JP7155553B2 - Information processing device, information processing system, information processing method and program - Google Patents

Description

The present invention relates to an information processing device, an information processing system, an information processing method, and a program.

There is a system for distributing documents scanned by an MFP (Multi-Functional Printer). By using this system, electronic data generated by scanning (hereinafter simply referred to as electronic data) can be subjected to image processing and distributed to designated distribution destinations according to predetermined rules. Processing of electronic data is defined by a workflow, and various combinations of internal processing methods can be specified in the workflow. By defining a workflow according to usage, electronic data can be processed according to the user's purpose. Recently, in order to prove the non-falsification of electronic data, the technology of enciphering electronic signatures on electronic data is widely used. It is possible to do

For example, in the job processing control device of Patent Document 1, a circuit for generating signature data is provided in the multifunction machine, and based on the user's private key held in the IC card, electronic signature data generated in the IC card is It is added to the document data in the multifunction machine that generates the digitized document data to be signed. Therefore, since the electronic signature data before being added is passed from the IC card to the multi-function device, there is a risk that the electronic signature data leaks out of the multi-function device.

The present invention has been made in view of the above, and it is an object of the present invention to perform an electronic signature without passing electronic signature data to a device that generates data to be electronically signed.

In order to solve the above-described problems and achieve the object, the information processing apparatus of the present invention uses an IC card holding confidential information to log in to the information processing apparatus ; A transmission means for transmitting electronic data to be signed, and a signature instruction for causing the IC card to electronically sign the received data to be signed based on the confidential information inside the IC card. means, acquisition means for acquiring signed data from the IC card, and logout means for logging out of the information processing apparatus on condition that the signature is completed .

According to the present invention, since the signature target data is electronically signed inside the electronic signature device (for example, an IC card), the electronic signature data is not passed to the information processing device that generates the signature target data. It becomes possible to perform an electronic signature. Therefore, it is possible to improve security when performing an electronic signature.

FIG. 1 is a block diagram showing an example of a schematic configuration of an information processing system according to this embodiment. FIG. 2 is a first hardware block diagram showing an example of the hardware configuration of the information processing system. FIG. 3 is a second hardware block diagram showing an example of the hardware configuration of the information processing system. FIG. 4 is a diagram for explaining the flow of adding and verifying an electronic signature. FIG. 5 is a functional block diagram showing an example of the functional configuration of the information processing system. FIG. 6 is a sequence diagram showing an example of the flow of messages inside the information processing system according to this embodiment. FIG. 7 is a flowchart showing an example of the flow of processing performed by the MFP, IC card, and workflow server in the information processing system according to the embodiment.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

(Description of schematic configuration of information processing system)
Hereinafter, embodiments of an information processing apparatus, an information processing system, an information processing method, and a program according to the present invention will be described in detail with reference to the accompanying drawings. As an example of the information processing apparatus, a multifunction peripheral (MFP) will be described, but the present invention is not limited to this, and the information processing apparatus may be, for example, a PC (Personal Computer). .

FIG. 1 is a block diagram showing an example of a schematic configuration of an information processing system 1 according to this embodiment. As shown in FIG. 1, an information processing system 1 includes an MFP 10, an IC card 40 carried by a user, a card reader 50 that reads and writes information on the IC card 40, and is connected to the MFP 10 via a network N. A workflow server 60 and a delivery destination server 70 are provided. Although a plurality of delivery destination servers 70 are generally provided, the information processing system 1 includes one delivery destination server 70 in the following description.

The MFP 10 is, for example, a multi-function device having at least two functions out of a plurality of functions such as a copy function, a scanner function, a printer function, and a facsimile function, and the MFP 10 of this embodiment uses at least the scanner function. Note that the MFP 10 is an example of an information processing apparatus.

Specifically, the MFP 10 includes a scanner 100 and an operation section 200 . Scanner 100 reads a document and generates electronic data in a format specified by the user. The operation unit 200 receives user operations.

The card reader 50 is connected to the MFP 10 via, for example, a USB (Universal Serial Bus) cable, and reads and writes information to and from the IC card 40 owned by the user. Further, the card reader 50 functions as an interface for transmitting the electronic data generated by the MFP 10, that is, the signature target electronic data D1 to be electronically signed, to the IC card 40. FIG. Note that the card reader 50 and the MFP 10 may be integrated.

