present embodiment.

When the operation display unit 34 of the image forming apparatus 2 performs an operation of invoking the scanner application (S2001), the input / output control unit 203 generates instruction information for reading the authentication UI, and the input / output control unit 203 generates instruction information for reading the authentication UI via the communication control unit 201. Is transmitted to the relay device 5 (S2002).

When the web operation control unit 505 receives the instruction information for reading the authentication UI, the web operation control unit 505 transmits the instruction information for displaying the authentication UI to the image forming apparatus 2 (S2003). The screen display control unit 202 causes the operation display unit 34 to display the authentication UI based on the instruction information received from the relay device 5 (S2004).

The user of the document management system 6 operates the authentication UI displayed in the process of S2004 and inputs the user identifier and the passphrase. The input / output control unit 203 generates input information that identifies the user identifier and the passphrase based on the user's operation (S2005), and the communication control unit 201 transmits the input information to the relay device 5 to request user authentication. (S2006).

The image forming apparatus 2 is equipped with an NFC interface 32. Therefore, the process of S2005 may be executed by the user bringing the IC card or the like in which the user identifier and the passphrase are stored close to the NFC interface 32.

The user information management unit 504 compares the received input information with the user information management table, and when the user information management table has information indicating the user identifier and the passphrase specified by the received input information, the user authentication unit authenticates the user. (S2007). When the user authentication is performed, secure communication is established between the communication control unit 501 and the communication control unit 201, and the communication control unit 501 notifies the image forming apparatus 2 of the completion of the user authentication (S2008). The user information management unit 504 decrypts the user key corresponding to the user identifier by using the passphrase (S2010).

Upon receiving the user authentication completion notification (S2009), the screen display control unit 202 causes the operation display unit 34 to display the scan UI for executing the scanner application (S2011). The user of the document management system 6 causes the image forming apparatus 2 to scan the document to be read (S2012), and the image processing unit 204 generates document data based on the read image (S2013).

Then, the user of the document management system 6 performs an operation of designating the document data name for the document data generated in S2013 from the operation display unit 34 (S2014). Next, the communication control unit 201 transmits the document data generated in S2013 and the information of the document data name specified in S2014 to the relay device 5, and requests the storage of the document data (S2015).

When the encryption / decryption processing unit 502 receives the document data storage request, the encryption / decryption processing unit 502 encrypts the document data received from the image forming apparatus 2 in S2015 by using the user key decrypted in S2010 (S2016). Then, the document information management unit 503 generates a document data identifier that identifies the encrypted document data (S2017).

Next, in the relay device 5, the processing after the document data identifier of the encrypted document data is generated will be described with reference to FIG. 21. FIG. 21 is a sequence diagram showing a flow of processing for storing the encrypted document data according to the present embodiment in the service providing device 3.

When the document data identifier of the encrypted document data is generated in the relay device 5 (S1912 or S2017), the communication control unit 501 transmits the information of the certificate unique to the relay device 5 to the service providing device 3. Make a device authentication request (S2101). The communication control unit 301 executes an authentication process based on the received certificate information and establishes a secure communication channel with the relay device 5 (S2102).

When the authentication process is completed, the communication control unit 301 notifies the relay device 5 of the completion of the authentication process (S2103). The document information management unit 503 transmits the document data encrypted in S1911 or S2016 and the document data identifier generated in S1912 or S2017 corresponding to the document data to the service providing device 3, and requests the storage of the document data. (S2104).

The data storage unit 302 stores the encrypted document data and the corresponding document data identifier (S2105), updates the stored data management table, and notifies the relay device 5 that the process of storing the document data is completed. Notify (S2106).

Upon receiving the notification of S2106, the document information management unit 503 newly adds and updates the document data transmitted in S2104 and the document data identifier thereof to the document management table of the user authenticated in S1907 or S2007 (S2107). When the document management table is updated, the user information management unit 504 cancels the user authentication (S2108).

As described above, in the document management system 6 according to the present embodiment, the document data stored in the service providing device 3 from the image forming device 2 which is a client terminal is encrypted in advance by the relay device 5, and then the service providing device. Send to 3. Further, in the service providing device 3, only the encrypted document data is stored, and since the document data encrypted by the document data identifier is identified, it is not necessary to decrypt the encrypted document data.

Therefore, since the decrypted document data is not handled by the service providing device 3, the document management system 6 can be operated without impairing the confidentiality of the encrypted document data.

