JP2001352452A - Scanner and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance security regarding image data by generating image data whose contents cannot be seen by a third party in the case of transmitting the read image data. SOLUTION: An image storage section 103 stores image data read by an image read section 102, an image correction section 104 applies image correction processing, such as MTF correction to the image data, and an area discrimination section 105 applies area discrimination to the image data after the correction. Furthermore, an image processing section 106 applies filtering processing on the basis of resolution conversion and the result of area discrimination to the image data after the image correction, an encryption section 107 discriminates whether encryption is effective, applies encryption to an encryption area by using a designated encryption key, a data compression section 108 compresses the data and an IF section 109 transmits the resulting data to the destination.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a scanner device for obtaining image data by reading an image, and a computer-readable recording medium on which a scanner program is recorded.

[0002]

2. Description of the Related Art FIG. 10 shows a configuration diagram of a conventional scanner device. In FIG. 10, a conventional scanner device uses a CCD (Charge Coupled Device) to convert an image.
e) The image reading unit 100 which reads as analog data and converts the analog data into digital data as in (e).
1, an image holding unit 1002 including a memory for holding several lines of image data from the image reading unit 1001,
MTF (Modulat) is applied to the read image data.
an image correction unit 1003 that performs image correction such as an ion transfer function correction, an area determination unit 1004 that separates a read image into a text area, a graphic area, or an image area; and conversion and area conversion to a user-specified resolution. An image processing unit 1005 that performs filtering according to the result of the determination unit 1004,
A data compression unit 1006 for compressing image data to reduce the data amount, and an IF unit 1007 for transferring data
It is composed of

Such a conventional scanner device is basically a personal computer (hereinafter, referred to as a personal computer) used by a user.
(Referred to as “PC”), and it is assumed that the read image data itself is handled only by the person who uses the PC.

[0004] In recent years, scanner devices have also changed from being directly connected to a PC to being connected to a network. Scanned image data is processed in a general compression format, and is sent to an e-mail. Attachments are also being sent.

[0005]

However, in the conventional scanner device, since the compression format is a general format, it can be viewed by anyone other than the user, and there is a concern about security. In addition, with the spread of networks in recent years, scanner devices are also connected to the network and are used as shared scanner devices, or are alternatives to fax machines that read image data with the scanner device and directly execute printing on a remote printer. Usage is beginning to be considered. In such a case, there is a high possibility that image data may be obtained illegally in the middle of the network, which may lead to information leakage.

Therefore, in the present invention, when transmitting the read image data, the contents cannot be seen even if a third party illegally obtains the image data, and the image data which can be seen only by the person or the transmission partner is created. And a computer-readable recording medium on which a scanner program and a scanner program are recorded.

[0007]

According to the present invention, a scanner device is provided with an encrypting means so as to encrypt read image data according to a user's will.

[0008] Thus, by encrypting image data that is not desired to be seen by a third party, it is possible to make it possible to see only data having a decryptable key, thereby improving security. I do.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The invention according to claim 1 is a scanner device provided with an encrypting means for encrypting image data read by the image reading means. This makes it possible to perform encryption on the read image data, make the data invisible to a third party, improve security, and is suitable for data transfer on a network. Data.

According to a second aspect of the present invention, there is provided the scanner device according to the first aspect, further comprising encryption instruction means for designating whether or not encryption is necessary. Thus, the encryption function can be enabled only when the user intends, and the operability is improved.

According to a third aspect of the present invention, the image processing apparatus further includes an area determining unit that determines a character image area in the image data, and the encrypting unit encrypts only the character image area. Or the scanner device described in 2. As a result, it is possible to encrypt only the character image area that normally contains important information, and the processing time required for encryption can be reduced.

According to a fourth aspect of the present invention, the apparatus further comprises a format setting means for setting a fixed format area for the image data, and the encrypting means encrypts only the fixed format area. To the scanner device according to any one of (1) to (3). Thus, it is possible to specify and encrypt only an important part by the fixed format area, and it is possible to reduce the processing time required for the encryption.