The IC card 40 is connected to the card reader 50 by wireless communication, for example, and receives electronic data D1 to be signed from the MFP 10 via the card reader 50 . In addition, the IC card 40 applies an electronic signature to the received electronic data D1 to be signed to generate signed electronic data D2. Further, IC card 40 returns signed electronic data D2 to MFP 10 via card reader 50 .

Workflow server 60 performs intermediate processing defined in a predetermined workflow on signed electronic data D2 transmitted from MFP 10 via network N to generate distribution electronic data D3. The intermediate processing is, for example, standardized processing such as image correction, image conversion, PDF (Portable Document Format) conversion, and OCR (Optical Character Recognition) processing. Further, the intermediate processing that can be executed by the workflow server 60 in this embodiment is limited to those that do not affect the content of the signed electronic data D2, such as adding bibliographic information. Further, the workflow server 60 performs distribution processing for distributing the distribution electronic data D<b>3 to the distribution destination server 70 .

Delivery destination server 70 receives delivery electronic data D3 from workflow server 60 . Also, the delivery destination server 70 verifies whether the electronic signature attached to the delivery electronic data D3 is correct. Furthermore, the delivery destination server 70 allows the user to view the delivery electronic data D3 when the electronic signature attached to the delivery electronic data D3 is correct. The delivery destination server 70 also has a public key for verifying the electronic signature applied to the delivery electronic data D3. Note that the attachment of the electronic signature by the IC card 40 and the verification of the electronic signature by the destination server 70 will be described in detail later (see FIG. 4).

(Description of hardware configuration of information processing system)
Next, the hardware configuration of the information processing system 1 will be described with reference to FIGS. 2 and 3. FIG. FIG. 2 is a first hardware block diagram showing an example of the hardware configuration of the information processing system 1. As shown in FIG. 3 is a second hardware block diagram showing an example of the hardware configuration of the information processing system 1. As shown in FIG.

As shown in FIG. 2, the scanner 100 and the operation unit 200 of the MFP 10 are connected by a dedicated communication path 30. FIG. The communication channel 30 can use, for example, a USB (Universal Serial Bus) standard, but may be of any standard regardless of whether it is wired or wireless. Since the MFP 10 of this embodiment uses the scanner function, only the scanner 100 is described as a hardware component. It also has hardware.

Scanner 100 performs a scanning operation of reading a document set on MFP 10 in accordance with an operation accepted by operation unit 200 . Further, the scanner 100 can communicate with an external device such as a client PC (personal computer) via the communication I/F 15, and can perform operations according to instructions received from the external device.

First, the hardware configuration of the scanner 100 will be described. As shown in FIG. 2, the scanner 100 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, an HDD (Hard Disk Drive) 14, a communication I/ It has an F 15 , a connection I/F (Interface) 16 and a scanner engine 17 , which are interconnected via a system bus 18 .

The CPU 11 comprehensively controls the operation of the scanner 100 . That is, the CPU 11 executes a control program stored in the ROM 12, the HDD 14, or the like using the RAM 13 as a work area, thereby controlling the overall operation of the scanner 100 and realizing the scanner function.

The communication I/F 15 is an interface for connecting with a network N such as the Internet. Scanner 100 is connected to an external device such as a client PC via communication I/F 15 . A connection I/F 16 is an interface for communicating with the operation unit 200 via the communication path 30 .

The scanner engine 17 is hardware that performs processing other than general-purpose information processing and communication in order to realize the scanner function.

Next, the hardware configuration of the operation unit 200 will be described. As shown in FIG. 2, the operation unit 200 includes a CPU 21, a ROM 22, a RAM 23, a flash memory 24, a communication I/F 25, a connection I/F 26, an operation panel 27, and an external connection I/F 28. and are connected to each other via a system bus 29 .

The CPU 21 comprehensively controls the operation of the operation unit 200 . That is, the CPU 21 controls the overall operation of the operation unit 200 by executing a control program stored in the ROM 22, the flash memory 24, or the like, using the RAM 23 as a work area. Then, the CPU 21 implements various functions such as displaying information (images) according to the input received from the user.

The communication I/F 25 is an interface for connecting with a network N such as the Internet. In particular, the operation unit 200 is connected to the workflow server 60 via the network N in this embodiment. A connection I/F 26 is an interface for communicating with the scanner 100 via the communication path 30 .