Further, in the document management system 6 according to the present embodiment, it is possible to make the stored document data inaccessible and reduce the leakage of the document data that does not need to be stored. Hereinafter, the flow of processing for blocking access to the stored document data in the document management system 6 according to the present embodiment will be described with reference to the drawings.

FIG. 22 is a sequence diagram showing a flow of processing for blocking access to stored document data in the document management system 6 according to the present embodiment. The user of the document management system 6 operates the UI displayed on the PC 1 and performs an operation for reading the authentication UI for user authentication from the relay device 5. Based on the operation performed by the user, the input / output control unit 103 generates instruction information for reading the authentication UI and transmits it to the relay device 5 via the communication control unit 101 (S2201).

When the web operation control unit 505 receives the instruction information for reading the authentication UI, the web operation control unit 505 transmits the instruction information for displaying the authentication UI to the PC1 (S2202). The screen display control unit 102 causes the display unit to display the authentication UI based on the instruction information received from the relay device 5 (S2203).

The user of the document management system 6 operates the authentication UI displayed in the process of S2203 and inputs the user identifier and the passphrase. The input / output control unit 103 generates input information that identifies the user identifier and the passphrase based on the user's operation (S2204), and the communication control unit 101 transmits the input information to the relay device 5 to request user authentication. (S2205).

The user information management unit 504 compares the received input information with the user information management table, and when the user information management table has information indicating the user identifier and the passphrase specified by the received input information, the user authentication unit authenticates the user. (S2206). When user authentication is performed, a secure communication channel is established between the communication control unit 501 and the communication control unit 101. The user information management unit 504 decrypts the user key corresponding to the user identifier by using the passphrase (S2207).

When the user key is decrypted, the web operation control unit 505 transmits instruction information for displaying the document data management UI for managing the document data to the PC1 (S2208). When the screen display control unit 102 receives the instruction information for displaying the document data management UI, the screen display control unit 102 displays the document data management UI on the display unit (S2209).

The user of the document management system 6 operates the document data management UI and determines the document data to be deleted from the document data stored in the service providing device 3. For example, at this time, it is assumed that the user decides the document data: "Department A report material.doc" as the document data to be deleted as shown in FIG. 24. The input / output control unit 103 determines the document data to be deleted based on the operation of the user, and transmits the deletion request of the document data to the relay device 5 via the communication control unit 101 (S2210). That is, in the process of S2210, the deletion request of the document data: "A department report material.doc" is transmitted to the relay device 5.

The document information management unit 503 reads the document data identifier of the document data received in S2210 from the document management table (S2211), and deletes the read document data identifier from the document management table (S2212). At this time, the document information management unit 503 reads out the document data identifier "8ab93kd893jgsloq ..." Corresponding to the document data: "A department report material.doc" in the processing of S2211. Further, the document information management unit 503 deletes the document data identifier: "8ab93kd893jgsloq ..." From the document management table in the process of S2212.

When the document management table is updated by the document information management unit 503 (S2213), the communication control unit 501 notifies the PC1 that the document management table has been updated (S2214). As shown in FIG. 25, the screen display control unit 102 displays on the display unit that the deletion of the document data has been completed (S2215). Then, when the user performs an operation to cancel the user authentication, the communication control unit 101 transmits a user authentication cancellation request to the relay device 5 (S2216).

When the user information management unit 504 receives the user authentication cancellation request, the user information management unit 504 deletes the user key decrypted in S2207 and cancels the user authentication (S2217). The authentication UI is displayed on the display unit of the PC1 after the user authentication is canceled.

As described above, the document management system 6 according to the present embodiment deletes the document data identifier of the document management table in order to make the stored document data inaccessible. In this way, the process of deleting the document data identifier for identifying the encrypted document data stored in the service providing device 3 from the relay device 5 makes it impossible to access the stored document data. , It is not necessary to establish communication with the service providing device 3. Therefore, the processing efficiency in the document management system 6 can be improved.

Further, by deleting the encrypted document data stored in the service providing device 3, the confidentiality of the document data can be further enhanced. Hereinafter, a process of deleting the encrypted document data stored in the service providing device 3 will be described with reference to the drawings.

FIG. 23 is a sequence diagram showing a flow of processing for deleting encrypted document data stored in the service providing device 3 in the document management system 6 according to the present embodiment. In the process shown in FIG. 23, the same process as in S2201 to S2211 in FIG. 22 is executed. Therefore, the description of S2201 to S2211 will be omitted, and the description will be given from the process of S2301.