According to a fifth aspect of the present invention, in the scanner device according to any one of the first to fourth aspects, the encrypting means encrypts only when the image data is output on a network. It is what it was. This allows
It is possible to apply encryption when image data flows over a network, so that security on the network is improved. In addition, it is possible to make settings such that encryption is not required for a local PC, and operability is improved.

According to a sixth aspect of the present invention, in the scanner device according to the fifth aspect, the encrypting means further encrypts the image data only when the image data is output through a gateway device. It is. Thereby, it is possible to set the range of the network to be encrypted among the plurality of networks connected via the gateway device, and the operability is improved.

[0015] The invention according to claim 7 is the invention according to claims 1 to 6.
A computer-readable recording medium that records a scanner program for causing a computer to function as the scanner device according to any one of the above. A recording medium storing such software program code is supplied to a system or apparatus, and a computer (or CPU, MPU, or the like) of the system or apparatus is provided.
By reading and executing the program code recorded on the recording medium, the same operation as that of the above-described scanner device can be obtained.

Hereinafter, an embodiment of the present invention will be described with reference to FIG.
This will be described with reference to FIG.

(Embodiment) FIG. 1 is a block diagram of a scanner device 101 according to an embodiment of the present invention.

In FIG. 1, a scanner device 101 according to the present embodiment reads an image data as analog data with a CCD or the like and converts the analog data into digital data. Holding unit 103 composed of a memory that holds several lines of image data, and image correcting unit 104 that performs image correction such as MTF correction on read image data.
And an area determining unit 105 that separates the read image into any of a text area, a graphic area, and an image area, and performs conversion into a user-specified resolution and filtering according to the result of the area determining unit 105. An image processing unit 106, an encryption unit 107 that performs encryption processing on image data to be encrypted, a data compression unit 108 that compresses image data to reduce the data amount,
It comprises an IF unit 109 for communicating with the outside, a format storage unit 110 for storing a fixed format area, an operation unit 111 for performing various operations of the scanner, and a central control unit 112 for controlling each unit of the scanner. .

FIG. 2 is a diagram showing an example of a setting screen by the operation unit 111 of the scanner device 101 shown in FIG.

In FIG. 2, a pre-scan button 2 for executing pre-scan is displayed on the setting screen of the operation unit 111.
01, an image display area 202 for displaying image data after reading by pre-scanning, a reading area specifying unit 203 for specifying a reading area for main scanning on a pre-scanned image, and coordinates and the like for the reading area for main scanning. , A reading area specifying section 204 for specifying a reading resolution, a reading mode specifying menu 206 for specifying monochrome binary, full color, or the like, and whether or not to encrypt a read image. Encryption specification check button 2 for specifying necessity
07 and encryption detailed setting button 2 for setting encryption conditions
08 and an encryption mode menu 20 for selecting an encryption key
9, a key registration button 210 for registering an encryption key, a scan button 211 for executing a main scan, an output category designation menu 212 for designating an output category as an output destination of the read image data, and designation of an output destination address An address designation menu 213 to be specified and an output destination registration button 214 for registering an output destination are provided, and various settings can be made by operating the operation unit 111 on this setting screen.

When the key registration button 210 is selected, a key registration screen (not shown) is displayed. Here, in the case of a system that supports the public key encryption method, the public key of the transmission partner is registered as an encryption key. In the case of a system that supports the common key encryption method, a common key with the transmission partner is registered as an encryption key.

When the output destination is specified, a printer, mail, file, or the like can be selected as the output category specification menu 212. When a printer is selected as the output category designation menu 212, the address designation menu 21
3 includes printer transmission protocol (Lpr) and IP
Address (10.86.6.6) and queue name (kmeq
ue). Output category designation menu 2
When a mail is selected as 12, a mail address is specified in the address specification menu 213, and when a file is selected, a storage location of the file is specified. After the designation, by pressing the output destination registration button 214, the registration is performed with the currently set contents. For example, a file is selected in the output category designation menu 212, and the storage location is set to ftp: // ftp. mei. co. jp / ots
If it is designated by u, it will be saved with the serial number name in the otsu directory on the ftp site. When the mail is selected, it is transmitted as an attached file of the mail, and when the printer is selected, it is transmitted to the printer using a printer protocol. In the case of printer output, since the encryption key of the output destination printer must be selected as the encryption mode menu 209, only the encryption key of the output destination printer can be selected in the encryption mode menu 209.