The operation panel 27 receives various inputs according to user operations, and displays various information (for example, information according to the received operations, information indicating the operation status of the MFP 10, information indicating setting states, etc.). . In this embodiment, the operation panel 27 is composed of a liquid crystal display (LCD) equipped with a touch panel function, but is not limited to this. For example, it may be composed of an organic EL display device equipped with a touch panel function.

The external connection I/F 28 is an interface for connecting the operation unit 200 and peripheral devices, and is used for connecting hardware such as an image processing device (camera, etc.) and an audio input/output device (microphone, speaker, etc.). interface. In this embodiment, the operation unit 200 is connected to the card reader 50 via the external connection I/F 28 via a communication path 58 such as a USB standard.

In this embodiment, the scanner 100 and the operation unit 200 operate independently of each other with separate operating systems in order to maintain functional independence. For example, the scanner 100 uses Linux (registered trademark) as OS layer software, and the operation unit 200 uses Android (registered trademark) as OS layer software.

Next, the hardware configuration of the card reader 50 will be described. The card reader 50 includes a CPU 51 , a ROM 52 , a RAM 53 , a communication I/F 54 , an antenna coil 55 and a connection I/F 56 , which are interconnected via a system bus 57 .

The CPU 51 centrally controls the operation of the card reader 50 . That is, the CPU 51 controls the overall operation of the card reader 50 by executing a control program stored in the ROM 52 or the like using the RAM 53 as a work area. The CPU 51 implements various functions such as reading and writing information with respect to the IC card 40 possessed by the user.

The communication I/F 54 performs wireless communication with the IC card 40 by controlling the antenna coil 55 . Also, the connection I/F 56 is an interface for communicating with the operation unit 200 via the communication path 58 .

Next, the hardware configuration of the IC card 40 will be explained. IC card 40 includes CPU 41 , ROM 42 , RAM 43 , communication I/F 44 , and antenna coil 45 , which are interconnected via system bus 46 .

Note that the IC card 40 is an example of an electronic signature device. An electronic signature device has a recording medium capable of holding user information including confidential information such as a user's private key, and is capable of generating an electronic signature and attaching the electronic signature to signature target data within its own device. is. It is desirable that the electronic signature device be a small device that can be carried by the user. Note that the electronic signature device is not limited to the IC card 40, and may be a small device that can be carried by the user, such as a smart phone or a wearable terminal such as a watch or glasses.

The CPU 41 comprehensively controls the operation of the IC card 40 . That is, the CPU 41 controls the overall operation of the IC card 40 by executing a control program stored in the ROM 42 or the like using the RAM 43 as a work area. The CPU 41 implements various functions such as receiving the electronic data D1 to be signed, executing an electronic signature on the electronic data D1 to be signed, and returning the electronically signed signed electronic data D2 to the card reader 50 .

Communication I/F 44 performs wireless communication with card reader 50 by controlling antenna coil 45 . The form of communication between the IC card 40 and the card reader 50 is not limited to wireless communication, that is, non-contact type. For example, by inserting the IC card 40 into the card reader 50, the two may be connected by mechanically contacting each other (contact type). In the case of the contact type, the antenna coils 45 and 55 described above are unnecessary.

Next, the hardware configurations of the workflow server 60 and the delivery destination server 70 will be described with reference to FIG. Workflow server 60 includes CPU 61 , ROM 62 , RAM 63 , HDD 64 , and communication I/F 65 , which are interconnected via system bus 66 .

The CPU 61 comprehensively controls the operation of the workflow server 60 . That is, the CPU 61 controls the overall operation of the workflow server 60 by executing the control program stored in the ROM 62 or the like using the RAM 63 as a work area. The CPU 61 implements various functions such as receiving the signed electronic data D2, performing intermediate processing on the signed electronic data D2, and delivering the intermediately processed distribution electronic data D3 to the distribution destination server .

The communication I/F 65 is an interface for connecting with a network N such as the Internet. In particular, workflow server 60 is connected to MFP 10 and delivery destination server 70 via network N in this embodiment.

Destination server 70 includes CPU 71 , ROM 72 , RAM 73 , HDD 74 , and communication I/F 75 , which are interconnected via system bus 76 .

The CPU 71 comprehensively controls the operation of the delivery destination server 70 . That is, the CPU 71 controls the overall operation of the distribution destination server 70 by executing the control program stored in the ROM 72 or the like using the RAM 73 as a work area. The CPU 71 implements various functions such as receiving the distribution electronic data D3, verifying the electronic signature applied to the distribution electronic data D3, and permitting the user to view the distribution electronic data D3.