When the document data identifier is read from the document management table by the document information management unit 503 (S2211), the communication control unit 501 transmits the certificate information unique to the relay device 5 to the service providing device 3 and makes a device authentication request. Do (S2301). The communication control unit 301 executes an authentication process based on the received certificate information and establishes a secure communication channel with the communication control unit 501 (S2302).

When the authentication process is completed, the communication control unit 301 notifies the relay device 5 of the completion of the authentication process (S2303). The document information management unit 503 transmits the document data identifier read in S2211 to the service providing device 3 and requests the deletion of the encrypted document data (S2304). That is, what is transmitted from the relay device 5 to the service providing device 3 is the information indicating the document data identifier: "8ab93kd893jgsloq ...".

The data storage unit 302 deletes the encrypted document data corresponding to the received document data identifier (S2305), and notifies the relay device 5 that the deletion of the encrypted document data is completed (S2306). Upon receiving the notification of S2306, the document information management unit 503 deletes the document data identifier transmitted in S2304 and the document data name corresponding to the document data identifier from the document management table (S2307), and updates the document management table (S2307). S2213).

Since the subsequent processing is the same as that of S2213 to S2217 in FIG. 22, the description thereof will be omitted. In this way, the document management system 6 according to the present embodiment identifies the document data to be deleted based on the document data identifier when deleting the encrypted document data stored in the service providing device 3. Can be deleted.

As described above, in the document management system 6 according to the present embodiment, the encrypted document data is encrypted by the service providing device 3 with the document management information for identifying the encrypted document data and the encryption /. The decryption program is operated by the relay device 5. Further, in the relay device 5, the user key, which is an encryption key for performing encryption / decryption, is managed by the user of the document management system 6, so that the service providing device 3 cannot recognize it.

Therefore, in the service providing device 3, the document data is not decrypted and the confidentiality of the document data is not impaired. In addition, the user of the document management system 6 can confirm that the privacy of the encrypted document data is ensured, and can use the cloud storage service with peace of mind.

1 PC
2 Image forming device 3 Service providing device 4 Network 5 Relay device 6 Document management system 10 CPU
20 RAM
21 CPU
22 MEM-P
23 NB
24 SB
25 bus 26 ASIC
27 MEM-C
28 FCU
29 USB
30 ROM
31 IEEE 1394
32 NFC
33 Engine 34 Operation display 35 HDD
40 HDD
50 interface 60 LCD
70 Operation unit 90 Bus 101 Communication control unit 102 Screen display control unit 103 Input / output control unit 201 Communication control unit 202 Screen display control unit 203 Input / output control unit 204 Image processing unit 301 Communication control unit 302 Data storage unit 501 Communication control unit 502 Encryption / decryption processing unit 503 Document information management unit 504 User information management unit 505 Web operation control unit

Japanese Unexamined Patent Publication No. 2015-102995

Claims (10)