FIG. 3 is a view showing an example of a detailed encryption setting screen displayed when the detailed encryption setting button 208 in FIG. 2 is pressed.

In FIG. 3, the detailed encryption setting screen includes
Encryption area specification menu 3 for specifying the area to be encrypted
01 and an encryption condition designation menu 302 for designating conditions for executing encryption. The encryption area designation menu 301 includes a whole encryption check button 303 for designating the entire reading area as an encryption area, and a text encryption check button for designating only a text area, that is, a character image area in the reading area, as an encryption area. 30
4, a fixed form encryption check button 305 for encrypting only a fixed form area preset in a fixed form format, and a format selection list 306 for selecting a fixed form area registered in advance.
And a format registration button 307 for registering a fixed format area. Entire encryption check button 303, text encryption check button 30
4 and the standard encryption check button 305 can be selected from any one of them.

The encryption condition designation menu 302 is
Unconditional encryption check button 308 for unconditionally turning on the encryption function only when encryption is ON
A network encryption check button 309 for turning on the encryption function only when the output destination of the image data is via the network, and an output destination via the network,
And a gateway encryption check button 310 that turns on the encryption function only when the location is beyond the gateway device. Unconditional encryption check button 308, network encryption check button 30
9 and the gateway encryption check button 310
It is possible to select only one of these.

As a method of registering a fixed format area by the format registration button 307, for example, when registering a check as a fixed format, a reading mode for registering a fixed format (for example, monochrome 2
Value), a check with a resolution (for example, 200 dpi), register as a fixed format, further set an area indicating a price as a character image area as an encryption area, and add it to the fixed format area. This operation may be set by providing a format registration screen (not shown) on a display unit (not shown) provided in the scanner device 101, or a fixed format area created on a PC may be set in the scanner device. It may be downloaded to 101.

FIG. 4 is a diagram showing an example of a network setting in the IF unit 109.

The network setting is mainly performed by the scanner 10
The IP address, the subnet mask, and the gateway address are set. The address specifying unit 401 for directly specifying the address and the DHCP (Dynamic Host) are set.
t Configuration Protocol)
There is an automatic address acquisition unit 402 that uses automatic address acquisition by the user. When directly specifying an address, an IP address 403, a subnet mask 404, and a gateway address 405 are specified in an address specifying unit 401. On the other hand, the address automatic acquisition unit 4 by DHCP
In the case of 02, an inquiry is made to the DHCP server, and the IP address, subnet, and gateway address are automatically obtained.

As described above, various types of information specified in FIGS. 2 to 4 are passed from the operation unit 111 to the central control unit 112, and are passed to various units such as the format storage unit 110 and the encryption unit 107.

FIG. 5 is a flowchart showing the overall processing of the scanner device 101 shown in FIG.

First, a user places a document on the scanner device 10.
It is set to 1 and prescanning is executed to capture image data (S501). Next, an area to be read in the main scan is set (S502), a reading mode such as full color or monochrome is set (S503), and necessity of encryption and an encryption mode are set (S504). An output destination is specified (S505), and a main scan is executed (S506).

The image reading unit 1 is executed by executing the main scan.
02 is read by the image holding unit 103
The image correction unit 104 performs image correction processing such as MTF correction (S507), and the area determination unit 105 performs area determination on the corrected image data (S508). Here, the area of the image data is determined based on a rectangular area. For example, a window is set as a rectangular area of 8 × 8 pixels, and black pixels in a specified window or green pixels in a color image are binarized to obtain luminance information. 1 after this binarization
By the number of pixels represented by
The attribute of the center 4 × 4 pixel in the window is determined. Also, based on the result of this determination, the data is converted into attribute blocks for each of a plurality of lines based on the principle of majority decision.