Communication I/F 75 connects delivery destination server 70 and workflow server 60 via network N. FIG.

(Description of how to apply and verify electronic signatures)
Next, with reference to FIG. 4, a brief description will be given of an electronic signature attaching method and a verification method performed by the information processing system 1 of the present embodiment. FIG. 4 is a diagram for explaining the flow of adding and verifying an electronic signature.

A signer who attaches an electronic signature first prepares signature target electronic data D1 (step S10). Incidentally, in the information processing system 1 of the present embodiment, the electronic signature is performed by the IC card 40 . That is, the signer is the IC card 40 .

The IC card 40 calculates a hash value from the signature target electronic data D1 (step S11). A hash value is a numerical value representing the electronic data D1 to be signed, which is calculated from the contents of the electronic data D1 to be signed. More specifically, the hash value is a value having a fixed data length without regularity, which is calculated from the electronic data D1 to be signed by a certain calculation procedure. A hash value has a fixed data length regardless of the size of the original data. Then, while the same hash value is always obtained from the same data, different hash values are obtained from different data.

Subsequently, the IC card 40 as the signer generates an electronic signature (step S12). At this time, the IC card 40 generates an electronic signature using its own private key. A private key is one of a pair of keys in public key cryptography that is kept secret by the owner. A private key has a public key paired with the private key. Data encrypted with the private key can only be decrypted with the public key. In the information processing system 1 of this embodiment, the delivery destination server 70 has a public key.

The IC card 40 attaches an electronic signature to the signature target electronic data D1 (step S13). The signed electronic data D1 to which the electronic signature is attached is the signed electronic data D2.

The IC card 40 transmits the signed electronic data D2 to the viewer (step S14). Note that in this embodiment, the viewer is the delivery destination server 70 .

The delivery destination server 70 receives the signed electronic data D2 (step S15).

The delivery destination server 70 calculates a hash value from the signed electronic data D2 (step S16).

Also, the delivery destination server 70 decrypts the electronic signature of the signed electronic data D2 using the public key, and reads out the hash value calculated in step S11 (step S17).

The delivery destination server 70 compares the hash value calculated in step S16 with the hash value read out in step S17 (step S18).

If the hash values match in step S18, it is determined that the signed electronic data D2 received by the delivery destination server 70 has not been tampered with, and viewing of the signed electronic data D2 is permitted (step S19). On the other hand, if the hash values do not match in step S18, it is determined that the signed electronic data D2 received by the destination server 70 has been tampered with, and the destination server 70 issues a tampering warning (step S20).

In this way, the information processing system 1 of the present embodiment performs the electronic signature on the electronic data D1 to be signed inside the IC card 40 . Therefore, the private key does not leak out of the IC card 40 .

(Description of the functional configuration of the information processing system)
Next, the functional configuration of the information processing system 1 will be described with reference to FIG. FIG. 5 is a functional block diagram showing an example of the functional configuration of the information processing system 1. As shown in FIG.

The CPU 21 of the MFP 10 reads the control program stored in the ROM 22, develops it in the RAM 23, and executes it. As a result, the MFP 10 includes an operation reception unit 10a, a scanner control unit 10b, a signature target data transmission unit 10c, a signature instruction unit 10d, a signed data reception unit 10e, and a signed data transmission unit shown in FIG. 10f are generated as functional units.

The operation accepting unit 10a accepts an operation performed on the operation unit 200 by the user. Further, the operation accepting unit 10a causes the MFP 10 to execute an operation performed by the user on the operation unit 200. FIG.

The scanner control unit 10b uses the scanner engine 17 to convert the analog data (data to be signed) scanned by the scanner 100 into electronic data to be signed D1, which is electronic data such as a PDF (Portable Document Format) file.

The signature target data transmission unit 10c transmits the signature target electronic data D1 to the user's IC card 40 (an example of an electronic signature device) holding a private key (confidential information). The signature target data transmission unit 10c is an example of signature target data transmission means.

The signature instructing unit 10d instructs the IC card 40 to electronically sign data to be signed based on the secret key (confidential information) held by the IC card 40. FIG. The signature instruction unit 10d is an example of signature instruction means.

The signed data receiving unit 10 e acquires signed electronic data D<b>2 (signed data) from the IC card 40 . The signed data receiving unit 10e is an example of acquisition means.