An image forming device that sends and receives storage target data, which is storage target data,
A relay device that stores data generated based on the storage target data received from the image forming device in the service providing device, and a relay device.
Is a system that includes
The image forming apparatus
Includes an image processing unit that generates the data based on the scanned image.
Identification that identifies the user identifier that identifies the user of the image forming apparatus, the information of the character string unique to each user, the generated data, and the storage target data, which is the information input to the image forming apparatus. Information and information are transmitted to the relay device,
The service providing device is
For each relay device, the encrypted data of the data to be stored and the user identifier are stored in association with each other.
The relay device is
A user information management unit that stores information of a character string unique to each user transmitted from the image forming apparatus, a user identifier that identifies the user, and a unique encryption key for each user in association with each other.
Encrypted data generation that decrypts the encryption key by the information of the character string transmitted from the image forming apparatus and generates encrypted data from the storage target data received from the image forming apparatus by the combined encryption key. Department and
A specific information storage unit that generates an identifier that identifies the encrypted data and stores the specific information that is the original data of the encrypted data in association with the identifier.
An encrypted data storage control unit that identifies the encrypted data based on an identifier related to the specific information, associates the encrypted data with an identifier generated based on the encrypted data, and stores the encrypted data in a service providing device. When,
An encrypted data decryption unit that receives the encrypted data stored in the service providing device and is specified from the service providing device, and decrypts the received encrypted data with a unique encryption key for each user.
A system including a communication control unit that transmits the storage target data, which is the original data decrypted from the encrypted data, to the image forming apparatus. The user information management unit
When a combination of the character string information and the user identifier is newly input, the encryption key is generated, and the encryption key, the character string information, and the user identifier are stored and stored in association with each other. The system according to claim 1, wherein when the user identifier is deleted, the encryption key associated with the user identifier is deleted. The user information management unit
The system according to claim 2 or claim 2, wherein the information of the character string is converted into a hash value and stored. The encrypted data storage control unit
Claims 1 to 1, wherein when a deletion request for deleting the storage target data is received from the image forming apparatus, the identifier associated with the encrypted data based on the storage target data is deleted. The system according to any one of 3. An image forming device that sends and receives storage target data, which is storage target data,
A relay device that stores data generated based on the storage target data received from the image forming device in the service providing device, and a relay device.
It is a document management method in the system including
The image forming apparatus including the image processing unit that generates the data based on the read image is the information input to the image forming apparatus, and is the user identifier that identifies the user of the image forming apparatus and each of the users. The information of the character string peculiar to the image, the generated data, and the specific information for specifying the data to be stored are transmitted to the relay device.
The relay device
The information of the character string unique to each user transmitted from the image forming apparatus, the user identifier that identifies the user, and the unique encryption key for each user are stored in association with each other.
The encryption key is decrypted by the information of the character string transmitted from the image forming apparatus, and encrypted data is generated from the storage target data received from the image forming apparatus by the combined encryption key.
An identifier that identifies the encrypted data is generated, and the specific information that is the original data of the encrypted data is stored in association with the identifier.
The encrypted data is specified based on the identifier related to the specific information, and the encrypted data is associated with the identifier generated based on the encrypted data and stored in the service providing device.
The encrypted data stored in the service providing device and specified is received from the service providing device, and the received encrypted data is decrypted by a unique encryption key for each user.
A document management method comprising transmitting the storage target data, which is the original data decrypted from the encrypted data, to the image forming apparatus. A relay device that stores data generated based on storage target data, which is storage target data received from an image forming device connected via a network, in a service providing device.
A user who stores information of a character string unique to each user of the image forming apparatus, a user identifier that identifies the user, and a unique encryption key for each user, which are transmitted from the image forming apparatus. Information management department and
Encrypted data generation that decrypts the encryption key by the information of the character string transmitted from the image forming apparatus and generates encrypted data from the storage target data received from the image forming apparatus by the combined encryption key. Department and
A specific information storage unit that generates an identifier that identifies the encrypted data and stores the specific information that identifies the storage target data that is the original data of the encrypted data in association with the identifier.
An encrypted data storage control unit that identifies the encrypted data based on an identifier related to the specific information, associates the encrypted data with an identifier generated based on the encrypted data, and stores the encrypted data in a service providing device. When,
An encrypted data decryption unit that receives the encrypted data stored and specified in the service providing device from the service providing device and decrypts the received encrypted data with a unique encryption key for each user.
A communication control unit that transmits the storage target data, which is the original data decrypted from the encrypted data, to the image forming apparatus, and the image forming apparatus, which stores the original data decrypted from the encrypted data. Communication control unit to send to
A relay device characterized by including. The user information management unit
When a combination of the character string information and the user identifier is newly input, the encryption key is generated, and the encryption key, the character string information, and the user identifier are stored and stored in association with each other. The relay device according to claim 6, wherein when the user identifier is deleted, the encryption key associated with the user identifier is deleted. The user information management unit
The relay device according to claim 6 or 7, wherein the information of the character string is converted into a hash value and stored. The encrypted data storage control unit
Claims 6 to 8 include, when a deletion request for deleting the data is received from the image forming apparatus, the identifier associated with the encrypted data generated by encrypting the data is deleted. The relay device according to any one of the above. A control program for a relay device that stores data generated based on storage target data, which is storage target data received from an image forming device connected via a network, in a service providing device.
Storing the user identifier identifying the information and those該Yu over The unique string for each user of the image forming apparatus transmitted from the image forming apparatus, a unique encryption key for each said user, the association with Steps and
A step of decrypting the encryption key with the information of the character string transmitted from the image forming apparatus and generating encrypted data from the storage target data received from the image forming apparatus with the combined encryption key.
A step of generating an identifier that identifies the encrypted data, and storing the specific information that identifies the storage target data, which is the original data of the encrypted data, in association with the identifier.
A step of identifying the encrypted data based on an identifier related to the specific information, associating the encrypted data with an identifier generated based on the encrypted data, and storing the encrypted data in a service providing device.
An encrypted data decryption unit that receives the encrypted data stored in the service providing device and is specified from the service providing device, and decrypts the received encrypted data with a unique encryption key for each user.
A step of transmitting the storage target data, which is the original data decrypted from the encrypted data, to the image forming apparatus, and
A control program for a relay device, which is characterized by executing.

Images