Next, the image processing unit 106 performs a filtering process based on the result of the resolution conversion and the area discrimination on the image data after the image correction (S509), and the encryption unit 107 determines whether the encryption is valid. Is determined (S510). If the encryption is valid, the encryption area is encrypted using the specified encryption key (S511),
Data compression is performed by the data compression unit 108 (S51).
2), the data is transferred to the transmission destination by the IF unit 109 (S513). However, in the case where a plurality of documents are continuously read, the pre-scanning process (S501) and the process of specifying a reading area (S502) may not be performed.

FIG. 6 is a flowchart showing the determination of the encryption condition by the encryption unit 107.

When encryption is specified to be ON by the encryption specification check button 207, a process of determining whether or not to execute encryption is started (S601). When the unconditional encryption check button 308 is designated in the encryption condition designation menu 302 shown in FIG. 3, the encryption condition is set to 0, and the network encryption check button 3 is set.
If 09 is specified, the encryption condition is set to 1. If the gateway encryption check button 310 is specified, the encryption condition is set to 2.

First, it is determined whether or not the encryption condition is 0 (S602). If the encryption condition is 0, an encryption process is performed (S603).

If the encryption condition is not 0 in S602, it is determined whether the output destination is via a network (S604). If it is not via the network, no encryption processing is performed (S607). On the other hand, if it is via the network (S605), the encryption condition is set to 1
Is determined, and if the encryption condition is 1, the encryption process is executed (S603).

In S605, if the encryption condition is not 1, it is further determined whether or not the output destination is a place beyond the gateway device (S606). If the output destination is beyond the gateway, encryption processing is performed. We (S603)
If not exceeded, no encryption processing is performed (S607).

Here, the determination as to whether or not to exceed the gateway device refers to the IP address and subnet mask of the scanner device 101 itself set in FIG. 4, and the output destination address is 10.86.100. If it is not xxx, it is determined that it exceeds the gateway device. The determination as to whether the output destination is a network is made using the output destination address specification menu 213 information. For example, if an IP address is specified, the network is determined. In S604, the reason for determining whether the data output destination is a network is that the IF unit 109 in FIG. 1 is not a network, but is a Centronics standard or SCSI (Small Computer Sy
This is because a "stem interface" standard may be used. When the Centronics standard or the SCSI standard is used, a file is selected by the output category specification menu 212, and the storage location is specified as local in the address specification menu 213. This allows direct SC
The software on the PC connected by the interface such as the SI standard or the Centronics standard is used as the scanner device 1.
The data output from 01 is acquired and stored in a predetermined location.

If it is determined in S603 in FIG. 6 that the encryption process is to be executed, the process shown in FIG. 7 is performed if a character image area is designated as the encryption area. FIG. 7 is a flowchart showing an encryption process when a character image area is specified as an encryption area. When it is determined in S607 shown in FIG. 6 that the encryption process is not performed, the process shown in FIG. 7 is not performed.

First, image data is read from the image holding unit 103 (S701), and whether or not the read image data is a character image area is determined by the area determination unit 105 (S702). If it is a character image area, the image data is encrypted and an encryption tag is set (S
703). Subsequently, it is determined whether reading of all image data held in the image holding unit 103 has been completed (S704), and steps S701 to S703 are performed until the reading is completed.
Are repeated, and the process ends (S705). Note that the encryption tag in S703 is inserted at the start position and the end position of the encryption so that the encrypted portion can be determined.

If it is determined in S603 in FIG. 6 that the encryption process is to be executed, the process shown in FIG. 8 is performed if a fixed format area is designated as the encryption area. FIG. 8 is a flowchart showing an encryption process when a fixed format area is designated as the encryption area. If it is determined in S607 shown in FIG. 6 that the encryption process is not performed, the process shown in FIG. 8 is not performed.