The signed data transmission unit 10 f transmits the signed electronic data D 2 to the workflow server 60 .

Also, the CPU 51 of the card reader 50 reads out the control program stored in the ROM 52, develops it in the RAM 53, and executes it. As a result, in the card reader 50, a signature target data transfer section 50a and a signed data transfer section 50b shown in FIG. 5 are generated as functional sections.

The signature target data delivery unit 50 a receives the signature target electronic data D 1 from the MFP 10 and delivers it to the IC card 40 .

The signed data delivery unit 50b receives the signed electronic data D2 from the IC card 40 and delivers it to the MFP10.

Further, the CPU 41 of the IC card 40 reads out the control program stored in the ROM 42, develops it in the RAM 43, and executes it. As a result, in the IC card 40, the confidential information holding section 40a, the signature target data receiving section 40b, the signature executing section 40c, and the signed data transmitting section 40d shown in FIG. 5 are generated as functional sections.

The confidential information holding unit 40a causes the IC card 40 to hold a secret key (confidential information). The confidential information holding unit 40a is an example of confidential information holding means.

The signature target data receiving unit 40 b receives the signature target electronic data D 1 from the MFP 10 via the card reader 50 . The signature target data receiving unit 40b is an example of receiving means.

The signature execution unit 40c receives an instruction from the signature instruction unit 10d, and uses a secret key (confidential information) to apply an electronic signature to the signature target electronic data D1 (signature target data) received by the signature target data reception unit 40b. Generate data and apply an electronic signature. Note that the signature execution unit 40c is an example of signature execution means.

The signed data transmission unit 40 d transmits the signed electronic data D<b>2 (signed data) signed by the signature execution unit 40 c to the MFP 10 via the card reader 50 . The signed data transmission unit 40d is an example of signed data transmission means.

Further, the CPU 61 of the workflow server 60 reads out the control program stored in the ROM 62, develops it in the RAM 63, and executes it. As a result, the signed data receiving section 60a, the workflow processing section 60b, and the signed data delivery section 60c shown in FIG. 5 are generated in the workflow server 60 as functional sections.

The signed data receiving unit 60a receives the signed electronic data D2 from the MFP 10 via the network N. FIG.

The workflow processing unit 60b processes the signed electronic data D2 according to the workflow specified by the user. The workflow processing unit 60b has a plurality of preset intermediate processing functions, and executes intermediate processing selected as a workflow from among them. Note that the workflow processing unit 60b is an example of workflow processing means.

The signed data delivery unit 60c delivers the signed electronic data D2 processed by the workflow processing unit 60b to the delivery destination server 70 via the network N as delivery electronic data D3. The signed data distribution unit 60c is an example of distribution means.

Also, the CPU 71 of the delivery destination server 70 reads out the control program stored in the ROM 72, develops it in the RAM 73, and executes it. As a result, a distribution data receiving unit 70a, a signature verification unit 70b, and a data viewing unit 70c shown in FIG. 5 are generated in the distribution destination server 70 as functional units.

The distribution data receiving unit 70a receives distribution electronic data D3 from the workflow server 60 via the network N. FIG.

The signature verification unit 70b decrypts the electronic signature using the public key of the delivery destination server 70. FIG. Then, the signature verification unit 70b verifies whether the distribution electronic data D3 has been tampered with.

The data browsing unit 70c allows the user to browse the distribution electronic data D3.

(Description of the flow of processing performed by the information processing system)
Next, with reference to FIG. 6, exchange of messages between objects that configure the information processing system 1 will be described. FIG. 6 is a sequence diagram showing an example of a message flow inside the information processing system 1 according to this embodiment.

This sequence is based on the premise that the information processing system 1 converts image data into electronic data in PDF format and applies an electronic signature to the PDF file. First, the user logs in by holding up or inserting the IC card 40 to the card reader 50 connected to the MFP 10 (messages S30 and S31).

The user then selects a workflow to be implemented when distributing the signed electronic data D2 (message S32).

The user places the document on the MFP 10 and causes it to be scanned (message S33). MFP 10 performs a scanning operation to generate an electronic image within MFP 10 (message S34). Then, the MFP 10 converts the electronic image into PDF (message S35). The PDF data is electronic data D1 to be signed.

Next, the MFP 10 issues an electronic signature request to the IC card 40 via the card reader 50 and sends the PDF data (message S36). The PDF data is passed through the card reader 50 to the IC card 40 together with a signature request (message S37). Then, the electronic signature data is generated in the signature executing section 40c of the IC card 40, and the electronic signature is executed.

The signed electronic data D2 generated by the IC card 40 is returned to the MFP 10 via the card reader 50 (messages S38, S39). The fact that the electronic signature has been made is notified to the user by, for example, displaying on the operation panel 27 (message S40).

The MFP 10 sends the signed electronic data D2 to the workflow server 60 according to the workflow settings (message S41). The sent signed electronic data D2 is subjected to intermediate processing according to the workflow settings in the workflow processing section 60b (message S42). The intermediate processing includes, for example, addition of bibliographic information. After that, the intermediately processed data is delivered to the delivery destination server 70 as delivery electronic data D3 (message S43).

When delivery destination server 70 receives an instruction to view delivery electronic data D3 from the user (message S44), delivery destination server 70 falsifies delivery electronic data D3 sent to delivery destination server 70 using a public key. Verification is received as to whether or not it has been completed (message S45). Note that the user who issues the browse instruction may be someone other than the user who scanned the document.

Then, when it is determined that the distribution electronic data D3 has not been tampered with, the user can view the distribution electronic data D3 (message S46).

In this embodiment, the user may log out of the information processing system 1 at any time after the electronic signature is given (messages S47 and S48). When logging out, the IC card 40 may be held up, the IC card 40 may be removed from the card reader 50, or the operation panel 27 may be operated. It should be noted that the user cannot log out of the MFP 10 while the electronic signature is being executed even if the scanning of the document is completed. If the user logs out while the electronic signature is being executed, the electronic signature processing is interrupted and the electronic data is not distributed.

(Description of the flow of processing performed by the MFP, IC card, and workflow server)
Next, the flow of processing performed by the MFP 10, IC card 40, and workflow server 60 will be described with reference to FIG. FIG. 7 is a flow chart showing an example of the flow of processing performed by the MFP 10, the IC card 40 and the workflow server 60 in the information processing system 1 according to the embodiment.

First, the user logs in by holding up or inserting the IC card 40 to the card reader 50 connected to the MFP 10 (step S50).

Subsequently, the user selects a workflow to be executed when delivering the signed electronic data D2 to the delivery destination server 70 (step S51).

Further, the user causes the scanner control section 10b of the MFP 10 to scan the document to be digitized (step S52).

The scanner control unit 10b generates an electronic image of the scanned document (step S53).

Further, the scanner control unit 10b converts the electronic image into PDF to generate signature target electronic data D1, which is signature target PDF data (step S54).

The operation reception unit 10a of the MFP 10 determines whether the IC card 40 has been recognized (step S55). If it is determined that the IC card 40 has been recognized (step S55: Yes), the process proceeds to step S56. On the other hand, if it is not determined that the IC card 40 has been recognized (step S55: No), the process proceeds to step S58.

If determined as Yes in step S55, the signature target data transmission unit 10c of the MFP 10 transmits the signature target electronic data D1 to the IC card 40 via the card reader 50 in step S56. At this time, the signature instruction unit 10d of the MFP 10 instructs the IC card 40 to execute the electronic signature on the electronic data D1 to be signed. After that, the process proceeds to step S57.

If it is determined No in step S55, the operation reception unit 10a of the MFP 10 requests the user to input the IC card 40 in step S58. Specifically, a message requesting the input of the IC card 40 is displayed on the operation panel 27 .

Subsequently, the operation accepting unit 10a of the MFP 10 determines whether the IC card 40 has been recognized (step S59). If it is determined that the IC card 40 has been recognized (step S59: Yes), the process proceeds to step S56. On the other hand, if it is not determined that the IC card 40 has been recognized (step S59: No), the process proceeds to step S60.

If determined as No in step S59, in step S60, the operation reception unit 10a of the MFP 10 confirms with the user whether to continue signing. Specifically, the operation reception unit 10a of the MFP 10 displays a message on the operation panel 27 asking the user whether to continue signing, and waits for the user's selection operation. When the operation reception unit 10a receives the user's selection operation and determines to continue the signature (step S60: Yes), the process proceeds to step S58. On the other hand, when the operation reception unit 10a receives the user's selection operation and determines not to continue the signature (step S60: No), the process returns to step S52.