First, a fixed format is read from the format storage unit 110, and a fixed format area is obtained as encrypted area information (S801). Image holding unit 1
03, the image data is read (S802), and whether or not the read image data is an encrypted area is determined based on the encrypted area information acquired in S801 (S803). At this time,
In the case of the encryption area, the image data is encrypted and an encryption tag is set (S804). Subsequently, it is determined whether or not reading of all the image data held in the image holding unit 103 has been completed (S805), and the processing from S802 to S804 is repeatedly performed until the reading is completed, and the processing ends (S806). ). Note that the encryption tag in S804 is inserted at the start position and the end position of the encryption so that the portion subjected to the encryption processing can be determined.

FIGS. 9A and 9B are explanatory diagrams showing the image data format before being passed to the data compression unit 108. FIG. 9A shows the entire image data format configuration, and FIG. 9B shows the encryption of non-encrypted data. FIG. 7C is a diagram illustrating encryption information, and FIG. 7C is a diagram illustrating encryption information of encrypted data.

In FIG. 9A, the entire image data format is such that, after the encryption information 901, unencrypted data 902, encrypted information 903, and encrypted encrypted data 904 are not encrypted. It is arranged.

The encryption information 901 is the encryption information of the non-encrypted data shown in FIG.
1, the data 905 indicating the existence of unencrypted data and the data 906 indicating the length of the unencrypted data. The unencrypted data 902 following the encrypted information 901 has the unencrypted data length of 2046. Is shown.

The encryption information 903 is the encryption information of the encrypted data shown in FIG.
Followed by data 90 indicating that encrypted data exists.
7 and data 908 indicating the length of the encrypted data, and the encrypted data 90 following the encrypted information 903.
4 indicates that the encrypted data length is 4388.

The continuous data length may be a maximum of one line, or may be the range indicated by the data length storage area sizes 906 and 908.

The image data in such an image data format is compressed by the data compression unit 108 and
9 is transmitted. On the other hand, the data receiving side determines the compression format from the file header information of the received data and decompresses the data.

After the decompression, it is determined whether or not the image data shown in FIG. 9 has been encrypted based on the encryption information 901 and 903 and the like. If it is determined from the encryption information 901 that the data is not encrypted, the encryption information 901 is advanced by the length of the non-encrypted data described in the encryption information 901, and the subsequent encryption information 9
Import 03. If it is determined from the encryption information 903 that the data is encrypted, the encrypted data length is decrypted by an encryption key (a common key in the case of a common key system, or a secret key in the case of a public key system), and the original data is decrypted. Restoration to image data is performed.

According to the scanner device 101, the image data read by the image reading unit 102 can be encrypted by the encryption unit 107.
The data can be made invisible to a third party, and is suitable for data transfer over a network with improved security. In addition, by specifying whether encryption is necessary or not using the operation unit 111, the encryption function can be enabled only when the user intends, and the operability is improved.

Since the encrypting unit 107 can encrypt only the character image area in the image data which usually contains important information, it is also possible to shorten the processing time by the encryption. Alternatively, it is also possible to specify and encrypt only an important part by a fixed format area to shorten the processing time.

The encryption unit 107 can apply encryption only when image data flows through the network, improving security on the network and eliminating the need for encryption on a local PC. Can be set, and operability is improved. Furthermore, by encrypting only when image data is output beyond the gateway device, it is possible to set a range of a network to be encrypted among a plurality of networks connected via the gateway device. .

In the present embodiment, the scanner device 101 itself is provided with the operation unit 111 and the encryption unit 107, but the scanner device 101 is operated from the PC, and the PC side reads the image data. In the case of processing, a fixed format area setting, area determination, image processing, encryption processing, data compression, and the like may be performed on the PC. In this case, the scanner device 101 and the PC as a whole function as the scanner device of the present invention.

Another object of the present invention is to provide a recording medium storing a program code of software for realizing the functions of the above-described embodiment to a system or an apparatus.
It is needless to say that the present invention is also achieved when the computer of the system or the apparatus reads out and executes the program code stored in the recording medium. In this case, the program code itself read from the recording medium realizes the function of the above-described embodiment, and the recording medium on which the program code is recorded constitutes the present invention.

As a recording medium for supplying such a program code, for example, a flexible disk (floppy (registered trademark) disk), hard disk, optical disk, magneto-optical disk, CD-ROM, CD
-R, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used. In addition, the present invention is configured in a form in which a program code is stored in these recording media placed on a server such as an Internet provider and the program code is provided via the Internet.