Subsequent to step S56, the signature execution unit 40c of the IC card 40 generates electronic signature data using the private key held by the IC card 40 for electronic data D1 to be signed, and executes the electronic signature ( step S57).

The signature executing unit 40c of the IC card 40 determines whether the electronic signature is successful (step S61). If it is determined that the electronic signature has succeeded (step S61: Yes), the process proceeds to step S62. On the other hand, if it is not determined that the electronic signature was successful (step S61: No), the process proceeds to step S67.

If the determination in step S61 is No, the signature execution unit 40c of the IC card 40 notifies the operation reception unit 10a of the MFP 10 that the electronic signature has failed in step S67.

Then, the operation receiving unit 10a notified of the failure of the electronic signature determines whether or not the user requests a retry of signature (step S68). If it is determined that there is a signature retry request (step S68: Yes), the process proceeds to step S61. On the other hand, if it is not determined that there is a signature retry request (step S68: No), the process proceeds to step S52.

If it is determined as Yes in step S61, the signed data transmission unit 40d of the IC card 40 sends the signed electronic data D2 to the MFP 10 in step S62.

The signed data receiving unit 10e of the MFP 10 receives the signed electronic data D2 and generates a job to be executed on the signed electronic data D2 (step S63).

The signed data transmission unit 10f of the MFP 10 sends the created job to the workflow server 60 and inputs it to the workflow selected in step S51 (step S64).

The signed data receiving section 60a of the workflow server 60 receives the signed electronic data D2, and the workflow processing section 60b executes the workflow (step S65).

The signed data delivery unit 60c of the workflow server 60 delivers the workflow execution result to the delivery destination server 70 as delivery electronic data D3 (step S66). In the present embodiment, the electronic signature is applied to the PDF file, but the object to be signed is not limited to the PDF file as long as it is electronic data.

As described above, according to the MFP 10 (information processing apparatus) according to the present embodiment, the signature target data transmission unit 10c (signature target data transmission means) uses the IC card 40 ( Electronic signature target electronic data D1 (signature target data) is transmitted to the electronic signature device). Then, the signature instructing unit 10d (signature instructing means) causes the IC card 40 to electronically sign the received signature target electronic data D1 inside the IC card 40 based on the secret key. Further, the signed data receiving unit 10e (acquisition means) acquires the signed electronic data D2 (signed data) from the IC card 40. FIG. That is, the MFP 10 instructs the IC card 40 to execute the electronic signature, and the IC card 40 completes the addition of the signature within the IC card 40 . Therefore, since the electronic signature data does not leave the IC card 40 when the electronic signature is performed, the risk of leakage of confidential information to the outside can be reduced.

Further, according to the MFP 10 (information processing apparatus) according to the present embodiment, the workflow processing unit 60b (workflow processing means) receives the signed electronic data D2 (signed data) and processes it according to the workflow specified by the user. Therefore, it is possible to reliably perform the processing desired by the user on the signed electronic data D2.

Further, according to the MFP 10 (information processing apparatus) according to the present embodiment, the signed data distribution unit 60c (distribution means) distributes the signed electronic data D2 (signed data) to the delivery destination server 70. Therefore, the signed electronic data D2 can be reliably delivered to the designated delivery destination server 70 .

Further, according to the MFP 10 (information processing device) according to the present embodiment, the electronic signature device is the IC card 40 . Therefore, the user can hold the IC card 40 storing the private key (confidential information) by himself/herself, thereby reducing the risk of the confidential information leaking to the outside.

Further, according to the information processing system 1 according to the present embodiment, the MFP 10 (information processing device) transmits signature target electronic data D1 (signature target data) to the IC card 40 (electronic signature device). An IC card 40 holding a private key (confidential information) is carried by a user and electronically signs electronic data D1 to be signed. Then, the MFP 10 acquires the signed electronic data D2 (signed data) from the IC card 40 . Therefore, since the private key does not leave the IC card 40 when performing the electronic signature, the risk of leakage of confidential information can be reduced.

Although the embodiments of the present invention have been described above, the above-described embodiments are presented as examples and are not intended to limit the scope of the present invention. This novel embodiment can be implemented in various other forms. Also, various omissions, replacements, and changes can be made without departing from the scope of the invention. Moreover, this embodiment is included in the scope and gist of the invention, and is included in the scope of the invention described in the claims and its equivalents.

For example, in the example of the present embodiment, the MFP 10 (multi-function peripheral) has been described as an example of the information processing apparatus, but any device that handles electronic data to which an electronic signature is attached is not limited to the MFP 10. It is possible to apply the invention. For example, the present invention can be applied to devices such as PCs (personal computers) and IWBs (interactive whiteboards).

Also, in the example of the present embodiment, the workflow server 60 has been described as performing the workflow processing, but the place where the workflow processing is performed is not limited to the workflow server 60 . That is, workflow processing may be performed inside the MFP 10 .

Further, the electronic data D1 to be signed may be generated outside the MFP 10, for example, by an external server connected to the MFP 10 via the network N, or the like. In that case, the MFP 10 once transmits the electronic data generated by the scanner 100 to the external server. After creating electronic data in a desired format by converting the format of the electronic data in an external server or the like, the created electronic data may be returned to the MFP 10 again.

Further, in the example of the present embodiment, in the information processing system 1, the CPU 11 (21, 41, 51, 61, 71) realizes various kinds of processing by means of control programs. , IC (Integrated Circuit) or other hardware. In addition, the control program can be read by a computer device such as a CD-ROM, a flexible disk (FD), a CD-R, a DVD, a Blu-ray disc (registered trademark), a semiconductor memory, etc., as a file in an installable format or an executable format. It may be provided by being recorded on a possible recording medium. DVD is an abbreviation for "Digital Versatile Disc". Also, the control program may be provided in the form of being installed via a network such as the Internet.

1 Information Processing System 10 MFP (Information Processing Device, MFP)
10c Signature target data transmission unit (signature target data transmission means)
10d signature instruction unit (signature instruction means)
10e Signed data receiving unit (acquisition means)
40 IC card (electronic signature device, confidential information storage means)
40a Confidential information holding unit (confidential information holding means)
40b Signature target data receiving unit (receiving means)
40c signature execution unit (signature execution means)
40d signed data transmission unit (signed data transmission means)
50 card reader 60 workflow server 60b workflow processing unit (workflow processing means)
60c signed data delivery unit 70 delivery destination server 100 scanner 200 operation unit D1 signature target electronic data (signature target data)
D2 Signed electronic data (signed data)
D3 Distributed electronic data

JP 2004-151897 A

Claims (7)

login means for logging into an information processing device using an IC card holding confidential information;
signature target data transmission means for transmitting electronic signature target data to the IC card;
signature instruction means for causing the IC card to electronically sign the received data to be signed based on the confidential information in the IC card;
acquisition means for acquiring signed data from the IC card;
logout means for logging out from the information processing device on condition that the signature is completed when a logout instruction to the information processing device is acquired;
Information processing device. Further comprising workflow processing means for receiving the signed data obtained by the obtaining means and processing the data in accordance with a user-specified workflow,
The information processing device according to claim 1 . further comprising distribution means for distributing the signed data processed by the workflow processing means;
The information processing apparatus according to claim 2. When the logout instruction to the information processing device is acquired, the logout means suspends the signature and logs out from the information processing device if the signature is performed.
The information processing apparatus according to any one of claims 1 to 3. An information processing system comprising an IC card holding confidential information and an information processing device for logging in using the IC card ,
The information processing device includes login means for logging into the information processing device using the IC card, signature target data transmission means for transmitting electronic signature target data to the IC card, and the IC card. a signature instruction means for performing an electronic signature based on the confidential information on the received data to be signed, and an acquisition means for acquiring the signed data from the IC card, inside the IC card; logout means for logging out from the information processing device on condition that the signature is completed when a logout instruction to the information processing device is obtained ;
An information processing system comprising a login step of logging into an information processing device using an IC card holding confidential information;
a sending step of sending electronic data to be signed to the IC card;
a signing instruction step of causing the IC card to electronically sign the received data to be signed based on the confidential information in the IC card;
an acquisition step of acquiring signed data from the IC card;
a logout step of logging out of the information processing device on condition that the signature has been completed;
Information processing method including. A computer that controls the information processing apparatus according to any one of claims 1 to 3,
a login step of logging into an information processing device using an IC card holding confidential information;
signature target data transmission means for transmitting electronic signature target data to the IC card;
signature instruction means for causing the IC card to electronically sign the received data to be signed based on the confidential information in the IC card;
acquisition means for acquiring signed data from the IC card;
logout means for logging out of the information processing apparatus on condition that the signature is completed;
program to run.

Images