When the computer executes the readout program code, not only the functions of the above-described embodiment are realized, but also the OS (Operating System) running on the computer based on the instruction of the program code. It is needless to say that the system may perform some or all of the actual processing, and the processing may realize the functions of the above-described embodiments.

Further, after the program code read from the recording medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, based on the instructions of the program code, It goes without saying that a CPU or the like provided in the function expansion board or function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

[0059]

According to the present invention, the following effects can be obtained.

(1) According to the first aspect of the present invention, it is possible to encrypt read image data, thereby making data invisible to a third party, thereby improving security. At the same time, the data is suitable for data transfer on a network.

(2) According to the second aspect of the present invention, the encryption function can be enabled only when the user intends, and the operability is improved.

(3) According to the third aspect of the present invention, it is possible to encrypt only the character image area that normally contains important information, thereby shortening the processing time required for encryption. it can.

(4) According to the fourth aspect of the present invention, it is possible to specify and encrypt only an important part by the fixed format area, and to shorten the processing time required for the encryption.

(5) According to the fifth aspect of the present invention, it is possible to apply encryption when image data flows over a network, thereby improving security on the network and eliminating the need for encryption on a local PC. Some settings can be made, and operability is improved.

(6) According to the sixth aspect of the present invention, it is possible to set a range of a network to be encrypted among a plurality of networks connected via a gateway device, thereby improving operability.

[Brief description of the drawings]

FIG. 1 is a block diagram of a scanner device according to an embodiment of the present invention.

FIG. 2 is a view showing an example of a setting screen by an operation unit of the scanner device shown in FIG. 1;

FIG. 3 is a view showing an example of an encryption detail setting screen displayed when an encryption detail setting button is pressed in FIG. 2;

FIG. 4 is a diagram showing an example of network settings in an IF unit.

FIG. 5 is a flowchart showing overall processing of the scanner device of FIG. 1;

FIG. 6 is a flowchart showing the determination of an encryption condition by an encryption unit.

FIG. 7 is a flowchart illustrating an encryption process when a character image area is specified as an encryption area;

FIG. 8 is a flowchart showing an encryption process when a fixed format area is designated as an encryption area;

FIG. 9 is an explanatory diagram showing an image data format before being passed to a data compression unit.

FIG. 10 is a configuration diagram of a conventional scanner device.

[Explanation of symbols]

 Reference Signs List 101 scanner device 102 image reading unit 103 image holding unit 104 image correction unit 105 area discriminating unit 106 image processing unit 107 encryption unit 108 data compression unit 109 IF unit 110 format storage unit 111 operation unit 112 central control unit 207 encryption designation check Button 208 Detailed encryption setting button 209 Encryption mode menu 210 Key registration button 301 Encryption area designation menu 302 Encryption condition designation menu 901, 903 Encryption information 902 Unencrypted data 904 Encrypted data

 ────────────────────────────────────────────────── ─── Continued on the front page F term (reference) 5C062 AA05 AB17 AB20 AB38 AB42 AC02 AC22 AC34 AC64 BC00 5C075 EE03 5J104 AA01 CA00 JA03 JA21 NA02

Claims (7)

[Claims] 1. A scanner device comprising an encrypting means for encrypting image data read by an image reading means. 2. The scanner device according to claim 1, further comprising encryption instruction means for specifying whether encryption is necessary. 3. The scanner device according to claim 1, further comprising an area determining unit that determines a character image area in the image data, wherein the encrypting unit encrypts only the character image area. 4. The apparatus according to claim 1, further comprising format setting means for setting a fixed format area for the image data, wherein the encrypting means encrypts only the fixed format area. Scanner device. 5. The scanner device according to claim 1, wherein said encrypting means encrypts only when said image data is output on a network. 6. The scanner device according to claim 5, wherein said encrypting means further encrypts only when said image data is output beyond a gateway device. 7. A computer-readable recording medium on which a scanner program for causing a computer to function as the scanner device according to claim 1 is recorded.